Privacy Policy

osb99 operates https://osb99.bio as an English-language online casino and sportsbook platform serving players across Indonesia. In the course of providing our services — which include sports betting, live casino games, slot games, Keno, Live Dragon Tiger, and related account management functions — we necessarily collect and process certain personal data about our registered players.

This Privacy Policy sets out, in plain language, the categories of personal data osb99 collects, the purposes for which that data is used, the circumstances under which it may be shared with third parties, the period for which it is retained, and the rights available to you as a data subject. We encourage you to read this document in full and to contact our support team if any aspect is unclear.

osb99 is committed to handling all personal data responsibly, securely, and in a manner consistent with internationally recognised privacy principles, including purpose limitation, data minimisation, and storage limitation. We do not collect data we do not need, we do not retain data longer than necessary, and we do not sell your personal information to third parties under any circumstances.

For the purposes of this Privacy Policy, the following terms carry the meanings specified below:

osb99 collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises the categories of data we collect and examples of the specific data points within each category.

We do not collect or store full credit card numbers or CVV codes. Payment card data, where applicable, is handled entirely by our certified payment processor partners and is never transmitted to or stored on osb99's own servers.

osb99 collects personal data through the following means:

• Direct Submission: Data you actively provide when registering an account, completing the KYC process, making a deposit or withdrawal, contacting our support team, or updating your account profile.
• Automated Technical Collection: Data collected automatically when you access the osb99 platform, including your IP address, device identifiers, browser characteristics, and session activity data collected via server logs and first-party cookies.
• Third-Party Sources: Identity verification data returned by our KYC provider following document checks; fraud-risk signals provided by our payment processor partners; and, where you have consented, marketing engagement data from email service providers.
• Game Studio Integrations: Aggregate game session and outcome data passed back to osb99 by third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe) to populate your transaction and bet history within your osb99 account.

We do not purchase personal data lists from data brokers or any other external commercial source. All personal data held by osb99 originates directly from your interaction with the platform or from service providers engaged specifically to deliver a feature you have requested (such as account verification or a payment transaction).

osb99 uses personal data for clearly defined purposes only. We do not use your data for any purpose that is incompatible with the purposes stated at the time of collection. The primary purposes for which we process personal data are:

• Account Management: Creating and maintaining your osb99 account, authenticating your identity at login, and enabling you to access platform features appropriate to your account status.
• KYC and Age Verification: Verifying that you are at least 21 years of age, confirming your identity and Indonesian residency, and meeting our obligations under applicable anti-money laundering (AML) principles.
• Payment Processing: Executing your deposit and withdrawal transactions via your nominated Indonesian bank account or e-wallet, and maintaining an accurate financial transaction history for your account.
• Platform Delivery and Improvement: Operating the osb99 website, games infrastructure, and sportsbook; diagnosing technical faults; and using aggregated usage analytics to improve the quality and performance of the platform.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, multiple account registrations, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and audit purposes.
• Responsible Gaming: Monitoring gaming patterns to identify indicators of problem gambling and reaching out to players who may benefit from our responsible gaming tools, in line with our obligations under our Responsible Gaming policy.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about osb99 services — but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: Fulfilling any data retention, reporting, or disclosure obligations imposed by applicable law or by lawful requests from competent authorities.

osb99 processes personal data on the following legal bases:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Withdrawing consent for marketing communications will not affect your ability to access the osb99 platform or your account.

7.1 Third-Party Service Providers. osb99 shares personal data with third-party service providers strictly on a need-to-know basis, where that sharing is necessary to deliver a service you have requested or that underpins the operation of the platform. Categories of third-party recipients include:

• KYC and Identity Verification Providers: Receive identity documents and personal details to conduct age verification and document authentication checks.
• Payment Processors: Receive financial data necessary to execute deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja.
• Game Studio Partners: Receive a pseudonymous player session identifier to authenticate your game session. Studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe do not receive your full name, email address, or financial account details.
• Customer Support Platform: Our live chat and ticketing software provider receives the content of your support interactions and your account identifier for the purpose of managing your query.
• Email Service Provider: Receives your email address and marketing preferences solely for the purpose of sending promotional communications where you have opted in.

All third-party service providers with whom osb99 shares personal data are required to process that data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to refrain from using osb99 player data for their own commercial purposes.

7.2 Legal Disclosures. osb99 may disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or other binding legal process. In such cases, osb99 will disclose only the minimum data necessary to satisfy the legal requirement.

