Privacy Policy

Introduction

ojol7 ("we", "us", "our", or "the Platform") is an international online betting and gaming platform accessible at ojol7.cam, purpose-built to serve Indonesian players. We operate across multiple product categories — including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-RTP slot games), and crash games — all denominated in Indonesian Rupiah (IDR) and supported by locally familiar payment channels.

As a platform that handles real-money transactions and processes personal identity documents, ojol7 treats data protection with the same seriousness it applies to financial security. This Privacy Policy has been written in clear, accessible English and sets out our practices in full. It applies to all Members and visitors to the ojol7 platform, regardless of the device or network used to access it.

This policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, both of which are incorporated herein by reference.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

Data We Collect

ojol7 collects the following categories of personal data from Members and platform visitors:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to confirm you meet the 21+ age requirement).
• Residential address in Indonesia — including city (e.g., Jakarta, Surabaya, Bandung, Medan, Bali) and postal code.
• Contact email address and telephone number.
• Username and encrypted password hash (we do not store plaintext passwords).

3.2 KYC Verification Documents

• Government-issued photo ID: Indonesian national identity card (KTP) or passport.
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days).
• Payment method confirmation: a photograph or screenshot confirming ownership of the bank account or e-wallet used to deposit.
• Selfie photograph where required for enhanced identity confirmation at higher account tiers.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, including amounts in IDR and timestamps (WIB).
• Payment method identifiers: masked bank account numbers for BCA, BRI, BNI, Mandiri, CIMB Niaga, and OCBC NISP; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Wagering history: game types played, stakes placed, markets selected, and results.

3.4 Technical & Device Data

• IP address and geolocation data derived from it.
• Device type, operating system version, browser type and version.
• Session timestamps, page navigation paths, and time-on-page data.
• Cookie identifiers and advertising identifiers where applicable.

3.5 Communications Data

• Records of live chat, email, and support ticket communications between you and the ojol7 support team.
• Marketing preference settings: whether you have opted in or out of promotional email and SMS communications.

How We Collect Data

ojol7 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or update your account profile settings.
• Automatically via the Platform: Through cookies, server logs, and analytics tools that passively capture device, session, and behavioral data when you visit or interact with ojol7.cam.
• From payment providers: When you make a deposit via a local Indonesian bank or e-wallet, the payment provider transmits a transaction confirmation and a masked account identifier to ojol7 to enable reconciliation.
• From identity verification partners: Where ojol7 uses a third-party KYC service provider, that provider may return a verification status and risk score based on the documents you submit.
• From fraud prevention services: Device fingerprint data and behavioral analytics collected through our fraud-detection partners to identify unusual patterns that may indicate unauthorized account access or promotional abuse.

Legal Basis for Processing

ojol7 processes your personal data on the following legal grounds:

Use of Your Data

ojol7 uses your personal data solely for the purposes set out below. We do not use your data for purposes incompatible with those for which it was originally collected:

• Account Management: Creating, maintaining, and administering your ojol7 account, including processing login requests and account setting changes.
• Service Delivery: Enabling you to place wagers, receive winnings, access live casino games, participate in togel draws, and use all other platform features.
• Financial Processing: Processing deposits from and withdrawals to your registered local payment methods in IDR.
• Identity & Age Verification: Confirming that you are who you say you are and tha t you meet the 21+ eligibility requirement before processing your first withdrawal.
• Fraud & AML Compliance: Detecting and preventing fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling behavior and, where appropriate, proactively reaching out to Members who may benefit from responsible gaming tools.
• Customer Support: Responding to your inquiries, resolving disputes, and processing formal complaints through our two-stage complaints process.
• Platform Improvement: Analyzing aggregated, anonymized behavioral data to improve platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional emails and in-platform notifications about bonuses, seasonal promotions (such as Idul Fitri, Ramadhan, or Indonesian Independence Day offers), and new game releases — only where you have provided explicit consent.
• Legal Compliance: Retaining transaction and identity records as required by our international gaming license and applicable anti-money-laundering regulations.

Sharing Your Data

ojol7 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share your data only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: Your transaction data is shared with your chosen Indonesian payment provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, OVO, DANA, GoPay, ShopeePay, or LinkAja) solely to facilitate the processing of your deposit or withdrawal.
• KYC & Identity Verification Partners: Your identity documents and verification data are shared with our contracted KYC service provider under a strict data processing agreement. This provider is bound by confidentiality obligations and may not use your data for any purpose other than identity verification on behalf of ojol7.
• Fraud Prevention & Security Partners: Anonymized device and behavioral data may be shared with our fraud detection technology partners to identify and prevent platform abuse.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive only the minimum session data required to deliver their games within the ojol7 platform environment. No personal identity data is passed to game studios.
• Legal & Regulatory Authorities: Where we are required by law, court order, or regulatory directive to disclose Member data, we will comply with that obligation. Where permitted, we will notify the affected Member prior to disclosure.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the ojol7 business or a substantial part of its assets, Member data may be transferred to the acquiring entity subject to the same privacy protections described in this policy.

