Privacy Policy
ola62 Data Commitment

This Privacy Policy applies to all personal data collected, processed, and stored by ola62 in connection with your use of the ola62 platform, accessible at https://ola62.ws, including all sub-pages, mobile-optimised views, and any associated services made available to registered players in Indonesia.

ola62 operates as an internationally licensed online gaming platform. When we refer to "ola62", "we", "us", or "our" throughout this document, we mean the operating entity responsible for the ola62 platform and all associated services. When we refer to "you", "your", or "Player", we mean any individual who accesses, browses, registers on, or otherwise interacts with the ola62 platform.

This policy covers data collected through all touchpoints including account registration, identity verification (KYC), deposit and withdrawal transactions processed via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, gameplay activity, customer support interactions, and passive data gathered through cookies and technical logs.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy. In the event of any conflict between this Privacy Policy and a separate agreement entered into between ola62 and a Player, the terms of that separate agreement shall prevail to the extent of the inconsistency.

For the purpose of this Privacy Policy, the following terms carry the meanings assigned to them below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, residential address, email address, mobile number, payment account details, device identifiers, and IP addresses.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — ola62, as the entity that determines the purposes and means of processing Personal Data submitted by Players.
• "Data Processor" — any third party engaged by ola62 to process Personal Data on ola62's behalf and under ola62's documented instructions, including payment service providers, KYC verification vendors, and cloud infrastructure providers.
• "KYC" — Know Your Customer; the identity and address verification process required by ola62 prior to the processing of withdrawal requests and certain other account functions.
• "Cookies" — small text files placed on your device by the ola62 platform for the purposes of session management, preference storage, and analytics.
• "Account" — a registered player account on the ola62 platform, governed by the ola62 Terms & Conditions.
• "Sensitive Data" — a subcategory of Personal Data requiring heightened protection, including government-issued identification numbers and financial account details.

ola62 collects only the minimum Personal Data necessary to deliver our services safely, compliantly, and effectively. The categories of data we collect are set out in the table below:

ola62 does not collect, store, or process payment card numbers directly. All card-based transactions, where applicable, are routed through PCI-DSS compliant third-party payment processors. ola62 retains only transaction reference identifiers and confirmation statuses.

ola62 gathers Personal Data through the following distinct channels:

1. Directly from you: When you complete the ola62 registration form, submit KYC documents, initiate a deposit or withdrawal, contact the support team via live chat or email, or update your account preferences.
2. Automatically: Technical data such as IP addresses, session timestamps, device fingerprints, and browsing behaviour on the ola62 platform are collected automatically through server logs and cookies when you access the site.
3. From third-party payment providers: When you transact via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, or LinkAja, the relevant payment provider may share transaction confirmation data, account holder name, and account number with ola62 for the purpose of verifying the transaction and completing KYC checks.
4. From KYC and identity verification vendors: ola62 may engage regulated third-party KYC service providers to cross-reference submitted identity documents against authoritative data sources. These providers return a verification result and, where applicable, a confidence score; they do not transmit raw document copies to ola62's production systems beyond what ola62 has already received directly from you.
5. From fraud and risk management services: ola62 may receive risk signals and device reputation data from third-party anti-fraud service providers for the purpose of protecting the platform and its players from fraudulent account activity, bonus abuse, and money laundering.

ola62 processes your Personal Data only for the purposes set out below. We do not use your data for purposes that are incompatible with those originally disclosed at the point of collection:

