Privacy Policy
okewin Data Protection

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or in combination with other data — including name, date of birth, email address, phone number, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, alteration, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, the operating entity behind okewin.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a binding contractual instruction — for example, payment gateway providers and KYC verification partners.
• "Member" means any individual who has registered a verified account on the okewin platform.
• "Visitor" means any individual who accesses okewin.cam without holding a registered account.
• "KYC Data" means the identity verification documents and biometric data (e.g., selfie photographs) submitted by a Member during the Know Your Customer process, including copies of KTP (Indonesian National Identity Card) and proof of payment method ownership.
• "Cookies" means small text files placed on a user's device by okewin.cam for the purposes of session management, preference retention, and usage analytics.

okewin is an internationally licensed online betting platform operating at https://okewin.cam. Our services — which include sports betting, live casino, slot gacor (high-RTP featured slots), and togel (Indonesia's traditional numbers lottery) markets — are directed primarily at adult residents of Indonesia aged 21 and over.

okewin acts as the Data Controller for all personal data collected directly from Members and Visitors through the platform. Where okewin engages third-party service providers to process data on its behalf, those providers act as Data Processors under binding contractual terms consistent with this Privacy Policy.

For all privacy-related queries, data rights requests, or complaints, please contact our privacy team at [email protected] with the subject line "Privacy Request."

3.1 Data You Provide Directly. When you register an account, complete KYC, make a deposit, contact support, or interact with any feature of okewin, you provide us with personal data including:

• Registration Data: Full legal name, date of birth, residential address in Indonesia, email address, mobile telephone number.
• KYC Documents: Copy of KTP or valid Indonesian passport; selfie photograph with identity document; proof of payment method (bank account or e-wallet) ownership.
• Financial Data: Bank account numbers (BCA, BRI, BNI, Mandiri, CIMB Niaga, or other accepted banks); e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); deposit and withdrawal transaction records; account balance history.
• Support Communications: Messages, emails, and live chat transcripts submitted to okewin's support team, including any personal data contained within those communications.
• Responsible Gaming Data: Self-imposed deposit limits, session time settings, self-exclusion requests, and any responsible gaming assessments completed voluntarily.

3.2 Data Collected Automatically. When you access okewin.cam, we automatically collect certain technical data including:

• IP address and approximate geolocation (city/region level, derived from IP).
• Device type, operating system, and browser version.
• Pages visited, session duration, click paths, and feature interaction logs.
• Betting and gaming activity logs — game titles accessed, bet amounts, outcomes, session times.
• Cookie identifiers and session tokens (see Section 9 for full cookie details).

3.3 Data From Third Parties. We may receive personal data about you from third-party sources in limited circumstances, including identity verification partners used in the KYC process, payment processing networks (for transaction confirmation), and fraud detection and AML screening services.

okewin uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and securing your okewin account; authenticating your identity at login; communicating account-related updates and notifications.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity in accordance with our anti-money-laundering obligations before processing withdrawals.
• Payment Processing: Facilitating deposits via BCA, BRI, BNI, Mandiri, and supported e-wallets; processing withdrawal requests to verified accounts; maintaining financial transaction records.
• Service Delivery: Operating and improving the sports betting, live casino, slot gacor, and togel market features available on the platform; personalising your in-platform experience based on usage patterns.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns to identify potential problem gambling indicators; administering self-exclusion, deposit limit, and session timer tools; sending responsible gaming communications where appropriate.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Legal & Regulatory Compliance: Fulfilling our obligations under applicable licensing conditions, AML regulations, and any lawful request from a competent authority.
• Marketing Communications: Sending promotional offers, bonus notifications, and event announcements by email or in-app notification — only where you have not opted out of marketing communications. You may opt out at any time by contacting [email protected].
• Platform Analytics: Analysing aggregated, anonymised usage data to understand how Members interact with okewin, identify technical issues, and improve the platform experience.

okewin processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to perform the contract between you and okewin — specifically, to operate your account, process deposits and withdrawals, settle bets, and deliver the services you have registered to use.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out to pursue okewin's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your freely given consent — for example, receiving optional marketing communications. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out before withdrawal.

okewin does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share financial data with payment network partners (including local Indonesian bank transfer networks and e-wallet providers such as OVO, DANA, GoPay, and ShopeePay) to the extent required to process your deposit and withdrawal transactions.
• KYC & Identity Verification Partners: Your identity documents and biometric data may be shared with certified third-party KYC verification service providers engaged by okewin to validate your identity and age. These providers act as Data Processors under binding contractual terms.
• Fraud & AML Screening Services: Transaction data and account activity may be shared with fraud detection and AML compliance screening services to fulfil our regulatory obligations and protect the integrity of the platform.
• Game Content Providers: Certain gameplay data — including game session logs and bet outcomes — is necessarily shared with licensed game studios (such as Pragmatic Play, Evolution Gaming, and Spribe) to facilitate game delivery. These studios do not receive any personal identification data beyond what is technically required for game operation.
• Legal Authorities: okewin will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a valid legal order, court subpoena, or applicable regulatory obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of okewin's business assets, personal data held by okewin may be transferred to the acquiring entity. Members will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

7.1 Cross-Border Processing. okewin's servers and operational infrastructure are located outside Indonesia. By registering an account and using our services, you acknowledge that your personal data will be transferred to, stored in, and processed in jurisdictions outside the Republic of Indonesia, including the jurisdiction in which okewin holds its primary operating licence.

