olx Platform Privacy Notice

This page describes what we collect when you use olx and how we keep that data protected. We collect personal information to operate our platform—account registration, payment processing, fraud prevention, and customer support. We store your data on servers that may sit outside your jurisdiction and share limited information with payment processors, fraud-detection vendors, and legal authorities when required by law.

Our privacy practices are designed around transparency and user control. We do not sell your personal data to third parties for marketing. We do not track your activity across unrelated websites. We do not use cookies to build profiles for targeted advertising. Your data is encrypted in transit and at rest, and you can request access, correction, or deletion of your personal information at any time.

This notice applies to all users of olx, regardless of location. If you access olx from Jakarta, Surabaya, Bandung, Medan, Semarang, or any other jurisdiction, these practices apply to your account.

What We Collect & How We Use It

We collect information in three categories: information you provide directly, information we collect automatically, and information from third parties.

Information You Provide Directly

When you register an olx account, we collect your email address, phone number, password, and full name. During account verification, we collect a copy of your government-issued ID and a selfie photo. When you deposit funds, we collect payment method details—your DANA, e-wallet, mobile banking, local payment, online payment, or e-wallet account identifier, or your mobile banking, local payment, online payment, or e-wallet bank account number. We do not store full credit card numbers; payment processors handle that data directly.

When you contact our support team, we collect your message content, email address, and any attachments. When you place a sportsbook entry or play a live-dealer table, we log your stakes, outcomes, and timestamps. This information is used to settle your account, process withdrawals, and maintain transaction history.

• Account data: Email, phone, name, password hash, ID scan, selfie.
• Payment data: Payment method identifier, deposit and withdrawal amounts, timestamps.
• Gaming data: Stakes, outcomes, game IDs, session timestamps, table limits.
• Support data: Messages, attachments, contact information.

Information We Collect Automatically

When you use olx, we collect your IP address, device type, browser version, and operating system. We log your login times, session duration, and pages visited. We use cookies and similar tracking technologies to remember your preferences, maintain your session, and detect fraud. We do not use these technologies to build marketing profiles or track you across unrelated websites.

We collect this information to operate our platform securely. We use IP addresses to detect geographic anomalies that may indicate account compromise. We use device fingerprints to prevent fraudsters from accessing multiple accounts. We use session logs to investigate disputes and support requests.

Information from Third Parties

We receive information from payment processors when you deposit or withdraw funds. We receive fraud-detection signals from third-party vendors who scan for stolen payment methods or compromised accounts. We may receive information from legal authorities if they request data as part of an investigation. We do not purchase personal data from data brokers or marketing vendors.

Data retention

We retain account data for as long as your account is active, plus 7 years for regulatory compliance. Gaming and transaction data is retained for 10 years.

Data deletion

You can request deletion of your account and associated data. We will delete personal information within 30 days, except where legal or regulatory requirements require retention.

Data access

You can request a copy of all personal data we hold about you. We will provide this within 30 days in a machine-readable format.

Data correction

You can correct inaccurate personal information via your account dashboard or by contacting our support team.

How We Protect Your Data

We encrypt all data in transit using TLS 1.2 or higher. We encrypt sensitive data at rest using AES-256 encryption. We store passwords as salted hashes, never in plain text. We restrict access to personal data to authorized employees and contractors who need it to perform their job functions. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

We maintain a data breach response plan. If we discover unauthorized access to personal data, we will notify affected users and relevant authorities within the timeframes required by law. We do not guarantee that our security measures are impenetrable—no system is completely secure—but we undertake to maintain industry-standard protections and respond promptly to any breach.

We at olx believe that your personal data belongs to you. We collect only what we need to operate our platform, and we protect it with the same care we would apply to our own data.

Our olx Data Sharing & Legal Obligations

We share personal data with third parties only in limited circumstances. We share payment information with payment processors (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, e-wallet) to process your deposits and withdrawals. We share fraud-detection signals with third-party vendors to prevent account compromise. We share data with legal authorities if required by law, court order, or government request.

We do not sell personal data to marketing vendors, data brokers, or advertisers. We do not share your gaming history with third parties for any purpose other than fraud prevention or legal compliance. We do not use your data to build profiles for targeted advertising.

Cookies & Tracking Technologies

We use cookies to maintain your session, remember your preferences, and detect fraud. We use session cookies (deleted when you close your browser) and persistent cookies (stored for up to 12 months). We do not use cookies to track you across unrelated websites or build marketing profiles.

You can disable cookies in your browser settings, but this may prevent olx from functioning properly. We do not respond to "Do Not Track" signals because we do not engage in cross-site tracking.

Your Rights & Contact Information

You have the right to access, correct, and delete your personal data. You have the right to request a copy of your data in a machine-readable format. You have the right to object to certain uses of your data. You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise any of these rights, contact our support team via live chat, email, or phone during Jakarta and Surabaya business hours. We will respond to your request within 30 days. If you have a privacy concern that our support team cannot resolve, you can escalate to our data protection officer.

This privacy notice may be updated from time to time. We will notify you of material changes via email or by posting a notice on our platform. Your continued use of olx after such changes constitutes your acceptance of the updated notice.

Summary: Privacy at olx

We collect personal information to operate olx—account registration, payment processing, fraud prevention, and customer support. We encrypt your data in transit and at rest. We do not sell your data to third parties for marketing. We do not track you across unrelated websites. We share data with payment processors and fraud-detection vendors only as necessary to operate our platform. We comply with legal requests from authorities.

You have the right to access, correct, and delete your personal data. You can request a copy of your data in a machine-readable format. You can contact our support team to exercise these rights or raise privacy concerns. Our commitment is transparency about what we collect, how we use it, and how we protect it.