At olx17, your privacy is a core operational priority — not a compliance checkbox. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over it as an olx17 member.
These six principles define how olx17 approaches every aspect of personal data handling. Full details follow in the policy document below.
We collect only the data necessary to operate your account, verify your identity, process payments, and comply with anti-fraud and responsible gaming obligations — nothing more.
Your data is used to run your olx17 account, process IDR deposits and withdrawals, personalise your experience, deliver promotions you have opted into, and keep the platform secure.
We share data only with vetted third parties necessary to operate our services — KYC providers, payment processors (BCA, BRI, OVO, DANA, etc.), and fraud-detection systems. We never sell your data.
All data in transit is encrypted with TLS 1.3. Stored data uses AES-256 encryption. Passwords are hashed using bcrypt. We apply two-factor authentication and real-time anomaly detection.
Account data is retained for the duration of your membership plus a minimum post-closure retention period required by our international licensing obligations. You may request deletion of non-essential data at any time.
You have the right to access, correct, port, restrict, and in some cases delete your personal data. Submit a request via live chat or email and we will respond within 30 days.
1.1 This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data by olx17, an internationally licensed online betting and casino platform serving members primarily located in Indonesia.
1.2 olx17 processes personal data in connection with the following services: sports betting (including BRI Liga 1, EPL, Champions League, and other major competitions), live casino (including baccarat, roulette, blackjack, and Dragon Tiger), togel (Indonesia's traditional numbers lottery), Bingo Online, online slots, e-sports betting, and associated payment, support, and loyalty services.
1.3 This policy applies to all olx17 members regardless of their location within Indonesia — whether in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, Semarang, Makassar, or elsewhere — and to any person who accesses the olx17 platform without registering an account (for example, browsing publicly visible pages).
1.4 This Privacy Policy should be read alongside the olx17 Terms & Conditions and Responsible Gaming Policy, both of which contain related provisions that intersect with data processing obligations.
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living individual, directly or in combination with other data. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | olx17 — the entity that determines the purposes and means of processing personal data. |
| "Data Processor" | A third party that processes personal data on behalf of olx17, acting only under olx17's documented instructions. |
| "KYC Data" | Identity and age verification documents submitted by a member, including copies of KTP (Indonesian National Identity Card), passport, and supporting financial documents. |
| "Cookies" | Small text files placed on a member's device by the olx17 website to enable platform functionality, analytics, and personalisation. |
| "Member" | Any individual with a registered olx17 account or any visitor who accesses the olx17 platform. |
When you create an olx17 account, we collect:
To comply with our anti-fraud, anti-money-laundering, and responsible gaming obligations, we collect:
We record all financial activity associated with your olx17 account, including:
We log all gameplay and wagering activity on the olx17 platform, including bet placement times, markets selected, game titles played, wager amounts, outcomes, and session durations. This data is used for account integrity monitoring, responsible gaming analysis, dispute resolution, and platform improvement.
When you access the olx17 platform, our servers and analytics systems automatically collect:
If you contact olx17 via live chat, email, or any other channel, we retain a record of that correspondence — including the content of messages, timestamps, and any attachments — for quality assurance, training, and compliance purposes.
4.1 Directly from you: Registration forms, KYC submission portals, deposit and withdrawal requests, support chat conversations, and email correspondence.
4.2 Automatically: Cookies, server logs, and analytics tools that record your interactions with the olx17 platform as described in Section 3.5 and Section 8of this policy.
4.3 From third parties: KYC and identity verification partners may return enriched or validated data (for example, confirming that a submitted KTP number is valid). Payment processors may share transaction confirmation data. Fraud-detection services may flag IP addresses or device fingerprints against known risk databases.
4.4 From public sources: In limited circumstances related to fraud prevention or compliance, olx17 may cross-reference publicly available information — such as sanctions lists or court records — against member data.
olx17 relies on the following legal bases for processing your personal data:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Creating and managing your account, processing deposits and withdrawals, resolving disputes, and providing all core olx17 services. |
| Legal Obligation | KYC identity verification, anti-money-laundering checks, age verification (21+), and responding to lawful requests from regulatory or law enforcement authorities. |
| Legitimate Interests | Fraud prevention, platform security, abuse detection, analytics for service improvement, and responsible gaming monitoring. |
| Consent | Marketing and promotional communications (email, SMS, push notifications) — you may withdraw consent at any time via your account settings or by contacting support. |
6.1 Account management: To create, maintain, and secure your olx17 account, including processing your login credentials and enabling two-factor authentication.
6.2 Payment processing: To facilitate IDR deposits and withdrawals via your chosen Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja).
6.3 Identity and age verification: To confirm that you are at least 21 years of age and are who you represent yourself to be, in compliance with our responsible gaming and anti-fraud obligations.
6.4 Responsible gaming: To monitor betting patterns for signs of problem gambling behaviour, to apply deposit limits or session restrictions you have configured, and to fulfil self-exclusion requests. olx17 takes its responsible gaming obligations seriously and may use automated analysis of gameplay data to proactively identify members who may benefit from support tools.
6.5 Fraud and security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, unauthorised account access, and other prohibited conduct as defined in our Terms & Conditions.
6.6 Customer support: To respond to your queries, resolve disputes, and process complaints efficiently and accurately.
6.7 Platform improvement: To analyse usage patterns — in aggregate and, where necessary, at the individual level — to improve the performance, features, and user experience of the olx17 platform.
