ok25 Privacy Policy

This page describes what we collect when you use ok25 and how we keep that data protected. We collect personal information — your email, national ID, phone number, and residential address — only when you register, verify your account, or request a withdrawal. We store this data in encrypted databases and never share it with third parties except as required by Indonesian law or to process your payments through our banking and e-wallet partners.

Our privacy commitments apply across all devices: Android app, iOS browser, and desktop. Whether you log in from Jakarta, Surabaya, Bandung, or Medan, your account data remains encrypted in transit and at rest. We use two-factor authentication, password hashing, and continuous fraud monitoring to prevent unauthorised access. We also describe your rights — how to request your data, update information, or delete your account.

This policy is written in plain English so you understand exactly what we do. We do not use industry jargon to hide our practices; every section explains our workflow in straightforward terms.

What Data We Collect on ok25

We collect personal data at three stages: registration, KYC verification, and withdrawal. During registration, we collect your email address and phone number. You create a password, which we hash server-side — we never store your plaintext password, so even our internal staff cannot recover it.

During KYC verification (required before your first withdrawal), we collect: (1) your national ID number and scanned ID photo, (2) your full legal name, date of birth, and residential address, (3) a selfie photo showing your face clearly. We also request proof of your address — a utility bill, bank statement, or rental agreement dated within three months. This data is stored in encrypted vaults separate from your gaming account.

During deposits and withdrawals, we collect transaction details: the amount, payment method (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet), and a timestamp. We also log your IP address, device type, and browser version for fraud detection and security purposes. None of this information is shared with third parties except our payment processors.

Registration data: Email, phone number, password (hashed). Used for account login and 2FA code delivery.
KYC data: National ID, photos, address proof. Used for identity verification and withdrawal clearance.
Transactional data: Deposit/withdrawal amounts, payment method, timestamp. Used for accounting and fraud detection.
Device data: IP address, device type, browser version, app version. Used for security monitoring and technical support.

How We Use Your Data on ok25

We use registration data to authenticate your login, send you password-reset links, and deliver 2FA codes to your phone. We use KYC data to verify your identity before withdrawals and to comply with Indonesian anti-money-laundering regulations. We use transactional data to process your deposits and withdrawals, maintain your account balance, and generate your betting history.

We use device data to detect fraud — for example, if someone tries to log in from an unusual location or multiple devices simultaneously, we flag the activity and may restrict your account pending your confirmation. We also use aggregated, anonymised data to understand platform trends (e.g., which games are popular, what payment methods users prefer) but never to identify individuals or track individual users across sessions.

Third-Party Processors and Data Sharing

We share personal data with third parties only as necessary to deliver our service:

Payment processors: We share deposit and withdrawal details with your bank or e-wallet provider to complete transactions. mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, and local payment handle these transactions using their own encryption and security practices.
Hosting providers: Our servers may sit outside Indonesia; we use encrypted data transfer to ensure data remains protected across jurisdictions.
Fraud detection services: We may share IP address and device data with third-party fraud-detection tools to identify suspicious activity.
Legal compliance: We share data with Indonesian government authorities when required by law or court order.

We do not sell your personal data to marketers, data brokers, or advertising networks. We do not use your information for marketing emails, SMS campaigns, or targeted ads — we use your contact information only to send account notifications and support responses.

Note: If you enable push notifications on your ok25 app, we send alerts about table availability, withdrawal status, and account security events. You control these in your account settings.

How We Protect Your Data on ok25

We encrypt all data in transit using TLS 1.2 — the same encryption standard used by banks. Your password is hashed using bcrypt; we never store plaintext passwords. KYC documents are stored in encrypted databases separate from your gaming account. We monitor all servers continuously for unauthorised access and perform regular security audits.

Two-factor authentication (2FA) protects your account: before login from a new device or withdrawals above certain thresholds, you must enter a six-digit code sent to your phone. This prevents account takeover even if your password is compromised. If you suspect unauthorised access, contact our support team immediately; we can reset your credentials and investigate within one business day.

Your Rights Regarding Your Data on ok25

You have the right to request a copy of all personal data we hold about you. Contact our support team via email or in-app chat, and we send you a complete data export within one business day. You can also request to update or correct your information — change your phone number, address, or email — through your account settings.

You have the right to delete your account. If you request account deletion, we anonymise your personal information (name, ID, address, contact details) within 30 days but retain transaction records for seven years to comply with Indonesian financial regulations and audit requirements. Once deletion is complete, you cannot recover your account.

Cookies and Tracking on ok25

We use session cookies to maintain your login and remember your language preference. These cookies expire when you close your browser. We do not use third-party cookies for tracking or advertising. If you disable cookies in your browser, you may not be able to log in to ok25 or access certain features.

Contact Us About Privacy

If you have questions about our privacy practices, how we use your data, or your rights, contact our support team via email or our FAQWe respond to all privacy inquiries within one business day. You can also request a data export, account update, or deletion through your account settings or by emailing our support address.

Updates to Our Privacy Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. If we make material changes — such as sharing your data with new third parties or changing how we use your information — we notify you via email and update the publication date at the top of this page. Your continued use of ok25 after an update means you accept the new policy.

Our privacy commitments remain unchanged: we protect your data with encryption, never sell it to third parties, and respect your rights to access, update, and delete your information. Whether you play Liga 1 markets, live-dealer blackjack, slot games like Aviator or Sweet Bonanza, or esports titles, the same privacy standards apply.

If you are based in a jurisdiction where our services are available — such as Jakarta, Surabaya, Bandung, or Medan — and you have concerns about how we handle your privacy, visit our FAQ or contact our support team. We take your privacy seriously and remain committed to transparent, secure data practices on ok25.