Your privacy is not a checkbox — it is a core commitment at obctop. This Policy explains exactly what personal data we collect, why we collect it, how we protect it, and the rights you hold over it as a player.
Effective Date: 1 January 2026A plain-language summary of our core privacy commitments — please read the full clauses below for the binding detail.
Every data exchange between your browser and the obctop Platform is encrypted using industry-standard 256-bit SSL/TLS technology, ensuring that your personal and financial information cannot be intercepted in transit.
obctop will never sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data serves one purpose only: to provide and improve your experience on our Platform.
You have the right to access, correct, or request deletion of your personal data at any time. Submit a written request to our support team and we will respond within 30 days in accordance with applicable data protection standards.
We collect only the personal data that is strictly necessary for account operation, identity verification (KYC), payment processing, and fraud prevention. We do not collect data we have no operational use for.
Personal data is retained only for as long as required to fulfil the purposes for which it was collected, including compliance with legal obligations. Account data is typically retained for a maximum of 5 years following account closure.
obctop applies data handling practices aligned with internationally recognised data protection principles and remains mindful of the personal data rights of our Indonesian player community across Jakarta, Surabaya, Bali, Bandung, and beyond.
Important Notice: This Privacy Policy ("Policy") describes how obctop ("Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("Player", "User", "you") who register an account or otherwise interact with the obctop Platform at https://obctop.cam. By registering an account or using any obctop service, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.
obctop is an internationally licensed online gaming platform serving adult players principally located in Indonesia. We understand that entrusting a gaming platform with your personal and financial data is a significant act of trust. This Policy reflects our commitment to handling that trust with the highest standards of data stewardship, transparency, and security.
We are committed to ensuring that your privacy is protected. This Policy sets out a clear account of how and why we process personal data, with whom we may share it, how long we keep it, and what choices and rights you have in relation to your data. We encourage you to read this Policy in full. If you have any questions after doing so, our support team is reachable 24 hours a day, 7 days a week.
This Policy should be read alongside our Terms & Conditions, which together form the complete contractual basis of your relationship with obctop.
The following terms are used consistently throughout this Policy:
obctop collects the following categories of personal data:
obctop collects personal data through the following channels:
The majority of your personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotional offer.
When you access the Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, session data, and behavioural data derived from your interaction with Platform features. Cookies and similar tracking technologies are used to facilitate this; see Section 9 for details.
Where you use a third-party payment method (for example, depositing via OVO or GoPay), the relevant payment processor shares with us only the minimum transactional data required to confirm and reconcile your deposit — typically a masked account identifier and a transaction reference. We do not receive your full e-wallet login credentials.
For identity verification purposes, obctop may engage accredited third-party KYC service providers who cross-reference the documents you submit against authoritative identity databases. These providers operate as Data Processors under strict contractual obligations and may not use your data for any purpose other than the verification service they perform for obctop.
obctop processes your personal data for the following clearly defined purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Registration & Identity Data |
| Age and identity verification (KYC) | KYC Data, Registration Data |
| Processing deposits and withdrawals | Financial & Transaction Data |
| Fraud prevention and anti-money laundering (AML) compliance | Financial Data, Technical Data, KYC Data |
| Responsible gaming monitoring and intervention | Transaction Data, Usage Data, Communication Data |
| Customer support and dispute resolution | Communication Data, Transaction Data, Identity Data |
| Platform analytics and service improvement | Technical & Usage Data (anonymised where possible) |
| Promotional communications (where opted in) | Registration Data, Transaction Data |
| Legal and regulatory compliance | All categories as required by applicable law |
obctop processes your personal data on the following legal grounds, depending on the specific purpose:
Processing your registration data, KYC documents, and financial transaction records is necessary for obctop to perform its contractual obligations to you under the Terms & Conditions. Without this processing, obctop cannot provide account services, process deposits, or pay out winnings.
obctop is required under its international gaming licence and applicable anti-money laundering regulations to verify the identity of all players, monitor transactions for suspicious activity, and maintain records for audit and regulatory review. This processing is mandatory and cannot be opted out of.
obctop processes certain technical and usage data on the basis of legitimate interests — specifically to detect and prevent fraud, maintain Platform security, investigate abuse (including multi-accounting and bonus fraud), and improve the overall quality and stability of our services. We conduct a balancing test before relying on this basis to ensure our interests do not override your fundamental privacy rights.
Where obctop processes your data for optional purposes — such as sending you promotional emails about bonus offers, seasonal campaigns (Idul Fitri, Ramadhan, Imlek promotions), or product updates — we will ask for your explicit consent. You may withdraw consent for marketing communications at any time by contacting our support team or using the unsubscribe option in any marketing email.
obctop does not sell your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate protections:
To facilitate deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including local Indonesian bank transfer operators and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja). These providers receive only what is needed to complete your transaction and are prohibited from using that data for any other purpose.
