Privacy Policy

1. Introduction

oxplay ("we", "us", "our", or "the Company") is committed to protecting the privacy and personal information of our users ("you", "your", or "the User"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use the oxplay platform available at https://oxplay.cam (the "Platform" or "Website").

This Privacy Policy applies to all users of oxplay services, including visitors who browse the Website without registering, registered players who create accounts and engage in gaming activities, and individuals who interact with our customer support or marketing communications. By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.

We take data protection seriously and comply with applicable international data protection regulations and best practices. This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, which together govern your use of oxplay services.

2. Data Controller

oxplay is the data controller responsible for the collection, processing, and protection of your personal information. As the data controller, we determine the purposes and means of processing your personal data in accordance with this Privacy Policy and applicable data protection laws.

For any questions, concerns, or requests related to your personal data or this Privacy Policy, you may contact our Data Protection Officer through the contact channels specified in Section 14 of this document. We are committed to responding to all privacy-related inquiries within a reasonable timeframe.

3. Information We Collect

oxplay collects various types of personal information to provide, maintain, improve, and secure our services. The information we collect falls into the following categories:

3.1 Information You Provide Directly

When you register for an oxplay account, engage with our services, or communicate with us, you voluntarily provide certain information, including:

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, residential address in Indonesia, and chosen username and password.
• Identity Verification Documents: Government-issued identification (KTP, passport, or driver's license), proof of address documents (utility bills or bank statements), and selfie photographs for KYC (Know Your Customer) verification purposes.
• Financial Information: Bank account details, e-wallet account information, payment transaction records, deposit and withdrawal history, and currency preferences (Indonesian Rupiah).
• Communications: Messages, inquiries, and correspondence you send to our customer support team via live chat, email, WhatsApp, or in-app messaging.
• Marketing Preferences: Your consent or objection to receiving promotional communications, newsletters, bonus offers, and marketing materials.

3.2 Information Collected Automatically

When you access or use the oxplay Platform, we automatically collect certain technical and usage information through cookies, log files, and similar tracking technologies:

• Device Information: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, navigation paths, referring and exit pages, search queries, and interaction with games and betting markets.
• Gameplay Information: Games played, betting patterns, stake amounts, winnings and losses, bonus usage, session durations, and gaming preferences (slots, live casino, sports betting, togel lottery).
• Location Data: Geographic location based on IP address to verify that you are accessing the Platform from within Indonesia and to comply with jurisdictional restrictions.
• Security Logs: Login attempts, account access timestamps, security events, and fraud prevention data.

3.3 Information from Third Parties

In certain circumstances, we may receive information about you from third-party sources to enhance our services or fulfill legal obligations:

• Payment Processors: Transaction verification, payment success or failure notifications, and fraud screening results from Indonesian banks (BCA, BRI, BNI, Mandiri) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja).
• Identity Verification Services: Results from third-party KYC and anti-money laundering screening services that verify the authenticity of submitted identification documents.
• Affiliate Partners: Referral source information if you were referred to oxplay by a marketing affiliate or partner website.

4. How We Use Your Information

oxplay uses your personal information for the following legitimate business purposes:

4.1 Service Provision and Account Management

• Creating, maintaining, and managing your oxplay account
• Processing deposits, withdrawals, and financial transactions
• Providing access to casino games, sports betting, togel lottery, and other gaming products
• Calculating odds, processing bets, and crediting winnings to your account balance
• Administering bonuses, promotions, and VIP loyalty program benefits
• Responding to customer support inquiries and resolving technical issues

4.2 Legal Compliance and Security

• Verifying your age (21+ requirement) and identity to comply with gaming regulations
• Conducting KYC and anti-money laundering (AML) checks as required by law
• Detecting, preventing, and investigating fraud, collusion, bonus abuse, and other prohibited activities
• Monitoring gameplay for signs of problem gambling and implementing responsible gaming measures
• Complying with legal obligations, court orders, and regulatory requests
• Protecting the security and integrity of our Platform, systems, and services

4.3 Marketing and Communications

• Sending promotional offers, bonus notifications, and tournament announcements (with your consent)
• Personalizing marketing content based on your gaming preferences and activity
• Conducting customer satisfaction surveys and feedback requests
• Sending important service announcements, policy updates, and account security notifications

4.4 Analytics and Improvement

• Analyzing Platform usage patterns to improve user experience and interface design
• Conducting data analysis to enhance game selection, optimize odds, and develop new features
• Performing quality assurance testing and troubleshooting technical issues
• Generating aggregated, anonymized statistics for business intelligence purposes

5. Legal Basis for Processing

oxplay processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions, including providing gaming services, processing transactions, and managing your account.
• Legal Obligations: Processing is required to comply with legal and regulatory requirements, including age verification, KYC procedures, AML screening, and tax reporting.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security protection, service improvement, and direct marketing, provided these interests do not override your fundamental rights.
• Consent: Where required by law, we obtain your explicit consent for specific processing activities, such as sending promotional emails or using certain cookies. You may withdraw consent at any time.

