oheb Privacy Policy — what we collect and how we protect data

This page describes what we collect when you use oheb and how we keep that data protected when you interact with our services.

We present our practices in clear steps so you understand account setup, verification, deposits, sessions and withdrawals. Our focus is on the data flows that support football markets such as Liga 1 and multi-product features across live-dealer tables, slots and esports.

We make no offers or invitations here. Our policy explains the types of data we hold, how we use them, who we share them with, and how we secure them where local law permits access to our services.

Details on oheb data collection and use

We collect data at registration, during identity verification and when you transact. Our registration fields include email, phone and a chosen account name. Our KYC process may request government ID images and proof of address when law requires verification.

We collect transaction data to process deposits and withdrawals. Our payment flows reference local options such as local paymentonline payment and e-wallet as well as bank transfers through mobile banking, local payment, online payment and e-wallet. Our systems log timestamps, amounts and payment reference codes for reconciliation and audit.

We collect technical data to maintain service stability. Our logs capture IP addresses, device type, browser version and session times. Our servers may sit outside your jurisdiction. Our storage locations reflect the infrastructure of our processors and hosting partners.

Types of personal data we process

• We store identity details: name, date of birth, document scans for verification.
• We store contact details: email, phone, and billing address when supplied.
• We store transaction records: deposit and withdrawal history, payment method used.
• We store account activity: game session logs, market interactions, and error reports.

We share minimal data with regulated third-party providers. Our payment processors, KYC vendors and fraud-prevention services receive only the data necessary to complete their tasks. Our partners include local payment rails and verified third parties that enable transfers to and from accounts linked to mobile banking, local payment, online payment and e-wallet.

We retain data for operational needs, compliance and dispute resolution. Our retention periods vary by data type and by legal requirement. Our deletion processes apply where local law permits account closure and data removal.

oheb privacy and retention policy

We use cookies and similar technologies to make our services work. Our cookies help authenticate sessions, remember language settings and support security checks. Our analytics cookies help us understand traffic to pages that list events such as the Champions League or Piala AFF.

We rely on processors for payment handling and identity checks. Our processors may include banks and e-wallets in Indonesia and international service providers. Our processors act on our instruction and are contractually bound to protect your data. Our lists of processors change; we update internal records and summaries when partners change.

Your rights on oheb

We respect rights that local law grants to data subjects where we operate. Our team can assist with requests to access, correct or export your personal data where permitted. Our verification will require proof of identity before we act on sensitive requests. Our response timelines follow applicable law and our internal review processes.

We may process disputes that relate to match markets, tournaments or payment issues. Our dispute logs include timestamps and transaction details. Our customer support and verification teams operate procedures to resolve these incidents in line with compliance requirements.

Security, breach notification and contact

We implement reasonable technical and organisational measures to protect data. Our measures include encryption for data at rest and in transit, access controls, and audit logging. Our security program is reviewed periodically.

We will notify authorities and affected individuals where local law requires disclosure following a data breach. Our notifications describe the nature of the incident, the categories of data involved and the steps we have taken to contain the issue.

We maintain contact channels for privacy enquiries. Our data protection contact is available through the account area and our support channels. Our office contact points are reachable from major cities such as JakartaSurabaya and Bandung

We review this policy periodically. Our updates will be posted on this page. Our terms reflect changes in services, payment options including DANA and e-wallet, and applicable law. Our services are available only where local law permits.