ok500 Privacy Policy
Your privacy matters to us. This Privacy Policy explains in plain, professional English exactly what personal data ok500 collects from players in Indonesia and around the world, how we use it, who we share it with, how long we keep it, and what rights you have over it.
Table of Contents
Overview & Scope
ok500 ("we", "us", "our") operates the online gaming and sportsbook platform accessible at https://ok500.bio. We are committed to protecting the privacy and personal data of every individual who visits, registers with, or interacts with the ok500 platform — including our sportsbook, live casino, slots, togel (Indonesia's traditional numbers lottery), Bandar Q, and Live Dragon Tiger products.
This Privacy Policy sets out the legal basis on which we collect and process personal data, the categories of data we process, the purposes for which that data is used, and the rights available to you as a data subject. It applies to:
- All visitors to https://ok500.bio, including unregistered users who browse the platform.
- All registered Account holders, regardless of whether they have deposited funds or placed wagers.
- All individuals who contact ok500 through any support channel, including live chat and email.
- All individuals who participate in any ok500 promotion, tournament, or loyalty program.
This policy does not apply to third-party websites or services that may be linked from our platform. ok500 is not responsible for the privacy practices of any third-party operator, payment provider, or game studio whose services are accessible through or in connection with our platform. We encourage you to review the privacy policies of those third parties independently.
By registering an Account with ok500 or by continuing to use the ok500 platform after this policy has been communicated to you, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the platform and contact us to request Account closure.
Your Privacy in Summary
ok500 collects only the data necessary to operate a safe, compliant, and high-quality gaming platform. We do not sell your personal data to third parties for marketing purposes. We use industry-standard 256-bit SSL encryption on all data in transit. You may request access to, correction of, or deletion of your data at any time by contacting [email protected].
Data We Collect
ok500 collects personal data through several distinct channels: directly from you when you register or use the platform, automatically through technical systems as you browse, and from third-party sources such as payment providers and identity verification services. The categories of data we collect are set out below.
2.1 Registration & Identity Data
When you create an ok500 Account, we collect: your full legal name, date of birth, email address, mobile telephone number, and a self-selected password (stored in hashed form only — we never store plaintext passwords). This data is necessary to establish and maintain your Account and to verify your eligibility to use the platform.
2.2 Identity Verification (KYC) Data
To comply with Know Your Customer (KYC) obligations and to prevent fraud, we may collect copies of government-issued identity documents, including your Indonesian National Identity Card (KTP), passport, or driver's license. We may also collect a selfie or photograph for facial matching purposes. KYC data is processed by our compliance team and, where applicable, by a licensed third-party identity verification provider.
2.3 Financial & Payment Data
When you make a deposit or request a withdrawal, we collect your bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga) or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) as required to process the transaction. ok500 does not store full payment card numbers. All financial transaction records — including deposit amounts, withdrawal amounts, dates, and payment methods — are retained for AML compliance and fraud prevention purposes.
2.4 Gaming & Wagering Activity Data
We record all gaming activity conducted through your ok500 Account, including: game sessions played, bet amounts and outcomes, bonus claims and wagering progress, sportsbook markets selected, and tournament participation. This data is used to operate the platform, resolve disputes, detect suspicious patterns, and personalize your experience.
2.5 Technical & Device Data
Our platform automatically collects technical information when you access ok500, including: IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimization.
2.6 Communications Data
We retain records of all communications between you and ok500 support, including live chat transcripts, email correspondence, and any documentation submitted with a support request. These records are used to resolve disputes, improve our support service, and maintain a record of any instructions given or agreements made.
| Data Category | Legal Basis | Required / Optional |
|---|---|---|
| Registration & Identity | Contractual necessity — required to create and maintain your Account | Required |
| KYC / Verification Documents | Legal obligation — AML compliance and age verification | Required for withdrawals |
| Financial & Payment | Contractual necessity — required to process deposits and withdrawals | Required for transactions |
| Gaming & Wagering Activity | Contractual necessity and legitimate interest — platform operation and dispute resolution | Required |
| Technical & Device | Legitimate interest — security, fraud detection, platform improvement | Automatic collection |
| Communications | Legitimate interest — dispute resolution and service quality | When you contact us |
| Marketing Preferences | Consent — you may opt in or out at any time | Optional |
How We Use Your Data
ok500 processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we process personal data are as follows:
3.1 Account Management and Platform Operation
Your registration and identity data is used to create, maintain, and secure your ok500 Account. This includes processing logins, resetting passwords, applying responsible gaming limits, and maintaining an accurate account balance in Indonesian Rupiah (IDR).
