At oto88, your privacy is not a formality — it is a foundational commitment. This Privacy Policy explains exactly what personal data we collect from players across Indonesia, why we collect it, how we use and protect it, and what rights you hold over your own information. Please read this document in full before using our platform.
Last Updated: January 2026 | English (en-ID) | SSL EncryptedA summary of our core privacy commitments. The full detail is in the policy sections below.
Every data transmission between your device and oto88's servers is protected by industry-standard 256-bit TLS encryption. Your personal details, payment information, and account credentials are never transmitted in plain text — ever.
oto88 collects only the personal data that is strictly necessary to operate your account, process your transactions, and comply with international anti-money-laundering (AML) standards. We do not gather unnecessary data, and we do not sell your personal information to any third party.
Your personal data is never sold, rented, or traded to external marketers, data brokers, or advertising platforms. Data is shared with third parties only where operationally necessary — such as payment processors (BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay) and our licensed game providers — and always under strict confidentiality agreements.
Indonesian players holding an oto88 account have the right to access, correct, restrict, or request deletion of their personal data at any time, subject to our legal retention obligations. Submit a request via live chat or email and our team will respond within 5 business days.
oto88 uses cookies exclusively for essential platform functionality, session management, and aggregate analytics. We do not deploy third-party advertising cookies or tracking pixels. You can review and manage your cookie preferences through your browser settings at any time.
Personal data is retained only for as long as it is needed for operational, legal, or regulatory purposes. Account data is retained for a minimum of five years following account closure, in compliance with internationally recognised AML record-keeping standards. Upon expiry of the retention period, data is securely deleted or anonymised.
oto88 operates the online casino and sports betting platform accessible at https://oto88.lat (the "Platform"), serving players across Indonesia. We are committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us by every Member and visitor who interacts with our Platform.
This Privacy Policy sets out in clear, plain English how oto88 collects, processes, stores, shares, and protects personal data. It also explains the rights you hold over your personal information and how to exercise those rights. This policy should be read in conjunction with oto88's Terms & Conditions, which govern the overall use of the Platform.
oto88 processes personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality. We apply these principles consistently across all personal data we hold about Indonesian players, regardless of the channel through which it was collected — whether via the main website, mobile browser, live chat, or email correspondence.
Where this policy refers to "personal data", it means any information that identifies or could reasonably identify a living individual — including name, date of birth, Indonesian national identity card (KTP) number, mobile phone number, email address, bank account number, e-wallet identifier, IP address, and device identifiers.
oto88 collects personal data through several distinct channels. The categories of data collected and the circumstances under which they are gathered are described below.
2.1 Registration Data
When you create an oto88 account, you are required to provide the following information:
2.2 Identity Verification (KYC) Data
Before processing your first withdrawal, oto88 is required to verify your identity in accordance with international AML standards. KYC verification data includes:
2.3 Transaction Data
oto88 automatically records all financial transactions conducted on the Platform, including the amount, date, time (WIB), payment method, and reference number for every deposit, withdrawal, bonus claim, and bet settlement. This data is retained for AML compliance purposes.
2.4 Technical & Usage Data
When you access the oto88 Platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and in-game activity logs. This data is used exclusively for security monitoring, fraud prevention, platform optimisation, and aggregate analytics — it is not used to build individual marketing profiles.
2.5 Communication Data
When you contact oto88's support team via live chat or email, we retain a record of that communication — including the content of your messages — for quality assurance, training, and dispute resolution purposes. We do not record or retain telephone voice calls, as oto88 does not offer telephone support.
oto88 processes personal data only for specified, explicit, and legitimate purposes. We do not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected. The primary purposes for which oto88 processes personal data are as follows:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract — necessary to establish and maintain your Member account on the Platform. |
| Processing deposits and withdrawals | Performance of contract — necessary to credit and debit your account balance via BCA, BRI, BNI, Mandiri, DANA, OVO, GoPay, and other supported payment channels. |
| Identity verification (KYC) | Legal obligation — required under internationally recognised AML and responsible gaming standards before processing first withdrawals. |
| Fraud prevention and security monitoring | Legitimate interest — protecting the Platform and its Members from fraudulent activity, unauthorised access, and money laundering. |
| Responsible gaming compliance | Legal obligation and legitimate interest — monitoring play patterns to identify at-risk Members and enforcing self-exclusion and deposit limit requests. |
| Customer support and dispute resolution | Performance of contract and legitimate interest — resolving account queries, processing complaints, and settling bet disputes fairly. |
| Platform analytics and improvement | Legitimate interest — using aggregated, anonymised technical data to improve platform performance, fix bugs, and enhance the player experience. |
| Promotional communications | Consent — sending you information about oto88 promotions, bonuses, and seasonal offers relevant to the Indonesian market (e.g., Idul Fitri, Nyepi, Indonesian Independence Day promotions) only where you have opted in to receive such communications. |
oto88 does not use automated decision-making or algorithmic profiling to make decisions that produce significant legal effects concerning any individual Member, except where such processing is necessary for fraud detection — in which case a human review is always available upon request.