6.8 Marketing (consent-based): To send you promotional offers, bonus notifications, tournament invitations, and platform updates via email, SMS, or push notification — but only where you have given explicit consent and have not subsequently withdrawn it.
6.9 Legal compliance: To meet our obligations under applicable laws and regulations, including responding to court orders, regulatory enquiries, and law enforcement requests.
7.1 olx17 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data sharing is limited to the following categories of veted service providers, each of whom is bound by a data processing agreement with olx17:
7.2 In the event that olx17 undergoes a merger, acquisition, or sale of assets, member data may be transferred to the acquiring entity. You will be notified of any such transfer via your registered email address in advance of the transfer taking place.
8.1 The olx17 platform uses cookies and similar tracking technologies (including local storage and session storage) to enable core platform functionality, maintain your login session, and improve the member experience.
8.2 The following categories of cookies are used:
| Cookie Type | Purpose | Retention |
|---|---|---|
| Essential | Required for the platform to function — session management, login state, security tokens, and fraud-prevention signals. | Session / up to 24 hours |
| Functional | Remembers your language preference, chosen game lobby layout, and responsible gaming settings you have configured. | Up to 12 months |
| Analytics | Collects pseudonymised data on page visits, feature usage, and session duration to help olx17 improve the platform experience. | Up to 24 months |
| Marketing | Used only with your explicit consent to track which promotional campaigns led to your visit or registration, enabling olx17 to measure campaign effectiveness. | Up to 30 days |
8.3 You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent your ability to log in and use olx17's services.
9.1 olx17 retains personal data for as long as your account remains active and for a defined period following account closure, in line with our international licensing obligations and applicable legal requirements.
9.2 The standard post-closure retention period for account and transaction data is five years from the date of account closure. This period is required to meet anti-moneylaundering record-keeping obligations and to enable resolution of any disputes or regulatory enquiries that arise after closure.
9.3 KYC documents (identity copies, selfies, bank statements) are retained for the duration of your membership and for a minimum of five years post-closure.
9.4 Support correspondence and live chat logs are retained for three years from the date of the interaction.
9.5 Where you request deletion of your data and no legal obligation requires continued retention, olx17 will delete or irreversibly anonymise the relevant data within 30 days of receiving your verified request. Certain data categories cannot be deleted while a legal retention obligation applies — in such cases, olx17 will inform you of the applicable retention period.
10.1 olx17 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
10.2 Key security measures in place include:
10.3 In the event of a personal data breach that poses a risk to member rights, olx17 will notify affected members and, where required, relevant regulatory authorities, within 72 hours of becoming aware of the breach.
11.1 olx17 operates as an internationally licensed platform. Some of the third-party service providers we use — particularly KYC verification partners, fraud-detection systems, and certain game studio back-ends — may process data outside of Indonesia.
11.2 Where personal data is transferred to processors in jurisdictions outside Indonesia, olx17 ensures that appropriate safeguards are in place, including data processing agreements that require the recipient to protect the data to a standard equivalent to this Privacy Policy.
11.3 olx17 does not knowingly transfer member personal data to countries that lack adequate data protection frameworks without ensuring appropriate contractual protections are in place.
12.1 As an olx17 member, you have the following rights over your personal data:
12.2 To exercise any of the above rights, contact olx17 via live chat within your account dashboard or via email (see Section 16). We may ask you to verify your identity before processing any request relating to your personal data.
13.1 The olx17 platform is strictly prohibited to persons under the age of 21. olx17 does not knowingly collect personal data from anyone under 21 years of age.
13.2 Age verification is conducted at the point of registration and enforced through the KYC process. Any account found to belong to a person under 21 will be immediately closed, all data associated with that account will be deleted (subject to any legally required retention obligations), and any net deposited funds will be returned to the originating payment method.
13.3 If you believe that olx17 has inadvertently collected data from a person under 21, please contact our support team immediately so that the matter can be investigated and remediated without delay.
14.1 olx17 may send you promotional communications — including bonus offers, tournament invitations, seasonal promotions (such as Idul Fitri, Ramadhan, Imlek, and Indonesian Independence Day campaigns), and platform news — by email, SMS, or push notification, but only where you have given explicit consent during registration or subsequently through your account settings.
14.2 You may unsubscribe from marketing communications at any time by:
14.3 Withdrawing consent for marketing communications does not affect your ability to continue using the olx17 platform. You will continue to receive transactional communications (deposit confirmations, withdrawal notifications, security alerts, and account-related notices) regardless of your marketing preferences, as these are necessary for the operation of your account.
15.1 olx17 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, and platform capabilities. The "Last Updated" date at the top of this page indicates when the current version was published.
15.2 For material changes — those that significantly affect your rights or how your data is processed — olx17 will notify you via your registered email address at least 14 days before the changes take effect. Your continued use of the olx17 platform after the effective date of any revised policy constitutes your acceptance of those changes.
15.3 We encourage you to review this Privacy Policy periodically. Archived versions of previous policies are available on request by contacting olx17 support.
16.1 For any privacy-related enquiry, data subject rights request, or to report a suspected data breach, please contact the olx17 privacy team through the following channels:
16.2 All data subject requests will be acknowledged within 48 hours of receipt. We target a full response within 30 calendar days, though complex requests (for example, full data portability exports) may require up to 60 days. You will be informed if an extension is required.
16.3 olx17 will not charge a fee for processing data subject requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative charge may apply.
Your data is protected. Your identity is verified. Your withdrawals are fast. Explore the full olx17 platform today.
21+ only. Gambling can be addictive. Please play responsibly. View our Responsible Gaming page for support tools.