odin55 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by odin55 in connection with the operation of the odin55 online gaming and sports betting platform accessible at odin55.ws, including all associated sub-domains, mobile interfaces, and APIs (collectively, "the Platform").

odin55 acts as the data controller in respect of the personal data you provide during registration, KYC verification, and ongoing use of the Platform. Where third-party service providers process personal data on our behalf — for example, payment processors handling your IDR transactions or identity verification providers conducting KYC checks — those providers act as data processors under contracts that require them to process data only on our documented instructions and to implement appropriate security safeguards.

This Policy applies to all Members who have registered an odin55 Account, including players in Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta, and all other regions of Indonesia, as well as any other jurisdiction from which the Platform is lawfully accessed.

This Policy should be read alongside odin55's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into the overall agreement between odin55 and each Member.

odin55 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and in limited cases from trusted third-party sources such as identity verification agencies. The categories of data we collect are set out below.

2.1 Registration & Identity Data. When you create an odin55 Account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to establish your account identity and to satisfy our age verification obligation — all Members must be at least 21 years of age.

2.2 KYC & Verification Documents. To comply with our anti-money-laundering and responsible gaming obligations, we collect copies of government-issued identification (national identity card, passport, or driving licence), proof of residential address (a utility bill or bank statement dated within 90 days), and where applicable, documentation confirming ownership of the payment method used for deposits. For Indonesian Members, this commonly includes documentation issued by agencies such as Disdukcapil (civil registry) or copies of BCA, BRI, BNI, or Mandiri account statements.

2.3 Financial Transaction Data. We record details of all deposits and withdrawals processed through your Account, including transaction amounts in IDR (Indonesian Rupiah), timestamps, payment method used (e.g., BCA bank transfer, OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction reference numbers. This data is retained for financial reconciliation, fraud prevention, and regulatory compliance purposes.

2.4 Gameplay & Wagering Data. We collect data about your gaming activity on the Platform, including game sessions, wager amounts, game outcomes, bonus activations, sportsbook bet selections (e.g., BRI Liga 1 football markets, EPL, Champions League, Mobile Legends MPL e-sports), and responsible gaming tool usage such as deposit limit adjustments and self-exclusion requests.

2.5 Technical & Device Data. When you access the Platform, we automatically collect your IP address, device type and operating system, browser type and version, session timestamps, pages visited, features accessed, and performance metrics. This data is used for platform security, fraud detection, and service improvement.

2.6 Communications Data. We retain records of communications between you and odin55 support, including live chat transcripts, email correspondence, and records of any complaints submitted. These records are used for quality assurance, dispute resolution, and regulatory compliance.

odin55 uses the personal data we collect for specific, clearly defined purposes. We do not use your data for purposes incompatible with those listed below without first obtaining your consent or establishing a separate lawful basis.

3.1 Marketing Communications. odin55 will send you promotional emails or push notifications about bonuses, seasonal promotions (including campaigns tied to Idul Fitri, Ramadhan, and Indonesian Independence Day), and new game launches only if you have opted in to receive such communications during registration or through your account settings. You may withdraw your marketing consent at any time by updating your preferences in your Account or by contacting support.

3.2 Automated Decision-Making. odin55 uses automated systems to detect unusual account activity, potential fraud, and indicators of problem gambling behaviour. Where an automated process results in a material decision affecting your account (such as a temporary restriction), you have the right to request human review of that decision. Please contact our support team to exercise this right.

odin55 processes personal data under one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the odin55 Terms & Conditions, including account management, payment processing, and providing access to gaming services.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering regulations, age verification requirements, and our international gaming licence conditions.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, responsible gaming monitoring, and service quality improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your explicit, freely given, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing that took place prior to withdrawal.

odin55 does not sell, rent, or trade your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the relevant purpose.

5.1 Payment Processors. To facilitate IDR deposits and withdrawals, odin55 shares necessary transaction and identity data with payment service providers operating the bank transfer rails (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and digital wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers receive only the data required to process the specific transaction and are contractually prohibited from using it for any other purpose.

5.2 Identity Verification Providers. odin55 uses trusted third-party KYC service providers to verify identity documents and conduct AML screening. These providers process your identity data solely for verification purposes under strict data processing agreements.

5.3 Game Studio Providers. When you play a game delivered by a third-party studio — such as Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Habanero, or Spribe — limited technical and session data is shared with that studio as required to operate the game. Game studios are contractually prohibited from using this data beyond the scope of game delivery.

5.4 Regulatory & Law Enforcement Authorities. odin55 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, in response to a lawfully issued request, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or harm to individuals.

5.5 Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of odin55's assets, your personal data may be transferred to the acquiring entity. We will notify affected Members via the email address registered to the Account before any such transfer takes effect.

odin55 is an internationally operated gaming platform. Your personal data may be transferred to, stored in, and processed in jurisdictions outside Indonesia where odin55 or its service providers maintain infrastructure. These jurisdictions may have data protection laws that differ from those applicable in Indonesia.

