oma55 Privacy Policy

oma55 ("we", "us", "our") operates the online gaming platform accessible at oma55.vip, offering sports betting, live casino, slot games, and table games to players across Indonesia, including Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and beyond.

We are committed to protecting the privacy of every individual who visits, browses, or registers an account on the oma55 platform. This Privacy Policy sets out in clear, plain terms the types of personal data we collect, the purposes for which we process that data, the basis on which we process it, the parties with whom we may share it, the security measures we apply to protect it, and the rights you hold in relation to your personal data.

This policy applies to all personal data collected through:

• The oma55 website at oma55.vip and all associated subpages;
• The oma55 mobile web interface accessed via any browser on a mobile device;
• Communications between you and the oma55 support team via live chat, email, or any other channel we provide;
• Your use of any oma55 gaming, wagering, or account management features.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which form part of the overall agreement governing your use of oma55.

In this Privacy Policy, the following terms carry the meanings set out below:

oma55 collects personal data through several distinct channels and for clearly defined purposes. The categories of data we collect are set out below.

3.1 Registration Data

When you create an oma55 account, we collect the following information:

• Full legal name;
• Date of birth (to verify that you are at least 21 years of age);
• Email address;
• Mobile phone number;
• Username and encrypted password;
• Your stated city of residence (e.g., Jakarta, Surabaya, Bali).

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal, or at any time our compliance team considers it necessary, we may collect:

• A copy of a valid government-issued photo identity document (e.g., Indonesian National Identity Card / KTP, passport, or driving licence);
• Proof of residential address (e.g., a recent utility bill or bank statement);
• Proof of ownership of the payment method used for deposits (e.g., a screenshot of your BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, or ShopeePay account in your registered name);
• A selfie photograph, if requested by our compliance team for liveness verification.

3.3 Financial Transaction Data

• Deposit and withdrawal amounts in IDR (Rp);
• Payment method identifiers (bank name, masked account number, e-wallet reference);
• Transaction timestamps and reference numbers;
• Bonus wallet activity and wagering history.

3.4 Technical & Device Data

• IP address at the time of registration and each subsequent login;
• Browser type and version;
• Operating system and device type;
• Session duration and pages visited;
• Referring URL.

3.5 Communications Data

• Content of live chat conversations with the oma55 support team;
• Emails sent to and received from [email protected];
• Complaint and dispute records.

oma55 processes your personal data for the following specific purposes:

oma55 processes your personal data on one or more of the following legal bases:

1. Contract Performance. Processing is necessary to perform the contract we have with you as an oma55 Member — specifically, to operate your account, accept wagers, process deposits and withdrawals, and provide customer support.
2. Legal Obligation. Processing is required to comply with applicable legal and regulatory obligations, including KYC/AML requirements and financial record-keeping rules.
3. Legitimate Interests. Processing is carried out in pursuit of oma55's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your data protection rights.
4. Consent. Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time by contacting support or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

oma55 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following strictly defined circumstances:

1. Payment Processors. We share transaction-level data with the Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, OVO, DANA, GoPay, ShopeePay, LinkAja) necessary to execute your deposit and withdrawal instructions. These providers process your data as independent data controllers under their own privacy policies.
2. KYC & Identity Verification Providers. We may engage specialist third-party KYC platforms to assist with identity document verification and liveness checks. These providers act as data processors on our behalf and are bound by strict data processing agreements.
3. Cloud Infrastructure Partners. oma55 operates on third-party cloud hosting infrastructure. Server-side data may be processed by our hosting partner(s) in the course of providing compute and storage services. All hosting partners are contractually required to maintain equivalent data security standards.
4. Fraud Prevention Networks. We may share limited identifying data (e.g., device fingerprints, IP addresses) with industry fraud prevention services to detect and block known fraudulent actors across multiple platforms.
5. Legal & Regulatory Authorities. We will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to protect the safety of our Members or the integrity of the platform.
6. Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of the assets of oma55, Member personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy protections that apply to your data following the transaction.

oma55 uses cookies and similar tracking technologies to operate core platform functions and to improve the user experience. The categories of cookies we deploy are as follows:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies classified as Strictly Necessary will impair your ability to log in to and use the oma55 platform. oma55 does not deploy third-party advertising cookies or cross-site tracking pixels.

