Privacy Policy

1. Introduction and Scope

oxl800 ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information about you when you access or use our website at https://oxl800.cam, our mobile-optimized platform, and any related services (collectively, the "Services").

This Privacy Policy applies to all users of oxl800, including visitors who browse without registering, registered players who maintain active accounts, and former players whose accounts have been closed. By accessing or using oxl800 Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any provision of this Privacy Policy, you must immediately cease using oxl800 Services.

oxl800 operates as an online gaming platform targeting players in Indonesia. We comply with applicable data protection laws and regulations, including international standards for personal data processing. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your overall use of oxl800 Services.

2. Information We Collect

2.1 Information You Provide Directly

When you register for an oxl800 account, we collect the following personal information that you provide directly:

• Identity Information: Full legal name as it appears on your Indonesian identity card (KTP), date of birth, gender, nationality, and KTP number for identity verification purposes.
• Contact Information: Email address, mobile phone number, residential address in Indonesia (street, city, postal code, province).
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery.
• Financial Information: Bank account details (bank name, account number, account holder name) and e-wallet information (OVO, DANA, GoPay account identifiers) for deposits and withdrawals.
• Verification Documents: Copies of government-issued identification documents (KTP front and back), selfie photographs with identification for KYC compliance, proof of address documents (utility bills, bank statements).
• Communication Content: Messages sent to our customer support team via live chat, email, WhatsApp, or other communication channels, including any attachments or information you provide in support requests.

2.2 Information Collected Automatically

When you access oxl800 Services, we automatically collect certain technical and usage information through cookies and similar tracking technologies:

• Device Information: Device type (mobile phone, tablet, desktop computer), operating system and version, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID).
• Connection Information: IP address, internet service provider, connection type (Wi-Fi, mobile data), geographic location derived from IP address (city, region).
• Usage Data: Pages visited, time spent on each page, clickstream data, referring/exit pages, date and time stamps, search queries within the oxl800 platform.
• Gameplay Information: Games played, bet amounts, win/loss records, betting patterns, game preferences, session duration, bonus usage history.
• Transaction History: Deposit and withdrawal amounts, payment method used, transaction timestamps, transaction reference numbers, account balance changes.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Verification of successful deposits and withdrawals, fraud detection alerts, chargeback notifications from banks (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Results of identity checks, age verification confirmations, sanctions screening, politically exposed persons (PEP) checks, adverse media screening.
• Game Providers: Game play data, RTP (Return to Player) information, technical error logs from third-party game providers like Pragmatic Play, Evolution Gaming, Microgaming, and NetEnt.
• Fraud Prevention Services: Risk scores, device fingerprinting data, fraud alerts, IP reputation information from specialized security vendors.

3. How We Use Your Information

oxl800 uses the personal information we collect for the following legitimate business purposes:

3.1 Account Management and Service Delivery

• Create and maintain your oxl800 account
• Verify your identity and age (21+ requirement) through KYC procedures
• Process deposits and withdrawals to/from Indonesian banks and e-wallets
• Provide access to sports betting, casino games, togel lottery, and other gaming products
• Track your gameplay history, betting records, and transaction history
• Award bonuses, promotions, free spins, and loyalty rewards
• Respond to customer support inquiries via live chat, email, WhatsApp, or phone
• Send important account notifications regarding deposits, withdrawals, security alerts, and policy changes

3.2 Legal and Regulatory Compliance

• Comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
• Verify source of funds for large deposits or suspicious transaction patterns
• Prevent underage gambling by verifying age through KTP validation
• Detect and prevent fraud, collusion, bonus abuse, and other prohibited activities
• Maintain records required by applicable gaming regulations and licensing authorities
• Respond to legal requests from government authorities, including court orders and subpoenas
• Enforce our Terms and Conditions and investigate violations

3.3 Platform Security and Improvement

• Monitor for suspicious activity, hacking attempts, and unauthorized access
• Analyze usage patterns to identify and fix technical issues
• Improve platform performance, user interface design, and mobile optimization
• Develop new features and gaming products based on user preferences
• Conduct data analytics to understand player behavior and betting trends
• Test new games, payment methods, and promotional offers through A/B testing

3.4 Marketing and Communications

• Send promotional emails about new games, exclusive bonuses, and special events (you can opt out at any time)
• Display personalized game recommendations based on your gameplay history
• Notify you about upcoming tournaments, jackpot opportunities, and limited-time offers
• Send targeted marketing messages via SMS, WhatsApp, or in-platform notifications (with your consent)
• Invite you to participate in player surveys and feedback requests

3.5 Responsible Gaming and Player Protection

• Monitor gameplay patterns to identify signs of problem gambling behavior
• Enforce deposit limits, betting limits, and self-exclusion settings you have configured
• Send reality check notifications and session time reminders
• Provide access to responsible gaming tools and support resources
• Implement cooling-off periods and account closures upon request

4. How We Share Your Information

oxl800 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients for legitimate business purposes:

4.1 Service Providers and Business Partners

• Payment Processors: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) to process deposits and withdrawals.
• Game Providers: Third-party game developers and suppliers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Playtech, Pocket Games Soft, Spribe) who power our casino games, live dealer tables, and slots.
• Identity Verification Services: KYC/AML service providers who verify identity documents, perform age checks, and screen against sanctions lists.
• Customer Support Tools: Live chat software, ticketing systems, and communication platforms used to provide customer service.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers where our servers and databases are hosted.
• Analytics and Tracking Services: Website analytics tools that help us understand user behavior and improve platform performance.
• Fraud Prevention Services: Security vendors who provide device fingerprinting, IP reputation checking, and fraud detection algorithms.

