osaka89 Privacy Policy

This page describes what we collect when you use osaka89 and how we keep that data protected. Our privacy commitments apply to all users across all supported regions—Jakarta, Surabaya, Bandung, Medan, and other areas where our services operate within applicable law. We collect personal information to verify your identity, process payments via DANA, e-wallet, mobile banking, local payment, and virtual accounts from online payment, e-wallet, mobile banking, and local payment, and comply with anti-money-laundering regulations.

We do not sell your data to marketers or data brokers. We do not use your information for purposes unrelated to account administration, payment processing, fraud prevention, and legal compliance. We encrypt data at rest and in transit, and we restrict access to authorized internal teams and contractually bound third-party processors.

Your rights regarding your data—access, correction, deletion—are described below. If you have concerns about how we handle your information, contact our compliance team using the channels listed on our legal notice page.

Data We Collect and Why

We collect different categories of data depending on how you interact with osaka89. When you register, we collect your full name, date of birth, national identification number, residential address, and email address. This information is required for Know Your Customer (KYC) verification and to prevent fraud and account cycling.

When you fund your account, we collect payment information—your e-wallet username, bank account number, or QRIS identifier—to process deposits. When you withdraw, we collect the destination account details and cross-check them against your verified banking information. We do not store full credit card numbers or banking credentials on our servers; payment processing occurs on segregated, PCI-compliant processors operated by third parties.

When you use osaka89, we collect behavioral data: login timestamps, game activity (which markets or games you engage with), deposit and withdrawal history, and IP addresses. We use this data to detect fraud, enforce our terms, and understand platform usage patterns. We retain this data for seven years to comply with anti-money-laundering law; after seven years, we securely delete it unless legal holds or disputes require longer retention.

How We Use Your Data

We use your personal information for the following purposes:

• Account administration: We use your name, email, and password to create and manage your osaka89 account. We use your address to verify residency and determine eligibility under local law.
• Identity verification and KYC: We cross-check your national ID, name, and date of birth against public databases and third-party verification services to confirm your identity and prevent fraud. This is a legal requirement for payment-service providers.
• Payment processing: We use your banking and e-wallet information to execute deposits and withdrawals. We share this information only with payment processors (banks, e-wallet operators, e-wallet networks) necessary to complete the transaction.
• Fraud detection and prevention: We analyze login patterns, deposit sources, withdrawal destinations, and game activity to detect suspicious behavior. If we flag unusual activity, we may temporarily freeze your account pending investigation.
• Legal compliance: We retain KYC documents, transaction records, and activity logs to comply with anti-money-laundering (AML) and counter-terrorism-financing (CTF) laws. We may share this information with government agencies, financial regulators, and law-enforcement authorities if required by law or court order.
• Communication: We send you emails about account changes, security alerts, promotional campaigns (if you opt in), and service updates. You can unsubscribe from promotional emails; you cannot unsubscribe from security and account-administration emails.

Third-Party Processors and Data Sharing

We share your data with the following categories of third parties:

• Payment processors: Banks (mobile banking, local payment, online payment, e-wallet), e-wallet operators (mobile banking, local payment, online payment, e-wallet, mobile banking), and local payment networks receive your payment information to execute deposits and withdrawals. These entities are bound by their own privacy policies and data-protection laws.
• Identity verification vendors: We contract with third-party services to verify your national ID against public records. These vendors have access to your name, ID number, date of birth, and address for verification purposes only.
• Fraud prevention services: We share anonymized behavioral data with fraud-detection vendors to improve our detection systems. This data is aggregated and does not include personally identifiable information.
• Legal and regulatory bodies: We disclose your data to government agencies, financial regulators, law-enforcement authorities, and judicial bodies if required by law, court order, or legitimate law-enforcement request. We comply with all lawful data-disclosure requests and do not resist such requests without legal cause.
• Our internal teams: Your data is accessible to osaka89 staff who work in account management, compliance, fraud prevention, and customer support. All staff are bound by confidentiality agreements.

We do not share your data with marketers, advertisers, or data brokers for commercial purposes. We do not use your information to build consumer profiles for third-party sale.