• Account administration: Creating and maintaining your ola62 Account, authenticating your identity at login, and managing your account settings and preferences.
• KYC and age verification: Verifying that you are at least 21 years of age and a resident of Indonesia, in compliance with our eligibility requirements and responsible gaming commitments.
• Payment processing: Facilitating IDR deposits and withdrawals via your nominated local bank account or e-wallet, reconciling transactions, and investigating failed or disputed payments.
• Game delivery and integrity: Providing access to slots, live casino, sportsbook, and all other gaming products on the ola62 platform, and maintaining the fairness and integrity of all gaming outcomes.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, enforcing deposit limits and self-exclusion requests, and fulfilling our duty of care to players.
• Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, money laundering, collusion, and other prohibited activities as defined in the ola62 Terms & Conditions.
• Customer support: Responding to account enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance purposes.
• Legal and regulatory compliance: Meeting applicable record-keeping obligations, responding to lawful requests from regulatory authorities or law enforcement agencies, and exercising or defending legal claims.
• Marketing communications (opt-in only): Sending promotional offers, seasonal bonus notifications (including Idul Fitri, Ramadhan, and major sporting events such as BRI Liga 1 and the AFF Cup), and platform update notifications to Players who have explicitly opted in to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game selection.

ola62 processes Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between ola62 and the Player — specifically, account registration, identity verification, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil the services you have requested.
• Legitimate interests: Processing for fraud prevention, platform security, anti-money laundering screening, and internal analytics is carried out on the basis of ola62's legitimate interest in operating a secure, fair, and commercially viable platform, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, respond to regulatory enquiries, or fulfill mandatory record-keeping requirements is carried out on the basis of legal obligation.
• Consent: Processing for optional marketing communications is carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time by updating your communication preferences within your ola62 account settings or by contacting support via live chat.

ola62 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We share data only in the circumstances described below, and only to the extent strictly necessary:

• Payment service providers: BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the minimum data necessary to process your deposit or withdrawal transactions in IDR. These providers operate under their own data protection policies and applicable Indonesian financial regulations.
• KYC and identity verification vendors: Regulated third-party verification services receive identity document data and biographical details for the purpose of completing our mandatory KYC process. All such vendors are contractually bound to process data only for the purposes instructed by ola62 and to maintain appropriate technical and organisational security measures.
• Game studios and content providers: Studios such as Pragmatic Play, Pocket Games Soft, NetEnt, Microgaming, Spribe, and Evolution Gaming may receive anonymised session identifiers and gameplay parameters necessary to deliver their game products. These studios do not receive your full identity profile or financial details.
• Cloud infrastructure and hosting providers: ola62's platform is hosted on enterprise-grade cloud infrastructure. Our hosting providers act as data processors and are bound by strict data processing agreements that prohibit any independent use of the data they process on our behalf.
• Fraud prevention and risk services: Third-party anti-fraud service providers may receive device fingerprints, IP addresses, and behavioural signals to assist in identifying suspicious account activity. These providers do not receive your full identity or financial data.
• Regulatory authorities and law enforcement: ola62 will disclose Personal Data to regulatory bodies, financial intelligence units, or law enforcement agencies where required by applicable law, a court order, or a legitimate legal process. Where permitted, ola62 will notify affected Players of such disclosures.
• Professional advisers: ola62 may share Personal Data with legal counsel, auditors, and compliance consultants under strict confidentiality obligations where necessary in connection with legal proceedings, regulatory audits, or corporate transactions.

ola62 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulatory obligation, whichever is longer. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with ola62's internal data lifecycle management procedures. Where data cannot be immediately deleted due to technical constraints, it will be restricted from active processing until deletion is completed.

ola62 applies a layered approach to data security, implementing both technical and organisational controls designed to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the ola62 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection is encrypted at all times during your session.
• Password hashing: Account passwords are never stored in plain text. ola62 uses a robust, industry-standard cryptographic hashing algorithm with salting to store password credentials securely. ola62 personnel cannot retrieve or view your password.
• KYC document encryption: Identity documents submitted for KYC verification are stored in an encrypted, access-controlled environment. Access is restricted to authorised compliance personnel on a strict need-to-know basis and is subject to full audit logging.
• Multi-factor authentication (MFA): ola62 supports MFA for account login as an optional additional security layer. Players are strongly encouraged to enable MFA from within their account security settings.
• Access controls: Internal access to production systems and databases is governed by role-based access controls (RBAC). Personnel are granted access only to the data necessary to perform their specific functions. All access events are logged and periodically reviewed.
• Security monitoring: ola62 operates continuous automated monitoring of its platform infrastructure to detect anomalous activity, intrusion attempts, and unusual data access patterns. Alerts trigger a defined incident response process.
• Third-party security audits: ola62 engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform.

