oxwin Casino & Sportsbook Data Care

This page describes what we collect when you use oxwin and how we keep that data protected. We take your privacy seriously and operate transparent practices around account information, payment details, and session activity. Our commitment is clear: we collect only what we need, we protect it with encryption and access controls, and we do not sell or share your data without explicit consent.

When you create an account on oxwin, you provide email, phone number, and a password. When you deposit or withdraw funds through QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we link your payment details to your account for transaction processing. When you first request a withdrawal, we require government-issued identification so we can verify your identity (KYC—Know Your Customer) and prevent fraud. This page explains each of these practices and outlines your rights regarding your data.

We operate oxwin from servers located in supported jurisdictions and may process your data outside your home country. Your data is encrypted in transit (TLS 1.3) and at rest (AES-256). We retain data only as long as necessary for service operation or legal compliance. You may request access to your data, correction of inaccurate information, or deletion of your account at any time. Contact our support team to initiate any of these requests.

What Data We Collect on oxwin

We collect different categories of data depending on which oxwin services you use. Account data includes your email address, phone number, username, and hashed password. We use this to maintain your account, send transaction confirmations, and recover your account if you forget your password. We do not collect your name, address, or date of birth unless you provide it during KYC verification for withdrawal.

Payment data includes the bank account or e-wallet details you link to oxwin. If you deposit via BCA, e-wallet, mobile banking, or local payment, we store your account number and bank code. If you use online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet, we link your e-wallet identifier to your oxwin account. We encrypt this information and never store full card numbers or complete payment credentials. Payment processors handle the actual transaction; we receive only confirmation and settlement data.

Game and wager data records every game you participate in, every wager amount, and every outcome. We retain this for dispute resolution (if you question a result) and for compliance purposes. Session data includes your login times, IP address, device type, and browser information. We use this to detect suspicious activity, prevent account takeovers, and maintain security.

How We Use Your Data on oxwin

We use your email and phone to maintain account access, send transaction confirmations, and communicate service updates. We do not send marketing emails unless you explicitly opt in. We use your payment details solely to process deposits and withdrawals through your chosen channel (mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, or bank transfer). We use game and session data to detect unusual activity, prevent fraud, and resolve disputes.

We share your data with third-party payment processors only to the extent necessary to complete your transaction. If you deposit via online payment, we share only the amount and your e-wallet identifier with mobile banking's systems. If you withdraw to local payment, we share your account number and withdrawal amount with online payment's systems. We do not share your data with marketing companies, advertisers, or other third parties.

We may disclose your data if required by law—for example, if a court orders us to provide records, or if we are investigating suspected fraud or illegal activity. We will notify you of any such disclosure unless legally prohibited from doing so. We do not voluntarily provide data to government agencies or law enforcement except in response to valid legal process.

Your Rights Regarding oxwin Data

You have the right to access your data at any time. Log into your oxwin account and navigate to Account Settings; you can view your email, phone number, and payment methods. For a complete copy of all data we hold about you (including game history, login logs, and KYC records), submit a Data Access Request via our support team. We provide this within 14 days.

You have the right to correct inaccurate information. If your email, phone, or payment details are wrong, you can update them in Account Settings. If your identity information is incorrect, contact our support team to request correction. We will update records within 5 business days and notify you of the change.

You have the right to delete your account and associated data. Submitting an Account Deletion Request removes your access to oxwin immediately. We retain transaction records and KYC data as required by law or for compliance purposes; however, we delete all other personal data within 30 days. Any remaining balance in your account is processed according to our withdrawal policy.

Data Security and Encryption on oxwin

We protect your data through encryption and access controls. All data in transit (from your device to oxwin servers) is encrypted using TLS 1.3. All data at rest (on our servers) is encrypted using AES-256. Your password is hashed with a cryptographic salt; we never store your actual password. Only authorised oxwin employees with legitimate business need can access sensitive data, and their access is logged and audited.

We conduct regular security audits and penetration testing to identify and fix vulnerabilities. We maintain firewalls, intrusion detection systems, and redundant backups. If we discover a security breach that exposes your data, we will notify you without unreasonable delay and provide information about what happened and what steps you can take to protect yourself.

Cookies and Tracking on oxwin

We use cookies to maintain your session and store your login state. Session cookies are temporary and deleted when you close your browser. We do not use cookies for tracking across other websites or for marketing purposes. You can disable cookies in your browser settings; however, this may impair your oxwin experience (for example, you may need to log in more frequently).

We use basic analytics to understand how oxwin is used—for example, which games are popular, which payment methods are most common, and whether pages load quickly. We collect this in aggregated form; we do not track individual user behaviour. We do not use third-party analytics services that track you across other websites.

Data Retention and Deletion on oxwin

We retain your account data (email, phone, username) for as long as your account is active and for a reasonable period afterward in case you wish to reactivate. We retain payment details until you remove them from your account; you can do this in Account Settings. We retain game and wager data for at least seven years for compliance purposes. We retain KYC data for at least seven years as required by anti-money laundering regulations.

If you delete your account, we delete non-essential data immediately and essential data according to the retention periods above. We delete email marketing preferences, session logs, and device information within 30 days. We retain only transaction records, KYC data, and any records necessary for legal disputes.

International Data Transfer and Storage on oxwin

Our servers are located in supported jurisdictions and may be outside your home country. By using oxwin, you acknowledge that your data may be processed internationally. We apply the same security standards regardless of where data is stored. If your jurisdiction has specific data residency requirements, contact our support team to discuss options.

We do not transfer data to jurisdictions with weaker privacy protections without additional safeguards. We use standard contractual clauses and data processing agreements to ensure your data remains protected during international transfer.

1. Request your data

   Submit a Data Access Request via our support team. Provide your account email and confirm your identity. We provide a complete copy within 14 days.

2. Correct inaccurate information

   Update your email, phone, or payment details in Account Settings. For identity information, contact support. Changes process within 5 business days.

3. Delete your account

   Submit an Account Deletion Request. Your access is removed immediately. Non-essential data is deleted within 30 days; essential records are retained per legal requirements.

4. Contact for privacy questions

   Email our privacy team via the support contact form. Select "Privacy or Data Request" as the category. We respond within 24 hours.

Changes to This Privacy Policy

We may update this privacy policy as our practices evolve or as law changes. We will notify you of material changes via email or through a prominent notice on oxwin. Your continued use of oxwin after such notification constitutes acceptance of the updated policy. We recommend reviewing this page periodically to stay informed of how we handle your data.

Contact Us About Your Privacy on oxwin

If you have questions about this privacy policy or how we handle your data, contact our privacy team via the support contact form on oxwin.app. Select "Privacy or Data Request" as the category. We respond to most inquiries within 24 hours. For urgent privacy concerns, you may escalate to our compliance team; response time for escalated matters is typically 48 hours.

You also have the right to lodge a complaint with your local data protection authority if you believe we have mishandled your personal information. We encourage you to contact us first so we can address your concern directly.

Privacy Policy Summary for oxwin Users

We at oxwin collect account information (email, phone, password), payment details (for your chosen deposit/withdrawal method), and game activity data. We use this data solely to operate your account, process transactions, and prevent fraud. We encrypt all data and limit access to authorised employees. We do not share your data with third parties except to process payments or as required by law.

You have the right to access, correct, and delete your data. You can update most information in Account Settings. For comprehensive data requests, contact our support team. We retain transaction and compliance records for seven years; all other data is deleted upon account deletion or within 30 days of your request.

Your trust matters to us. We operate our data practices with transparency and respect for your privacy. If you have any questions or concerns, our privacy team is available 24/7 via oxwin support.