This Privacy Policy explains how obm88 collects, uses, stores, shares, and protects your personal data when you access and use our online betting platform. We are committed to handling your data responsibly and transparently, in line with internationally recognised data protection principles.
obm88 collects only the personal data that is strictly necessary to deliver our services, comply with licensing obligations, and prevent financial crime. We do not collect data we do not need.
All personal data stored by obm88 is encrypted using AES-256. All data transmitted between your device and our servers is protected by TLS 1.3 — the same standard used by global financial institutions.
You have the right to access, correct, export, and request deletion of your personal data at any time. obm88 responds to data rights requests within 30 days.
Your data is shared only with service providers directly necessary for platform operation — payment processors, KYC providers, and game studios — under strict confidentiality agreements. No data sales.
obm88 retains personal data only for as long as required by our licensing obligations, anti-money-laundering regulations, and legitimate business purposes. Standard retention is five years post-account closure.
You can opt out of marketing communications at any time via your account settings or by contacting support. Opting out does not affect transactional or service communications related to your account.
obm88 ("we", "us", "the Company") operates an international online betting platform accessible to users in Indonesia and other eligible jurisdictions. We recognise that your personal data belongs to you, and we take our obligation to handle it responsibly very seriously.
This Privacy Policy sets out what personal information obm88 collects about you, why we collect it, how we use it, with whom we share it, how we protect it, and what rights you have over it. This Policy forms part of our full legal framework alongside the Terms & Conditions.
obm88 primarily serves users resident in the Republic of Indonesia. We understand the specific privacy expectations of Indonesian users and have designed our data handling practices to reflect both international best practice and the local context. All financial transaction data — including bank transfer records involving BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — is processed and stored in accordance with the standards set out in this Policy.
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify you as an individual, including your name, email address, date of birth, IP address, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Data Controller" | obm88, the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of obm88 under a formal contractual arrangement (e.g., KYC verification providers, payment processors). |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "Cookie" | A small text file stored on your device by the Platform for the purposes of session management, analytics, or personalisation. |
| "KYC" | Know Your Customer — the identity and age verification process mandated by obm88's licensing conditions. |
obm88 collects the following categories of personal data:
3.1 Identity Data
3.2 Contact Data
3.3 Financial Data
3.4 Technical & Usage Data
3.5 Communications Data
obm88 collects personal data through the following means:
4.1 Directly from You when you: complete the account registration form; submit KYC verification documents; make a deposit or request a withdrawal; contact our support team via live chat, email, or in-platform messaging; respond to optional surveys or feedback requests.
4.2 Automatically when you access the Platform: session and usage data is collected via server logs and first-party cookies. Technical data including IP address and device information is captured automatically on each Platform visit.
4.3 From Third Parties including: KYC verification service providers who confirm identity document authenticity; payment processors who confirm transaction status; fraud prevention services that flag anomalous activity patterns; publicly available data sources used for AML screening (e.g., sanctions lists).
obm88 processes your personal data on the following legal grounds:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contract Performance | Account registration, processing deposits and withdrawals, settling bets, managing bonuses, and providing customer support — all necessary to deliver the obm88 service you have contracted for. |
| Legal Obligation | KYC and age verification, AML screening, transaction record-keeping, and responding to lawful requests from regulatory or law enforcement authorities. |
| Legitimate Interest | Fraud detection and prevention; platform security and abuse monitoring; improving Platform features based on anonymised usage analytics; responsible gaming monitoring. |
| Consent | Sending marketing communications (promotional emails, bonus offers). You may withdraw consent at any time via account settings or by contacting support. |
obm88 uses your personal data for the following purposes:
obm88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or where otherwise permitted by law.
7.1 Service Providers (Data Processors). obm88 shares your personal data with the following categories of third-party service providers strictly as necessary for Platform operation, and under binding data processing agreements:
7.2 Legal Disclosure. obm88 may disclose your personal data to law enforcement agencies, regulatory bodies, licensing authorities, or courts where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the rights of third parties, or comply with a valid legal process.
7.3 No Sale of Data. obm88 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Your data is your data.
8.1 What Are Cookies. Cookies are small text files stored on your device when you visit the obm88 Platform. They allow the Platform to recognise your browser across sessions, maintain your login state, remember your preferences, and analyse usage patterns.
