ovo33 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal information of ovo33 Members is the ovo33 Platform, operated at ovo33.club. When this Policy refers to "ovo33", "we", "us", or "our", it refers to the operator of the ovo33 platform in its capacity as data controller.

ovo33 is an internationally operated online gaming platform designed for Indonesian players. References to applicable data protection principles in this Policy reflect internationally recognized standards for responsible data handling, including data minimization, purpose limitation, storage limitation, integrity, and confidentiality.

For all data-related queries, including subject access requests and complaints, please contact us at [email protected].

ovo33 collects the following categories of personal data from Members and prospective Members. We collect only what is necessary for the specific purposes described in Section 4.

ovo33 collects personal data through three primary channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in a promotion. The data you actively provide is the most significant category of personal data ovo33 holds.
• Automatically during platform use — through cookies, web server logs, and analytics tools. Technical and usage data (described in Section 2) is collected automatically when you access ovo33.club on any device. See Section 8 for detailed cookie information.
• From third-party payment processors — when processing deposits and withdrawals via Indonesian bank transfer or e-wallet, payment processors may share transaction confirmation data, payment reference numbers, and account name matching information with ovo33 to facilitate reconciliation and fraud prevention.

ovo33 processes personal data only for specific, documented purposes. The table below sets out each processing purpose, the data categories involved, and the legal basis for that processing.

ovo33 does not sell personal data. We do not share Member personal data with third parties for their own marketing purposes. Data is shared only in the following limited circumstances:

• Payment processors: When processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, we share the minimum necessary financial and identity data with the relevant payment processor or banking partner to complete the transaction securely.
• Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, PG Soft, Habanero, and Spribe receive a Member's account session token and wager data to deliver game services. Game Providers do not receive full identity or banking details. Game Provider data handling is governed by each provider's own privacy standards, which ovo33 reviews during the onboarding process.
• Identity verification services: Where automated identity verification tools are used to support the KYC process, document images may be shared with a certified verification partner under strict data processing agreements.
• Legal and regulatory disclosure: ovo33 may disclose personal data to law enforcement, financial regulators, or judicial bodies where required by applicable law, a valid court order, or where disclosure is necessary to prevent serious harm or fraud. ovo33 will notify affected Members of such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of ovo33's business or assets, Member personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom ovo33 shares personal data are required to handle that data in accordance with applicable data protection principles and are prohibited from using it for any purpose other than the specific service they provide to ovo33.

ovo33 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active account data — retained for the lifetime of the Member's account plus a minimum of five (5) years after account closure, to comply with AML record-keeping obligations.
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, consistent with standard financial record-keeping requirements.
• KYC verification documents — retained for a minimum of five (5) years from the date of verification, or five (5) years from account closure, whichever is later.
• Customer support communications — retained for two (2) years from the date of last contact, or for the lifetime of the account where the communication relates to an unresolved dispute.
• Marketing consent records — retained until consent is withdrawn, plus one (1) year thereafter as an audit record.
• Technical and usage data — retained in aggregated, anonymized form for platform analytics purposes; individual-level records retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data deletion is requested by a Member (see Section 10 — Your Rights), ovo33 will complete deletion within thirty (30) days, except where retention is required by a legal obligation that overrides the deletion request.

ovo33 implements industry-standard technical and organizational security measures to protect Member personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport encryption: All data transmitted between the Member's browser or mobile device and the ovo33 platform is encrypted using 256-bit TLS/SSL. ovo33.club enforces HTTPS across all pages and subdomains.
• Data storage security: Personal and financial data is stored on secured, access-controlled servers. Database access is restricted to authorized personnel only, using role-based access controls and multi-factor authentication.
• Password security: Member passwords are stored using one-way cryptographic hashing with salting. ovo33 does not store plaintext passwords and cannot recover a lost password — only reset it through a verified process.
• Two-factor authentication (2FA): ovo33 supports 2FA for Member account access. Enabling 2FA is strongly recommended and available in account security settings.
• Fraud monitoring: Automated systems monitor account activity in real time for patterns indicative of unauthorized access, account takeover, or financial fraud. Suspicious activity triggers an immediate account hold pending investigation.
• Staff access controls: ovo33 staff access to Member data is limited to what is necessary for their specific role. Access logs are maintained and reviewed regularly. Staff are bound by confidentiality obligations.

ovo33.club uses cookies and similar tracking technologies to operate core platform features, analyze usage patterns, and improve the Member experience. The following cookie categories are used:

ovo33 does not use third-party advertising cookies or cross-site tracking cookies. No Member browsing data from ovo33.club is shared with advertising networks or data brokers.

