Privacy Policy — 01t0t0

1 Definitions & Scope

This Privacy Policy applies to all personal data collected and processed by 01t0t0 in connection with your use of the website at https://01t0t0.cam and all associated services (collectively, the "Platform"). It applies to all registered members, visitors, and prospective members who interact with the Platform from any location, including Indonesia and internationally.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For this Platform, the Data Controller is 01t0t0.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller under a binding data processing agreement.
• "Member" — any individual who has created a registered account on the 01t0t0 platform.
• "KYC" — Know Your Customer identity and age verification procedures mandated by our compliance program.
• "Cookies" — small text files placed on your device by the Platform for session management, analytics, and preference storage.

2 Data Controller

The Data Controller responsible for your personal data is 01t0t0, operating the Platform at https://01t0t0.cam. As Data Controller, 01t0t0 determines the purposes for which your personal data is collected and the manner in which it is processed.

For all data-related inquiries, requests, or complaints, you may contact our Data Protection contact point at: [email protected]. We aim to respond to all data-related requests within thirty (30) calendar days.

3 Data We Collect

01t0t0 collects personal data across several categories. The specific data collected depends on the nature of your interaction with the Platform:

3.1 Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — you must be 21 or older)
• National identity number (KTP number for Indonesian residents) — collected only where required for KYC compliance
• Passport number or driver's license number (where KTP is unavailable)
• Photographic likeness (from identity document scans submitted during KYC)

3.2 Contact Data

• Email address
• Mobile phone number (Indonesian mobile number preferred)
• Residential address, including city and province within Indonesia

3.3 Financial Data

• Bank account details (account number, account holder name, and bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) as submitted during deposit or withdrawal processing
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja account details) where used for transactions
• Transaction history including deposit amounts, withdrawal amounts, dates, and statuses
• Betting and wagering history on the Platform
• Account balance and bonus balance records

3.4 Technical Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps (login time, logout time, duration)
• Pages visited, features accessed, and in-platform navigation patterns
• Referral source (how you arrived at 01t0t0)

3.5 Communications Data

• Content of messages sent to our customer support team via live chat or email
• Records of complaints and dispute correspondence
• Responses to surveys or feedback requests (where voluntarily submitted)

3.6 Responsible Gaming Data

• Self-exclusion requests and active exclusion periods
• Deposit limits, loss limits, and session time limits you have set via the Platform's responsible gaming tools
• Any information voluntarily shared with our support team in relation to problem gambling concerns

4 How We Collect Your Data

01t0t0 collects personal data through the following means:

• Direct submission: Data you actively provide during account registration, KYC document upload, deposit and withdrawal requests, or when contacting customer support.
• Automated technical collection: Data collected automatically by our servers and analytics tools when you access or use the Platform — including IP address, device information, session logs, and cookie-based identifiers.
• Third-party sources: Identity verification data cross-referenced with third-party KYC service providers; fraud signals received from payment processors; device fingerprinting data from security partners. All third-party data sharing is governed by binding data processing agreements.

5 Legal Basis for Processing

01t0t0 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

Purpose of Processing	Legal Basis
Account registration and management	Performance of contract (Terms & Conditions)
KYC identity and age verification	Legal obligation (AML/KYC compliance requirements)
Processing deposits and withdrawals	Performance of contract
Fraud detection and prevention	Legitimate interests of 01t0t0 and its members
Customer support communications	Performance of contract / Legitimate interests
Platform analytics and improvement	Legitimate interests of 01t0t0
Marketing and promotional communications	Your explicit consent (opt-in)
Responsible gaming monitoring	Legal obligation / Protection of vital interests
Compliance with regulatory requests	Legal obligation

6 How We Use Your Data

01t0t0 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

• Account creation and management: To create, maintain, and administer your 01t0t0 member account, including authentication, password resets, and account preference settings.
• Identity verification: To verify your identity, age (21+), and residential address as required by our KYC compliance program, and to confirm ownership of payment methods used on the Platform.
• Transaction processing: To facilitate deposits and withdrawals via your chosen local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate transaction records in Indonesian Rupiah (IDR).
• Fraud prevention and security: To detect, investigate, and prevent unauthorized account access, money laundering, fraudulent transactions, and other forms of abuse on the Platform.
• Platform operation and improvement: To analyze usage patterns, diagnose technical issues, optimize platform performance, and develop new features that better serve our members across Indonesia.
• Customer support: To respond to your inquiries, investigate complaints, and resolve disputes in a timely and effective manner.
• Responsible gaming: To monitor betting behavior for indicators of problem gambling, to enforce self-exclusion and deposit limits you have set, and to proactively reach out where our systems identify potentially harmful patterns.
• Legal and regulatory compliance: To fulfill obligations under applicable anti-money laundering (AML) regulations, respond to lawful requests from competent authorities, and maintain records as required by our international gaming license.
• Marketing communications: Where you have explicitly opted in, to send you promotional offers, bonus notifications, and platform news via email or SMS. You may withdraw consent at any time.

7 Data Sharing & Disclosure

01t0t0 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following strictly defined circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to perform specific functions on our behalf. These parties act as Data Processors under binding agreements that prohibit them from using your data for any purpose beyond the contracted service. Current categories of Data Processors include:

• Payment processors: Banks and e-wallet platforms (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) that facilitate your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services that cross-reference submitted identity documents against authoritative data sources to confirm authenticity.
• Game content providers: Licensed game studios including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Pocket Games Soft, which may receive your session identifier to deliver their game content within the Platform.
• Fraud and security platforms: Third-party security services that analyze device fingerprint data and behavioral signals to identify anomalous or fraudulent activity.
• IT infrastructure providers: Cloud hosting and content-delivery partners responsible for the physical and logical security of the servers on which your data is stored.
• Customer support platforms: Live-chat and helpdesk software providers through which our support team communicates with members.

