Privacy Policy

oxibet ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all Users of our online betting platform, accessible at https://oxibet.cam ("the Platform"). This Privacy Policy describes the types of personal information we collect, how we use and safeguard that information, and the rights you have regarding your personal data.

By creating an Account on oxibet, depositing funds, placing wagers, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Privacy Policy applies exclusively to information collected through the oxibet Platform and does not extend to any third-party websites, services, or applications that may link to or from our site. We encourage you to review the privacy policies of any external services you access.

For the purposes of applicable data protection laws, oxibet acts as the data controller with respect to the personal information collected through the Platform. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with relevant data protection regulations.

If you have any questions about how oxibet processes your personal data, or if you wish to exercise your data protection rights, please contact us at the details provided in the Contact Us section below.

oxibet collects and processes the following categories of personal information:

3.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, phone number, residential address, username, password, and preferred language.
• Identity Verification (KYC) Data: Government-issued ID documents (Indonesian National ID Card / KTP or passport), proof of address documents (utility bills, bank statements), and facial photographs (selfie with ID) submitted during the KYC verification process.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay account details), deposit and withdrawal transaction records, and betting activity history.
• Communication Data: Records of correspondence with our customer support team via live chat, email, or WhatsApp, including the content of your messages, timestamps, and resolution details.

3.2 Information Collected Automatically

• Device & Browser Information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, referral sources, clickstream data, betting patterns, game preferences, session duration, and navigation paths through the Platform.
• Cookies & Tracking Technologies: Session cookies, persistent cookies, local storage data, and similar technologies used to enhance user experience, remember preferences, and analyze Platform performance (see Cookies & Tracking section for details).
• Geolocation Data: General geographic location inferred from IP address to ensure compliance with jurisdictional restrictions and to customize content for Indonesian users.

3.3 Information from Third-Party Sources

• Payment Providers: Transaction confirmation data from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet services (OVO, DANA, GoPay, ShopeePay) to verify deposit and withdrawal transactions.
• Fraud Prevention & Verification Services: Data obtained from third-party identity verification and fraud detection services to confirm Account authenticity and prevent multi-accounting or fraudulent activity.

oxibet processes your personal data for the following purposes, each grounded in a lawful basis under applicable data protection law:

• Account Management (Contractual Necessity): To create and manage your Account, authenticate your identity, and provide access to Platform features including sports betting, live casino, slots, and withdrawal services.
• Transaction Processing (Contractual Necessity): To process deposits, execute withdrawals, settle winning bets, apply bonuses, and maintain accurate Balance records denominated in IDR.
• KYC & Compliance (Legal Obligation): To verify your identity, confirm you are at least 21 years of age, prevent underage gambling, comply with international anti-money-laundering (AML) regulations, and satisfy licensing conditions.
• Fraud Prevention & Security (Legitimate Interest): To detect and prevent multi-accounting, bonus abuse, collusion, money laundering, identity theft, and other prohibited activities outlined in our Terms & Conditions.
• Customer Support (Contractual Necessity): To respond to your inquiries, resolve disputes, provide technical assistance, and communicate updates regarding your Account or transactions.
• Platform Improvement & Analytics (Legitimate Interest): To analyze usage patterns, monitor Platform performance, identify bugs or technical issues, and enhance the user experience through data-driven improvements.
• Marketing & Promotions (Consent or Legitimate Interest): To send promotional offers, bonus announcements, and informational newsletters via email or SMS where you have consented to receive such communications. You may opt out at any time.
• Responsible Gaming (Legal Obligation & Legitimate Interest): To monitor betting behavior for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide access to responsible gaming tools as described on our Responsible Gaming page.

oxibet does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your data with the following categories of recipients where necessary to deliver our services or comply with legal obligations:

• Payment Service Providers: Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay) to process deposits and withdrawals. These providers receive only the information required to execute financial transactions (account holder name, account number, transaction amount).
• KYC & Identity Verification Partners: Third-party services that assist in verifying the authenticity of government-issued ID documents and detecting fraudulent submissions. These partners operate under strict confidentiality agreements.
• Game Content Providers: Software studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetErt, and Spribe that power the live casino, slots, and crash games on oxibet. These providers may receive anonymized or aggregated data related to game usage and performance.
• Fraud Detection & Security Services: Third-party platforms that analyze user behavior, device fingerprints, and transaction patterns to identify and prevent bonus abuse, multi-accounting, and money laundering.
• Cloud Infrastructure Providers: Secure cloud hosting and database services that store encrypted personal data and transaction records on behalf of oxibet. These providers are contractually bound to implement industry-standard security measures.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory investigation, oxibet may disclose personal data to law enforcement agencies, gaming regulators, or tax authorities.
• Professional Advisors: Legal counsel, auditors, and consultants who require access to data to provide professional services to oxibet under confidentiality obligations.

