At exo123, your privacy is a fundamental priority. This Privacy Policy explains in plain terms what personal data we collect, how we use it, who we share it with, and what rights you hold as a registered player on our platform. Please read this document in full before creating your exo123 account.
All data transmitted between your device and the exo123 platform is protected by 256-bit SSL encryption. We apply industry-standard security protocols to all stored personal and financial data.
exo123 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data is shared only with payment processors and service providers strictly necessary to operate the platform.
By registering an account on exo123, you provide informed consent for the data processing activities described in this Privacy Policy. You may withdraw certain consents at any time by contacting our support team.
We collect only the data that is necessary to operate your account, process transactions, verify your identity, and comply with our obligations. We do not collect excessive or irrelevant personal data.
You have the right to access, correct, or request deletion of your personal data held by exo123 at any time. Submit your request via our 24/7 live chat or by email and we will respond within 5 business days.
Personal data is retained only for as long as necessary to fulfil the purposes described in this policy or to comply with applicable legal retention requirements. Unnecessary data is securely deleted.
exo123 ("we", "us", "our") operates the online gambling platform accessible at exo123.org (the "Platform"), which provides sports betting, live casino games, slots, virtual sports, and crash game products to registered players in Indonesia. We are committed to protecting the privacy and personal data of every individual who accesses or uses the Platform.
This Privacy Policy describes, in clear and transparent terms, the categories of personal data we collect from you, the purposes for which that data is processed, the legal basis on which we rely to carry out that processing, and the rights you hold in relation to your data. This policy is an integral part of our Terms & Conditions and should be read alongside that document.
By registering an exo123 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data processing activities described herein to the extent that such consent is required by applicable law.
For the purposes of this Privacy Policy, the following terms have the meanings assigned to them below:
exo123 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the categories of data we collect and the typical data points within each category:
| Category | Data Points | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID (KTP / passport number) | Account registration, KYC verification, age verification |
| Contact Data | Email address, WhatsApp / phone number, city of residence | Account communications, support, promotional messaging (with consent) |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga), e-wallet ID (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction amounts in IDR | Processing deposits and withdrawals, fraud detection, AML compliance |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens, time-zone (WIB / WITA / WIT) | Platform security, fraud prevention, performance optimisation |
| Usage Data | Pages visited, games played, bet history, deposit/withdrawal history, session duration, feature interactions | Service personalisation, responsible gaming monitoring, analytics |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Dispute resolution, quality assurance, staff training |
| Responsible Gaming Data | Self-exclusion requests, deposit limits set, cooling-off period activations, problem gambling disclosures | Player protection, regulatory compliance |
We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data) except where a government-issued photo ID submitted for KYC purposes incidentally reveals such information. In that case, the data is used solely for identity verification and is not retained beyond the verification process.
exo123 collects personal data through the following methods:
You provide data directly to exo123 when you:
When you access the Platform, certain data is collected automatically through technical means, including server logs, session management systems, and browser storage. This includes your IP address, device identifiers, browser characteristics, referring URL, and your interaction patterns with the Platform interface. We use this data to maintain Platform security, diagnose technical issues, and improve the user experience.
In limited circumstances, exo123 may receive personal data about you from third parties, including:
exo123 processes your personal data on the following legal bases, depending on the specific processing activity:
exo123 uses the personal data we collect for the following specific purposes:
To create, maintain, and administer your exo123 player account, verify your identity and age (21+), enforce the single-account policy, and communicate essential account-related updates such as security alerts and policy change notifications.
To process deposits and withdrawals in Indonesian Rupiah (IDR) via local bank transfers (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), verify the source of funds, and maintain accurate financial records for each transaction.
To fulfil our KYC obligations by verifying that you are who you say you are and that you meet the eligibility criteria for using the Platform (Indonesian residency, 21+ age requirement). This is a mandatory prerequisite for processing withdrawal requests.
To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This includes automated monitoring of unusual transaction patterns, multiple account detection, and IP analysis.
To tailor your experience on the Platform — for example, by surfacing game recommendations relevant to your play history, presenting localised promotions tied to Indonesian sporting events (BRI Liga 1, Timnas Indonesia matches, Piala AFF), or displaying default currency in IDR.
To operate our responsible gaming programme effectively, including monitoring for indicators of problem gambling behaviour, enforcing self-exclusion agreements, applying deposit limits you have set, and proactively reaching out to players whose usage patterns suggest potential harm. See our Responsible Gaming page for full details.
With your consent, to send you personalised promotional communications about bonuses, free bets, new game launches, and seasonal campaigns. You may opt out of marketing communications at any time by contacting our support team or following the unsubscribe instructions included in each communication.
To analyse aggregated usage data for the purpose of understanding how the Platform is used, identifying performance bottlenecks, and developing new features and products that better serve Indonesian players.