Accredited identity verification and fraud detection services receive KYC documentation and device fingerprint data solely for the purpose of verifying your identity and assessing fraud risk. All such providers are contractually designated as Data Processors.
Game studios integrated into the Platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive a pseudonymous player identifier and session token to deliver game content and record game outcomes. These providers do not receive your full identity or financial data.
obctop may disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or other government bodies when required to do so by valid legal process, court order, or regulatory demand. We will notify you of such disclosures where we are legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of obctop's business, personal data held by obctop may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms will be communicated to you prior to the transfer taking effect.
Under no circumstances will obctop share your personal data with third-party advertisers, data brokers, or any commercial entity for the purpose of direct marketing to you without your explicit prior consent.
As an internationally operated platform serving Indonesian players, certain personal data processed by obctop may be stored on or transferred to servers located outside of Indonesia. Where such transfers occur, obctop ensures that appropriate safeguards are in place, including:
By using the Platform, you acknowledge that your data may be transferred, stored, and processed in jurisdictions outside Indonesia. We take all reasonably practicable steps to ensure that any such transfers afford your data a level of protection consistent with the principles set out in this Policy.
Cookies are small text files placed on your device when you visit the Platform. They enable us to recognise your browser, maintain your session, remember your preferences, and gather anonymous analytical data about how the Platform is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | Session / up to 24 hours |
| Functional | Language preferences, display settings, game launch parameters | Up to 30 days |
| Analytical | Anonymous usage statistics, page performance monitoring, feature adoption tracking | Up to 12 months |
| Security / Fraud | Device fingerprinting, bot detection, multi-account identification | Up to 12 months |
You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your Account and using core Platform features. Disabling analytical or functional cookies will not affect your ability to place bets or make transactions, but may reduce the personalisation of your experience.
obctop retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable law and our international gaming licence obligations. Our standard retention schedule is as follows:
Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable (for example, data held in encrypted backup archives), the data will be isolated from active processing until it can be securely destroyed.
Subject to applicable law, you have the following rights in relation to the personal data that obctop holds about you:
You may request a copy of the personal data that obctop holds about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity-critical fields (name, date of birth), correction may require re-submission of supporting KYC documents.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and no overriding legitimate grounds exist. Please note that certain data cannot be deleted while legal retention obligations remain in force.
In certain circumstances (for example, while you contest the accuracy of data we hold, or while an objection is being considered), you may request that we restrict the processing of your data to storage only.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, on grounds relating to your particular situation.
Where processing is carried out by automated means on the basis of your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
To exercise any of the above rights, contact our support team via live chat (24/7) or email at [email protected]. We may need to verify your identity before processing your request. We aim to respond within 30 days; for complex requests, this period may be extended by a further 60 days with notice to you.
The obctop Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If we become aware that an Account has been registered by a person under 21, we will immediately suspend that Account, delete all associated personal data to the extent permitted by law, and retain only the minimum records required to evidence the violation and prevent re-registration.
Parents and guardians who believe that a minor in their care may have registered an Account are encouraged to contact our support team immediately at [email protected] so that we may act without delay.
21+ Only. Gambling is an adult activity. obctop actively enforces age verification at registration and at the withdrawal stage. We strongly encourage parents to install parental control and content-filtering software to prevent underage access to online gambling platforms.
obctop implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
While we maintain rigorous security standards, no digital system is entirely immune to risk. We strongly encourage you to use a unique, strong password for your obctop Account, enable 2FA, and notify us immediately at [email protected] if you suspect any unauthorised activity on your Account.
The Platform may display references to or integrations with third-party services, including game studios and payment providers. These third parties operate under their own privacy policies, which are independent of this Policy. obctop is not responsible for the privacy practices of any third-party service, and we encourage you to review the relevant privacy policy of any third-party provider before sharing personal data with them directly.
Where third-party services are embedded within the Platform (for example, live casino game streams powered by Evolution Gaming), data exchanged with those services during your session is governed by our contractual data processing agreements with those providers, as described in Section 7.3.
obctop reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or share data with a new category of third party — we will notify registered players by email and via an in-platform notification at least 7 calendar days before the revised Policy takes effect.
The updated Policy will be published on this page with a revised Effective Date displayed prominently at the top. Your continued use of the Platform after the new Policy takes effect constitutes your acknowledgment of and agreement to the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with the Terms & Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which obctop handles your personal data, please reach out to our dedicated privacy support team through any of the following channels:
All privacy-related requests and inquiries are logged, tracked, and responded to within 30 days of receipt. For complex requests requiring additional investigation, we will acknowledge your request within 5 business days and provide a full response within the 30-day window, with the option to extend by a further 60 days where necessary.
This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available upon written request to our support team.
Our support team is available 24/7 in English and Bahasa Indonesia. You can also review our full Terms & Conditions, visit our Responsible Gaming page, or browse our FAQ for quick answers.