Cookies & Tracking Technologies

ojol7 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to gather aggregated analytics data that helps us improve the Member experience. The following cookie categories are in use:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or fraud-detection cookies may prevent you from accessing certain platform features or completing financial transactions.

Data Retention

ojol7 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data (registration information, transaction history, wagering records): retained for the lifetime of the account plus a minimum of five (5) years following account closure, in line with standard international AML record-keeping requirements.
• KYC documents (identity documents, proof of address): retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support communications (live chat transcripts, email records, complaint files): retained for three (3) years following the closure of the relevant support ticket or complaint case.
• Marketing consent records: retained for as long as your marketing opt-in remains active, plus two (2) years following opt-out to evidence the withdrawal of consent.
• Analytics data: aggregated and anonymized within 90 days of collection; anonymized data does not constitute personal data and may be retained indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using industry-standard data destruction methods.

Data Security

ojol7 implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ojol7 platform is encrypted in transit using 256-bit SSL/TLS, the same standard used by major international financial institutions.
• Encrypted Storage: Sensitive personal data — including identity documents and financial account identifiers — is encrypted at rest using AES-256 encryption within our database infrastructure.
• Password Security: Passwords are never stored in plaintext. We use industry-standard one-way hashing with salt to store password data, meaning even internal staff cannot view your password.
• Access Controls: Access to Member personal data is restricted to authorized personnel on a strict need-to-know basis. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. 2FA adds an additional layer of security beyond your password for login and sensitive account changes.
• Penetration Testing: ojol7 engages independent security specialists to conduct regular penetration tests of the platform infrastructure.

Your Rights

As a Member of ojol7, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line reflecting the right you wish to exercise. We will acknowledge your request within 48 hours and respond in full within 30 calendar days.

• Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that we may be required to retain certain data to comply with our legal and regulatory obligations even following an erasure request.
• Right to Restriction of Processing: You may request that we pause processing of your personal data in certain circumstances — for example, while a dispute over data accuracy is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests. You may also withdraw consent for marketing communications at any time without affecting the lawfulness of processing based on consent given prior to withdrawal.
• Right Not to Be Subject to Automated Decision-Making: Where ojol7 uses automated processes to make decisions that have a significant effect on you (for example, automated account restriction following fraud pattern detection), you have the right to request human review of that decision.

Minors

ojol7 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory age declaration and subsequent KYC age verification prior to the processing of any withdrawal.

If you are a parent or guardian and believe that a person under your care has registered on ojol7 without your knowledge, please contact us immediately at [email protected]. Upon confirmation, we will close the account, delete all associated personal data, and return any deposited funds in accordance with our underage gambling policy.

We also encourage parents and guardians to make use of publicly available parental control and internet filtering tools to help prevent underage access to online gambling platforms.

Third-Party Links

The ojol7 platform may contain references to third-party game studios, payment providers, or other services. While ojol7 takes reasonable care to work only with reputable partners, we are not responsible for the privacy practices of third-party websites or services that operate independently of the ojol7 platform.

If you navigate away from ojol7.cam to a third-party website — whether by clicking a link in a promotional email, a game studio's landing page, or any other route — this Privacy Policy no longer applies to the data collected by that third party. We encourage you to read the privacy policy of any external site you visit.

Policy Changes

ojol7 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify active Members via the registered email address and display a prominent notice on the platform for a minimum of seven (7) days prior to the revised policy taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage Members to review this page periodically. Your continued use of the ojol7 platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

Where a proposed change to this Privacy Policy requires your fresh consent under applicable data protection law, we will seek that consent through an explicit opt-in mechanism before the change takes effect for your account.

Contact Us

If you have any questions, concerns, or formal requests relating to this Privacy Policy or the way ojol7 handles your personal data, please reach out through the following channel:

• Email (plain text — not clickable): [email protected]
• Subject Line for Data Requests: Use "Privacy Request — [Right Type]" (e.g., "Privacy Request — Data Access") to ensure your message is routed to our data protection team promptly.
• Live Chat: Available 24/7 via the in-platform chat widget, staffed by Indonesian-speaking agents who can assist with general privacy questions and escalate formal requests to the appropriate team.
• Response Commitment: We acknowledge all privacy-related inquiries within 48 hours (WIB) and provide a substantive response within 30 calendar days. Complex requests may require additional time; we will notify you if an extension is necessary.