This Privacy Policy explains how oto12 collects, uses, stores, and protects your personal data when you register an account, use the Platform, or interact with our customer support team. We are committed to handling your information responsibly and transparently.
Six core commitments that underpin every data decision we make — from the moment you create an account to the day you close it.
All data transmitted between your device and oto12's servers — including your oto12 Login credentials, personal details, and financial transaction data — is protected by 256-bit SSL encryption. This is the same standard used by Indonesia's major banking institutions, including BCA, BRI, and Mandiri.
oto12 does not sell, rent, or lease your personal data to any third party for marketing, advertising, or commercial profiling purposes — ever. Your data is used solely to provide and improve the services you have registered to receive, to process payments via BCA, BRI, OVO, DANA, and other local channels, and to meet regulatory obligations.
oto12 collects only the personal data that is strictly necessary for specific, legitimate purposes: account registration, identity verification (KYC), payment processing, fraud prevention, customer support, and regulatory compliance. We do not collect data speculatively or maintain data beyond the periods specified in this Policy.
You have the right to access a copy of the personal data oto12 holds about you, to correct inaccurate information, to request deletion of your data (subject to legal retention requirements), and to object to certain types of data processing. All such requests can be submitted via oto12 customer support and will be addressed within 30 days.
oto12 operates under an international gaming licence and applies data protection practices aligned with internationally recognised privacy frameworks. All third-party processors engaged by oto12 — including game studios such as Evolution Gaming and Pragmatic Play, and payment processors supporting IDR transactions — are contractually bound to the same data protection standards.
In the unlikely event of a data breach that affects your personal information, oto12 will notify you via your registered email address as soon as practicable and will take immediate remedial action. oto12 maintains an incident response plan that is tested regularly and updated in line with evolving security standards.
In this Privacy Policy, the following terms have the meanings set out below.
| Term | Meaning |
|---|---|
| "oto12" / "we" / "us" / "our" | The company operating the online betting and casino platform at oto12.app, including its subsidiaries, affiliates, and authorised data processors. |
| "Platform" | The oto12 website at oto12.app, all associated pages, the oto12 Login portal, and all related services accessible to registered players. |
| "Player" / "You" / "Your" | Any natural person who has registered an account with oto12 or who accesses the Platform, whether or not they have completed registration. |
| "Personal Data" | Any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, national identity number, payment method details, and IP address. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, modification, and deletion. |
| "Data Controller" | oto12, which determines the purposes and means of processing your Personal Data. |
| "Third-Party Processor" | Any external company that processes Personal Data on oto12's behalf under a data processing agreement — such as payment processors, game studios, identity verification providers, and customer support platform providers. |
2.1 This Privacy Policy applies to all Personal Data collected by oto12 in connection with the operation of the Platform, including data collected via the oto12 website, the oto12 Login portal, customer support channels (live chat, WhatsApp, and email), and any promotional or survey communications.
2.2 This Policy applies to all Players regardless of their location. However, oto12's primary market is Indonesia, and the data practices described in this Policy are specifically designed to be consistent with the data protection expectations applicable to Indonesian users and with internationally recognised privacy frameworks.
2.3 This Privacy Policy should be read alongside oto12's Terms & Conditions and Responsible Gaming Policy, both of which incorporate elements of this Policy by reference.
2.4 oto12 may operate sub-processors and affiliated services in multiple jurisdictions. Where Personal Data is processed outside of Indonesia, oto12 takes steps to ensure that equivalent data protection standards apply, as described in Section 8 (International Transfers).
3.1 oto12 collects Personal Data in three ways: data you provide directly, data collected automatically during your use of the Platform, and data obtained from third parties such as identity verification providers and payment processors.
3.2 Data You Provide Directly. The following categories of Personal Data are collected when you register an account, complete KYC verification, make deposits or withdrawals, or contact customer support:
3.3 Data Collected Automatically. When you access the Platform, oto12 automatically collects the following technical data via server logs, cookies, and similar technologies:
3.4 Data from Third Parties. oto12 may receive supplementary identity verification data from third-party KYC service providers where additional checks are required. oto12 may also receive fraud risk signals from payment processors in connection with deposit and withdrawal transactions via BCA, BRI, OVO, DANA, and other supported payment channels.
