Privacy Policy — How oke76 Handles Your Data

oke76 ("oke76", "we", "us", "our") operates the online casino and sportsbook platform accessible at oke76.bio (the "Platform"). This Privacy Policy governs the collection, processing, storage, and transfer of personal data relating to individuals who visit, register on, or interact with the Platform ("you", "your", "Player").

This Privacy Policy is incorporated into and should be read alongside the oke76 Terms & Conditions. Terms defined in the Terms & Conditions carry the same meaning here unless otherwise stated. By creating an account on the Platform or by continuing to use the Platform after this Policy's effective date of 1 January 2026, you acknowledge that you have read and understood how oke76 processes your personal data as described in this document.

oke76 is committed to handling personal data responsibly and in a manner consistent with internationally recognized data protection principles, including purpose limitation, data minimization, storage limitation, integrity, and confidentiality. Where Indonesian law imposes specific obligations on the processing of personal data belonging to Indonesian residents, oke76 applies those obligations in full.

For the purposes of this Privacy Policy, oke76 is the data controller responsible for personal data collected through the Platform. As data controller, oke76 determines the purposes for which personal data is processed and the means by which that processing takes place.

Where oke76 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification providers, or analytics platforms — those providers act as data processors and are contractually bound to process data only in accordance with oke76's documented instructions and applicable data protection obligations. A list of current data processor categories is maintained internally by oke76 and is available upon request via the contact details in Clause 14.

oke76 collects personal data in three ways: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party providers in the course of delivering platform services. The categories of personal data collected are set out in the table below.

oke76 does not collect sensitive special-category data (such as health information, biometric data, or religious affiliation) unless you voluntarily provide it in a support communication, in which case it is used solely to address the specific matter raised and is not retained beyond the resolution of that matter.

oke76 processes personal data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected. The primary purposes for which we process personal data are as follows:

oke76 processes personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between oke76 and you as a registered Player — including account creation, payment processing, game delivery, and support — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with applicable laws — including identity verification, AML obligations, and responses to lawful regulatory or law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, Platform security, usage analytics, and quality assurance is carried out on the basis of oke76's legitimate interests in operating a safe and commercially viable platform, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications is carried out on the basis of your explicit opt-in consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

oke76 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

oke76 retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to any legal obligation to retain data for a longer period. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with an identifiable individual.

oke76 implements a layered security architecture to protect personal data against unauthorized access, accidental loss, destruction, or alteration. The primary technical and organizational measures in place include:

• Transport Encryption: All data transmitted between your device and the oke76 Platform is encrypted using TLS 1.3, ensuring that session data, login credentials, and financial information cannot be intercepted in transit.
• Password Security: Account passwords are stored as salted bcrypt hashes. oke76 never stores passwords in plaintext and cannot retrieve your original password — only reset it through a verified reset flow.
• Access Controls: Access to personal data within oke76's internal systems is governed by role-based access controls. Only personnel with a documented operational need may access identifiable player data, and all internal access is logged for audit purposes.
• Intrusion Detection: oke76 operates automated systems that monitor for anomalous access patterns, brute-force login attempts, and unusual transaction behavior in real time.
• Third-Party Security Standards: All data processors engaged by oke76 are required to demonstrate compliance with recognized information security standards as a condition of their engagement contracts.

The oke76 Platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, and collect anonymized usage statistics. The categories of cookies used are as follows:

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair Platform functionality. Blocking analytics or preference cookies will not prevent you from accessing your account or playing games. For full details on the specific cookies deployed on the Platform, contact oke76 support.

As a data subject whose personal information is processed by oke76, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to oke76 at the contact details provided in Clause 14. oke76 will respond to all valid data rights requests within 30 days of receipt.

Please note that certain rights — particularly the right to erasure — may be limited where oke76 is required by law to retain personal data for a defined period (see Clause 7). In such cases, oke76 will explain the specific legal basis for continuing to hold the data in question.

The oke76 Platform is strictly intended for adults. Access to all real-money gaming features is limited to individuals who are 21 years of age or older. oke76 does not knowingly collect personal data from individuals under the age of 21.

Age is verified as part of the mandatory KYC process that every Player must complete before a first withdrawal is processed. Where oke76 has reason to believe that a Player may be under 21 — including as a result of information received from a third party or identified through internal review — the account will be immediately suspended pending investigation. If underage access is confirmed, the account will be permanently closed, any balance will be forfeited, and all personal data associated with the account will be deleted subject to any applicable legal retention obligations.

If you have reason to believe that a minor has registered an account on the oke76 Platform, please contact us immediately at the address in Clause 14 so that we can investigate and take appropriate action.

The oke76 Platform serves players across Indonesia, and the majority of data processing operations are conducted within or in close proximity to the Indonesian market. However, some of our third-party service providers — in particular, game providers such as Evolution Gaming and Pragmatic Play — operate infrastructure in jurisdictions outside Indonesia.

Where personal data is transferred to a country outside Indonesia, oke76 takes appropriate safeguards to ensure that the transfer is conducted in a manner consistent with applicable data protection principles. These safeguards may include data processing agreements that incorporate internationally recognized standard contractual clauses, or transfers to providers who operate within jurisdictions that maintain recognized adequacy standards for data protection.

In all cases, personal data transferred to third-party game providers is limited to the minimum technical identifiers required to establish and maintain a game session (such as a pseudonymous session token and currency denomination). Full identity and financial data is not transmitted to game providers.

oke76 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. Where a change is material — for example, a new category of data being collected, a new purpose for processing, or a new category of data recipient — oke76 will notify registered Players by email to their registered address at least 14 days before the change takes effect.

Non-material clarifications or corrections (such as fixing a typographical error, updating contact information, or reorganizing sections without changing their substance) may be made without advance notice, and the updated Policy will be published on the Platform with a revised effective date.

Continued use of the oke76 Platform after the stated effective date of any updated Privacy Policy constitutes your acceptance of the revised document. If you do not agree with a material change, you may close your account in accordance with the procedure described in the Terms & Conditions, and your verified real-money balance will be returned to your registered payment method.

This Privacy Policy was last updated on 1 January 2026. Version 1.0.

For any questions about this Privacy Policy, to exercise your data rights under Clause 10, or to report a suspected data protection concern, please contact the oke76 data protection team using the details below.

For urgent account security matters — such as suspected unauthorized account access — please use the 24/7 live chat available on the Platform to reach the oke76 support team immediately, in addition to sending an email as described above.