ollo Platform Privacy Notice

This page describes what we collect when you use ollo and how we keep that data protected. We at ollo take your privacy seriously: we encrypt sensitive information, limit access to authorised staff, and do not sell your personal data to third parties. Our privacy commitments apply whether you access ollo from your Android phone, iPhone browser, or desktop computer.

When you create an ollo account, we collect your email, name, address, phone number, and government-issued ID (during KYC verification). We use these details solely to verify your identity, process your deposits and withdrawals, and comply with applicable regulations in supported jurisdictions. We do not use your data to target you with marketing unless you explicitly opt in, and you can withdraw consent at any time by adjusting your notification settings on the ollo app or desktop dashboard.

Our ollo infrastructure includes servers and payment processors that may be located outside your jurisdiction. We maintain the same data protection standards regardless of server location, and all data transfers use encryption. This notice outlines your rights and how to contact us if you have privacy concerns.

What Data We Collect and How Our ollo Platform Uses It

Personal data we collect during account creation

When you create an ollo account, we collect your email address, full name, date of birth, residential address, and phone number. This information is mandatory to set up your account and comply with Know Your Customer (KYC) regulations in supported jurisdictions. We also collect your IP address and device type (Android, iPhone, desktop) to track login locations and prevent unauthorised access.

During KYC verification, we ask you to upload a government-issued ID (national ID, passport, or driver's license) and proof of address (utility bill, rental agreement, or official correspondence). We store these documents securely in encrypted form and use them only to verify your identity. We do not use your ID or address proof for any other purpose, and we delete these documents after the required retention period unless you request otherwise.

Payment and transaction data on ollo

We collect records of all your deposits and withdrawals, including the payment method used (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), the amount, and the timestamp. We do not store your full bank card or e-wallet credentials—only tokenised references that allow our payment processors to charge your account for future transactions. This means we cannot see your password or sensitive card details; that information stays with your bank or e-wallet provider.

Your ollo account balance and transaction history are displayed in your dashboard at all times. You can download a full transaction report for tax or personal record-keeping purposes. We retain transaction records for seven years to comply with financial regulations in supported jurisdictions.

Gaming activity and account behaviour

We collect data about your gameplay: which games you access (live-dealer tables like blackjack and roulette, slots like Aviator and Sweet Bonanza, or sportsbook markets covering Liga 1, Piala AFF, Champions League, etc.), how long you play, and the outcomes of your wagers. This data helps us personalise your account experience—for example, we may recommend games similar to ones you have played before—and detect fraudulent activity or account abuse. We do not sell this gameplay data to third parties; we use it only internally for account security and service improvement.

We also log when you reset your password, enable two-factor authentication, or request account recovery. These security actions are recorded so we can help you regain access if your account is compromised and provide evidence if you dispute unauthorised activity.

Data Protection, Third-Party Processors, and Your Rights on ollo

How our ollo platform protects your data

We at ollo use industry-standard encryption (TLS 1.2 or higher) to protect all data transmitted between your device and our servers. Your password is hashed using a strong algorithm; we never store your password in plain text. Sensitive information (ID documents, KYC verification status, account balance) is encrypted at rest on our servers. Access to this data is restricted to authorised ollo staff members who have signed confidentiality agreements.

Our infrastructure is maintained on secure servers with regular security audits and penetration testing. We implement firewall protection, intrusion detection, and multi-factor authentication for staff access. If we discover a data breach, we will notify you and relevant regulators within the timeframes required by applicable law. Our data centres are located in multiple regions to ensure service continuity; your data may be replicated across geographically separated servers for backup purposes, but encryption keys remain secure and separate.

Third-party processors and data sharing

We share your data with third-party service providers who help us operate ollo: payment processors (who handle deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers), identity verification providers (who confirm your KYC documents), and customer support platforms (where your inquiries are logged and tracked). All third-party processors sign data processing agreements that require them to protect your data with the same encryption and access controls we use. We audit these processors annually to ensure compliance.

We may also share anonymised, aggregated data with regulators in jurisdictions where ollo operates. For example, we report total user counts and regional activity volumes—but never individual names or account details. If we receive a valid legal request (subpoena, warrant, or regulatory order) from law enforcement or a government agency in a supported jurisdiction, we may disclose your data to comply with applicable law. We will attempt to notify you of such requests before disclosure unless we are legally prohibited from doing so.

Your rights regarding your personal data

You have the right to request a copy of all personal data we hold about you. You can also request correction of inaccurate information (e.g., if your address changed) or deletion of your account and associated data, subject to applicable regulations. We will honour deletion requests within 30 days, except where we are required by law to retain your data (e.g., transaction records for financial compliance). To exercise these rights, contact our multilingual privacy team through the in-app help menu or email.

You also have the right to withdraw consent for marketing communications at any time. If you no longer wish to receive push notifications about new games, tournaments, or seasonal events (Idul Fitri, Idul Adha, Imlek promotions), visit your notification settings in the ollo app and disable the relevant categories. This does not affect operational notifications (account security alerts, deposit confirmations, withdrawal status updates), which are necessary for account management.

• 1
  Data collection during account setupMandatory

  Email, name, address, phone, KYC documents. Used only for identity verification and compliance.

• 2
  Encryption and secure storageProtection

  All data encrypted at rest and in transit. Access restricted to authorised staff only.

• 3
  No third-party salesPolicy

  We do not sell personal data to advertisers. Data shared only with payment processors and regulators where legally required.

• 4
  Your rights and contactAccess & Control

  Request copy of data, correct information, delete account, or opt out of marketing. Contact privacy team via app or email.

Cookies and tracking on ollo

Our ollo platform uses cookies to remember your login preferences, language settings, and betting history on your device. These cookies are stored locally on your Android phone, iPhone, or desktop and are not shared with third parties. If you clear your browser cache or uninstall the ollo app, these cookies are deleted. You can disable cookies in your device settings, but this may affect app functionality (e.g., you may need to re-enter your password on every login).

We also use analytics tools to measure how users interact with ollo—for example, which games are most popular in Jakarta, Surabaya, Bandung, or Medan, and how many users access the app on Android versus iOS. This data is aggregated and anonymised; we cannot link it to individual accounts. Analytics help us improve our service and troubleshoot technical issues.

Data retention and deletion

We retain your personal data for as long as your ollo account is active. If you request account deletion, we delete most personal data within 30 days, except for transaction records, which we retain for seven years to comply with financial regulations. KYC documents (ID and address proof) are deleted within 90 days of account closure unless we are required by law to retain them longer. You can request deletion by contacting our privacy team; we will confirm when your data has been removed from our active systems.

If you have privacy concerns or wish to exercise your rights, contact our multilingual privacy team. We will respond to data access requests within 14 days and to deletion requests within 30 days. Our commitment to data protection applies across all ollo access methods—Android app, iOS browser, and desktop—and across all jurisdictions where we operate. These privacy commitments are effective as of the date listed on this page and may be updated to reflect changes in applicable law or ollo practices. We will notify you of material changes by email or through the ollo app.