All service providers are contractually obligated to handle your data securely, use it only for specified purposes, and comply with applicable data protection laws.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulators, law enforcement agencies, or courts when required by law or in response to valid legal processes, including:

• Court orders, subpoenas, or search warrants
• Investigations by gaming regulatory authorities or financial crime units
• Requests from Indonesian tax authorities for financial reporting
• Suspicious activity reports (SARs) filed with financial intelligence units
• Legal proceedings where oxl800 is a party or witness

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy involving oxl800, your personal information may be transferred to the acquiring entity or successor company. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

5. Data Retention

oxl800 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Data Category	Retention Period	Legal Basis
Account registration information	Duration of account + 7 years after closure	AML/CTF compliance, tax reporting
KYC verification documents	Duration of account + 7 years after closure	Regulatory requirements, fraud prevention
Transaction history (deposits/withdrawals)	Duration of account + 10 years after closure	Financial recordkeeping, tax compliance
Gameplay and betting history	Duration of account + 5 years after closure	Dispute resolution, regulatory audits
Customer support communications	Duration of account + 3 years after closure	Quality assurance, legal defense
Marketing consent records	Until consent is withdrawn + 1 year	Demonstrating compliance with consent requirements
Website usage logs and cookies	12-24 months from collection	Security monitoring, platform improvement

When personal information is no longer required, we securely delete or anonymize it in accordance with industry best practices. Anonymized data (data that can no longer identify you) may be retained indefinitely for statistical analysis and research purposes.

6. Data Security Measures

oxl800 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

6.1 Technical Security Controls

• Encryption: All data transmitted between your device and oxl800 servers is encrypted using 256-bit SSL/TLS protocols. Passwords are hashed using industry-standard algorithms (bcrypt) and never stored in plain text.
• Firewall Protection: Multi-layer firewall systems prevent unauthorized network access to our servers and databases.
• Intrusion Detection: 24/7 monitoring systems detect and respond to suspicious activity, hacking attempts, and security threats in real-time.
• Access Controls: Role-based access control (RBAC) ensures that only authorized oxl800 employees can access personal data, and only to the extent necessary for their job functions.
• Two-Factor Authentication: Optional 2FA adds an extra layer of security to your account login process.
• Regular Security Audits: Third-party security firms conduct penetration testing and vulnerability assessments to identify and remediate potential weaknesses.

6.2 Organizational Security Measures

• Employee Training: All oxl800 staff receive mandatory data protection and security awareness training.
• Confidentiality Agreements: Employees and contractors sign non-disclosure agreements (NDAs) restricting use and disclosure of customer information.
• Background Checks: Employees with access to sensitive data undergo background verification.
• Incident Response Plan: Documented procedures for responding to data breaches, including notification to affected users and regulatory authorities as required by law.
• Data Minimization: We collect only the minimum personal information necessary to provide oxl800 Services and comply with legal obligations.

While oxl800 employs industry-leading security measures, no system is 100% secure. You acknowledge that you provide information to oxl800 at your own risk. We cannot guarantee absolute security against all threats, including sophisticated cyberattacks, insider threats, or security vulnerabilities in third-party systems beyond our control.

7. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request a copy of the personal information oxl800 holds about you. To exercise this right, contact our customer support team with your request. We will provide the information in a structured, commonly used, and machine-readable format within 30 days of your verified request.

7.2 Right to Rectification

If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account information directly through your oxl800 account settings. For changes to verified information (name, date of birth), contact customer support with supporting documentation.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may retain certain information where required by law (e.g., financial records for tax compliance, transaction history for AML purposes) or for legitimate business interests (e.g., fraud prevention, dispute resolution).

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain situations, such as while we verify the accuracy of disputed data or assess whether we have legitimate grounds to continue processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another service provider where technically feasible.

7.6 Right to Object

You can object to processing of your personal information for direct marketing purposes at any time by clicking "unsubscribe" in promotional emails or contacting customer support. You may also object to processing based on legitimate interests by providing reasons specific to your situation.

7.7 Right to Withdraw Consent

Where we rely on your consent to process personal information (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact oxl800 customer support at [email protected] with your account details and specific request. We will verify your identity and respond within 30 days.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit oxl800. They help us recognize your browser, remember your preferences, and provide a personalized experience. We use the following types of cookies:

• Essential Cookies: Necessary for the platform to function properly (e.g., maintaining your login session, remembering your language preference).
• Performance Cookies: Collect anonymous information about how you use oxl800 (pages visited, time spent, errors encountered) to help us improve platform performance.
• Functionality Cookies: Remember your choices (e.g., username, odds format, favorite games) to provide enhanced features and personalization.
• Targeting/Advertising Cookies: Track your browsing activity to deliver relevant promotional content and measure effectiveness of marketing campaigns.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain cookies, or receive notifications when cookies are set. However, disabling essential cookies may prevent you from using certain features of oxl800. For detailed instructions on managing cookies, consult your browser's help documentation.

9. Children's Privacy

oxl800 Services are intended exclusively for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. If we become aware that we have inadvertently collected information from a person under 21, we will take immediate steps to delete that information and terminate the associated account. Parents or guardians who believe their child has provided personal information to oxl800 should contact us immediately at [email protected].

10. International Data Transfers

oxl800 primarily serves players located in Indonesia. However, some of our service providers and data processing facilities may be located outside Indonesia. When we transfer your personal information to other countries, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers
• Your explicit consent where required

11. Changes to This Privacy Policy

oxl800 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website, email notification, or in-account messaging at least 30 days before the changes take effect. Your continued use of oxl800 Services after such notification constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or oxl800's data processing practices, please contact us through the following channels:

• Email: [email protected] (response within 24-48 hours)
• Live Chat: Available 24/7 through the oxl800 website
• Website: https://oxl800.cam

We take all privacy inquiries seriously and will investigate and respond to your concerns in a timely manner. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.