oma55 applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security framework includes:

• TLS/SSL Encryption. All data transmitted between your device and the oma55 servers is encrypted using 256-bit TLS/SSL protocols.
• Encrypted Data Storage. Sensitive fields (passwords, identity document scans, payment method details) are stored in encrypted form at rest using industry-standard encryption algorithms.
• Access Controls. Access to production databases containing Member personal data is restricted to a minimal set of authorised personnel. All internal access is logged and audited.
• Intrusion Detection. oma55 operates automated intrusion detection systems that monitor for anomalous access patterns and trigger alerts for investigation.
• Regular Security Reviews. Our platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, conducted by qualified security professionals.
• Incident Response. In the event of a data breach that is reasonably likely to result in a risk to your rights, oma55 will notify affected Members within 72 hours of becoming aware of the breach, and will take immediate steps to contain and remediate the incident.

oma55 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and in compliance with any applicable legal retention obligations. The following retention periods apply:

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual Member.

As an oma55 Member, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

1. Right of Access. You may request a copy of the personal data oma55 holds about you, together with information about how it is processed.
2. Right to Rectification. You may request that inaccurate or incomplete personal data be corrected or updated without undue delay.
3. Right to Erasure. You may request that oma55 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Clause 9).
4. Right to Restriction. You may request that oma55 restrict the processing of your personal data in specific circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
5. Right to Data Portability. Where processing is based on your consent or contract performance, you may request a copy of the personal data you provided to oma55 in a structured, commonly used, machine-readable format.
6. Right to Object. You may object to the processing of your personal data where that processing is based on oma55's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
7. Right to Withdraw Consent. Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time with effect from the next business day.

The oma55 platform is strictly an adults-only service. You must be at least 21 years of age to register an account and use any feature of the platform. oma55 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21, we will take immediate steps to:

• Suspend and permanently close the associated account;
• Forfeit any balance held in the account;
• Delete all personal data associated with the underage registration from our systems within a reasonable timeframe.

If you believe that a minor has registered an account on oma55, please notify us immediately at [email protected] so that we can investigate and act accordingly.

oma55 operates as an international online gaming platform. In the course of delivering our services, your personal data may be transferred to and processed in countries outside of Indonesia, including countries where our cloud hosting infrastructure, KYC verification partners, or fraud prevention service providers are located.

Where such international transfers occur, oma55 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses that require the recipient to maintain equivalent data protection standards to those applied by oma55;
• Transfers only to jurisdictions that maintain adequate data protection frameworks recognised by internationally accepted standards;
• Encryption of data in transit across all international transfer pathways.

By registering on oma55, you acknowledge and consent to the international transfer of your personal data in accordance with this clause and the safeguards described herein.

The oma55 platform does not contain links to third-party websites. All navigation on oma55.vip is internal. However, if you access oma55 via a third-party referral link or affiliate channel, please note that oma55 has no control over and accepts no responsibility for the privacy practices of those third-party websites or services. We encourage you to review the privacy policy of any third-party site before providing personal data to it.

oma55's Privacy Policy applies exclusively to data collected on oma55.vip and through oma55's own communication channels. It does not apply to any data collected by third-party payment providers, banks, or e-wallet services that you use in connection with your oma55 account — those entities operate under their own privacy policies.

oma55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will:

• Post the revised Privacy Policy on this page with an updated "Last Updated" date at the top;
• Display a prominent notice on the oma55 homepage or login screen for a period of no less than 7 days before the changes take effect;
• Send a notification to your registered email address where the changes materially affect how your data is processed.

Your continued use of the oma55 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically. The current version is always available at oma55.vip/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way oma55 processes your personal data, please contact our dedicated Privacy team through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for the fastest routing to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week directly within the oma55 platform after logging in. Native Indonesian-speaking agents are available at all times.
• Response Time: General privacy enquiries are answered within 24 hours. Formal data rights requests (access, erasure, portability, etc.) are acknowledged within 5 business days and substantively resolved within 30 days. All times are given in Western Indonesia Time (WIB, UTC+7).