Privacy Policy — obor88

obor88 ("we", "our", "the Platform") operates the online gaming and sports betting platform accessible at https://obor88.cam. We are committed to protecting the personal information of every individual who registers as a Member, visits our website, or interacts with our customer support services.

This Privacy Policy describes in full detail the categories of personal data we collect, the legitimate purposes for which that data is processed, the third parties with whom it may be shared, the security measures we apply to protect it, and the rights available to you as a data subject. This Policy forms an integral part of the obor88 Terms & Conditions and should be read in conjunction with them.

By registering an Account on obor88, depositing funds, or using any feature of our platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact our support team to arrange account closure.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, identification number, contact details, IP address, and financial account information.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, modification, and deletion.
• "Data Controller" — obor88, which determines the purposes and means by which Personal Data is processed.
• "Data Processor" — a third party that processes Personal Data on behalf of obor88 under a contractual data-processing agreement.
• "Member" / "You" — any registered user of the obor88 platform.
• "KYC Data" — identity documents and supporting materials submitted for Know Your Customer verification, including KTP (Indonesian national identity card), passport, and bank account evidence.
• "Cookies" — small text files stored on a Member's device by the obor88 website for session management, analytics, and security purposes.
• "Sensitive Data" — a subset of Personal Data requiring heightened protection, which in the context of obor88 includes financial records, identity documents, and responsible gaming self-assessment responses.

obor88 collects Personal Data across several categories, as described in the table below. We collect only what is necessary to deliver our services and comply with our legal obligations.

obor88 collects Personal Data through the following channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our support team via live chat or email.
• Automated collection: Technical and usage data gathered automatically when you access the platform, including IP address logging, session cookies, and browser fingerprinting for security purposes.
• Third-party payment processors: Confirmation data received from Indonesian bank transfer systems (including BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, and BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) upon successful transaction processing. obor88 receives only transaction reference data — not your banking credentials.
• Game provider data: Aggregate gameplay data received from certified third-party game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft, used for account balance reconciliation, dispute resolution, and responsible gaming monitoring.
• Responsible gaming self-assessments: Voluntary responses to problem gambling screening questions submitted through the platform's responsible gaming tools.

obor88 processes your Personal Data for the following specific and legitimate purposes:

1. Account management: Creating, maintaining, and administering your Member account, including authentication and access control.
2. Identity verification (KYC): Confirming your legal identity, age (minimum 21 years), and Indonesian residency as required by our platform eligibility rules and operational standards.
3. Payment processing: Facilitating deposits and withdrawals via your registered Indonesian bank account or e-wallet, reconciling transaction records, and managing account balances in IDR.
4. Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorized access attempts, duplicate account registration, money laundering indicators, and other forms of platform abuse.
5. Customer support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of all support interactions for quality assurance and compliance purposes.
6. Responsible gaming: Monitoring betting patterns that may indicate problem gambling behavior, enforcing self-exclusion and deposit limit settings, and facilitating referrals to support resources where appropriate.
7. Platform improvement: Analyzing aggregated usage data to optimize game performance, improve navigation, and enhance the overall Member experience for Indonesian users.
8. Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. You may withdraw consent at any time by contacting support.
9. Legal compliance: Retaining records as required by applicable international gaming regulations and responding to lawful requests from authorized regulatory or law enforcement bodies.

obor88 processes your Personal Data on the following legal grounds, applied on a purpose-by-purpose basis:

• Contractual necessity: Processing required to fulfill the obligations of the obor88 Member agreement — including account creation, deposit processing, withdrawal execution, and KYC verification — is carried out on the basis that it is necessary to perform the contract between obor88 and you as a Member.
• Legitimate interests: Fraud detection, platform security monitoring, abuse prevention, and internal analytics are carried out on the basis of obor88's legitimate interest in operating a safe, fair, and commercially viable gaming platform, balanced against your right to privacy.
• Consent: Marketing communications and voluntary responsible gaming self-assessments are processed on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation: Record-keeping, KYC documentation retention, and responses to lawful regulatory requests are carried out on the basis of compliance with applicable legal obligations binding on obor88 as an internationally licensed gaming operator.

obor88 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We share data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment partners: Your name, account number, and transaction amount are shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, or BSI) or e-wallet operator (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit or withdrawal instruction.
• KYC verification services: Where obor88 uses a third-party identity verification provider to process KYC documents, that provider operates under a strict data-processing agreement and is prohibited from using your data for any purpose other than identity verification on obor88's behalf.
• Game providers: Transaction reference data (bet amounts, outcomes, session identifiers) is shared with licensed game studios — including Pragmatic Play, Evolution Gaming, and Microgaming — for the purpose of game result reconciliation and dispute resolution. No directly identifiable personal details beyond a unique session token are transmitted.
• Regulatory and law enforcement authorities: obor88 may disclose Personal Data to competent authorities where required by law, court order, or lawful regulatory instruction. We will notify the affected Member of such a disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by obor88 may access limited Personal Data under professional confidentiality obligations for the purpose of providing advice or conducting audits.