Data Location and International Transfer

Our servers may be located outside your jurisdiction. Your osaka89 data may be processed, stored, or transferred across borders to cloud infrastructure, backup systems, or third-party processors located in different countries. By using osaka89, you acknowledge and consent to this international data transfer. If you are located in a jurisdiction with strict data-localization requirements, you should consult local legal counsel before registering.

We apply consistent encryption and access controls to all data regardless of server location. International data transfers are protected by standard contractual clauses or adequacy determinations under applicable data-protection law.

Cookies and Tracking Technologies

We use cookies to store your session token, remember your language preferences, and track user interactions for analytics. Session cookies expire when you log out; preference cookies may persist for up to one year. We use Google Analytics to track aggregate usage statistics (which pages are visited, how long users stay, which game categories are popular). Google Analytics is subject to Google's privacy policy; we do not control Google's data-collection practices.

We do not use third-party tracking pixels or retargeting cookies. We do not sell behavioral data to advertisers. You can disable cookies in your browser settings, though this may limit platform functionality (for example, you will be logged out more frequently).

We at osaka89 treat data protection as a core responsibility. Your information funds your account, settles your transactions, and protects you from fraud—nothing more.

Your Rights Regarding Your Data

Under applicable data-protection law, you have the following rights:

• Right to access: You can request a copy of all personal data we hold about you. We provide this in a readable format within 30 days of your request.
• Right to correction: If your personal data is inaccurate or incomplete, you can request that we correct it. We update your information promptly and notify you of any changes.
• Right to deletion: You can request deletion of your personal data, subject to legal retention obligations. We must retain KYC documents, transaction records, and activity logs for seven years to comply with anti-money-laundering law. After that retention period expires, we delete your data unless legal holds or disputes require longer retention.
• Right to restrict processing: You can request that we limit how we use your data. For example, you can ask that we process your data only for essential account administration and payment, not for analytics or marketing.
• Right to data portability: You can request that we provide your data in a machine-readable format so you can transfer it to another platform or organization.

To exercise any of these rights, contact our compliance team via the channels listed on our legal notice page. Include your account email and a clear description of your request. We acknowledge all data-subject requests within three business days and aim to fulfill them within 30 days (or longer if the request is complex or requires legal review).

Data Retention and Deletion

We retain your personal data for as long as necessary to fulfill the purposes for which we collected it. Broadly:

• KYC documents (ID copy, address proof, selfie) are retained for seven years per anti-money-laundering law.
• Transaction records (deposit and withdrawal history, amount, destination) are retained for seven years.
• Account login and activity logs are retained for two years for security and fraud-investigation purposes.
• Communication records (support tickets, email exchanges) are retained for two years unless a dispute or legal claim is pending.
• Payment processor data (card numbers, bank account numbers, e-wallet credentials) is not stored on osaka89 servers; it is deleted immediately after transaction processing by the payment processor.

After the applicable retention period expires, we securely delete your data using encryption and overwrite methods. If you request data deletion before the retention period expires, we comply unless law or active disputes require us to retain the data longer.

Security and Breach Notification

We protect your osaka89 data using encryption (TLS 1.2 or higher for transmission, AES-256 for storage), firewalls, access controls, and regular security audits. We undergo annual third-party security testing and maintain cyber-liability insurance.

If a data breach occurs—unauthorized access to your personal information, theft of encrypted data, or compromise of our systems—we notify you and relevant authorities within 30 days as required by law. We provide details of the breach, the data affected, and the measures we are taking to remediate and prevent recurrence.

Contact and Data-Subject Requests

If you have questions about our privacy policy, concerns about how we handle your data, or want to exercise your data rights, contact us via the channels on our legal notice page. We respond to all inquiries within one business day and provide detailed answers within five business days. Urgent matters (security breaches, unauthorized access) are escalated and addressed within 24 hours.

We also process data-subject requests (access, deletion, correction) formally through our compliance team. Submit your request in writing with your account email and a description of what you need. We log all requests and provide you with a reference number for tracking.