Privacy Policy

1 Overview

oma555 is committed to handling your personal information with integrity, transparency, and a genuine respect for your privacy. We collect only the data that is necessary to provide a secure, fair, and enjoyable online gaming experience to players across Indonesia — including in Jakarta, Surabaya, Medan, Bandung, Bali, and beyond.

This Policy applies to all individuals who visit the oma555 website, register an account, participate in any game or promotion, or interact with our customer support team. It covers data collected through the website, through third-party payment processors, and through our communication channels including live chat, email, and messaging platforms.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, including name, email address, phone number, IP address, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means oma555, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of oma555 under a binding agreement and in accordance with our instructions.
• "User" / "Player" / "you" means any individual who accesses or uses the oma555 platform.
• "KYC" means Know Your Customer procedures, encompassing identity verification, age verification, and source-of-funds checks.
• "Cookies" means small text files placed on your device by the oma555 website to facilitate session management, analytics, and personalization.

3 Data We Collect

oma555 collects personal data across several categories, each serving a distinct and necessary purpose in the delivery of our services:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (for age verification — all players must be 21 or older).
• Email address and mobile phone number.
• Residential address and city of residence within Indonesia.
• National identity card number (KTP) or passport number, collected during KYC verification.

3.2 Financial Data

• Bank account details for withdrawal processing, including account holder name, account number, and the name of the issuing bank (e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga).
• E-wallet identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja where used for deposits or withdrawals.
• Transaction history: deposit amounts, withdrawal requests, bonus claims, and game wagering records.

3.3 Technical & Device Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Session timestamps, login history, and pages visited within the platform.
• Cookies, pixel tags, and similar tracking technologies as described in Section 10.

3.4 Communications Data

• Records of interactions with our customer support team via live chat, email, or messaging platforms.
• Feedback, complaints, and survey responses submitted voluntarily.

4 How We Collect Data

Personal data is collected through the following channels and mechanisms:

• Account Registration: You provide Identity & Contact Data directly when creating your oma555 account.
• KYC Verification: Documents you upload during the identity and age verification process are processed securely by our compliance team.
• Transactions: Financial data is collected when you initiate deposits or withdrawals through our supported payment channels.
• Platform Use: Technical and device data is collected automatically via server logs, cookies, and analytics tools as you browse and play on the platform.
• Customer Support Interactions: Communications data is collected when you contact our support team.
• Third-Party Sources: In limited circumstances, we may receive data from third-party identity verification providers or fraud prevention services to supplement information you have provided directly.

5 Purpose of Processing

oma555 processes your personal data only for the following specified, legitimate purposes:

6 Legal Basis for Processing

oma555 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfill our obligations under the Terms & Conditions you accepted at registration — for example, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Certain processing activities are mandated by applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and record-keeping duties imposed by our licensing authority.
• Legitimate Interests: We process Technical Data and Transaction History to detect fraud, maintain platform security, and improve the quality of our services, provided that such interests are not overridden by your fundamental rights.
• Consent: Where we send promotional emails or push notifications, we do so only with your prior opt-in consent. You may withdraw this consent at any time by contacting our support team.

7 Data Sharing & Disclosure

7.1 Third-Party Service Providers

oma555 engages carefully selected third-party vendors who process personal data on our behalf as Data Processors. These include payment gateway operators (facilitating transfers via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja), identity verification services, cloud hosting providers, and customer support software platforms. All such vendors are bound by data processing agreements that restrict them from using your data for any purpose beyond the specific service they provide to oma555.

7.2 Regulatory & Legal Disclosures

oma555 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where we determine in good faith that disclosure is necessary to protect the safety or rights of our players, staff, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the oma555 business, your personal data may be transferred to the acquiring entity as part of that transaction. We will take reasonable steps to ensure that the acquiring party honors the commitments made in this Policy.

7.4 No Sale of Personal Data

oma555 does not sell, rent, lease, or otherwise trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. This commitment is unconditional and applies regardless of whether you are an active, inactive, or closed-account holder.

8 Data Retention

oma555 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to meet AML and KYC record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• KYC Documents: Retained for five (5) years following the end of the customer relationship or the date of the last transaction, whichever is later.
• Communications Data: Support interaction records are retained for up to three (3) years from the date of the interaction.
• Technical / Log Data: Server logs and session data are retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

9 Security Measures

oma555 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• SSL / TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Access Controls: Personal data is accessible only to authorized personnel who require it to perform their specific job functions. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Data Minimization: We collect and retain only the minimum personal data necessary for each processing purpose, reducing the risk profile of our data holdings.
• Encryption at Rest: Sensitive data stored in our databases, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Penetration Testing: Our systems undergo regular third-party security assessments and vulnerability scans to identify and remediate potential weaknesses.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that poses a risk to your rights or freedoms, we will notify affected users and relevant authorities as required by applicable regulations.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They enable the website to remember your preferences, maintain your session, and gather aggregate usage data. oma555 uses cookies and similar tracking technologies — including pixel tags and local storage — to deliver a functional and personalized gaming experience.

10.2 Categories of Cookies We Use

• Essential Cookies: Required for the platform to function. They maintain your login session, remember your language preference, and facilitate secure transactions. These cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users navigate the platform. This helps us identify areas for improvement and optimize the player experience.
• Functionality Cookies: Remember your display preferences and previously viewed games so the platform feels consistent across sessions.
• Marketing Cookies: With your consent, these cookies allow us to show you relevant promotional content and measure the effectiveness of our marketing campaigns.

10.3 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling essential cookies will prevent you from logging into your account and using core platform features. Instructions for managing cookies are available through the help section of your browser.

11 Your Data Rights

As a player on the oma555 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at the address provided in Section 15.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations outlined in Section 8.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where it is based on our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

12 Minors

The oma555 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will immediately suspend the associated account, delete the data, and — where appropriate — report the matter to the relevant authorities.

If you are a parent or guardian and believe that your child has registered an account on oma555, please contact us immediately at [email protected] so that we can take prompt action.

13 International Data Transfers

oma555 operates internationally, and your personal data may be transferred to and stored on servers located outside of Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Policy. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on the data protection framework of the recipient country.

By using the oma555 platform and providing your personal data, you acknowledge and consent to the transfer of your data to countries outside Indonesia for the purposes described in this Policy.

14 Policy Updates

oma555 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will provide advance notice to registered users via email or an in-platform notification at least 7 days before the revised Policy takes effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically to remain informed about how we protect your personal data. Your continued use of the platform after any update constitutes acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to our Data Protection team using the details below: