okey Casino & Sportsbook Data Care

This page describes what we collect when you use okey and how we keep that data protected. We at okey treat your privacy seriously. When you sign up, deposit via DANA, e-wallet, mobile banking, or local payment, or place bets on Liga 1 matches and live casino games, we collect certain information. This policy explains exactly what we collect, why, and who has access.

We do not sell your data to third parties. We do not share your payment details with advertisers. We use encryption and secure servers to protect everything you tell us. If you have questions about how we handle your information—or if you want to request a copy of your data or ask us to delete it—contact our support team.

What data we collect on okey

We at okey collect different types of information depending on what you do on our platform. When you create an account, we ask for your name, email, phone number, date of birth, and residential address. These are mandatory for account setup and identity verification (KYC). We also ask for a government ID (KTP, passport, or driver's licence) and proof of address (utility bill or bank statement) before you can deposit or withdraw. You also provide a selfie for facial verification—this helps us confirm you are who you say you are.

When you deposit or withdraw money on okey, we collect payment information. However, we do not store your full payment details (card numbers, bank credentials) on our servers. Payment processing is handled by licensed third-party providers (payment gateways). We only record transaction references—enough to track your deposit and withdrawal history without storing sensitive payment data directly.

When you use okey, we also collect behavioural data: your login times, games you play, bets you place, and your account balance. This data helps us detect fraud, improve our platform, and personalise your experience. We track which device you use (mobile or desktop), your Internet Service Provider (ISP), and approximate location based on IP address. We do not track your location using GPS or phone signals.

Data we collect without you entering it

• Cookies: We use cookies to remember your login preferences and improve your browsing experience on okey. These are small text files stored on your device. You can disable cookies in your browser settings, though some okey features may work less smoothly.
• Log data: Our servers automatically log your IP address, browser type, pages visited, and time spent on each page. This helps us diagnose technical problems and understand how okey is used.
• Device information: We record details about your device—operating system, screen size, app version—so we can optimise the okey experience across Android, iOS, and desktop browsers.

How we use your data

We at okey use your data for four main purposes: compliance, security, operations, and improvement. For compliance, we use your identity documents to verify you are who you say you are and to comply with anti-money-laundering (AML) regulations. These checks are mandatory in every jurisdiction where okey operates, including Indonesia and our service regions covering Jakarta, Surabaya, Bandung, Medan, and Semarang.

For security, we analyse your account activity to detect fraud—unusual login patterns, rapid withdrawal requests, or suspicious betting behaviour. If we flag something, we may ask you to verify your identity again. We also use your data to investigate disputes: if you claim a bet settled incorrectly or a deposit didn't arrive, we review your transaction history to resolve it fairly.

For operations, we use your data to process deposits and withdrawals, send account notifications (welcome emails, password reset confirmations), and provide customer support. If you contact us via live chat or email, we keep records of your conversation. For improvement, we analyse aggregate (anonymised) data to see which games are popular, which payment methods users prefer, and where the okey platform needs technical fixes.

Who has access to your data on okey

We at okey limit access to your data to employees who need it to do their jobs. Our compliance team reviews identity documents for KYC verification. Our payments team handles withdrawal requests and liaises with payment providers (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and banks like mobile banking, local payment, online payment, e-wallet). Our customer support team can see your account history when you contact them. Our security team monitors for fraud and unusual activity.

We do not share your personal data with third parties except where required by law or necessary to provide our service. For example, we share your name and address with payment processors so they can complete your withdrawal. We do not share data with advertisers, data brokers, or other gaming platforms. If we are legally required to disclose your data (e.g., by court order in your jurisdiction), we will notify you unless the law forbids us to do so.

Our servers may be located outside Indonesia. When your data leaves your country, it is encrypted in transit. We have contracts with our service providers (hosting companies, payment processors, analytics tools) requiring them to protect your data with the same care we do.

Your rights regarding data on okey

We at okey respect your rights over your data. You have the right to request a copy of all personal information we hold about you. Contact our support team with "Data Subject Access Request" in the subject line, and we will send you a copy of your data within 30 days. You also have the right to correct inaccurate data—if your address or phone number changes, update it in your Account > Profile section.

You have the right to request deletion of your data, though we may retain some information if required by law (e.g., anti-money-laundering regulations require us to keep records for several years). You have the right to object to certain uses of your data, such as marketing emails or fraud analysis. If you object, we will stop using your data for that purpose where legally possible.

If you believe we have mishandled your data, you have the right to lodge a complaint with your local data protection authority. In Indonesia, this would be your provincial data commissioner's office. We cooperate fully with any official investigation.

Data retention on okey

We at okey keep your personal data only as long as necessary. If your account is inactive for two years, we may delete your profile data, though we retain transaction records for regulatory compliance. Identity documents (KYC files) are kept for at least five years after your account is closed, as required by anti-money-laundering rules. Betting and transaction records are retained for seven years for audit purposes.

You can request account deletion at any time. Contact our support team. We will delete your profile, though we cannot delete historical transactions (these are kept for compliance). Once deleted, you cannot recover your account or any bonuses associated with it.

Security measures protecting your data

We at okey use industry-standard encryption (TLS/SSL) to protect data in transit. All connections between your device and our servers are encrypted, so even if someone intercepts your Internet traffic, they cannot read your login credentials or payment information. Our servers use AES-256 encryption to protect data at rest.

We restrict employee access to sensitive data through multi-factor authentication and role-based access controls. Our network is protected by firewalls and intrusion detection systems. We conduct regular security audits and penetration testing to find and fix vulnerabilities before attackers can exploit them. We do not store your password; instead, we store a one-way hash of it, so even our team cannot see your actual password.

We strongly recommend you enable two-factor authentication (2FA) on your okey account. This adds a second login layer—a code sent to your phone—making your account much harder to compromise even if someone guesses your password.

Contact us about privacy

If you have questions about this privacy policy, want to exercise your data rights, or suspect a data breach, contact our support team. You can reach us via live chat (business hours) or email (response usually within 24 hours). For privacy-specific inquiries, use "Privacy Request" in your email subject line so your message is routed to our compliance team.

We take privacy seriously. If we discover we have mishandled your data, we will notify you promptly and take steps to prevent recurrence. We update this policy from time to time to reflect changes in our practices or applicable law. Major changes will be communicated to you via email; minor clarifications appear on this page without notice.