Privacy Policy ong77 — Data Protection Malaysian Players

ong77 ("we", "the ong77 platform") are fully committed to protecting the privacy of all our players and users. This Privacy Policy was established to uphold responsible personal data protection principles and to explain our practices in a clear and transparent manner.

This document applies to all users of the ong77 website, including those who register an account, make a deposit, play games, or simply browse our site. By using any ong77 service, you confirm that you have read and understood this Privacy Policy.

Ong77 collects your personal information in several ways — directly when you register or interact with the platform, and automatically through standard tracking technologies such as cookies and server logs.

Data You Provide Directly:

• Identity Information: Full name, date of birth, gender, MyKad or passport number
• Contact Information: Email address, phone number, residential address in Malaysia
• Financial Information: Local bank account details, digital wallet information (Touch 'n Go, GrabPay, Boost, ShopeePay), FPX account numbers (Maybank2u, CIMB Clicks), deposit and withdrawal records in Malaysian Ringgit (RM)
• Verification Documents: MyKad copy, passport, utility bill, bank statement for the KYC process

Data Collected Automatically:

• IP address, browser type, operating system, screen resolution
• Server log data including access date and time, and pages visited
• Gaming activity data: bets placed, winnings, losses, and session duration
• Mobile device data if you access the ong77 platform via smartphone

Every piece of data ong77 collects has a specific and legitimate purpose. We do not use your data for any purpose not stated in this policy. The following are the primary purposes for which data is used:

• Account Management: Creating, verifying, and managing your ong77 player account
• Transaction Processing: Processing deposits and withdrawals in MYR via Touch 'n Go, GrabPay, DuitNow, FPX, and other local payment methods of your choice
• Legal Compliance: Meeting legal obligations including anti-money laundering (AML), Know Your Customer (KYC), and tax reporting requirements
• Fraud Prevention: Identifying and preventing fraudulent activity, account misuse, or the use of multiple accounts
• Customer Support: Responding to enquiries and resolving issues you raise with the ong77 support team
• Service Communications: Sending important notifications related to your account, security, or changes to our terms
• Platform Improvement: Analysing usage patterns to improve your gaming experience at ong77
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need support

Ong77 continually invests in state-of-the-art data security infrastructure to keep your personal information safe at all times. The following are the key security measures we have in place:

• Transmission Encryption: All data transmitted between your browser and ong77's servers is protected by TLS 1.3 protocol with a 256-bit SSL certificate
• Storage Encryption: Sensitive data such as financial information and identity documents is stored in encrypted form using AES-256 standards
• Access Controls: Only authorised and trained ong77 staff have access to personal data, based on a need-to-know principle
• Security Audit: ong77's security systems undergo regular penetration testing and independent security audits
• Data Backup: All data is automatically backed up to servers located at separate sites to ensure continuity of service
• 24/7 Monitoring: ong77's cyber threat detection system operates around the clock to identify and respond to any unauthorised access attempts

ong77 does not sell, rent, or trade your personal data to any third party. However, in the course of operating our services, ong77 shares data with the following categories of parties under certain circumstances:

• Payment Processors: Transaction data is shared with authorised payment providers — including the FPX platform, DuitNow gateway, and digital wallet processors (Touch 'n Go, GrabPay, etc.) — to securely process your RM transactions
• Game Providers: Minimum required data is shared with game providers (e.g. Evolution Gaming, Pragmatic Play) to properly display Live Casino games
• Regulatory Body: Information is shared with licensed authorities and regulatory bodies as required by applicable law
• Law Enforcement: In response to a lawful request from Malaysian law enforcement authorities or a valid court order
• Technical Service Providers: Cloud, hosting, and technical support service providers bound by strict confidentiality agreements

Ong77 uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and maintain platform security. Cookies are small files stored on your device when you visit the ong77 website.

Cookie Categories We Use:

• Essential Cookies (Required): Required for core platform functions such as login, game sessions, and account security. Cannot be disabled.
• Performance Cookies: Collects information on how you use the ong77 platform to help us improve our services.
• Functional Cookies: Remembers your preferences such as language, theme, and display settings for a more personalised experience.
• Analytics Cookies: Helps ong77 understand aggregate usage patterns for the purpose of platform improvement.
• Marketing Cookies (Optional): Used to display relevant promotions. Only activated with your consent.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some ong77 platform features.

As an ong77 player, you have specific rights regarding your personal data. ong77 respects and facilitates the exercise of all these rights:

Ong77 is an online casino platform exclusively for individuals aged 21 years and above. We do not knowingly collect personal data from any individual below that age limit.

If ong77 discovers that personal data of an underage individual has been inadvertently collected, we will take immediate steps to delete that data and close the associated account.

As an online casino platform operating globally, your personal data may be transferred to and processed outside Malaysia in the following contexts:

• Data may be processed on servers located outside Malaysia, operated by ong77's trusted cloud service providers
• International game providers such as Evolution Gaming and Pragmatic Play, based outside Malaysia, may receive the minimum data necessary
• International data transfers are only made to countries or organisations with adequate data protection standards, or under appropriate data transfer agreements

Ong77 ensures that all international data transfers are protected by appropriate security mechanisms and data protection standards no less stringent than those set out in this privacy policy.

Ong77 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by law. The principle of "keep only what is needed" is central to our privacy policy.

• Active Account: Data is retained for as long as your account is active and for as long as necessary to provide our services
• After Account Closure: Core records are retained for 5–7 years to meet legal obligations and tax requirements
• Financial Data: RM transaction records are retained for 7 years in accordance with Malaysia's financial reporting requirements
• Gaming Activity Data: Game logs are retained for 3 years for auditing and dispute resolution purposes
• Technical & Log Data: Retained for 12 months for security and troubleshooting purposes

Once the retention period expires, data will be securely deleted or anonymised using established data disposal procedures.

Ong77 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business practices. When material changes are made:

• The latest version will be published on the ong77 website with a clearly stated update date
• Players will receive email notifications for significant changes to how their data is used
• An in-account notice will be displayed for 30 days before any changes take effect

We encourage you to review this Privacy Policy periodically to stay informed about ong77's data protection practices. Continued use of the platform after changes take effect constitutes your acceptance of the updated terms.

Ong77 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy and handling privacy-related enquiries from players.

For any enquiries, complaints, or requests regarding your data privacy at ong77, please contact our DPO via the email above, including your account number and full details of your enquiry.