4.1 oto12 uses your Personal Data only for specific, legitimate purposes. The table below sets out each principal use and the category of data involved.
| Purpose | Data Categories Used |
|---|---|
| Account registration and maintenance | Identity data, contact data, login credentials |
| Identity verification (KYC) and age verification (21+) | Identity data, KYC verification documents |
| Processing deposits and withdrawals (BCA, BRI, OVO, DANA, etc.) | Financial data, identity data |
| Fraud detection and anti-money laundering (AML) monitoring | Financial data, technical data, identity data |
| Providing customer support via live chat and WhatsApp | Contact data, support interaction data, account data |
| Responsible gaming monitoring and tool delivery | Game session data, responsible gaming data, financial data |
| Sending transactional communications (account alerts, withdrawal confirmations) | Contact data, financial data |
| Sending promotional communications (bonuses, BRI Liga 1 promotions, seasonal offers) — with consent | Contact data, game session data |
| Platform performance analytics and product improvement | Technical data, game session data (anonymised where practicable) |
| Regulatory reporting and licence compliance | Identity data, financial data, game session data |
5.1 oto12 processes your Personal Data on one or more of the following legal bases, depending on the purpose of processing:
5.2 Where oto12 relies on consent as the legal basis for processing, you may withdraw that consent at any time by updating your communication preferences in your Account Settings panel or by contacting oto12 customer support. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.
6.1 oto12 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. The following categories of cookies are used:
6.2 You can manage cookie preferences via your browser settings at any time. Please note that disabling essential cookies will affect your ability to use the Platform, including the oto12 Login function. Disabling other cookie categories will not prevent you from using the Platform but may reduce the personalisation of your experience.
6.3 oto12 does not use third-party advertising network cookies or cross-site tracking cookies.
7.1 oto12 does not sell your Personal Data to any third party. oto12 shares your Personal Data only in the specific circumstances described below.
7.2 Third-Party Processors. oto12 engages the following categories of third-party processors who may access your Personal Data solely to perform specific functions on oto12's behalf:
7.3 Regulatory and Legal Disclosure. oto12 may disclose your Personal Data to regulatory authorities, law enforcement agencies, financial intelligence units, or other government bodies where required by law, court order, or the terms of oto12's international gaming licence. Such disclosures are made only to the extent strictly required by the applicable legal obligation.
7.4 Corporate Transactions. In the event of a merger, acquisition, restructuring, or sale of oto12's business or assets, your Personal Data may be transferred to the acquiring entity as part of that transaction, subject to the same data protection obligations described in this Policy. You will be notified of any such transfer via your registered email address.
8.1 oto12 operates servers and engages service providers in multiple countries. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia. oto12 takes the following steps to ensure that such transfers are protected:
8.2 If you have questions about the specific countries in which your Personal Data may be processed, you may contact oto12's Data Protection contact as described in Section 16.
9.1 oto12 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law or regulatory obligation.
| Data Category | Retention Period |
|---|---|
| Account registration data (name, email, mobile number) | Duration of account plus 5 years following account closure |
| KYC identity documents | Duration of account plus 5 years following account closure (regulatory requirement) |
| Financial transaction records (deposits, withdrawals, bet history) | 7 years following each transaction (AML regulatory requirement) |
| Customer support communications | 3 years following the date of the communication |
| Technical / session data (logs, IP addresses) | 13 months from date of collection |
| Marketing consent records | Until consent is withdrawn, plus 3 years for audit purposes |
| Responsible gaming records (self-exclusion, deposit limits) | Permanently retained to prevent re-registration during exclusion periods |
9.2 Upon expiry of the applicable retention period, oto12 will securely delete or anonymise your Personal Data in a manner that prevents reconstruction of any personally identifiable information.
10.1 Subject to applicable law and certain exemptions (including where processing is required to comply with a legal obligation), you have the following rights in relation to the Personal Data that oto12 holds about you:
Request a copy of all Personal Data oto12 holds about you, including account data, KYC records, financial history, and game session data.
Request correction of any inaccurate or incomplete Personal Data held about you, including name, contact details, or date of birth.
Request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to processing carried out on the basis of oto12's legitimate interests, including behavioural analytics and responsible gaming monitoring.
Receive a copy of the Personal Data you provided to oto12 in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
Request that oto12 temporarily suspend processing of your data — for example, while a rectification request is being assessed.
10.2 To exercise any of the above rights, contact oto12 customer support via live chat (available 24/7 following oto12 Login) or by writing to [email protected]. oto12 will acknowledge your request within 5 business days and will respond substantively within 30 calendar days. In complex cases, the response period may be extended by a further 30 days, and you will be notified of any such extension.
