Privacy Policy
How Ong777 Handles Your Data

This Privacy Policy (the "Policy") is published by Ong777 (hereinafter referred to as "ong777", "we", "us", or "the Company"), the operator of the online gaming platform accessible at ong777.cam (the "Platform"). This Policy applies to all individuals who access or use the Platform, including registered account holders and unregistered visitors.

Ong777 is committed to protecting the privacy and personal data of all users of the Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere in Malaysia. This Policy describes our practices regarding the collection, use, storage, sharing, and protection of personal data in connection with the provision of our gaming and sports betting services.

This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform. By accessing the Platform or registering an account, you acknowledge that you have read, understood, and consented to the data practices described in this Policy.

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, either directly (e.g., full name, MyKad number) or indirectly (e.g., a combination of demographic and transactional data).
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any other handling of such data.
• "Data Controller" means ong777, which determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third party that processes personal data on behalf of ong777 pursuant to a written data processing agreement.
• "KYC Data" means identity verification documents and information submitted by players in connection with the Know Your Customer process, including copies of MyKad and selfie photographs.
• "Cookies" means small text files placed on your device by the Platform for session management, security, and analytics purposes.
• "Player" or "User" means any registered or unregistered individual accessing the Platform.

The categories of personal data that ong777 collects vary depending on how you interact with the Platform. The following table summarises the principal data categories we collect:

Ong777 collects personal data through the following methods:

4.1 Data You Provide Directly

You provide personal data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or participate in promotions. This is the primary source of identity, contact, and KYC data we hold.

4.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically by our servers and analytics tools. This includes your IP address, device identifiers, browser type, operating system, session timestamps, and navigation data. This data is used primarily for security monitoring, fraud detection, and platform improvement.

4.3 Data from Third-Party Providers

Where necessary for payment processing, age verification, fraud prevention, or AML compliance, ong777 may receive personal data from approved third-party service providers. Examples include:

• Malaysian payment processors (including those handling Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong transactions) who confirm transaction status;
• Third-party identity verification services used to cross-reference KYC document submissions;
• Fraud detection and risk scoring services that flag unusual account or payment activity;
• Analytics service providers operating under strict data processing agreements with ong777.

Ong777 processes your personal data for the following specific and legitimate purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate account-related information to you.
• Age verification and KYC compliance: To verify that you are at least 21 years old, as required by our responsible gambling policy and international gaming licence obligations.
• Payment processing: To facilitate deposits via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and major Malaysian banks, and to process withdrawal requests back to your verified payment method.
• Anti-money laundering (AML) and fraud prevention: To monitor transactions for suspicious activity, comply with AML obligations under our licence, and protect the integrity of the Platform.
• Platform operation and improvement: To deliver our gaming and sports betting services, resolve technical issues, and analyse usage data to improve the Platform experience for Malaysian players.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Responsible gambling: To administer self-exclusion requests, deposit limits, loss limits, and cooling-off periods, and to identify accounts that may require additional safeguarding measures.
• Marketing communications: To send you promotional offers, bonus notifications, and news about ong777, where you have given consent to receive such communications. You may opt out at any time.
• Legal compliance: To comply with our obligations under applicable laws and regulations, including our international gaming licence conditions, AML requirements, and any lawful requests from competent authorities.
• Security: To detect, prevent, and investigate unauthorised access, fraud, abuse, and other security threats to the Platform and your account.

Ong777 processes personal data only where a legitimate legal basis exists. The primary legal bases applicable to our processing activities are:

• Contractual necessity: Processing that is necessary to fulfil our obligations to you under the Platform's Terms & Conditions — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC verification, AML monitoring, and age verification requirements under our international gaming licence.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, and analytics — where our legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and certain cookie categories, where we have obtained your explicit consent. You may withdraw this consent at any time without detriment to your account.