8.2 Types of Cookies Used by obm88.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Session | Maintain your login session, remember your account state, and enable core Platform functionality. Cannot be disabled without breaking core features. | Session (expires on logout) |
| Security | CSRF protection tokens and fraud-detection signals. Required for account security. | Session |
| Preferences | Remember your interface settings, language preferences, and last-visited game lobby. | Up to 12 months |
| Analytics (first-party) | Anonymised usage data — pages visited, session duration, device type — used to improve the Platform. No personal identifiers included. | Up to 24 months |
| Marketing (consent-based) | Track promotional campaign effectiveness to optimise marketing spend. Only activated with your explicit consent. | Up to 12 months |
8.3 Managing Cookies. You can manage or disable non-essential cookies via your browser settings. Please note that disabling essential or security cookies may impair Platform functionality. Most modern mobile browsers on Android devices popular in Indonesia (Xiaomi, Samsung, OPPO) allow cookie management via Settings > Browser > Privacy.
obm88 is operated by an internationally licensed offshore company. As a result, your personal data may be transferred to, stored in, and processed in countries outside the Republic of Indonesia. These countries may not have data protection laws equivalent to those in Indonesia.
Where personal data is transferred internationally, obm88 takes appropriate safeguards to ensure that your data receives a level of protection consistent with the principles in this Policy. Such safeguards include:
By using the obm88 Platform and submitting your personal data, you acknowledge that your data may be transferred internationally under the safeguards described above.
obm88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our core security infrastructure includes:
In the event of a data security breach that poses a risk to your rights and freedoms, obm88 will notify affected users without undue delay via the email address registered to the affected account, and will take all reasonable steps to contain the breach and prevent recurrence.
obm88 retains your personal data only for as long as is necessary for the purposes set out in this Policy, including for compliance with legal obligations and the resolution of disputes. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | Licensing and AML regulatory requirement |
| Financial transaction records | 5 years after account closure | AML and financial crime prevention obligations |
| Betting and game history | 3 years after account closure | Dispute resolution and regulatory audit rights |
| Account registration data | 5 years after account closure | Regulatory obligation |
| Support communications | 3 years after last interaction | Dispute resolution and quality assurance |
| Marketing consent records | Duration of consent + 1 year | Proof of consent for compliance purposes |
| Analytics / usage logs | 24 months | Platform improvement (anonymised after 3 months) |
After applicable retention periods expire, personal data is securely deleted or anonymised in a manner that prevents re-identification.
obm88 respects your rights over your personal data. You may exercise the following rights by contacting us at the details provided in Section 16:
You may request a copy of all personal data obm88 holds about you. We will provide this within 30 days of a verified request in a commonly used electronic format.
If any personal data held by obm88 is inaccurate or incomplete, you have the right to request correction. You may update most contact details directly in your account settings.
You may request deletion of your personal data. Note that certain data must be retained to fulfil legal obligations (e.g., AML record-keeping). We will inform you of any data we are legally required to retain.
You may request that we restrict processing of your data in certain circumstances — for example, while a data accuracy dispute is being investigated.
Where processing is based on your consent or a contract with you, you may request your personal data in a structured, machine-readable format for transfer to another service provider.
You may object to processing based on legitimate interests (including profiling for fraud detection) or to processing for direct marketing purposes. Marketing opt-outs take effect immediately.
All data rights requests will be acknowledged within 5 business days and responded to within 30 calendar days. We may request proof of identity before processing a rights request to protect against unauthorised access to your data.
The obm88 Platform is strictly intended for adults aged 21 years and above. obm88 does not knowingly collect, store, or process personal data relating to any person under the age of 21.
As part of our KYC process, all registered users are required to provide proof of age and identity before full account features are unlocked. Any account found upon investigation to belong to a person under 21 will be immediately closed, and any funds held will be returned to the source payment method.
If you believe that a minor has registered an account on the obm88 Platform, please contact us immediately at the details provided in Section 16. We will investigate and take appropriate action without delay.
The obm88 Platform may, from time to time, contain references or contextual links to third-party resources or partner game studio documentation. obm88 has no control over the privacy practices of third-party websites and is not responsible for their content or data handling policies. This Privacy Policy applies solely to data collected by obm88 through the Platform.
We recommend reviewing the privacy policy of any third-party service before providing them with your personal data.
obm88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality. The "Last Updated" date at the top of this page will be revised accordingly.
Where changes are material — such as changes to data sharing practices, new categories of data collected, or changes to your rights — we will notify registered users via email to the address registered on their account at least 14 days before the revised Policy takes effect.
Your continued use of the Platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should close your account and request deletion of your personal data before the effective date.
For all privacy-related enquiries, data rights requests, or to report a suspected data security incident, please contact obm88 through the following channels:
obm88 aims to resolve all privacy queries and data rights requests in a fair, timely, and transparent manner. If you feel your request has not been addressed satisfactorily, you may have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction of residence.
Document version: 1 January 2026. This Policy supersedes all previous versions of the obm88 Privacy Policy. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy.
Visit our FAQ for answers to common account and security questions, review the full Terms & Conditions, or return to the homepage. 21+ only — please play responsibly.