ong888 Privacy Policy

1 Introduction

ong888 ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of all individuals who use the ong888 online gaming platform, including players, prospective players, and visitors to our website. This Privacy Policy ("Policy") describes how ong888 collects, processes, stores, and discloses personal data in connection with the operation of the ong888 platform.

This Policy applies to all personal data processed by ong888 in connection with your registration, account management, gaming activity, financial transactions, customer support interactions, and any other use of the ong888 platform. By registering an account with ong888 or by continuing to use the platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the ong888 Terms & Conditions, which govern the overall relationship between ong888 and its players.

2 Data Controller

For the purposes of applicable data protection legislation, ong888 is the data controller in respect of the personal data of its players and platform visitors. As data controller, ong888 determines the purposes and means by which personal data is processed.

If you have questions or concerns about how ong888 processes your personal data, or if you wish to exercise any of your data subject rights as described in Section 11 of this Policy, you may contact our Data Protection team at: [email protected]

3 Personal Data We Collect

ong888 collects the following categories of personal data in connection with your use of the platform:

ong888 does not collect special category data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where expressly required by regulatory obligation and with your explicit consent.

4 How We Collect Your Data

ong888 collects personal data through the following channels:

• Direct submission: Data you provide when registering an ong888 account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automated collection: Technical data collected automatically when you access the ong888 platform, including via cookies, log files, and device fingerprinting technology. See Section 10 for further details on our use of cookies.
• Third-party sources: Data received from identity verification providers, payment processors, fraud prevention services, and publicly available sources for the purpose of verifying the accuracy of information you have provided and for compliance with anti-money laundering obligations.

5 How We Use Your Personal Data

ong888 uses personal data for the following purposes:

• To establish and manage your player account, including identity verification and age confirmation (21+ requirement strictly enforced).
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and other supported channels.
• To provide access to ong888 gaming products including live casino, sportsbook, slots, e-sports betting, and lottery services.
• To comply with our obligations under applicable gaming licensing conditions, anti-money laundering regulations, and know-your-customer requirements.
• To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and any other prohibited conduct as defined in the ong888 Terms & Conditions.
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and activating intervention tools where appropriate.
• To communicate with you regarding your account, including transactional notifications, security alerts, promotional offers (where you have opted in), and platform updates.
• To resolve disputes, respond to customer support enquiries, and maintain records for regulatory audit purposes.
• To improve the ong888 platform through analysis of usage patterns, A/B testing, and performance monitoring.

6 Legal Basis for Processing

ong888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ong888, including account management, payment processing, and the provision of gaming services.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering legislation, gaming licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing carried out for ong888's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

ong888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients:

• Payment processors and financial institutions: For the purpose of processing deposits and withdrawals, including Malaysian banks and e-wallet operators.
• Identity verification and KYC providers: Third-party services engaged to verify your identity and age in accordance with our licensing obligations.
• Game content providers: Licensed game studios and live dealer operators who provide gaming content accessible through the ong888 platform. These providers may collect limited technical data for game integrity purposes.
• Fraud prevention and security services: Third-party providers engaged to detect and prevent unauthorised access, fraud, and money laundering.
• Regulatory and law enforcement authorities: Where ong888 is required by applicable law, court order, or regulatory direction to disclose personal data.
• Professional advisers: Lawyers, auditors, and other professional service providers engaged by ong888 in connection with the operation of the platform, subject to confidentiality obligations.

All third-party service providers engaged by ong888 are contractually required to process personal data only for the purposes for which it was shared and to maintain appropriate security measures.

8 International Data Transfers

In the course of operating the ong888 platform, personal data may be transferred to and processed in countries outside of Malaysia, including countries where gaming licensing and data processing operations are located. Where such transfers occur, ong888 implements appropriate safeguards to ensure that your personal data receives an equivalent level of protection to that afforded under applicable Malaysian data protection law.

Such safeguards may include contractual arrangements with the recipient, adherence to applicable data transfer frameworks, or reliance on the adequacy decisions of the relevant regulatory authority. If you require further information regarding specific transfer mechanisms employed by ong888, please contact us at the address in Section 15.

9 Data Retention

ong888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations. The principal retention periods applied by ong888 are as follows:

• Active account data: Retained for the duration of your account relationship with ong888 and for a period of five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support and communications records: Retained for a period of three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or regulatory purposes.
• Technical and usage data: Retained for up to twenty-four (24) months from the date of collection, unless a longer period is required for security or fraud investigation purposes.

10 Cookies & Tracking Technologies

The ong888 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the operation of the ong888 platform, including authentication, session management, and security functions. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to personalise your ong888 experience.
• Analytics cookies: Used to collect aggregated information about how players interact with the ong888 platform, enabling us to identify areas for improvement. This data is processed in anonymised or pseudonymised form where possible.
• Marketing cookies: Used to deliver relevant promotional content. These cookies are deployed only with your consent and may be withdrawn at any time through your browser settings or account preferences.

You may configure your browser to refuse all or certain cookies. Please note that disabling strictly necessary cookies may impair your ability to use the ong888 platform.

11 Your Data Subject Rights

Subject to applicable law and the conditions of our gaming licence, you have the following rights in respect of your personal data held by ong888:

• Right of access: You may request a copy of the personal data ong888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to our legal obligations to retain records.
• Right to restriction: You may request that ong888 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that ong888 provide your data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact ong888 at [email protected]. ong888 will respond to all valid requests within the timeframe required by applicable law. We may request proof of identity before processing your request.

12 Data Security

ong888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Security measures employed by ong888 include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ong888 platform.
• Hashed and salted password storage — ong888 does not store passwords in plain text.
• Two-factor authentication (2FA) availability for all player accounts.
• Access controls and role-based permissions limiting internal access to personal data to staff with a legitimate need.
• Regular security assessments and penetration testing of platform infrastructure.
• Monitoring systems for anomalous access patterns and login activity.

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ong888 will notify you and the relevant regulatory authority in accordance with applicable law.

13 Children & Minors

The ong888 platform is strictly for use by adults aged 21 years and over. ong888 does not knowingly collect personal data from persons under the age of 21. If ong888 becomes aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account will be permanently closed.

If you believe that a minor has registered with or is using the ong888 platform, please notify us immediately at [email protected]. We take the protection of minors extremely seriously and will act swiftly on all such reports.

14 Changes to This Policy

ong888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, ong888 will provide advance notice by posting a notification on the platform or by email to your registered address prior to the changes taking effect. The date of the most recent revision is indicated at the top of this Policy.

Your continued use of the ong888 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the ong888 platform and may request account closure by contacting customer support.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ong888, please contact our Data Protection team:

Email: [email protected]
Support: Available 24/7 via live chat on the ong888 platform

ong888 is committed to resolving all privacy enquiries promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.