oyo77 Privacy Policy

This page describes what we collect when you use oyo77 and how we keep that data protected. Our privacy practice is straightforward: we collect only what is required to operate the service, process payments, and comply with local law. Your data is not sold, shared with marketers, or used outside the scope described here.

We at oyo77 operate an online entertainment platform available where local law permits. Account holders across supported jurisdictions — from Jakarta to Surabaya to Medan — deposit via e-wallets (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet) and bank transfers (mobile banking, local payment, online payment, e-wallet) to access sports betting on Liga 1 and international tournaments, live-dealer tables, and slot games. Our privacy commitments hold across all regions and all payment flows.

We design our data handling to be transparent and minimal. If you have questions about what we store or how we use it, this page covers the full picture. We also list how to contact our team if you need to exercise your rights or report a privacy concern.

What We Collect and Why

We collect data in four categories. Account information: email, username, password hash, phone number, and date of birth when you register on oyo77. Verification documents: national ID scan, proof of address, and selfie for KYC (Know Your Customer) compliance — required before you can withdraw funds. Transaction records: deposit history, payment method, bet slip details, game session timestamps, and withdrawal requests. Technical data: device type, IP address, browser type, and mobile OS version so we can detect fraud, optimize the app, and debug connection issues.

We collect this data because it is legally required (KYC under anti-money-laundering rules), operationally necessary (account login, payment processing, customer support), or contractually essential (fraud detection, terms-of-service enforcement). We do not collect your data to build profiles for advertisers or to sell to third parties.

Our servers may sit outside your jurisdiction. If your data transfers internationally, we apply the same protection standards as if it remained local. We do not transmit your data to countries with weaker privacy safeguards.

How We Use Your Data

We use your email to send account notifications, deposit confirmations, and support replies. We use your phone to verify your identity if you request account recovery and to notify you of unusual login attempts. We use your KYC documents only to confirm your identity and age; we delete the images after verification is complete, retaining only a flag that says "verified on [date]".

We use transaction records to calculate your withdrawal limits, settle your bets, detect bonus abuse, and comply with financial reporting rules. We use technical data to identify compromised accounts, prevent fraud, and measure how often the app crashes on iOS versus Android so we can fix bugs faster.

We retain your account data for seven years after your account closes, as required by anti-money-laundering and tax law. We delete login history, cookies, and device fingerprints after 90 days of inactivity on your account.

Third Parties and Data Processors

We share your data only with vendors who process it on our behalf and only to the extent needed. Payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet) receive your name, account number, and transaction amount to complete deposits and withdrawals — they do not receive your password or KYC documents. Customer support platform (encrypted chat and email) stores your tickets and replies; support staff may view your account email and game history to help you faster. Fraud-detection vendor receives your IP address and device fingerprint to flag suspicious logins; they do not store your personal identity.

We do not permit these vendors to use your data for their own marketing. Our contracts require them to encrypt data in transit and at rest, and to notify us immediately if they suffer a data breach.

Your Rights

You have the right to request what data we hold about you. You may ask for a correction if your name or address is wrong. You may request deletion of your account and all associated data, except records we must retain by law (KYC documents, transaction logs for seven years). We process access and deletion requests within 14 business days.

To exercise these rights, contact us at [email protected] with the subject line "Data Request — [Your Account Email]". Include your account email and the specific request (access, correction, or deletion). We will respond in English or Indonesian and ask for proof of identity before releasing sensitive information.

Cookies and Tracking

We use cookies to keep you logged in and to remember your language preference on oyo77. These are essential cookies — the app cannot function without them. We do not use tracking cookies to follow you across other websites or to build a profile of your browsing habits outside oyo77.

On your phone, we store your session token in the app's secure storage (Keychain on iOS, Keystore on Android) so you do not have to re-enter your password every time. We do not sync this token to the cloud or share it with third parties.

Policy Updates and Contact

We update this policy when we change how we collect or use data. We notify all active account holders of material changes by email at least 30 days before the change takes effect. Minor clarifications (fixing typos, adding a new processor) are updated without notice. You may always view the current version on this page.

We take data security seriously. If you discover a vulnerability in oyo77 or believe your data has been compromised, contact our security team at [email protected]We investigate reports confidentially and aim to respond within 48 hours.

Our privacy team is available for questions on data handling and your rights. Reach us at [email protected] or through the support channel in your oyo77 account. We respond in English and Indonesian within one business day during weekdays. Account holders outside Jakarta can contact us via the same email and receive the same response time.