oto88 does not sell, rent, lease, or trade your personal data to any third party for commercial gain. Personal data is shared with third parties only in the following strictly defined circumstances:
oto88 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies allow the Platform to recognise your device on return visits and to maintain your logged-in session.
oto88 uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the Platform to function. Includes session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. Without these, the Platform cannot operate. | No |
| Functional | Remember your preferences such as preferred language, display settings, and last-visited game category. These improve your experience but are not essential to the Platform's operation. | Yes |
| Analytics | Collect aggregated, anonymised data about how visitors use the Platform — pages visited, session length, error rates. Used solely to improve Platform performance. Individual users are not identifiable from this data. | Yes |
oto88 does not use advertising cookies, retargeting pixels, or social media tracking cookies of any kind. You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your oto88 account.
oto88 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:
oto88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | For the duration of the active account, plus a minimum of 5 years following account closure. |
| KYC identity documents | 5 years from the date of verification or account closure, whichever is later, in line with AML record-keeping requirements. |
| Transaction records | 5 years from the date of each transaction, in compliance with financial record-keeping obligations. |
| Support communications | 2 years from the date of the final communication in each support thread. |
| Technical and usage logs | Up to 12 months for standard access logs; up to 5 years for security incident logs. |
| Marketing consent records | For the duration of active consent, plus 3 years following withdrawal of consent. |
Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and Platform improvement purposes.
As an oto88 Member, you hold the following rights with respect to your personal data. These rights apply to all Indonesian players using the Platform. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 12.
oto88 operates an adults-only platform. Access to and use of any service on the Platform is strictly restricted to individuals who are at least 21 years of age. oto88 does not knowingly collect, process, or retain personal data from individuals under the age of 21.
Age verification is conducted as part of the registration process. All new Members are required to declare that they are 21 years of age or older. Where oto88 has reasonable grounds to believe that a registered Member is under 21, the account will be immediately suspended pending age verification. If the Member is confirmed to be under 21, the account will be permanently closed and any balance forfeited.
If you are a parent or guardian and believe that a minor has registered an account on the oto88 Platform without your knowledge, please contact our support team immediately via live chat so that the account can be investigated and closed. We recommend the use of parental control software on shared or family devices to prevent minors from accessing online gambling platforms.
The oto88 Platform does not contain links to external third-party websites or services as a general matter of design policy. However, where any such link does appear — for example, in promotional content or game provider information panels — oto88 wishes to make clear that clicking on such a link will take you to a website outside oto88's control.
oto88 is not responsible for the privacy practices, data collection activities, or content of any third-party website. The privacy policies of those websites govern any data they collect from you. We strongly recommend that you review the privacy policy of any external website you visit before submitting personal information to it.
oto88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify active Members via their registered email address and display a prominent notice on the Platform for a minimum of 7 days prior to the updated policy taking effect. The "Last Updated" date at the top of this page will be revised to reflect the date on which the current version came into effect.
Your continued use of the oto88 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not accept the revised policy, you must discontinue use of the Platform and contact support to close your account before the effective date of the changes.
We encourage you to review this Privacy Policy periodically to stay informed about how oto88 is protecting the personal information we hold on your behalf.
If you have any questions, concerns, or requests relating to this Privacy Policy — including requests to exercise any of your data rights described in Section 8 — please contact oto88's support team through one of the following channels. Our Indonesian-speaking agents are available 24 hours a day, 7 days a week.
When submitting a data rights request by email, please include your registered username and the mobile phone number associated with your account so that our compliance team can verify your identity before processing the request. oto88 will not process data rights requests that cannot be matched to a verified account.
Now that you understand how oto88 safeguards your personal data, you can play with complete confidence. Explore our full range of casino games, live sportsbook, and premium slots — all secured by SSL encryption and provably fair technology. Adults only, 21+.