obor88 retains your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following standard retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted from active systems or anonymized for statistical purposes. Backup copies are purged on a rolling schedule consistent with our internal data lifecycle policy.

obor88 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Member devices and our servers — the same encryption standard used by BCA internet banking and major international financial institutions.
• Encrypted data storage for all sensitive fields including KYC document files, bank account numbers, and authentication credentials. Passwords are hashed using industry-standard bcrypt with per-user salting.
• Role-based access controls (RBAC) ensuring that internal staff can only access Personal Data categories relevant to their specific function. Support agents, compliance officers, and technical staff each operate within strictly defined data access boundaries.
• Multi-factor authentication (MFA) required for all internal administrative access to systems holding Member data.
• Intrusion detection and DDoS mitigation systems operating continuously to identify and neutralize external threats before they affect platform integrity or Member data.
• Regular third-party security audits and penetration testing conducted to proactively identify and remediate vulnerabilities in our platform infrastructure.

In the event of a data breach that poses a material risk to Members, obor88 will notify affected individuals promptly via their registered email address, describing the nature of the incident and the steps taken in response.

obor88 uses cookies and similar tracking technologies to maintain platform functionality, enhance security, and analyze usage patterns. The following cookie categories are deployed on our platform:

• Essential cookies: Required for the platform to function correctly — including session management (keeping you logged in), security tokens, and CSRF protection. These cannot be disabled without impairing your ability to use the platform.
• Analytics cookies: Used to collect aggregated, anonymized data about how Members navigate and interact with the platform. This helps us identify pages with high exit rates, optimize load times, and prioritize feature development. No personally identifiable information is included in analytics reports.
• Security cookies: Short-lived cookies used to detect suspicious login patterns, flag unusual geographic access, and support our fraud-prevention systems. These are essential and cannot be disabled.
• Preference cookies: Store your platform display preferences (such as language setting or notification preferences) to provide a consistent experience across sessions.

You may manage non-essential cookie settings through your browser's built-in privacy controls. Please note that disabling certain cookies may affect the performance of some platform features. obor88 does not use advertising cookies or participate in cross-site behavioral tracking networks.

As a Member of obor88, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact us using the details in Clause 15. We will respond to verified requests within 30 days.

The obor88 platform is strictly intended for adults aged 21 years and older. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes mandatory age declaration, and KYC verification is used to confirm that all Members meet the minimum age requirement.

If obor88 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through KYC review, a third-party report, or any other means — the relevant account will be immediately suspended, all associated balances will be frozen pending investigation, and the data will be securely deleted once the investigation is concluded.

If you are a parent or guardian and believe that a minor in your care has registered an account on obor88, please contact our support team immediately using the email address in Clause 15. We will investigate and act promptly.

obor88 operates as an internationally licensed gaming platform. In order to deliver our services, certain Personal Data may be processed on servers or by service providers located outside of Indonesia. Where such international transfers occur, obor88 applies the following safeguards:

• Data is transferred only to countries or entities that maintain data protection standards equivalent to or exceeding those applied by obor88 under this Privacy Policy.
• All third-party international Data Processors are bound by contractual data-processing agreements that impose strict obligations on data use, security, and sub-processing restrictions.
• Game providers (Pragmatic Play, Evolution Gaming, Microgaming, etc.) that may process session data internationally are certified under recognized gaming compliance frameworks and maintain their own published data protection commitments.

obor88 does not transfer Personal Data to jurisdictions known for inadequate data protection without applying appropriate contractual or technical safeguards to mitigate the associated risk.

obor88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify active Members via the email address registered to their account at least 7 days before the revised Policy takes effect.

The "Effective Date" displayed at the top of this page will be updated to reflect the most recent revision. Your continued use of the obor88 platform after the revised Policy's effective date constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and request account closure before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how obor88 protects your data. Archived versions of previous Privacy Policies are available upon request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by obor88, please contact our dedicated privacy support team using the details below. All privacy-related correspondence is treated with strict confidentiality and handled by trained compliance staff.

• Privacy Support Email: [email protected]
• Subject Line: Please use "Privacy Request — [Your Registered Username]" for efficient routing.
• Response Time: We aim to acknowledge all privacy-related requests within 2 business days and to resolve them fully within 30 calendar days.
• Support Hours: Our support team is available 24 hours a day, 7 days a week, including during Indonesian public holidays such as Idul Fitri, Idul Adha, Nyepi, and Indonesian Independence Day (17 August).
• Languages: Privacy requests are handled in English and Indonesian (Bahasa Indonesia).