7.2 Safeguards. Where personal data is transferred internationally, okewin ensures that appropriate safeguards are in place — including contractual data protection clauses with receiving parties, encryption of data in transit, and access controls that restrict data use to authorised personnel only.

7.3 No Transfer to Unprotected Jurisdictions. okewin does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection as assessed by okewin's data governance team, unless specific supplementary safeguards (such as binding contractual clauses) are in place to address any identified shortfall.

okewin retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Account & KYC Data: Retained for a minimum of five (5) years following the date of account closure, in accordance with AML regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Support Communication Logs: Retained for two (2) years from the date of the relevant interaction, for quality assurance, dispute resolution, and training purposes.
• Betting & Gaming Activity Logs: Retained for two (2) years from the date of activity, for responsible gaming monitoring and dispute resolution purposes.
• Analytical & Technical Data (anonymised): Retained indefinitely in fully anonymised, aggregated form for platform improvement purposes. Anonymised data is not subject to data retention limits as it cannot be used to identify any individual.
• Marketing Consent Records: Retained for the duration of your account and for two (2) years following account closure, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using industry-standard data destruction procedures.

9.1 What Are Cookies? Cookies are small text files stored on your device when you visit okewin.cam. They allow the platform to recognise your device across sessions, maintain your login state, remember your preferences, and analyse how the site is used.

9.2 Types of Cookies We Use. The table below describes the categories of cookies deployed on okewin.cam:

9.3 Managing Cookies. You may control cookie settings through your browser's built-in privacy controls. Note that disabling essential or security cookies will impair or prevent your ability to access the okewin platform. Analytical and functional cookies may be disabled without affecting core platform access.

okewin recognises and upholds the following data rights for all Members and Visitors. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request." Requests will be acknowledged within 5 business days and resolved within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data okewin holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your okewin account. Minor updates (email address, phone number) may be made directly via account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention obligation (such as the five-year AML retention requirement).
• Right to Restrict Processing: You may request that okewin temporarily suspend the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to okewin in a structured, commonly used, machine-readable format, and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, your preferences will be updated within 5 business days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11.1 Technical Safeguards. okewin implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key technical safeguards include:

• TLS 1.2/1.3 encryption for all data in transit between your device and okewin's servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment account details.
• Hashed and salted password storage — okewin never stores passwords in plaintext.
• Two-factor authentication (2FA) available for all Member accounts and mandatory for all okewin staff with access to Member data.
• Automated intrusion detection and DDoS mitigation systems monitoring platform traffic 24/7.
• Role-based access controls ensuring that okewin staff can access Member data only to the extent required for their specific operational role.

11.2 Organisational Safeguards. Access to Member personal data within okewin is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training. okewin conducts periodic internal security reviews and vulnerability assessments.

11.3 Data Breach Response. In the event of a personal data breach that presents a risk to Members' rights and freedoms, okewin will notify affected Members without undue delay and no later than 72 hours after becoming aware of the breach, where technically feasible. Notification will include the nature of the breach, categories of data affected, likely consequences, and steps taken to remediate the incident.

okewin's services are strictly restricted to adults aged 21 years and over. We do not knowingly collect or process personal data from any person under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately suspend the relevant account, delete the associated personal data, and — where applicable — refer the matter to our responsible gaming team.

If you are a parent or guardian and believe that a minor has registered on okewin or submitted personal data to us, please contact us immediately at [email protected] with the subject line "Minor Protection Report." We take all such reports seriously and will investigate and act on them as a priority matter.

13.1 Right to Amend. okewin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered Members via email and by a prominent notice on the okewin platform at least 7 days before the amended policy takes effect.

13.2 Continued Use as Acceptance. Your continued use of the okewin platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should cease using the platform and request account closure before the amendment takes effect.

13.3 Policy Version. The current version of this Privacy Policy is effective as of 1 January 2026. Prior versions are available on request by contacting [email protected].

For any questions, concerns, or requests related to this Privacy Policy or okewin's data practices, please contact our privacy team using the details below:

• Privacy & Data Rights Requests: [email protected] — use subject line "Privacy Request" or "Data Rights Request."
• Live Chat Support: Available 24 hours a day, 7 days a week via the in-app chat widget on the okewin platform. Indonesian-speaking agents are available 09:00–23:00 WIB.
• Response Times: Privacy requests are acknowledged within 5 business days and fully resolved within 30 calendar days of receipt.