10.3 oto12 will not charge a fee for exercising your data rights in ordinary circumstances. Where requests are manifestly unfounded, excessive, or repetitive, oto12 reserves the right to charge a reasonable administrative fee or to decline the request, with written explanation.
11.1 oto12 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:
11.2 Notwithstanding the security measures described above, no data transmission over the internet or electronic storage system is entirely risk-free. oto12 cannot guarantee absolute security of your Personal Data. In the event of a confirmed data breach affecting your personal information, oto12 will notify you promptly via your registered email address and will take immediate steps to contain and remediate the breach.
11.3 You are responsible for maintaining the confidentiality of your own oto12 Login credentials. oto12 strongly recommends enabling 2FA, using a unique password not shared with any other service, and logging out of your Account when using shared or public devices.
12.1 As part of the account registration process, all Players are required to confirm that they are at least 21 years of age and to submit a government-issued identity document confirming their date of birth as part of KYC verification. Any account found to belong to a person under the age of 21 will be immediately closed and all balances forfeited.
12.2 If oto12 becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, it will delete that data as promptly as practicable and close the associated account without delay. If you believe that oto12 has collected data from a minor, please contact oto12 customer support immediately via [email protected].
12.3 oto12 encourages parents and guardians to make use of parental control software and device-level content filtering tools to prevent minors from accessing online gambling platforms. oto12's Responsible Gaming page provides guidance on third-party tools that can assist with this.
13.1 With your consent, oto12 may send you promotional communications via email or WhatsApp, including information about new games, bonus offers, BRI Liga 1 season promotions, seasonal campaigns tied to events such as Ramadhan, Idul Fitri, and Indonesian Independence Day, and other platform updates.
13.2 You may withdraw your consent to receive marketing communications at any time by:
13.3 Withdrawal of marketing consent does not affect your ability to use the Platform or your entitlement to receive transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts. Transactional communications are sent on the basis of contractual necessity and cannot be disabled while your account is active.
13.4 oto12 does not share your contact details with third-party advertisers for the purpose of sending you marketing communications on their behalf.
14.1 The oto12 Platform does not contain links to third-party websites outside of the oto12 domain. All navigation within the Platform — including game lobbies, the Account Cashier, and the support portal — remains within oto12.app.
14.2 Where oto12 features game content provided by third-party studios such as Evolution Gaming, Pragmatic Play, PG Soft, or NetEnt, that content is served via embedded integration within the oto12 Platform. The game studios may collect anonymised session-level data (such as game round outcomes and bet amounts) as part of the technical operation of their games. This data collection is governed by the studios' own privacy practices, details of which are available upon request from oto12 customer support.
14.3 oto12 is not responsible for the privacy practices of any third-party service provider. If you have concerns about how a specific third-party processor handles your data, please contact oto12 customer support and we will provide the relevant contact information for that processor.
15.1 oto12 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law or regulatory requirements, new services or features introduced on the Platform, or feedback from Players and data protection authorities.
15.2 The date of the most recent revision of this Policy is displayed at the top of this page. Where changes are material — meaning they could significantly affect your privacy rights or the way your Personal Data is used — oto12 will provide notice via your registered email address at least 14 days before the changes take effect.
15.3 For non-material amendments (such as typographical corrections, clarifications that do not alter substantive data rights, or updates required by immediate regulatory instruction), oto12 may update the Policy without advance notice, and changes will take effect upon publication at oto12.app/privacy-policy.
15.4 We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.
16.1 If you have any questions, concerns, or complaints about this Privacy Policy or about the way oto12 handles your Personal Data, you may contact oto12 through the following channels:
Email: [email protected] — please include "Privacy Enquiry" in the subject line
WhatsApp: +62 811 0012 0012
Support Hours: 24 hours a day, 7 days a week — 00:00 to 24:00 WIB. Indonesian-speaking support agents are available on every shift.
16.2 All privacy-related enquiries are handled with strict confidentiality. oto12 aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days of receipt.
16.3 If you are not satisfied with oto12's response to a privacy enquiry or complaint, you may refer the matter to the relevant supervisory authority or data protection regulator in your jurisdiction. oto12 will cooperate fully with any investigation conducted by such authority.
oto12 combines industry-leading data protection with a world-class betting and casino experience. Explore the platform with confidence — your privacy is always our priority.
SSL Secured & Encrypted | No Data Sold to Third Parties | Licensed & Regulated Internationally | 21+ Only