How to make a OG private?
You need to enable og access control module.

see below: 


Then navigate to admin/config/group/fields, add an visibility field to your og bundle



Then edit the og bundle content type, there is a new field added to it, make your change for public or private