3.2 Transaction Processing
Financial and payment data is processed to execute deposit and withdrawal requests promptly and accurately. ok500 transmits relevant payment details to the applicable bank or e-wallet provider (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja) as required to complete the transaction.
3.3 Compliance and Legal Obligations
We process KYC, identity, and financial data to satisfy our obligations under applicable anti-money laundering (AML) and counter-financing of terrorism (CFT) frameworks. This includes verifying the identity and age of Account holders, monitoring transactions for suspicious patterns, and making mandatory disclosures to relevant authorities where legally required.
3.4 Fraud Detection and Platform Security
Technical, device, and gaming activity data is continuously analyzed to detect and prevent fraudulent behavior, account takeover attempts, collusion between players, exploitation of bonus offers, and unauthorized access to the platform. Where fraud or Prohibited Conduct is detected, we may take action including Account suspension, Balance forfeiture, and referral to law enforcement.
3.5 Customer Support
Communications data — including live chat transcripts and email records — is used by our support team to resolve account queries, investigate complaints, and action responsible gaming requests. Support is available 24/7 in both English and Bahasa Indonesia.
3.6 Marketing and Promotional Communications
Where you have given explicit consent to receive marketing communications, we may use your email address or mobile number to send you information about ok500 promotions, new game launches, seasonal offers (for example, around Idul Fitri, Ramadhan, or major sporting events such as the BRI Liga 1 season or FIFA World Cup), and personalized bonus offers. You may withdraw consent at any time by updating your communication preferences in your Account settings or by contacting support.
3.7 Responsible Gaming Monitoring
Gaming activity data is analyzed to identify patterns consistent with problem gambling behavior, including rapid escalation of bet sizes, extended uninterrupted play sessions, and attempts to circumvent self-exclusion tools. Where such patterns are identified, ok500 may proactively contact the affected Account holder and, where appropriate, apply protective restrictions. See our Responsible Gaming page for full details.
Data Sharing & Disclosure
ok500 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
4.1 Payment Processors and Financial Institutions
To process deposits and withdrawals, ok500 shares the minimum necessary payment data with the relevant bank or e-wallet operator. This may include your name, account number, and transaction amount. These entities are subject to their own data protection obligations and are not authorized to use your data for any purpose other than processing the specific transaction.
4.2 Identity Verification Providers
KYC documents and identity data may be shared with licensed third-party identity verification providers who perform document authentication and facial matching on our behalf. These providers operate as data processors under contractual agreements that restrict their use of your data to the KYC service only.
4.3 Game Studio Providers
ok500 integrates games from third-party studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft. These providers may receive session tokens and non-personal technical identifiers to facilitate gameplay. They do not receive your name, contact details, or payment data. Live game session recordings are retained by the provider and may be used to resolve disputes relating to live game outcomes.
4.4 Legal and Regulatory Disclosure
ok500 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by law, by court order, or where we have a good-faith belief that such disclosure is necessary to investigate or prevent fraud, money laundering, or other criminal activity. Where legally permissible, we will notify you of any such disclosure.
4.5 Business Transfers
In the event that ok500 undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by ok500 may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained. We will provide reasonable notice of any such transfer via the Platform.
Data Retention
ok500 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations, whichever is longer. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of Account + 5 years after closure | AML / legal obligation |
| KYC / identity documents | 5 years from date of verification | AML / legal obligation |
| Financial transaction records | 5 years from date of transaction | AML / financial record-keeping |
| Gaming & wagering activity | Duration of Account + 2 years after closure | Dispute resolution / legitimate interest |
| Support communications | 2 years from last interaction | Legitimate interest / dispute resolution |
| Technical / device logs | 12 months from collection | Security / fraud detection |
| Marketing consent records | Duration of consent + 2 years | Legal obligation to demonstrate consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.
Account Closure and Data
Closing your ok500 Account does not result in the immediate deletion of all personal data. Regulatory obligations require us to retain certain categories of data — particularly KYC documents and financial transaction records — for the periods stated above. If you wish to understand exactly what data is held about you following Account closure, you may submit a Subject Access Request to [email protected].