7.3 No Sale of Personal Data. osb99 does not sell, rent, or otherwise commercially transfer your personal data to any third party. This prohibition is absolute and applies regardless of the commercial value of the data in question.

osb99 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligations that require longer retention. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in such a manner that it can no longer be linked to any individual. Anonymised, aggregated data (e.g., platform usage statistics) may be retained indefinitely for internal analytical purposes.

osb99 uses first-party cookies and similar tracking technologies to operate the platform effectively and to improve your experience as a Player. We do not use third-party advertising cookies or cross-site tracking technologies.

9.1 Types of Cookies We Use.

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing your ability to use osb99.
• Functional Cookies: Remember your preferences such as language settings, preferred game category, and display options, so that these do not need to be re-entered on each visit.
• Analytics Cookies: Collect anonymised data about how Players navigate the osb99 platform — which pages are visited most frequently, where users encounter errors, and how long sessions typically last. This data is used exclusively to improve the platform and is never linked back to individual player identities.

9.2 Managing Cookies. You can control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your osb99 account. Disabling functional cookies may result in the loss of saved preferences. Disabling analytics cookies will not affect your ability to use any feature of the platform.

9.3 No Third-Party Advertising Cookies. osb99 does not integrate third-party advertising networks, retargeting pixels, or social media tracking scripts on its platform. Your browsing activity on osb99 is not shared with advertising platforms.

As an individual whose personal data is processed by osb99, you have the following rights, which you may exercise at any time by contacting our support team:

• Right of Access: You have the right to request a copy of the personal data osb99 holds about you. We will provide this information within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Requests to update identity data (name, date of birth) may require re-submission of KYC documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to override by our legal retention obligations — for example, AML-mandated transaction records cannot be deleted on request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or while you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting support or updating your account marketing preferences. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of the above rights, please contact our support team via the live chat facility available within the osb99 platform, or by emailing support@osb99.bio. We will verify your identity before processing any data subject request to protect against unauthorised access to your personal data.

osb99 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the osb99 servers is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This ensures that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted Data Storage: Sensitive personal data fields — including identity document data and financial account identifiers — are stored in encrypted form within our database infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within osb99's internal systems is restricted on a strict need-to-know basis. Staff members can only access the minimum data necessary to perform their specific role. All data access events are logged and subject to audit.
• Session Security: osb99 enforces session timeouts after periods of inactivity and implements additional authentication checks for high-risk account actions such as withdrawal requests or password changes.
• Vulnerability Management: osb99's platform undergoes regular security assessments to identify and remediate potential vulnerabilities before they can be exploited.

Notwithstanding the above measures, no internet-based system can be guaranteed to be completely secure. In the event of a data security incident that poses a material risk to your rights, osb99 will notify affected players promptly and take immediate remediation steps.

osb99 operates a strict 21+ age policy. Our platform is not intended for, and does not knowingly collect personal data from, individuals under 21 years of age. Age verification is a mandatory component of the KYC process, and any account found to belong to a person under 21 will be closed immediately.

If you are a parent or guardian and believe that a minor in your care has registered an account on osb99, please contact our support team immediately at support@osb99.bio. We will investigate and, if confirmed, close the account, delete all associated personal data, and return any deposited funds to the verified payment source. No winnings generated on an underage account will be paid out.

For guidance on protecting minors from accessing online gambling platforms, please visit our Responsible Gaming page, which provides information on parental control tools and filtering software.

osb99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Where an amendment is material — meaning it substantively changes how we collect, use, or share your personal data — we will notify you via the email address registered to your account no fewer than 14 calendar days before the revised policy takes effect. For minor clarificatory amendments, the policy will be updated in place without advance notice.

Your continued use of the osb99 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a material amendment, you should cease using the platform and request account closure before the effective date.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about how osb99 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the osb99 platform — the fastest channel for data subject requests and account-related privacy queries.
• Email: support@osb99.bio — please note that this email address is displayed as plain text only and is not a clickable link. Typical response time for email enquiries is within 24 hours.
• Support Hours: Our live chat team is available around the clock, covering all Indonesian time zones: WIB (UTC+7), WITA (UTC+8), and WIT (UTC+9).

When submitting a data subject request, please include your registered account username and a clear description of the right you wish to exercise or the concern you are raising. For access or portability requests, please specify the categories of data you require. We will verify your identity before processing the request.