Privacy Policy

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "odin18" — the online gaming platform accessible at https://odin18.cam and operated by its registered management entity.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, national identity number, email address, phone number, IP address, and financial account details.
• "Player" / "You" / "Data Subject" — any individual who registers an account on odin18 or otherwise interacts with the Platform.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, and deletion.
• "Controller" — the entity that determines the purposes and means of Processing Personal Data; for the odin18 Platform, this is the odin18 management entity.
• "Processor" — a third party that Processes Personal Data on behalf of the Controller (e.g., a payment gateway or KYC verification provider).
• "KYC" — Know Your Customer; the identity verification process mandated under applicable anti-money-laundering standards.
• "Cookie" — a small text file stored on your device by your browser when you access the Platform, used to maintain session state and collect anonymised usage analytics.

Personal Data We Collect

2.1 Registration Data

When you create an account on odin18, we collect the following information:

• Full legal name (as it appears on your Indonesian KTP);
• Date of birth (to verify you are 21 years of age or older);
• Indonesian national identity number (NIK on your KTP);
• Registered email address;
• Mobile telephone number;
• Residential address in Indonesia (city and province);
• Username and encrypted password.

2.2 KYC Verification Data

Prior to processing your first withdrawal, odin18 requires the following documents to complete identity verification:

• A clear photograph or scan of your Indonesian KTP (front and back);
• A selfie photograph holding your KTP (liveness check);
• In certain circumstances, a recent bank statement or utility bill confirming your registered address.

2.3 Financial Data

To process deposits and withdrawals, odin18 collects the following payment-related information:

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) registered in the player's name;
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja;
• Transaction reference numbers and timestamps;
• Deposit and withdrawal amounts in Indonesian Rupiah (IDR).

2.4 Technical and Usage Data

We automatically collect the following data when you access or use the Platform:

• IP address and approximate geolocation (country and city level);
• Device ty pe, operating system, and browser version;
• Session start and end times, pages visited, and features used;
• Referring URL (the page that directed you to odin18);
• Game session logs, bet history, and wagering patterns (used for fraud detection and responsible gaming monitoring).

2.5 Communications Data

When you contact odin18's support team via live chat, email, or WhatsApp, we retain a record of that correspondence, including the content of messages, timestamps, and any attachments you submit. This data is used to resolve disputes, improve service quality, and maintain a complete account history.

How We Collect Your Data

odin18 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, or contact our support team;
• Automatically — through server logs, cookies, and similar tracking technologies when you browse or interact with the Platform;
• From third-party Processors — payment gateways, KYC verification providers, and fraud detection services may share data with us as part of their service delivery under contractual data processing agreements;
• From publicly available sources — odin18 may cross-reference registration data against publicly available identity databases to verify accuracy and detect fraudulent accounts.

Purpose & Legal Basis for Processing

odin18 processes your Personal Data only where a valid legal basis exists. The table below summarises the primary purposes for which we process data and the corresponding legal basis for each:

Data Sharing & Disclosure

5.1 Third-Party Processors

odin18 shares Personal Data with carefully selected third-party service providers who act as data Processors on our behalf. These include:

• Payment processors and banking partners — to facilitate deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja;
• KYC and identity verification providers — to verify the authenticity of identity documents submitted during account verification;
• Fraud detection and risk assessment services — to identify suspicious account behaviour and protect the integrity of the Platform;
• Cloud hosting and infrastructure providers — who store and process data on servers subject to the same security standards applied by odin18;
• Customer communication platforms — to deliver live chat, email, and WhatsApp support interactions.

All third-party Processors are bound by written data processing agreements that prohibit them from using your data for any purpose beyond the specific service they provide to odin18.

5.2 Legal and Regulatory Disclosure

odin18 may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by law, court order, or as part of an investigation into financial crime, fraud, or money laundering. In such cases, odin18 will disclose only the minimum data necessary to satisfy the legal requirement.

5.3 Business Transfers

In the event that odin18's business or assets are acquired, merged with, or transferred to a third party, player data held at the time of transfer may form part of the transferred assets. You will be notified of any such transfer that materially affects your data rights at least 30 days in advance, to the extent permitted by applicable law.

5.4 No Sale of Personal Data

odin18 does not sell, rent, license, or otherwise commercially exploit your Personal Data to any third party for their own marketing or commercial purposes. This commitment applies regardless of any business arrangement entered into by odin18.