6. Information Sharing and Disclosure

oxplay does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors and financial institutions (Indonesian banks and e-wallet providers) to facilitate deposits and withdrawals
• Identity verification and KYC service providers to authenticate submitted documents
• Game providers and live casino operators who supply content on the Platform
• Cloud hosting and data storage providers who maintain our servers and databases
• Customer support software providers that enable our support team to assist you
• Marketing and analytics platforms that help us understand user behavior and optimize our services

All service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

6.2 Legal and Regulatory Authorities

We may disclose your personal information to government authorities, law enforcement agencies, regulators, or courts when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests
• Enforce our Terms & Conditions and investigate potential violations
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of oxplay, our users, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you of any such change in ownership or control of your personal data.

7. Data Security Measures

oxplay implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

7.1 Technical Safeguards

• Encryption: All data transmission between your device and our servers is protected by industry-standard 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Firewall Protection: Our servers are protected by advanced firewalls and intrusion detection systems that monitor for suspicious activity 24/7.
• Secure Authentication: User accounts are protected by secure password requirements, optional two-factor authentication (2FA), and automated session timeout features.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans performed by independent security experts.

7.2 Organizational Measures

• Access to personal data is restricted to authorized employees and contractors who require it to perform their job functions
• All staff members undergo mandatory data protection training and are bound by confidentiality agreements
• We maintain detailed access logs and implement role-based access controls to minimize data exposure
• Incident response procedures are in place to address potential data breaches promptly and notify affected users as required by law

While we strive to protect your personal information, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access.

8. Data Retention

oxplay retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

Data Category	Retention Period	Reason
Account Information	Duration of account + 5 years	Legal compliance, dispute resolution
Transaction Records	7 years from transaction date	Tax reporting, AML requirements
KYC Documents	5 years after account closure	Regulatory compliance
Gameplay History	3 years from last activity	Dispute resolution, analytics
Marketing Preferences	Until consent withdrawn	Compliance with marketing laws
Customer Support Logs	2 years from last interaction	Service improvement, quality assurance

Upon expiration of the retention period, your personal information will be securely deleted or anonymized in accordance with our data retention policies. You may request earlier deletion of certain data categories by exercising your privacy rights as described in Section 9.

9. Your Privacy Rights

Subject to applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings. For verification documents, contact customer support.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or when you withdraw consent. Note that we may be legally required to retain certain information for compliance purposes.

9.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to request that we transmit it directly to another service provider, where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes at any time. You can opt out of marketing emails by clicking the unsubscribe link or by contacting customer support.

9.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 14. We will respond to your request within 30 days.

10. Cookies and Tracking Technologies

oxplay uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze Platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including authentication, security, and session management. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and customization choices to enhance user experience.
• Analytics Cookies: Collect aggregated information about how visitors use the Platform to help us improve performance and usability.
• Marketing Cookies: Track your browsing across sites to deliver relevant advertisements and promotional content based on your interests (used only with your consent).

10.2 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may impact Platform functionality. To learn more about cookies and how to manage them, visit www.aboutcookies.org.

11. International Data Transfers

oxplay operates internationally and may transfer your personal information to servers and service providers located outside of Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Such safeguards may include standard contractual clauses approved by data protection authorities, adequacy decisions by relevant regulators, or other legally recognized transfer mechanisms. By using oxplay services, you consent to the international transfer of your personal information as described in this policy.

12. Children's Privacy

oxplay services are strictly intended for individuals aged 21 years or older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and close the associated account.

Parents or guardians who believe that a minor has provided personal information to oxplay should contact us immediately using the contact information in Section 14. We take underage gambling prevention very seriously and cooperate fully with authorities to enforce age restrictions.

13. Policy Changes

oxplay reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting a prominent notice on the Platform homepage
• Updating the "Last Updated" date at the top of this document
• Sending an email notification to your registered email address (for significant changes)
• Requiring you to accept the updated policy upon your next login (for material changes affecting your rights)

Your continued use of oxplay services after the effective date of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have questions, concerns, or requests related to this Privacy Policy or our data protection practices, please contact our Data Protection Team:

• Email: [email protected] (Subject line: "Privacy Inquiry")
• Live Chat: Available 24/7 directly on the Platform - request to speak with a Data Protection representative
• WhatsApp: +62 812-3456-7890 (08:00 - 23:00 WIB)
• Response Time: We strive to respond to all privacy-related inquiries within 5 business days and to fulfill data subject requests within 30 days as required by law

For formal complaints or unresolved privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. We are committed to working with you and regulatory authorities to resolve any privacy issues.

Thank you for trusting oxplay with your personal information. We are committed to protecting your privacy and using your data responsibly.