Ong88 Privacy Policy – Personal Data Protection for Malaysian Members

1Personal Information Ong88 Collects

Ong88 collects your personal information through various means as you interact with our platform. Below are the categories of information we collect and how they are gathered:

Information you provide directly to Ong88:

• Account registration information — full name, date of birth, email address, phone number, and your chosen username.
• Identity verification documents — a copy of your Malaysian identity card (MyKad) or passport, where required for the Know Your Customer (KYC) process.
• Financial information — details of the payment accounts you use for deposits and withdrawals, such as your DuitNow account number or Touch 'n Go eWallet username (we do not directly store credit or debit card details).
• Contact and complaints information — the content of any communications you send to the Ong88 support team.

Information collected automatically when you use the Ong88 platform:

• Log data — IP address, web browser type, device operating system, date and time of access, and pages visited.
• Gaming activity data — game history, total bets placed, wins and losses, and completed play sessions.
• Transaction data — a record of all deposits and withdrawals, including amounts, timestamps, payment methods, and transaction status.
• Cookie data — information stored through cookies and other tracking technologies as described in Section 5.

2How Ong88 Uses Your Personal Data

Ong88 uses the personal information it collects solely for legitimate purposes that are directly related to the provision of our services. These purposes are as follows:

• Account management — to create, verify, maintain and protect your Ong88 account.
• Transaction processing — to process deposits via Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost, or ShopeePay, and to process your withdrawal of winnings.
• Legal compliance — to fulfil our obligations under PDPA 2010 and other applicable laws, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Customer support — to respond to enquiries, resolve complaints, and provide technical assistance to you.
• Platform security — to detect and prevent fraud, money laundering, bot usage, and other suspicious activity.
• Responsible gaming — to monitor your playing patterns for the purpose of implementing Ong88's responsible gambling programme and to contact you should we detect any concerning behaviour.
• Marketing communications — to send you information about Ong88 promotions, bonuses, and new offers that may interest you (you may unsubscribe at any time).
• Platform improvements — to analyse usage patterns and improve the overall Ong88 user experience.

Ong88 will not use your data for purposes unrelated to the services we offer without first obtaining your consent.

3Disclosure of Data to Third Parties

Ong88 does not sell or trade your personal data to third parties for their own commercial purposes. However, there are specific circumstances in which Ong88 may need to share your information with selected third parties, solely to enable us to deliver our services to you:

• Payment service providers — platform providers such as Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, and ShopeePay receive the transaction information necessary to process your payments. These providers are subject to their own privacy policies and Malaysian legal compliance requirements.
• Game software providers — third-party game developers who supply slots and casino games to the Ong88 platform may receive non-personally identifiable game statistics for analytics and game improvement purposes.
• Legal authorities — Ong88 will disclose your data to law enforcement agencies, regulatory bodies or courts when required to do so by Malaysian law or a valid court order.
• Technical service providers — companies providing IT infrastructure, cloud computing, analytics, and cybersecurity services to Ong88 may have limited access to your data, strictly in their capacity as data processors.

In all cases where Ong88 shares data with third parties, we ensure that those parties maintain adequate data security safeguards and use the data solely for the purposes we specify. We will not disclose your data to anyone beyond the scope described above.

4Security & Data Protection at Ong88

Ong88 takes data security seriously, investing in robust measures to ensure your personal information is always protected against unauthorised access, alteration, disclosure, or destruction. The security measures we have in place include:

• 256-bit SSL Encryption for all data communications between your browser and Ong88's servers.
• Secure password storage using a strong one-way hashing algorithm — we never store your password in any readable format.
• Strict internal access controls — Ong88 staff only have access to the data necessary to perform their duties, and all access is logged and audited on a regular basis.
• Continuous threat monitoring — Ong88's cybersecurity systems monitor our platform 24 hours a day to detect and respond to any security threats promptly.
• Regular security audits — the Ong88 platform undergoes regular penetration testing and independent security audits conducted by third-party cybersecurity experts.
• Staff training — all Ong88 staff who handle personal data receive comprehensive data protection training, which is updated on a regular basis.

While Ong88 takes all reasonable steps to protect your data, no system is 100% immune to every threat. If you suspect a security breach on your account, please contact us immediately at [email protected]. Ong88 will investigate and take appropriate action without delay.

5Ong88 Cookies & Tracking Technologies

Ong88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our website.

