Privacy Policy ong888 — Your Data is Fully Protected

1 Information We Collect

Ong888 collects several categories of personal information from you during the registration process, platform usage, and interactions with our support team. A clear understanding of these data types is important to ensure you make informed decisions.

1.1 Information You Provide Directly

1.2 Information Collected Automatically

When you browse or use the ong888 platform — whether via the website or mobile app — we automatically collect certain technical information to ensure the platform operates smoothly and securely for all users:

• IP address and general location information (country/state)
• Device type and version, operating system, and web browser
• Access log data including dates, times, and pages visited
• Deposit, withdrawal, and wagering transaction records
• Game history and activity within the platform
• Interaction data such as clicks, session duration, and settings preferences

2 Purpose of Data Collection & Processing

Ong888 only collects and processes your personal data for purposes that are clear, lawful, and necessary for platform operations. We do not collect information beyond what is genuinely required for the stated purposes.

• Account Management: Creating, verifying and securely managing your member account on the ong888 platform.
• Transaction processing: Processing deposits, withdrawals and all financial transactions accurately and securely through the FPX network and local banks.
• Identity Verification (KYC): Meeting legal compliance requirements to verify member identity and prevent fraud and money laundering.
• Customer support: Providing responsive and effective technical assistance and support services in English and Bahasa Melayu.
• Platform security: Detecting and preventing fraudulent activity, unauthorised access and other security threats.
• Legal compliance: Complying with all legal obligations including PDPA, financial reporting requirements and directives from relevant authorities.
• Platform improvements: Analysing usage patterns to improve the performance, stability and overall experience of the ong888 platform.
• Marketing communications: Sending promotional information and exclusive offers — only if you have given consent, and you may unsubscribe at any time.

3 Use of Cookies & Tracking Technologies

The ong888 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, and ensure platform features function correctly. We use several types of cookies:

3.1 Essential Cookies (Required)

These cookies are required for the ong888 platform to function and cannot be disabled. They do not store any personally identifiable information and are used solely for technical functions such as maintaining your login session and ensuring account security.

3.2 Functional Cookies

These cookies allow the ong888 platform to remember your preferences — such as interface language, set wagering limits and other account settings — so you don't need to reconfigure them each time you log in.

3.3 Analytics Cookies

We use analytics cookies to understand how members interact with the ong888 platform. The data collected is aggregated and anonymised — it is used to identify areas for improvement and to optimise the platform's overall performance.

4 Data Sharing with Third Parties

Ong888 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share some of your information with the following parties:

• Payment service provider: Transaction information required to be shared with FPX payment processors and banking institutions for the purpose of processing deposits and withdrawals.
• KYC solution provider: Identity verification documents are shared with trusted, certified KYC service providers to assist with the verification process.
• Regulatory authority: ong888 is legally obligated to comply with information requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• Cloud service provider: Data is stored on secure cloud servers with providers that have signed strict data protection agreements with ong888.

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the specific purposes agreed upon with ong888 and nothing beyond that.

5 Data Security at ong888

Ong888 continuously invests in the latest security infrastructure to ensure your personal data is always protected to the highest standard. The security measures we implement cover technical, physical, and organisational aspects.

5.1 Technical Security

• End-to-end data encryption using TLS 1.3 protocol and 256-bit SSL
• Two-factor authentication (2FA) is available for all member accounts
• Real-time threat monitoring and intrusion detection system (IDS)
• Periodic independent security audits conducted by certified cybersecurity firms
• Encrypted data backups automatically stored at separate locations

5.2 Account Security

While ong888 provides robust technical protection, your account security also depends on your own actions. We recommend using a strong and unique password, enabling 2FA, not sharing your login credentials, and always logging out from public devices.

6 Your Rights as a Data Owner

Under Malaysia's PDPA and the data protection principles adopted by ong888, you have several important rights regarding your personal data. ong888 is committed to making it easy for you to exercise these rights quickly and conveniently.

To exercise any of the above rights, you may submit a request through your ong888 account settings or contact our Privacy Officer directly. We will process your request within 14 business days from the date of receipt.

7 Data Retention Period & Deletion Policy

Ong888 retains your personal data only for as long as is truly necessary to fulfil the purpose for which it was collected, or as required by law. The following are data retention guidelines for the main categories:

• Active account information: Retained for the duration of your active membership and up to 7 years after account closure for financial compliance purposes.
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and financial legal requirements.
• KYC Documents: Retained for 5 years from the date of last verification or account closure, whichever is later.
• Support communication logs: Retained for 3 years for dispute resolution and service quality assurance purposes.
• Cookie and technical log data: Non-identifiable analytics data is retained for a maximum of 26 months.

Once the designated retention period has expired, your data will be securely deleted using methods that ensure it cannot be recovered. This process runs automatically and is periodically reviewed by the ong888 data security team.

8 Cross-Border Data Transfers

In the course of its operations, ong888 may need to transfer or store your personal data on servers that may be located outside Malaysia. Any such data transfer is only carried out where there is a genuine operational necessity and with adequate safeguards in place.

Before transferring your data to another country, ong888 ensures that:

• The recipient country maintains a level of data protection equivalent to or higher than Malaysia's
• Legally binding data transfer agreements have been signed with all recipients
• Transferred data is encrypted in transit using the highest-level security protocols
• The transfer has been approved by the ong888 Privacy Officer

9 Children & Minimum Age Requirement

The ong888 platform is exclusively for individuals who are of age 18 years and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

As a protective measure, ong888 enforces a strict age verification process during registration. All applicants are required to submit valid identification documents to confirm they meet the minimum age requirement.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to permanently delete that data from our systems and close the associated account. Parents or guardians with concerns about this matter may contact our Privacy Officer directly.

10 Amendments to This Privacy Policy

Ong888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. All amendments are subject to a rigorous internal review process.

When significant changes are made to this Privacy Policy, ong888 will notify you through the following means:

• In-platform notifications on ong888 upon your next login
• Notification email sent to your registered email address
• A clear notice displayed on the ong888 website homepage for a minimum of 30 days

The effective date of the latest version of this Privacy Policy is always clearly stated at the top of this document. We encourage you to review this page periodically to stay informed about how we handle your personal data.

Your continued use of the ong888 platform after the effective date of any amendment constitutes your acceptance of the revised terms. If you disagree with any changes, you have the right to close your account and request data deletion.

11 Contact Our Privacy Officer

Ong888 has appointed a Data Protection Officer responsible for ensuring the platform's compliance with all data protection requirements. If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your data, you may reach us through the following channels:

When submitting a request, please include the following information so we can process it promptly: your full registered name, ong888 account username, request type (access / correction / deletion / complaint), and full details of your enquiry.