Most browsers allow you to manage cookie preferences through browser settings. Disabling strictly necessary cookies will impair or prevent access to the ovo33 platform. Disabling optional cookies will not affect your ability to use core platform features.

The ovo33 platform is strictly for adults aged 21 and above. ovo33 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during both the registration process and the KYC stage.

If ovo33 becomes aware that personal data has been collected from an individual under the age of 21 — whether through an inaccurate declaration at registration or through information revealed during KYC — the account will be immediately suspended, all data collected will be securely deleted (except where retention is required for fraud and legal reporting purposes), and any deposited funds will be returned to the source payment method following an investigation.

If you have reason to believe that a minor is using the ovo33 platform, please contact ovo33 customer support immediately at [email protected].

As an ovo33 Member, you hold the following rights over your personal data. Requests to exercise any of these rights should be submitted to [email protected]. ovo33 will respond within thirty (30) days of receiving a valid, verified request.

• Right to Access: You may request a copy of the personal data ovo33 holds about you, the purposes for which it is being processed, and the recipients to whom it has been disclosed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by ovo33. For standard contact details (email address, mobile number), updates can be made directly in account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to ovo33's legal retention obligations — deletion requests will be processed to the maximum extent permitted by law.
• Right to Restriction of Processing: You may request that ovo33 temporarily restricts the processing of your personal data — for example, while the accuracy of data is being contested, or while a complaint is under review.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where ovo33 relies on legitimate interests as the legal basis. ovo33 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

The ovo33 platform integrates with third-party services including Game Providers (Pragmatic Play, Evolution Gaming, PG Soft, Habanero, Microgaming, Spribe, NetEnt, and others), payment processors (Indonesian bank transfer networks and e-wallet platforms), and technical infrastructure providers. These third parties operate under their own privacy policies and terms.

ovo33 conducts due diligence on all third-party service providers prior to integration, reviewing their data protection practices, security certifications, and privacy commitments. All providers are contractually required to process personal data only for the specific purpose of delivering the service to ovo33 and to implement appropriate technical and organizational security measures.

The ovo33 Privacy Policy does not extend to third-party websites linked from the Platform, or to the websites of Game Providers. If you follow a link to a third-party site, you are subject to that site's own privacy policy.

ovo33 is an internationally operated platform. Personal data collected from Indonesian Members may be processed on servers located outside of Indonesia. Where data is transferred internationally, ovo33 ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to the protections described in this Privacy Policy.

These safeguards include contractual data transfer agreements with service providers incorporating internationally recognized standard contractual clauses, and assessments of the recipient country's data protection environment. ovo33 does not transfer personal data to jurisdictions that ovo33 has assessed as providing an inadequate level of data protection without implementing specific mitigating safeguards.

ovo33 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, applicable legal requirements, or data processing practices. When material changes are made, ovo33 will provide notice to registered Members via email to the address on file, or through a prominent notification on the Platform, at least seven (7) days before the updated policy takes effect.

The effective date at the top of this page indicates when the current version of the Privacy Policy came into force. ovo33 recommends reviewing this page periodically to stay informed of how your data is handled. Continued use of the ovo33 Platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms.

The current Privacy Policy is always available at ovo33.club/privacy-policy. Previous versions are available on request by contacting [email protected].

For any questions, concerns, or complaints regarding this Privacy Policy or ovo33's data handling practices, please contact the ovo33 data team using the following channels:

• Email: [email protected] — for formal privacy requests, subject access requests, deletion requests, and written complaints. ovo33 aims to respond within thirty (30) days of receiving a valid, verified request.
• Live Chat: Available 24/7 via the platform. For general privacy queries, live chat offers the fastest response. Complex requests (subject access, erasure) will be directed to the email process for formal handling.

If you are not satisfied with ovo33's response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority in your jurisdiction, or to seek independent legal advice.