At ox368, we take the privacy and security of your personal data seriously. This Privacy Policy explains exactly what information we collect when you use the ox368 platform, why we collect it, how it is used and stored, who it may be shared with, and the rights available to you as a Member. By registering an account or continuing to use ox368.bet, you confirm that you have read and accepted this policy in full.
These cards summarise the most important aspects of our data practices. The full legal text follows below — please read all clauses carefully.
Every data transmission between your device and the ox368 platform is protected by 256-bit SSL/TLS encryption — the same standard used by international banks and major financial institutions. Your login credentials, payment details, and personal information are never transmitted in plain text.
ox368 does not sell, rent, or trade your personal information to third-party marketers. Your data is shared only with carefully vetted service providers — payment processors, KYC verification partners, game studios, and fraud-prevention tools — strictly for the purpose of operating the platform and delivering our services to you.
As an ox368 Member, you have the right to access the personal data we hold about you, request corrections, ask for deletion where legally permissible, and object to certain types of processing. Submit a data rights request at any time by emailing our Data Protection team at [email protected].
When you deposit or withdraw via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or any other Indonesian payment channel, your bank account details and e-wallet credentials are handled exclusively by PCI-DSS compliant payment processors. ox368 does not store full bank account numbers on its own servers.
ox368 uses cookies and similar tracking technologies solely to deliver a functional, personalised, and secure platform experience. We do not use third-party advertising cookies to build profiles for external ad networks. You can manage your cookie preferences through your browser settings at any time without affecting your ability to log in.
ox368 retains Member personal data only for as long as necessary to fulfil the purposes described in this policy and to meet applicable legal obligations, including anti-money-laundering record-keeping requirements. Account data is typically retained for five years following account closure. After this period, data is securely anonymised or deleted.
Summary: This Privacy Policy governs the collection and use of personal data by ox368 (the "Platform") at ox368.bet. It applies to all registered Members and visitors. If you have questions about how your data is handled, contact us at [email protected] — plain text, not a clickable link. Our Data Protection Officer will respond within five business days.
The following defined terms are used throughout this Privacy Policy. Where these definitions overlap with terms defined in the ox368 Terms & Conditions, the definitions in the Terms & Conditions take precedence for contractual purposes.
ox368 collects the following categories of Personal Data from Members and platform visitors. Collection is limited to what is genuinely necessary for the purposes described in Clause 4 of this policy.
| Data Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, KTP / passport / SIM number, nationality | Yes — required for KYC |
| Contact Data | Email address, Indonesian mobile phone number, city of residence (e.g., Jakarta, Surabaya, Bandung) | Yes — required for account |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet account name (OVO, DANA, GoPay, ShopeePay, LinkAja) | Yes — required for payments |
| Transaction Data | Deposit and withdrawal history, bet records, game session logs, bonus activity | Yes — generated automatically |
| Technical Data | IP address, device type, operating system, browser type and version, time zone, screen resolution | Yes — collected automatically |
| Behavioural Data | Pages visited, games played, session duration, click paths, search queries within the Platform | Yes — collected automatically |
| Communications Data | Live chat transcripts, email correspondence, support ticket history | When you contact support |
| KYC Document Data | Scanned copies or photographs of identity documents, selfie verification images, proof of address documents | Yes — required before withdrawal |
| Marketing Preferences | Consent records, opted-in communication channels (email, SMS), promotion interaction history | Optional — opt-in only |
Sensitive Data Note: ox368 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes beyond what is strictly required for KYC document verification. If a KYC document (e.g., a KTP) incidentally contains religion or ethnicity information, that data is not extracted, stored separately, or used for any processing purpose.
ox368 collects Personal Data through the following channels and mechanisms:
ox368 processes your Personal Data for the following specific, disclosed purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first notifying you and obtaining any required consent.
ox368 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose:
ox368 does not sell your Personal Data. We share data only with the following categories of recipients, and only to the minimum extent required:
International Transfers: Some of our Data Processors operate infrastructure outside Indonesia. Where Personal Data is transferred internationally, ox368 ensures that appropriate safeguards — such as contractual data protection clauses — are in place before the transfer occurs. All cross-border data transfers are conducted over encrypted connections.
