ong888 Privacy Policy

1.Introduction

This Privacy Policy ("Policy") is issued by ong888 ("ong888", "we", "us", "our"), the operator of the online gaming platform accessible at ong888.app. This Policy explains how ong888 collects, uses, discloses, stores, and protects personal data relating to registered players, prospective players, and visitors to the ong888 website and mobile platform (collectively, "you", "your").

ong888 is committed to handling all personal data responsibly and in accordance with applicable data protection principles. By registering an account or using the ong888 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read in conjunction with the ong888 Terms & Conditions, which govern your use of the platform as a whole.

2.Data Controller

For the purposes of data protection law, ong888 is the data controller responsible for the personal data collected through the ong888 platform. If you have any questions about how ong888 handles your personal data, or wish to exercise any of your rights under this Policy, please contact our Data Protection team at [email protected].

3.Personal Data We Collect

ong888 collects personal data in the following categories, depending on your interaction with the platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (collected during account registration and KYC verification).
• Contact Data: Email address, phone number, and residential address (including city and postcode, e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Bangsar).
• Account Data: Username, encrypted password, account preferences, and communication preferences.
• Financial Data: Payment method details, transaction history, deposit and withdrawal records. ong888 does not store full card numbers; payment card data is handled directly by PCI DSS-compliant payment processors.
• Technical Data: IP address, browser type and version, device type and operating system, time zone, access timestamps, and session data.
• Usage Data: Game history, betting activity, wagering patterns, page views, navigation paths, and feature usage within the platform.
• Communications Data: Records of your correspondence with the ong888 support team, including live chat transcripts and email exchanges.
• Verification Data: Documents submitted for KYC purposes, including copies of identity documents and proof of address or payment method.

4.How We Use Your Personal Data

ong888 uses the personal data collected for the following purposes:

• Account Management: To create, maintain, and administer your ong888 account, verify your identity, and manage your login credentials.
• Service Delivery: To provide access to the ong888 platform, process your bets, games, deposits, and withdrawals, and deliver the full range of casino, sportsbook, and gaming services.
• Payment Processing: To process your financial transactions, including deposits via Touch 'n Go eWallet, Boost, Maybank, CIMB Clicks, and Public Bank, and to settle withdrawals to your verified payment method.
• Legal and Regulatory Compliance: To fulfil our legal obligations, including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) checks, and age verification to confirm players are 21 years of age or older.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other illegal activities.
• Responsible Gaming: To monitor gambling behaviour for indicators of problem gambling, enforce self-exclusion requests and deposit limits, and administer responsible gaming tools.
• Customer Support: To respond to your queries, complaints, and account-related requests via live chat, email, and other support channels.
• Platform Improvement: To analyse usage data and improve the functionality, performance, and user experience of the ong888 platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or in-platform messaging, where you have consented to receive such communications. You may opt out at any time.

5.Legal Basis for Processing

ong888 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations to you under the ong888 Terms & Conditions, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and age verification requirements.
• Legitimate Interests: Processing conducted for ong888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your explicit consent, such as the receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.Data Sharing and Disclosure

ong888 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, ong888 may share your personal data with the following categories of recipients in limited circumstances:

• Payment Processors: Third-party payment service providers who process your transactions on ong888's behalf. These providers are contractually required to protect your data and use it only for the specified payment processing purpose.
• Game Providers: Software and game providers who supply gaming content to the ong888 platform may receive certain technical and session data necessary for game delivery and RTP certification.
• Identity Verification Services: Third-party KYC and AML compliance providers who assist ong888 in verifying player identities and screening against sanctions and watchlists.
• Law Enforcement and Regulatory Bodies: ong888 will disclose personal data to competent authorities where required by law, court order, or regulatory obligation.
• Service Providers: Technology, hosting, analytics, and customer support service providers who process data on ong888's behalf under data processing agreements.

All third parties who receive personal data from ong888 are required to maintain appropriate technical and organisational security measures and to process data only in accordance with ong888's instructions and applicable data protection requirements.

7.International Data Transfers

ong888 operates internationally, and your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, ong888 takes appropriate safeguards to ensure that your data receives an equivalent level of protection, including the use of standard contractual clauses or other approved data transfer mechanisms as required by applicable law.

8.Data Retention

ong888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. In general:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• KYC and identity verification documents are retained for the duration of the account relationship and for at least five (5) years following account closure.
• Marketing communications data is retained until you withdraw consent or opt out of marketing communications.
• Technical and usage data is retained for a rolling period not exceeding twenty-four (24) months, unless a longer retention period is required for security or legal compliance purposes.

Following the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9.Cookies and Tracking Technologies

ong888 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session cookies that maintain your login state and authentication tokens. These cookies cannot be disabled.
• Performance Cookies: Used to collect anonymous statistical data about how players interact with the platform, helping ong888 to identify errors and improve performance.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience.
• Targeting/Advertising Cookies: Used to deliver relevant promotional content within the platform based on your activity history.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ong888 platform.

10.Your Data Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by ong888:

• Right of Access: You may request a copy of the personal data ong888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to ong888's legal retention obligations.
• Right to Restriction: You may request that ong888 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You may request that ong888 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the ong888 Data Protection team at [email protected]. ong888 will respond to all legitimate requests within thirty (30) days. In some circumstances, ong888 may need to verify your identity before fulfilling your request.

11.Security Measures

ong888 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include 256-bit SSL/TLS encryption of all data in transit, encrypted storage of sensitive data at rest, access controls restricting internal data access to authorised personnel on a need-to-know basis, regular security assessments and penetration testing, and staff training on data protection and information security obligations.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ong888 will notify affected players without undue delay in accordance with applicable legal requirements.

12.Minors

The ong888 platform is strictly intended for individuals who are 21 years of age or older. ong888 does not knowingly collect personal data from individuals under the age of 21. If ong888 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed and all associated personal data will be securely deleted. If you believe a minor has registered an ong888 account, please contact ong888 support immediately at [email protected].

13.Changes to This Privacy Policy

ong888 reserves the right to amend or update this Privacy Policy at any time. The date of the most recent revision will be displayed at the top of this page. Where changes are material, ong888 will notify registered players by email or via an in-platform notification prior to the changes taking effect. Your continued use of the ong888 platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you should cease using the platform and contact support to close your account.

14.Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ong888 handles your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 from within the ong888 platform

ong888 takes all privacy enquiries seriously and will respond to your contact within thirty (30) days. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.