All third-party recipients are required to process personal data solely for the purposes specified by oxibet and to implement appropriate technical and organizational measures to protect the confidentiality and security of the data.

oxibet uses cookies, web beacons, local storage, and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze Platform performance. Cookies are small text files stored on your device that enable the Platform to recognize you on subsequent visits.

Types of Cookies We Use:

• Essential Cookies: Required for basic Platform functionality, including session management, login authentication, and security features. These cookies cannot be disabled without impairing the Platform's core operations.
• Preference Cookies: Remember your language selection, currency display (IDR), and other customization settings to provide a personalized experience.
• Analytics Cookies: Collect anonymous data about how Users interact with the Platform, including most-visited pages, time spent on site, bounce rates, and traffic sources. This data helps oxibet improve Platform design and functionality.
• Marketing Cookies: Track your activity across sessions to deliver targeted promotional content and measure the effectiveness of advertising campaigns. These cookies may be set by oxibet or by third-party advertising partners.

Managing Cookies: You can control or delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are being set. However, disabling essential cookies may limit your ability to use certain features of the Platform, such as staying logged in or completing transactions.

For more information on managing cookies, consult your browser's help documentation or visit industry resources such as www.allaboutcookies.org (external informational link; oxibet does not control or endorse third-party sites).

oxibet implements robust technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Secure Socket Layer (SSL) technology, ensuring that sensitive information such as login credentials, KYC documents, and payment details cannot be intercepted by malicious actors.
• Secure Data Storage: Personal data is stored on encrypted servers hosted in secure, access-controlled data centers. Database access is restricted to authorized personnel only, and all access events are logged for audit purposes.
• Two-Factor Authentication (2FA): Optional 2FA is available for all Users to add an extra layer of protection to Account login, requiring a time-based one-time password (TOTP) in addition to your username and password.
• Regular Security Audits: oxibet conducts periodic vulnerability assessments, penetration testing, and code reviews to identify and remediate security weaknesses.
• Employee Training: All oxibet staff members with access to personal data undergo mandatory data protection training and are bound by confidentiality agreements.
• Incident Response Plan: In the event of a data breach that poses a risk to your rights and freedoms, oxibet will notify affected Users and relevant regulatory authorities within the timeframes required by applicable law.

oxibet retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active Account and for 5 years following Account closure to comply with anti-money-laundering (AML) regulations and licensing requirements.
• KYC Documents: Retained for a minimum of 5 years after the last transaction or Account closure, as mandated by international AML and gaming license obligations.
• Transaction Records: Deposit, withdrawal, and betting history retained for 7 years to satisfy financial auditing and tax reporting requirements.
• Communication Records: Customer support correspondence retained for 3 years to facilitate dispute resolution and improve service quality.
• Marketing Data: Retained until you withdraw consent or request deletion, at which point your email address and phone number will be suppressed from future campaigns within 30 days.

After the applicable retention period expires, oxibet securely deletes or anonymizes personal data such that it can no longer be associated with an identifiable individual.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data oxibet holds about you, including information about the sources, purposes, and recipients of that data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most Account information directly through your Profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, provided that oxibet is not required to retain the data under applicable law (e.g., AML obligations).
• Right to Restriction of Processing: You may request that oxibet limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
• Right to Data Portability: You may request a machine-readable copy of your personal data to transfer to another service provider, where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our support team at the email address provided in the Contact Us section. oxibet will respond to verified requests within 30 days. Please note that certain rights may be subject to legal limitations or may require verification of your identity before fulfillment.

oxibet does not knowingly collect or process personal data from individuals under the age of 21. Our Platform and services are intended exclusively for adults who meet the minimum age requirement specified in our Terms & Conditions.

If we become aware that an Account has been created by or on behalf of a person under 21 years of age, we will immediately suspend the Account, forfeit any balances, and delete all associated personal data. If you believe that oxibet has inadvertently collected information from a minor, please contact us immediately at the email address provided in the Contact Us section.

oxibet reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. Where changes are material and affect your rights, we will provide reasonable notice via a notification on the Platform, an email to your registered address, or a prominent banner on the homepage.

The "Effective Date" at the top of this Privacy Policy indicates when the current version was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.

Continued use of the oxibet Platform following the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you may close your Account by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or how oxibet processes your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: For data protection inquiries, please use the subject line "Privacy Policy Inquiry" to ensure your message is routed to the appropriate team.
• Live Chat: Available 24/7 via the in-platform chat interface for general inquiries. For detailed data protection requests, email is preferred.
• WhatsApp: Available 24/7 for Indonesian-speaking users; average response under 5 minutes for urgent matters.

We aim to respond to all privacy-related inquiries within 30 days of receipt. For complex requests, we may require additional time and will notify you of any extension along with the reasons for the delay.