Types of cookies used by Ong88:

• Strictly Necessary Cookies — these cookies are required for core Ong88 platform functions such as login authentication, session management, and security. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Functional cookies — these cookies remember your preferences such as display language, game settings and product choices, delivering a more personalised and comfortable experience on Ong88.
• Performance cookies — these cookies collect information about how you use the Ong88 platform — such as the most frequently visited pages and any error messages encountered — to help us improve platform performance.
• Analytics cookies — these cookies help Ong88 understand aggregate user behaviour for the purpose of platform improvement and new feature development.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the Ong88 platform. For more information on managing cookies, please refer to your browser's help section.

6Data Storage & Retention

Ong88 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for such periods as required or permitted under applicable Malaysian law.

In general, Ong88 adheres to the following data retention policy:

• Active account data — retained for the duration your account is active at Ong88, and for a reasonable period following account closure to meet legal obligations.
• Financial transaction records — retained for a minimum of 7 years after each transaction, in accordance with Malaysia's anti-money laundering legislation and accounting requirements.
• KYC Documents — retained for a minimum of 5 years after the business relationship is terminated, in accordance with Malaysian legal requirements.
• Log and security data — typically retained for a rolling 12-month period for security and investigation purposes.
• Customer support communications — retained for a minimum of 2 years for record-keeping and service quality assurance purposes.

When your data is no longer needed and there is no legal obligation to retain it, Ong88 will securely delete or anonymise that data using industry-standard methods. Anonymised data can no longer be linked back to you personally and may be used for Ong88's analytics purposes.

7Your Rights as a Data Subject at Ong88

Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), you have certain rights regarding the personal data that Ong88 holds about you. Ong88 respects and facilitates the exercise of these rights:

• Right to Access — you have the right to request and receive a copy of the personal data Ong88 holds about you, in a readily readable format.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — in certain circumstances, you have the right to request the deletion of your personal data, subject to any legal obligations that may prevent full erasure.
• Right to object — you have the right to object to the processing of your personal data for specific purposes, such as direct marketing.
• Right to Withdraw Consent — where data processing is based on your consent, you have the right to withdraw that consent at any time, though withdrawal does not affect the validity of any processing that took place prior to it.
• Right to Data Portability — you have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the rights described above, contact Ong88's data protection team by email at [email protected] with the subject line "Data Rights Request". We will process your request within 21 business days of receipt. For complex requests, we may require an additional 2 months and will notify you if this is the case.

8Children's Privacy at Ong88

The Ong88 platform is strictly for adults aged 18 and above. Ong88 does not knowingly collect, process, or store any personal information from individuals under the age of 18.

Should we become aware that we have collected personal information from an individual under the age of 18 without valid parental or guardian consent, we will take immediate steps to delete that information from our servers, close the account in question, and where necessary, report the matter to the relevant authorities.

If you are a parent or guardian and believe that your child under the age of 18 has registered for or is using the Ong88 platform, please contact us immediately at [email protected] so that we can take prompt and appropriate action.

9Changes to Ong88's Privacy Policy

Ong88 reserves the right to update or modify this Privacy Policy from time to time. Changes may be necessary to reflect updates to our business practices, current legal requirements, or technological developments that affect how we manage data.

When Ong88 makes material changes to this Privacy Policy, we will notify you through one or more of the following methods:

• Notification emails sent to the email address registered with your Ong88 account.
• A prominent notice on the Ong88 platform homepage for a minimum of 30 days.
• A pop-up notification when you log in to your Ong88 account after the changes take effect.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the Ong88 platform after any changes to this Privacy Policy take effect will be regarded as your full acceptance of those changes. The date of the most recent update to this Privacy Policy is always displayed at the top of this page.

10Contact Ong88 for Privacy Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the way Ong88 handles your personal data, please do not hesitate to reach us through the following channels:

• Email: [email protected] (with the subject line "Privacy Enquiry" or "Data Rights Request")
• Live Chat: available 24 hours a day, 7 days a week, directly through the Ong88 platform

The Ong88 data protection team will endeavour to respond to all privacy enquiries within 5 business days. For formal data rights requests, the response period is 21 business days as outlined in Section 7.

Ong88 takes all privacy-related complaints seriously. If you are not satisfied with our response to your privacy complaint, you have the right to refer the matter to the Personal Data Protection Department of Malaysia (JPDP), the regulatory body responsible for enforcing PDPA 2010 in Malaysia.