Security Measures
ok500 takes the security of your personal data seriously and implements a range of technical and organizational measures designed to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to, the following:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the ok500 platform.
- Encryption at rest for all sensitive personal data stored on our servers, including identity documents and financial records.
- Hashed password storage — we never store your password in plaintext. Passwords are stored using industry-standard one-way hashing with salt.
- Two-factor authentication (2FA) available to all Account holders as an additional login security layer.
- Role-based access controls ensuring that only authorized ok500 personnel can access personal data, and only to the extent required for their specific job function.
- Regular security audits and penetration testing conducted by independent third-party security specialists.
- Intrusion detection and monitoring systems that alert our security team to anomalous access patterns in real time.
- Strict third-party vetting — all data processors and service providers who handle personal data on ok500's behalf are required to meet equivalent security standards under binding contractual terms.
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. If you suspect that your Account has been compromised, please contact our support team immediately at [email protected] or via live chat. We will act promptly to investigate and, where necessary, suspend the Account to prevent further unauthorized activity.
Provably Fair & Certified Security
All RNG-based games on ok500 — including slots and virtual table games — use certified Random Number Generator software audited by independent testing laboratories. Our platform operates under international licensing with SSL encryption, verified payment integrations, and continuous fraud monitoring to ensure a safe gaming environment for all players across Indonesia.
Cookies & Tracking Technologies
ok500 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and deliver relevant promotional content. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot be used to access other data on your device.
7.1 Strictly Necessary Cookies
These cookies are essential for the ok500 platform to function. They enable core functionality such as session authentication (keeping you logged in), balance display, and game loading. They do not collect personal data beyond what is required to operate the session. You cannot opt out of strictly necessary cookies without also opting out of using the platform.
7.2 Performance and Analytics Cookies
These cookies collect anonymized information about how users interact with the ok500 platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data helps us improve platform performance and user experience. No personally identifiable information is collected via these cookies.
7.3 Functional Cookies
Functional cookies remember choices you make on the platform — such as your preferred language, last-used payment method, and responsible gaming settings — to provide a more personalized experience. These cookies do not track browsing activity on other websites.
7.4 Marketing and Targeting Cookies
With your consent, ok500 may use targeting cookies to deliver promotional content that is relevant to your gaming interests and activity on the platform. These cookies may track your engagement with bonus offers and game categories. You may withdraw consent for marketing cookies at any time by updating your cookie preferences in your Account settings.
7.5 Managing Cookies
Most web browsers allow you to control cookies through the browser's settings. You may block or delete cookies at any time; however, blocking strictly necessary cookies will impair your ability to use the ok500 platform. For guidance on managing cookies in your specific browser, consult your browser's help documentation. Please note that clearing cookies will log you out of your ok500 Account and reset any session-based preferences.
Your Privacy Rights
ok500 respects your rights as a data subject. The following rights are available to you in relation to the personal data we hold about you. To exercise any of these rights, please submit a request to [email protected] with sufficient detail to identify your Account and the specific right you wish to exercise. We will respond within 30 calendar days of receiving a valid request.
Right of Access
Request a copy of all personal data ok500 holds about you, including the categories of data, the purposes for which it is processed, and any third parties it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held about you. Note that corrections to KYC documents may require re-verification.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restrict Processing
Request that we restrict processing of your data in certain circumstances, such as when you contest its accuracy or object to its use for a specific purpose.
Right to Data Portability
Request a structured, machine-readable export of the personal data you have provided to ok500 directly, where processing is based on your consent or contractual necessity.
Right to Object
Object to processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, subject to our demonstrating a compelling legitimate ground.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Right to Lodge a Complaint
If you believe ok500 has processed your data in a manner that violates applicable privacy law, you have the right to lodge a complaint with the relevant supervisory or data protection authority in your jurisdiction.
Important Note on Retention Obligations
Certain rights — particularly the right to erasure and the right to restrict processing — may be limited where ok500 has a legal obligation to retain data, such as KYC records and financial transaction logs required under AML regulations. In such cases, we will explain the specific legal basis for retention and delete the data as soon as the retention obligation expires.
Minors & Age Policy
ok500 operates a strict 21+ age policy across all products and services. The platform is not intended for and does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an Account, deposit funds, place wagers, or otherwise use the ok500 platform.
If ok500 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21 — whether through a false date of birth provided during registration or any other means — we will take the following immediate action:
- Suspend the Account and freeze any associated Balance pending investigation.
