oborPrivacy Policy
This page describes what we collect when you use obor and how we keep that data protected. We at obor take data privacy seriously and comply with applicable data-protection regulations in our operating jurisdictions. When you register, deposit, bet on Liga 1 matches, join a live blackjack table, or withdraw your winnings, we collect information necessary to operate our platform, verify your identity, process payments, and comply with legal obligations.
We collect your name, contact information, government-issued ID details, transaction history, device information, and gameplay data. We use this data to authenticate your account, process deposits and withdrawals via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer, detect fraud, and improve our service. We do not sell your personal data to third parties. We may share data with payment processors, regulatory authorities, and law enforcement where required by law.
This policy covers what we collect, how we use it, your rights over your data, and how to contact us if you have privacy concerns. Our policy applies to all obor users regardless of location within supported jurisdictions.
What data we collect on obor
We at obor collect data in several categories. First, account and identity data: when you register, we collect your legal name, date of birth, email address, and mobile phone number. Before your first withdrawal, we require Know-Your-Customer (KYC) verification: you upload a photo of your government-issued ID (e.g., KTP, passport, or driver's license) and a selfie holding that ID. We use this data to verify your identity and prevent account fraud.
Second, payment and transaction data: when you deposit or withdraw, we collect details of your payment method (bank account number, e-wallet account, or QRIS code), transaction amount, timestamp, and status (completed, pending, or failed). We retain this data for compliance and dispute resolution. We do not store your full payment credentials — payment processors handle sensitive data like card numbers or bank-account details.
Third, platform usage data: we collect information about which games you play, how long you play, your bets and winnings, your device type (Android, iOS, or desktop), browser, IP address, and location (country and city level from IP geolocation). We use this data to operate our platform, detect suspicious activity, and analyze user behavior to improve our service.
- Account data
- Name, date of birth, email, phone number, government ID, selfie.
- Payment data
- Deposit/withdrawal method, amount, timestamp, status.
- Usage data
- Games played, bets, winnings, device type, IP address, location.
- Communication data
- Chat logs, support tickets, feedback, and inquiries.
How we use your data
We at obor use your data for the following purposes: operating and maintaining our platform, authenticating your account, processing deposits and withdrawals, verifying your identity via KYC, detecting and preventing fraud, investigating disputes, complying with legal obligations, and improving our service through analytics and user-behavior studies.
We do not use your data for marketing without your consent. We do not sell your data to advertisers or data brokers. We may share your data with third-party service providers who help us operate our platform: payment processors (who handle e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking transactions), cloud storage providers, and analytics platforms. We require all third-party processors to keep your data confidential and secure.
We may share your data with law enforcement, regulatory authorities, or courts if legally required (e.g., in response to a subpoena, court order, or government inquiry). We may also share data if we believe disclosure is necessary to prevent fraud, protect the safety of our platform, or comply with applicable law.
Data storage and security
We at obor store your data on secure servers located in Indonesia and potentially other jurisdictions. All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS). Sensitive data such as government ID photos and password hashes are encrypted at-rest using AES-256 encryption. Your password is hashed and salted — we do not store your password in plain text and cannot retrieve it.
We maintain access controls and logging systems to monitor who accesses your data within obor. Only authorized personnel (compliance officers, fraud investigators, customer support) can access your personal data, and only for legitimate business purposes. We conduct regular security audits and penetration tests to identify and fix vulnerabilities.
Despite our security measures, no system is completely secure. We cannot guarantee that your data will never be breached. If we discover a security incident affecting your data, we notify you by email and in-app message as required by law.
We at obor store your data securely using industry-standard encryption. Your payment details are encrypted end-to-end, and your password is never stored in plain text.
Your rights over your data
You have the right to access, correct, and delete your personal data under applicable data-protection regulations. You may request a copy of all data we hold about you by contacting our support team. We provide this data in a structured, machine-readable format within 30 days of your request. You may also request that we delete your data, subject to legal obligations — for example, we must retain transaction records for compliance and dispute resolution for a minimum period.
If your data is inaccurate (e.g., your name is misspelled in our records), you may request correction. We correct inaccuracies within 7 business days. If you believe we have processed your data unlawfully, you may lodge a complaint with your local data-protection authority.
Cookies and tracking
We at obor use cookies and similar tracking technologies to remember your login status, store your preferences, and analyze your behavior on our platform. Our cookies fall into two categories: essential (required for obor to function) and analytical (used to measure traffic and improve our service). We do not use third-party cookies for advertising or tracking across other websites.
You may disable cookies in your browser settings, but some obor features may not work if essential cookies are disabled. Your choice to disable cookies does not affect our legal obligations to retain your transaction data for compliance.
International data transfer
obor operates globally with users across Jakarta, Surabaya, Bandung, Medan, Semarang, and other regions. Our servers may sit outside your jurisdiction. By using obor, you consent to the transfer of your data outside your country of residence. We comply with applicable data-protection standards and international agreements to ensure your data is protected even when transferred internationally.
Data retention
We at obor retain your personal data for as long as necessary to provide our service and comply with legal obligations. Your account data (name, email, government ID) is retained for the lifetime of your account plus a minimum of five years after account closure to satisfy compliance and dispute-resolution requirements. Your transaction data (deposits, withdrawals, bets) is retained for a minimum of seven years as required by anti-money-laundering regulations.
Your gameplay data (games played, bets, winnings) is retained for two years from the date of each transaction. After the retention period expires, we delete or anonymize your data. If we cannot delete data due to legal holds or ongoing disputes, we retain it under secure, restricted access until deletion is possible.
Third-party links and services
Our obor platform may include links to external websites or third-party services (e.g., payment gateways, game studios). We are not responsible for the privacy practices of third parties. We recommend reviewing the privacy policies of any external sites you visit. Our privacy policy applies only to data collected through obor.
Children and minors
We at obor do not knowingly collect data from anyone under 21 years of age. Our platform is intended for adults only. If we discover that we have collected data from a minor, we delete that data and close the account immediately. Parents or guardians who believe a minor has created an obor account should contact us immediately.
Policy changes
We reserve the right to modify this privacy policy at any time. If we make material changes, we notify you via email and in-app message at least 7 days before the change takes effect. Continued use of obor after the notification period constitutes acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your data.
Contact obor
If you have questions about our privacy practices, wish to exercise your data rights, or believe we have mishandled your data, contact our support team. You may reach us via in-app chat, email ([email protected]), or the contact form on our website. We respond to all privacy inquiries within 10 business days. For urgent privacy concerns, use in-app chat for priority handling.