ox368 uses cookies and similar technologies (local storage, session storage, pixel tags) to operate and improve the Platform. The table below describes the categories of cookies we use and their purposes.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core Platform functions: login sessions, account wallet balance display, bet-slip state, deposit/withdrawal flow, security tokens | Session / up to 24 hours |
| Functional | Remember your preferences: language display, odds format, favourite games, preferred payment method | Up to 12 months |
| Analytics | Collect aggregated, anonymised data on page visits, session duration, feature usage, and error rates to improve Platform performance | Up to 24 months |
| Security & Fraud Prevention | Detect bot activity, identify suspicious login patterns, support device fingerprinting for account takeover prevention | Up to 12 months |
ox368 does not use third-party advertising cookies, retargeting pixels, or social-media tracking scripts. You can manage or delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your ox368 account. Disabling other cookie categories will not affect your ability to use the Platform's core features.
ox368 retains Personal Data for as long as required to fulfil the purposes described in this policy and to comply with applicable legal obligations. The following retention periods apply as a baseline:
At the end of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised. Anonymised data is not subject to this policy.
ox368 implements a layered, defence-in-depth approach to protecting Personal Data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:
Your Role in Security: You are responsible for maintaining the confidentiality of your ox368 account credentials. Use a strong, unique password not shared with any other service, and enable SMS OTP login verification. If you suspect that your account has been compromised, contact ox368 support immediately via live chat — our team is available 24/7.
As a Member of the ox368 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, submit a written request to [email protected] (plain text — not a clickable link), including your registered username and a description of the right you wish to exercise. ox368 will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days.
21+ Only: The ox368 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from any individual under the age of 21.
ox368 employs age verification as a mandatory step in the KYC process. All Members are required to confirm their date of birth at registration and to provide government-issued photographic identification confirming that they are at least 21 years of age before any withdrawal is processed.
If ox368 discovers or has reasonable grounds to suspect that Personal Data has been provided by or on behalf of an individual under the age of 21, the associated account will be immediately suspended, all deposits will be returned to the originating payment method after verification, and all Personal Data associated with the account will be securely deleted — except where retention is required by applicable law for the purpose of investigating the underage registration incident.
Parents and guardians who believe that an individual under 21 in their care has registered on the ox368 Platform should contact us immediately at [email protected] so that the account can be investigated and closed without delay.
The ox368 Platform may display references to third-party brands — such as game studios (Pragmatic Play, Evolution Gaming, Spribe), sports leagues (BRI Liga 1, EPL, Champions League), or payment providers (BCA, OVO) — as part of its game catalogue and informational content. These references do not constitute links to third-party websites, and the ox368 Platform does not contain outbound links to external sites.
If you navigate away from the ox368 Platform to any external website — for example, by manually entering a URL or following a link from a third-party source — ox368 has no control over that website's data practices. This Privacy Policy applies solely to the ox368 Platform at ox368.bet. ox368 accepts no responsibility for the privacy practices of any external website.
ox368 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Material changes — those that significantly affect your rights or the way we process your Personal Data — will be communicated to registered Members via email to the registered address and via an in-platform notification at least seven (7) calendar days before the amended policy takes effect.
Non-material changes, such as typographical corrections or clarifications that do not alter your rights, may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically.
Continued use of the ox368 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must stop using the Platform and request account closure before the effective date.
If you have any questions, concerns, or requests relating to this Privacy Policy or to ox368's handling of your Personal Data, please contact us through the following channels:
Formal complaints that are not resolved to your satisfaction through ox368's internal process may be escalated to the player dispute resolution service associated with ox368's international operating licence, or to the relevant data protection supervisory authority in the jurisdiction applicable to you.
Responsible Gaming & Privacy: If you are concerned that your wagering behaviour data is being used in a way that affects your access to responsible gaming tools — such as self-exclusion or deposit limits — please contact our Indonesian-speaking responsible gaming team directly via live chat. Responsible gaming controls are always available to you regardless of any data processing activity. For full details, see our Responsible Gaming page.
Now that you understand exactly how ox368 handles your personal data, you can enjoy our full range of betting and gaming products with complete confidence. From BRI Liga 1 sportsbook markets to 1,000+ slots from Pragmatic Play and Evolution Gaming live casino tables — all secured with 256-bit SSL encryption and processed in IDR. Adults 21+ only.