- Request identity verification documents to confirm the user's age.
- If underage use is confirmed, permanently close the Account and securely delete all personal data associated with the Account, except where retention is required for fraud reporting purposes.
- Any funds in the Account will be returned to the originating payment method to the extent technically feasible; winnings derived from underage wagering will be forfeited.
Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you believe that a minor has registered an ok500 Account, please contact us immediately at [email protected].
Changes to This Policy
ok500 reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new product features, or feedback from our player community. When we make material changes to this policy, we will notify you by one or more of the following means:
- Posting a prominent notice on the ok500 homepage and platform dashboard.
- Sending a notification to the email address registered to your Account.
- Displaying an in-platform notification the next time you log in after the change takes effect.
The "Effective Date" and "Last Reviewed" dates at the top of this page will be updated each time a revision is published. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the ok500 platform following notification of a material change constitutes your acceptance of the revised policy.
If you do not agree with any changes to this Privacy Policy, you should discontinue use of the platform and contact our support team to request Account closure. We will process any such request in accordance with the data retention periods outlined in Section 5.
Stay Informed
The most current version of this Privacy Policy is always available at https://ok500.bio/privacy-policy. If you have any questions about a recent change, please contact our support team at [email protected] and we will be happy to clarify.
Contact & Data Requests
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ok500 holds about you, please contact our Data Privacy team using the details below. We are committed to responding to all legitimate privacy inquiries within 30 calendar days.
11.1 General Privacy Inquiries
For general questions about this Privacy Policy or ok500's data practices, please contact our support team. Our agents are available 24/7 and are equipped to handle privacy questions in both English and Bahasa Indonesia.
Email: [email protected] (plain text — not a clickable link)
Response time: Within 2 business days for general inquiries; within 30 calendar days for formal Subject Access Requests.
Support hours: 24/7, Western Indonesia Time (WIB, UTC+7)
11.2 Subject Access Requests
To submit a formal Subject Access Request (SAR) — requesting a copy of all personal data ok500 holds about you — please email [email protected] with the subject line "Subject Access Request" and include your full name, registered email address, and a brief description of the data you are requesting. We may ask you to verify your identity before processing the request to ensure your data is not disclosed to an unauthorized party.
11.3 Data Deletion Requests
To request deletion of your personal data, please email [email protected] with the subject line "Data Deletion Request". Please note that certain data — particularly KYC documents and financial transaction records — must be retained for the periods specified in Section 5 in order to comply with AML and financial record-keeping obligations. We will confirm which data can be deleted immediately and which must be retained, along with the applicable retention end date.
11.4 Marketing Opt-Out
To opt out of marketing communications, you may either: (a) click the unsubscribe link in any marketing email you have received from ok500, (b) update your communication preferences in your Account settings under "Notifications", or (c) contact our support team at [email protected] and request removal from all marketing lists. Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional messages such as deposit confirmations, withdrawal notifications, or security alerts.
Why Players Trust ok500 With Their Data
From the moment you register your Account to every wager placed on the ok500 platform, your personal information is protected by multiple layers of security, compliance, and transparent data governance.
256-Bit SSL Encryption
Every data transfer between your device and ok500's servers is protected by bank-grade 256-bit SSL/TLS encryption. Your personal and financial information travels securely at all times.
Rigorous KYC Standards
Our Know Your Customer process protects you and the wider player community. Identity verification ensures that only eligible adults aged 21 and over can access the platform, keeping it safe for everyone.
We Never Sell Your Data
ok500 does not sell, rent, or trade your personal information to any third party for commercial marketing purposes. Your data is used only to operate the platform and fulfil our legal obligations.
Transparent Data Practices
This Privacy Policy is written in plain, professional English so that you can understand exactly how your data is used — no legal jargon designed to obscure, no hidden clauses buried in fine print.
Secure Local Payments
Deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja are processed through encrypted, verified payment integrations. Your banking details are never stored on ok500 servers in full.
24/7 Privacy Support
Our support team is available around the clock, every day of the year, in both English and Bahasa Indonesia. Submit a Subject Access Request, data deletion request, or any privacy question and receive a response within 30 days.
Ready to Play Securely at ok500?
Your data is protected. Your experience is trusted. Explore our full range of games — from live casino and slots to sportsbook and togel — with the confidence that ok500 handles your privacy with the highest standards.