7.1 General Principle. exo123 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.
We share financial data (your name, bank account or e-wallet identifier, and transaction amount) with the payment service providers — BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja — solely to process your deposit or withdrawal. These providers are independent data controllers subject to their own privacy terms and applicable Indonesian financial regulations.
Where we use a third-party identity verification service to assist with KYC processing, we share the documents and identity data you submit with that provider under a data processing agreement that requires them to process the data solely for verification purposes and to apply security standards equivalent to our own.
We may share technical identifiers (IP address, device fingerprint) and transaction metadata with licensed fraud prevention and anti-money laundering screening services. These services operate as data processors under our instructions and are contractually prohibited from using the data for any other purpose.
When you play a game provided by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft — your session data (including bets placed and game outcomes) is transmitted to that studio's systems to facilitate gameplay. These studios operate under their own applicable data protection frameworks.
exo123 may disclose personal data where required to do so by a valid court order, regulatory authority, law enforcement request, or other legally binding demand. We will, to the extent permitted by law, notify you of any such request before complying.
In the event that exo123 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.
8.1 What Cookies We Use. The exo123 Platform uses the following categories of cookies and similar tracking technologies:
8.2 Managing Cookies. You may configure your browser to block or delete non-essential cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your exo123 account and will impair core Platform functionality. Instructions for managing cookies in the most widely used browsers are available from the browser's official help documentation.
8.3 No Cross-Site Tracking. exo123 does not use third-party advertising trackers or cross-site tracking technologies that follow your browsing activity outside the exo123.org domain.
9.1 Retention Periods. We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with our legal obligations. The following general retention periods apply:
9.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. You may request early deletion of your data where no legal retention requirement applies, subject to the limitations described in Section 10.
As a player whose personal data is processed by exo123, you hold the following rights in relation to your data. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all verified requests within 5 business days.
You have the right to request a copy of the personal data exo123 holds about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
You may request that we delete your personal data where it is no longer necessary for its original purpose and no legal retention obligation applies.
You may request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
Where processing is based on your consent or a contract, you have the right to receive your data in a structured, commonly used, machine-readable format.
You have the right to object to processing based on legitimate interests, including profiling for direct marketing. We will cease such processing unless compelling grounds exist.
11.1 Technical Measures. exo123 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
11.2 Organisational Measures. Access to personal data within exo123 is governed by a role-based access control policy and a principle of minimum necessary access. All staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.
11.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, exo123 will notify affected players without undue delay and will take immediate remedial action to contain the breach and prevent recurrence.
11.4 Your Responsibility. The security of your exo123 account also depends on the strength and confidentiality of your login credentials. You are responsible for choosing a strong, unique password and for keeping it confidential. Do not share your exo123 login details with any third party.
The exo123 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, use, or store personal data relating to individuals under the age of 21. During the registration process, all users are required to confirm that they meet the minimum age requirement, and age verification is performed as part of the KYC process.
If you are a parent or guardian and believe that a minor has registered an account or provided personal data to exo123 without your knowledge, please contact our support team immediately at [email protected]. We will investigate the matter, close the account, and delete the associated personal data as quickly as practicable.
We strongly encourage parents and guardians residing in Indonesia to use parental control software to restrict access to online gambling platforms. A number of free and paid solutions are available that can block access to gambling websites at the network or device level.
The exo123 Platform may contain references to third-party services — such as game studios (Pragmatic Play, Evolution Gaming, Spribe), payment providers (OVO, DANA, GoPay), or information resources — whose privacy practices are independent of ours. When you interact with a third-party game interface embedded within the Platform, that interaction is subject to the studio's own data processing terms in addition to ours.
exo123 does not control and is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service provider with whom you share personal data as a result of using their product within our Platform.
14.1 Right to Update. exo123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The updated effective date will be displayed at the top of this page whenever a revision is published.
14.2 Material Changes. Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data — we will provide you with at least 7 days' prior notice via a prominent notice on the Platform and/or an email to your registered address before the change takes effect.
14.3 Continued Use. Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the Platform and contact us to request account closure in accordance with the Terms & Conditions.
14.4 Archive. The current version of this Privacy Policy is always accessible at exo123.org/privacy-policy. Previous versions are available upon request by contacting our support team.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by exo123, please contact our Data Protection team through any of the following channels:
When submitting a data subject rights request (access, rectification, erasure, portability, restriction, or objection), please include your registered account username and a brief description of your request so that we can process it efficiently. We may need to verify your identity before actioning the request.
Your data is protected and your privacy is our priority. Ready to explore sports betting, live casino, and premium slots — all in Indonesian Rupiah?
21+ Only. Gambling involves financial risk. Please play responsibly. Visit our Responsible Gaming page for support tools.