7.2 Legal and Regulatory Disclosure

01t0t0 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 01t0t0, its members, or the public. We will notify you of any such disclosure to the extent permitted by applicable law.

7.3 Business Transfers

In the event that 01t0t0 or its parent entity undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

8 International Data Transfers

01t0t0 operates as an internationally licensed platform. As such, some of your personal data may be transferred to and processed in countries outside of Indonesia where our service providers or infrastructure partners are located. These countries may have data protection laws that differ from those applicable in Indonesia.

Where personal data is transferred internationally, 01t0t0 takes all reasonable steps to ensure that the recipient provides an adequate level of protection for your data, including the use of standard contractual clauses, binding corporate rules, or equivalent safeguards as recognized under applicable international data protection standards.

By registering an account on 01t0t0, you acknowledge and consent to the international transfer of your personal data in accordance with the safeguards described in this clause.

9 Data Retention

01t0t0 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following general retention periods apply:

Data Category	Retention Period	Basis
Account registration and identity data	Duration of account + 5 years after closure	AML compliance / Legal obligation
KYC documents	Duration of account + 5 years after closure	AML / KYC regulatory requirement
Financial transaction records	Duration of account + 5 years after closure	AML compliance / Dispute resolution
Betting and wagering history	Duration of account + 2 years after closure	Legitimate interests / Dispute resolution
Customer support communications	3 years from the date of the communication	Legitimate interests / Legal obligation
Technical / session log data	12 months from collection	Legitimate interests (security and fraud)
Marketing consent records	Until consent is withdrawn + 1 year	Legal obligation (evidence of consent)
Self-exclusion records	Duration of exclusion + 7 years	Responsible gaming / Legal obligation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where anonymization is applied, the resulting data set is no longer considered personal data and may be retained indefinitely for statistical or analytical purposes.

10 Security Measures

01t0t0 employs a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 01t0t0 platform is encrypted using industry-standard TLS encryption, as indicated by the HTTPS protocol and the padlock icon in your browser.
• Data encryption at rest: Sensitive personal data fields — including identity document data and financial account details — are stored in encrypted form using strong encryption algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific job function. All internal access is logged and subject to audit.
• Two-factor authentication (2FA): Available to all members for account login and available as a mandatory control for all internal staff accessing member data systems.
• Regular security audits: The Platform undergoes periodic penetration testing and security assessments conducted by qualified independent security firms.
• Incident response: 01t0t0 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your personal data, we will notify affected members and relevant authorities within the timeframes required by applicable law.

11 Cookies & Tracking Technologies

01t0t0 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session across pages, and understand how members interact with our services. The following categories of cookies are in use:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, authentication, security token validation, and load balancing. The Platform cannot function correctly without these cookies.	No — required for core functionality
Functional	Remembering your preferred language, odds format, and display preferences across sessions.	Yes — disabling may affect user experience
Analytical / Performance	Aggregated, anonymized data on page views, click paths, and feature usage to help us improve the Platform. No personally identifiable information is included.	Yes — via browser cookie settings
Fraud Prevention	Device fingerprinting and behavioral analysis cookies used by our security partners to identify and prevent fraudulent account activity.	No — required for platform security

You can control and manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary or fraud-prevention cookies may impair your ability to use the Platform. 01t0t0 does not use advertising cookies or cross-site tracking cookies for the purpose of behavioral advertising.

12 Your Rights

As a data subject whose personal data is processed by 01t0t0, you hold the following rights. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within thirty (30) calendar days.

Please note that certain rights are subject to limitations where processing is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims. We will inform you clearly where such limitations apply to your specific request.

13 Marketing Communications

01t0t0 will only send you marketing communications — including promotional bonus offers, seasonal campaign notifications (such as Idul Fitri or Ramadhan specials), and BRI Liga 1 match betting previews — where you have given us your explicit, affirmative consent to do so at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email we have sent you;
• Updating your communication preferences in your account settings dashboard; or
• Contacting our support team at [email protected] with a written opt-out request.

Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to your withdrawal. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

14 Minors

The 01t0t0 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from any individual under the age of 21. If we become aware that personal data has been submitted by a person under 21, we will immediately suspend the associated account, delete the collected data, and reverse any deposits made, subject to applicable verification checks.

If you believe that a minor has registered an account on 01t0t0, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

15 Changes to This Privacy Policy

01t0t0 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or Platform functionality. Material changes will be communicated to registered members via email or via a prominent notice on the Platform at least seven (7) days prior to the effective date of the change.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy.

16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how 01t0t0 has handled your personal data, please contact us through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 on the Platform — typical response time under 5 minutes
• Support Hours: 24 hours a day, 7 days a week, including Indonesian public holidays

All formal data-related complaints must be submitted in writing via email. We will acknowledge receipt within 48 hours and aim to resolve your complaint within thirty (30) calendar days. Where a complaint requires additional investigation, we will keep you informed of progress and provide a final response within sixty (60) calendar days.

If you are not satisfied with our response to your complaint, you retain the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.