Where personal data is transferred internationally, odin55 implements appropriate safeguards to ensure that the data continues to receive a level of protection consistent with the principles set out in this Policy. These safeguards include standard contractual clauses incorporated into contracts with receiving parties, requirements that recipient organisations implement equivalent technical and organisational security measures, and, where applicable, adequacy assessments conducted prior to transfer.

By registering an odin55 Account, you acknowledge and accept that your personal data may be processed in international locations as described in this section.

odin55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised and aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

odin55 applies comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following controls:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the odin55 Platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. Login credentials, payment details, and personal information are never transmitted in plain text.
• Encryption at rest: Sensitive personal data stored in odin55's databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to odin55 personnel who require it to perform their job functions, enforced through role-based access control, multi-factor authentication, and audit logging.
• Penetration testing: odin55 conducts regular security penetration tests and vulnerability assessments to identify and remediate weaknesses before they can be exploited.
• Fraud detection systems: Automated systems monitor account activity and transaction patterns in real time to detect anomalies indicative of account takeover, identity fraud, or money laundering.
• Incident response: odin55 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Members without undue delay and in accordance with applicable legal requirements.

While odin55 implements robust security measures, no system is completely immune to risk. You are responsible for maintaining the security of your odin55 Login credentials and for logging out of the Platform when using shared devices. If you suspect your account has been compromised, contact our support team immediately.

odin55 uses cookies and similar tracking technologies (collectively, "cookies") to operate the Platform effectively, remember your preferences, analyse usage patterns, and support our security and fraud prevention systems.

9.1 Essential Cookies. These cookies are strictly necessary for the Platform to function. They include session management cookies that keep you logged in during a session, security tokens that prevent cross-site request forgery, and load-balancing cookies that ensure consistent platform performance. Essential cookies cannot be disabled without materially affecting your ability to use the Platform.

9.2 Analytics Cookies. odin55 uses analytics cookies to collect aggregated, anonymised information about how Members use the Platform — which pages are most visited, where users encounter errors, and how features are adopted. This data is used solely to improve the Platform and is not used to identify individual users.

9.3 Preference Cookies. These cookies remember choices you make — such as your preferred game view, language display settings, and responsible gaming tool configurations — so that you do not need to re-enter them each time you visit.

9.4 Managing Cookies. You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies from specific sites. Please note that disabling certain cookies may affect the functionality of the odin55 Platform. Browser-level cookie management instructions are available from your browser's help documentation.

As a Member of odin55, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact our Data Protection team using the details provided in Section 14. We will respond to all valid requests within 30 days.

Where odin55 is unable to fulfil a request — for example, because fulfilling it would conflict with a legal retention obligation — we will explain the reason in our response. If you are not satisfied with our response, you have the right to lodge a complaint with a competent supervisory authority.

The odin55 Platform is strictly intended for adults aged 21 and over. odin55 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process, and we reserve the right to suspend any Account and withhold associated data pending age confirmation.

If odin55 discovers that personal data has been collected from a person under the age of 21, that data will be deleted promptly, the associated Account will be permanently closed, and any funds deposited will be returned to the payment method used, after completion of requisite security checks.

If you are a parent or guardian and believe that a minor in your care has registered an odin55 Account, please contact our support team immediately at the details provided in Section 14 so that the matter can be resolved as quickly as possible.

The odin55 Platform integrates with a number of third-party service providers to deliver the full range of features available to Members. These integrations are managed under data processing agreements that bind third parties to the same data protection standards odin55 applies internally.

12.1 Game Providers. Studios including Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Habanero, and Spribe operate game software accessible through the Platform. When you launch a game, limited session data is transmitted to the game provider's servers to operate the game. Each studio is contractually restricted from using this data beyond the scope of game delivery and is subject to their own privacy policies in respect of data processed on their own infrastructure.

12.2 Payment Service Providers. IDR transactions are processed through the infrastructure of local bank partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and digital wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers process your transaction and identity data under their own regulatory obligations and privacy policies. odin55 is not responsible for the data handling practices of these independent financial service providers beyond the scope of our data processing agreements with them.

12.3 Links to Third-Party Sites. The odin55 Platform does not include outbound links to external websites for commercial purposes. If any reference to an external resource is included in informational content, odin55 is not responsible for the privacy practices of those external sites. This Policy applies solely to data processed by odin55 in connection with the odin55 Platform.

odin55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to our platform. Where amendments are material — for example, where we introduce a new category of data collection or a new purpose for processing — we will provide reasonable advance notice to Members via the email address registered to their Account or via a prominent notice on the Platform.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. The current version of this Policy is always available at odin55.ws/privacy-policy. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

If you do not agree with any amendment to this Policy, you may close your odin55 Account by contacting our support team. Any real-money balance remaining in the Account at the time of closure will be processed for withdrawal to your verified payment method, subject to completion of applicable security checks.

If you wish to exercise any of your data rights, have a question about how odin55 processes your personal data, or wish to raise a data-related complaint, please contact our Data Protection team using the details below. We aim to respond to all enquiries within 5 business days and to resolve all data rights requests within 30 calendar days.

odin55 takes all data protection complaints seriously. If you are not satisfied with the outcome of your complaint after engaging with our Data Protection team, you may escalate the matter to a competent supervisory authority in your jurisdiction.