ova Casino & Sportsbook Data Care

This page describes what we collect when you use ova and how we keep that data protected. When you create an account, deposit funds via DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, place a bet on Liga 1 or Piala Indonesia, play a live-dealer table, or request a withdrawal, we handle your personal information according to the principles set out below.

We collect data only to operate our platform, process your transactions, verify your identity, prevent fraud, and comply with applicable law. We do not sell your data to third parties. We encrypt sensitive information, store it securely, and grant you access to your complete account history at any time. You have the right to request correction, deletion, or portability of your data subject to legal and operational constraints.

Our servers may sit outside your jurisdiction, and data transfers may cross borders. By using ova, you consent to this processing. If you have concerns about how we handle your information, contact us via the details provided at the end of this page.

What We Collect & How We Use It

Account registration and identity verification

When you register an ova account, we collect your email address, mobile phone number, and a password of your choosing. We use your email to send account notifications, deposit confirmations, and withdrawal updates. We use your phone number to deliver one-time codes for password resets and, if you enable two-factor authentication, to verify sensitive actions like withdrawals.

Before your first withdrawal, we conduct identity verification (KYC). We ask for your full name, date of birth, national ID number (KTP), and residential address. We cross-reference this information against public records and our internal fraud database. We store this data encrypted and do not share it with third parties except as legally required by Indonesian regulators or law enforcement.

Email & phone

Used for account communication and authentication. You can update these in your account settings at any time.

KYC data

Name, date of birth, ID number, address — collected once, verified, and retained for regulatory compliance and fraud prevention.

Password

Hashed using a cryptographic algorithm; we never store or access your plain-text password.

Deposit & payment data

When you deposit funds, we record the payment method, amount, date, and time. We also log which e-wallet or bank account you used (e.g., your DANA user ID or your e-wallet virtual-account number). We use this information to reconcile payments, detect duplicate deposits, and prevent fraud. We retain deposit history so you can review your funding sources and track your account activity over time.

We do not store your e-wallet or bank credentials on our servers. When you initiate a mobile banking, local payment, or online payment deposit, we redirect you to that service's payment gateway. You authenticate with your own credentials on that service, and only a confirmation token returns to ova. For bank virtual-account transfers, we assign you a unique reference number; your bank processes the transfer, and we detect the incoming funds automatically.

Betting and game activity

We log every bet you place, every game you play, and every result you receive. This data includes the market (Liga 1 match, roulette spin, Mobile Legends esports fixture), your stake, your selection, the settlement outcome, and your payout or loss. We use this data to calculate your balance, settle disputes, and detect suspicious activity.

Your betting history is stored in your account and accessible to you at any time. We use aggregated (anonymized) betting data to improve our market offerings, identify popular games, and detect technical issues. We do not use your individual betting history for any purpose other than account management and regulatory compliance.

Withdrawal requests & bank data

When you request a withdrawal, we collect your destination bank account number, account holder name, and bank code (for bank transfers), or your e-wallet identifier (for e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking). We verify this information matches your identity, process the withdrawal, and log the transaction. We retain withdrawal history for your records and for regulatory audit trails.

If you withdraw to a different account than the one you used to deposit, we may ask you to provide proof of ownership (e.g., a bank statement or ID) to prevent money-laundering. This is a standard compliance requirement.

Device and usage data

We collect information about the device you use to access ova (e.g., device type, operating system, browser version). We log your IP address, login timestamps, and geographic location (inferred from IP address). We use this data to detect unauthorized access attempts, prevent account takeovers, and provide technical support. If you log in from a new device or location, we may require additional verification.

We do not use cookies to track you across other websites. On ova itself, we use session cookies to keep you logged in during your visit and to remember your account preferences. You can disable cookies in your browser settings, but this may limit functionality on ova.

Our ova Data Security & Your Rights

How we protect your data

We encrypt all communication between your device and our servers using TLS 1.3. We store sensitive data (passwords, ID numbers, bank account details) in encrypted form. We maintain access controls so only authorized staff can view your data, and we audit access logs regularly. We conduct penetration testing and vulnerability assessments to identify security gaps.

Our data centers maintain physical security (locked facilities, surveillance, multi-factor access). We do not store your data in a single location; critical information is backed up to geographically distributed servers to prevent data loss.

Third-party processors

We work with third-party service providers to deliver ova services. These include payment processors (for DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers), identity verification vendors (for KYC), and cloud infrastructure providers (for data storage and backup). We require all third parties to sign data-processing agreements and maintain equivalent security standards.

We may also disclose data if required by law — for example, if Indonesian regulators, law enforcement, or a court order demands it. We will notify you of such disclosure unless legally prohibited.

Your rights

You have the right to access your complete account data. Log into your ova account and download your history from your account dashboard. You have the right to request correction of inaccurate data — for example, if your address on file is outdated. You have the right to request deletion of your data, subject to legal obligations (e.g., tax or AML records must be retained for a minimum period). You have the right to request that we port your data to another service in a structured format.

To exercise these rights, contact us at the email address provided at the end of this page. We will respond to your request within 30 days.

Retention & deletion

We retain your account data for as long as you maintain an active account. If you request account deletion, we will delete non-essential data (e.g., device logs, session cookies) immediately. We will retain essential data (KYC documents, transaction history, betting records) for a minimum of seven years to comply with Indonesian financial regulations and anti-money-laundering laws.

If your account is inactive for more than two years, we may archive your data but will not delete it unless you explicitly request deletion.

International data transfers

Our servers may be located outside Indonesia. By using ova, you consent to your data being processed and stored outside your jurisdiction. We apply the same security and privacy standards regardless of server location. If you have concerns, contact us.

Updates to this policy

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of ova after such notification constitutes acceptance of the updated policy.

Contact ova

If you have questions about how we handle your data, wish to exercise your rights, or believe we have misused your information, contact our support team. We operate in supported jurisdictions across Jakarta, Surabaya, Bandung, Medan, Semarang, and Yogyakarta. We do not offer our services in jurisdictions where online wagering is prohibited; users are responsible for verifying that access and use comply with their own jurisdiction's law.

Our support team responds to data requests and privacy inquiries during business hours. For urgent matters, include "Privacy Request" in your message subject line.