International Data Transfers

odin18 operates with infrastructure and third-party service providers located in multiple jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside Indonesia. Where such transfers occur, odin18 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses between odin18 and the receiving entity;
• Binding corporate rules applicable to group companies;
• Transfers to countries recognised as providing an adequate level of data protection by relevant international standards.

By using the odin18 Platform, you acknowledge that your data may be processed outside Indonesia, subject to the safeguards described above.

Data Retention

odin18 retains Personal Data for the periods set out in the table below, or for such longer period as may be required by applicable law:

Once a retention period expires, Personal Data is securely deleted or anonymised such that it can no longer be linked to any identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

Cookies & Tracking Technologies

8.1 What We Use

odin18 uses the following types of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies — essential for the Platform to function, including session authentication, security tokens, and user preferences. These cannot be disabled without impairing platform functionality.
• Performance Cookies — anonymised analytics that help odin18 understand how players navigate the Platform, which pages are most visited, and where technical errors occur. No personally identifiable information is collected by these cookies.
• Functional Cookies — remember your language preference, display settings, and last-visited game category to improve your experience on return visits.

8.2 What We Do Not Use

odin18 does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies that track your activity beyond the odin18 Platform.

8.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Security Measures

odin18 implements a layered security architecture to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive data fields including identity numbers and payment account references;
• One-way password hashing using a modern cryptographic algorithm — odin18 staff cannot view your password in plain text;
• Role-based access controls that restrict staff access to Personal Data on a strict need-to-know basis;
• Automated intrusion detection and prevention systems that monitor for anomalous access patterns in real time;
• Regular third-party security audits and penetration testing of the Platform's infrastructure;
• Two-factor authentication (2FA) available to all players as an optional additional layer of account security.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, odin18 will notify affected players without undue delay and will take all reasonable remedial steps to contain the breach and prevent recurrence.

Your Data Rights

As a registered player and data subject, you hold the following rights with respect to your Personal Data held by odin18:

10.1 Right of Access

You may request a copy of the Personal Data odin18 holds about you. Requests will be acknowledged within 3 business days and fulfilled within 30 days, subject to identity verification.

10.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data fields can be updated directly within your account settings; others require a formal correction request to our support team.

10.3 Right to Erasure

You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Please note that odin18 is required by law to retain certain data (such as KYC documents and transaction records) for a minimum of five years following account closure, during which the right to erasure does not apply to that specific data.

10.4 Right to Restriction of Processing

In certain circumstances — for example, where you contest the accuracy of data held about you — you may request that odin18 restrict processing of your data while the matter is resolved.

10.5 Right to Data Portability

Where processing is based on your consent or on a contract, you may request that odin18 provide your Personal Data in a structured, commonly used, machine-readable format (such as CSV) so that you may transfer it to another service provider.

10.6 Right to Object

You may object to the processing of your Personal Data where odin18 relies on legitimate interests as its legal basis. odin18 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

10.7 Rights Related to Automated Decision-Making

odin18 may use automated systems for fraud detection and responsible gaming monitoring. Where an automated decision produces a significant effect on your account (such as a temporary suspension), you have the right to request human review of that decision by contacting our support team.

Minors

The odin18 Platform is strictly intended for individuals aged 21 years or older. odin18 does not knowingly collect Personal Data from persons under the age of 21. If we become aware that an account has been registered by a minor, the account will be immediately closed, all associated data will be deleted (subject to any overriding legal retention obligation), and the matter may be reported to the relevant authorities.

If you believe that a minor has created an account on odin18 using false information, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

Third-Party Links

The odin18 Platform may contain references to third-party services such as payment providers and game studios. This Privacy Policy applies solely to the odin18 Platform. odin18 is not responsible for the privacy practices of any third-party service, and we encourage you to review the privacy policies of any external service you use in connection with your odin18 account.

Changes to This Privacy Policy

odin18 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered players via email notification and a prominent notice on the Platform no less than 7 days before the updated policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the odin18 Platform after the effective date of any update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically. The most current version of this Privacy Policy will always be accessible at https://odin18.cam/privacy-policy.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by odin18, please reach out through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 after logging into your account
• WhatsApp: Contact details available in your registered account dashboard
• Response time: Data subject requests are acknowledged within 3 business days and resolved within 30 days

For matters related to account closure, self-exclusion, or responsible gaming, please visit our dedicated Responsible Gaming page.

For a full overview of your account rights and platform rules, please review our Terms & Conditions.