Identity Verification and KYC Requirements
Every account on olb228 begins with Know Your Customer verification. When you register, we collect your legal name, date of birth, national ID number, and contact information. This step is not optional—it is a regulatory requirement across all jurisdictions where we operate, and it protects both you and our platform from fraud and money-laundering risk.
We verify your identity against government records within 24 to 48 hours of submission. During this window, your account remains active for non-deposit activities—you can browse games, read rules, and explore our live-dealer studio schedule. Once verification completes, deposit and withdrawal functions unlock, and you can fund your account via QRIS, e-wallet, mobile banking, local payment, or any linked payment partner.
We ask for ID verification because financial regulations in Indonesia, Malaysia, Singapore, and other supported markets require licensed platforms to authenticate user identity before handling money. This protects you from unauthorised account access and ensures that if a dispute arises—for example, a contested withdrawal during a live-dealer session—we can trace the transaction to a verified individual.
Key takeaways
- KYC verification is mandatory and completes within 24–48 hours
- Your ID data is encrypted and stored separately from payment records
- Verification unlocks deposit and withdrawal functions across all payment methods
- We retain verification records for the duration of your account plus 7 years per regulatory requirement
Multi-Factor Authentication and Password Management
After KYC verification, we recommend activating two-factor authentication (2FA) on your account. 2FA adds a second checkpoint: in addition to your password, you must provide a time-based code from your phone or email during login. This prevents unauthorised access even if someone obtains your password.
We support 2FA via email and SMS. When you enable 2FA, the next time you log in from an unfamiliar device—or after a fixed interval—olb228 sends a one-time code to your registered contact. You must enter this code within subject to verification to proceed. If you lose access to your 2FA device, our support team can verify your identity and reset the setting using your KYC records.
Your password should be at least 12 characters, combining uppercase, lowercase, numbers, and symbols. We do not store passwords in plain text; instead, we hash them using bcrypt, a cryptographic algorithm that makes passwords unreadable even to olb228 staff. If you suspect your password has been compromised—for example, if you see unrecognised login activity in your session log—change it immediately via Account Settings. We will terminate all existing sessions once you reset, forcing re-authentication on your next login.
Secure Withdrawal Review and Transaction Transparency
Withdrawals on olb228 follow a structured review process. When you initiate a withdrawal to your online payment, e-wallet, mobile banking, local payment, online payment, or bank account (e-wallet, mobile banking, local payment, online payment), we compare the request against your account history: login frequency, bet patterns, previous withdrawals, and funding source. This check typically takes subject to verification and is designed to catch fraudulent withdrawal attempts before funds leave our platform.
If we detect anomalous activity—for instance, a withdrawal request from a new device subject to verification after account creation, or to a different bank than you normally use—we pause the withdrawal and contact you via email or SMS. You must confirm the request is legitimate before we process it. This friction is intentional. It prevents account takeover and ensures that if someone gains unauthorised access, they cannot drain your balance immediately.
You can view your full transaction history—every deposit, withdrawal, and live-dealer bet across blackjack, roulette, Dragon Tiger, and slot games—in the Account > Transactions section. Each row shows the amount, payment method, date, and status. Withdrawals show the exact timestamp when we initiated the transfer to your chosen payment partner. If you dispute a transaction, we supply this log as evidence to both you and our payment processor.
Data Handling, Encryption, and Privacy
All communication between your device and olb228 servers is encrypted using TLS 1.3, a protocol that scrambles data in transit so that even if intercepted, the content remains unreadable. Your login credentials, payment details, and betting history travel through this encrypted tunnel. We also encrypt data at rest—that is, how we store information on our servers. Your account balance, transaction log, and KYC documents are encrypted using AES-256, a military-grade cipher.
Personal data you provide during registration—name, ID number, email, phone—is stored in isolated, access-restricted databases. Only designated olb228 staff members (account support, fraud prevention, and compliance teams) can retrieve it, and only when handling your specific request or investigating a dispute. We do not sell, share, or broker your personal information to third parties except where local law requires disclosure to financial regulators or law enforcement.
Payment tokens (your e-wallet code, your mobile banking reference, your local payment account link) are stored in a separate PCI-DSS-compliant vault. We never see or store the full card numbers, CVV codes, or bank credentials. Instead, your payment processor (the entity that handles online payment, e-wallet, or bank transfers) supplies us with a tokenised reference that expires after 12 months. You can revoke any payment method from Account > Payment Methods at any time, and the token is deleted immediately.
-
Verify your account details annually
Log in to Account > Profile and confirm your name, ID, and contact information remain accurate. Update any changes immediately so withdrawals and support correspondence reach you reliably.
-
Review login activity monthly
Check Account > Session Activity for unfamiliar login locations or IP addresses. If you see logins from cities like Jakarta, Surabaya, or Bandung that don't match your typical usage, change your password and enable 2FA.
-
Update payment methods when switching banks
If you change from mobile banking to local payment, or from online payment to e-wallet, add the new method and remove the old one in Account > Payment Methods. This prevents withdrawal delays if your old account is closed.
-
Contact support if you suspect unauthorised access
If your balance changes unexpectedly or you receive notifications of bets you did not place, lock your account immediately via Account > Security and email our support team with the timestamp and transaction ID.
Account Recovery and Support
If you forget your password, visit the login page and select "Forgot Password." We send a recovery link to your registered email. The link is valid for subject to verification and includes a unique token that expires once used. You set a new password via a secure form, and your old password is discarded. If you no longer have access to your registered email (for example, if your email provider closed the account), contact our support team with your KYC ID number and we will verify your identity and update your email address.
If you suspect your account has been compromised—you see unauthorised bets, balance changes, or unrecognised withdrawals—lock your account immediately by clicking Account > Security > Lock Account. This disables login from all devices and pauses withdrawal requests pending our investigation. Our fraud team will review your session history, transaction log, and IP addresses. If we confirm unauthorised access, we will reverse fraudulent transactions (up to applicable limits set by your payment processor) and restore your balance.
Account security is a shared responsibility. We engineer defences; you manage your password and 2FA device. Together, these practices keep your olb228 account and funds secure.