The ola62 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as secure login session management, shopping cart functionality, and access to restricted areas of the platform. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences, such as your display language, preferred payment method, and responsible gaming settings, so you do not need to re-enter them on each visit.
• Analytics cookies: ola62 uses anonymised analytics tools to understand how players navigate the platform, which game categories are most popular, and where technical issues occur. This data is aggregated and does not identify individual Players.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including bot traffic, credential stuffing attempts, and suspicious login patterns. They are integral to ola62's platform security infrastructure.

ola62 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of building advertising profiles or serving targeted advertising on external platforms. Your browsing activity on ola62 is not shared with external advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using core platform features. For a full list of cookies in use, please contact ola62 support via live chat.

As an ola62 Player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team via live chat or at [email protected] (displayed as plain text — not a clickable link). ola62 will respond to all data rights requests within 30 days of receipt.

ola62 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply. ola62 reserves the right to verify your identity before actioning any data rights request to protect against unauthorised third-party requests.

If ola62 becomes aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. Any funds held in an Account found to have been registered by an underage individual will be returned to the source payment method to the extent technically possible, and the matter will be escalated to ola62's compliance team.

If you are a parent or guardian and believe that your child has registered an Account on ola62, please contact our support team immediately via live chat. ola62 takes underage gambling extremely seriously and will act without delay on credible reports. We encourage parents and guardians to use parental control software to restrict access to online gaming platforms on shared or family devices.

As an internationally operating gaming platform, ola62 may transfer your Personal Data to, and process it in, countries outside Indonesia where our cloud infrastructure, KYC vendors, or game studio partners are located. Such transfers may be to countries that have different data protection standards from those applicable in Indonesia.

Where ola62 transfers Personal Data internationally, it does so on the basis of one or more of the following safeguards:

• Data processing agreements incorporating standard contractual clauses that require the recipient to provide data protection standards equivalent to those applied by ola62;
• Transfers to recipients in countries recognised as providing an adequate level of data protection by the relevant international data protection standard;
• Where neither of the above is available, transfers based on your explicit consent or where the transfer is necessary for the performance of the contract between you and ola62 (e.g., processing a withdrawal via an e-wallet provider whose infrastructure is hosted internationally).

For further information about the specific safeguards in place for any international transfer of your Personal Data, please contact ola62 support via live chat.

ola62 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The effective date at the top of this page will be updated whenever a material revision is made.

Where changes are material — meaning they affect how your Personal Data is collected, used, or shared in a way that is less favourable to you — ola62 will provide advance notice by publishing the updated policy on this page and, where practicable, by sending a notification to your registered email address or via a platform notification at your next login.

Your continued use of the ola62 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept any revision to this policy, you must discontinue use of the platform and contact support to arrange the closure of your Account and withdrawal of any available funds.

ola62 recommends that you review this page periodically. Previous versions of this Privacy Policy may be requested from the support team for reference purposes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ola62 handles your Personal Data, please reach out through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the ola62 platform. Our Indonesian-speaking support agents are on hand to assist players from Jakarta, Surabaya, Bandung, Medan, Semarang, Bali, Makassar, and throughout Indonesia. Average first-response time is under 2 minutes.
• Email: [email protected] — This address is displayed as plain text and is not a clickable link. Responses to written privacy enquiries are typically provided within 24–48 hours (WIB).

When submitting a data rights request or a privacy-related complaint, please include your ola62 Account username, a clear description of your request or concern, and any relevant reference numbers. This will allow our compliance team to handle your request promptly and efficiently.