Ong777 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

7.1 Service Providers (Data Processors)

We share personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements that prohibit them from using your data for any purpose other than providing services to ong777. These include:

• Payment processing partners for Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong);
• KYC and identity verification service providers;
• Fraud detection and AML monitoring services;
• Cloud hosting and data storage infrastructure providers operating in secure, access-controlled environments;
• Customer support platform providers used to manage live chat and email interactions;
• Anonymised analytics service providers used to improve Platform performance and user experience.

7.2 Legal and Regulatory Disclosure

Ong777 may disclose personal data to competent authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or our obligations under our international gaming licence. We will disclose no more data than is strictly necessary to comply with the relevant legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of the Company or substantially all of its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to how your data is processed before the transfer takes effect.

As an internationally operating platform, ong777 may transfer your personal data to countries outside Malaysia for the purposes described in this Policy, including to our cloud hosting infrastructure and certain third-party service providers.

Where personal data is transferred internationally, ong777 implements appropriate safeguards to ensure that your data receives a comparable level of protection to that which applies in the originating jurisdiction. These safeguards include contractual data protection clauses, technical security measures, and — where applicable — reliance on the data protection frameworks of the receiving jurisdiction.

If you have questions about the safeguards in place for any specific international transfer, you may contact our support team via the details set out in Section 16.

Ong777 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any applicable legal obligations that require longer retention periods.

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with AML record-keeping obligations under our international gaming licence.
• KYC documents: Retained for the duration of your account and for a minimum of 5 years after account closure, in accordance with AML and know-your-customer regulatory requirements.
• Financial and transactional data: Retained for a minimum of 7 years from the date of the relevant transaction, in line with standard financial record-keeping requirements.
• Communications data (support records): Retained for 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Typically aggregated and anonymised after 13 months unless specific data must be retained for a pending security investigation.
• Responsible gambling data: Self-exclusion records are retained for the duration of the exclusion period plus a minimum of 5 years, to prevent circumvention of exclusion measures.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

Ong777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They enable essential functionality and allow us to understand how players use our services.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in, security tokens, and cookies that remember your language and region preferences. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform — which pages are visited most, how long sessions last, and which features generate the most engagement. This data is aggregated and does not identify individual players.
• Functional Cookies: Used to remember your preferences, such as your preferred payment method display or game category filters, to improve your experience on return visits.
• Security Cookies: Used by our fraud detection systems to identify unusual patterns that may indicate account compromise or bot activity.

10.2 Cookies We Do Not Use

Ong777 does not use third-party advertising cookies, cross-site tracking cookies, or social media tracking pixels. We do not allow third-party advertisers to deploy tracking technologies on our Platform.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account. Detailed browser-specific cookie management instructions are available through your browser's help documentation.

Ong777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our principal security measures include:

• Encryption in transit: All data transmitted between your device and our servers is protected by TLS 1.2 or higher encryption — the same standard used by major Malaysian banking platforms including Maybank2u and CIMB Clicks.
• Encryption at rest: Personal data, KYC documents, and financial records stored on our servers are encrypted using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Employees and contractors with access to personal data undergo background checks and regular security training. KYC documents can only be accessed by authorised compliance personnel.
• Two-factor authentication: Available to all registered players on the Platform and mandatory for all internal administrative accounts.
• Penetration testing: The Platform undergoes regular independent penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident response: Ong777 maintains a documented data breach response procedure. In the event of a security incident that poses a high risk to your privacy rights, you will be notified without undue delay.

Subject to applicable law and any overriding legal obligations on ong777, you have the following rights in relation to your personal data:

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We will respond within 30 days of receiving a valid request, and we will not charge a fee for reasonable requests.

The ong777 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, use, or store personal data from any person under the age of 21. Age verification is conducted as part of the KYC process for all registered players, and accounts found to belong to individuals under 21 are suspended immediately.

If you are a parent or guardian and believe that a minor has accessed or registered on the Platform, please contact our support team immediately via live chat or email. Upon confirmation, we will delete all data associated with the minor's account without undue delay.

The ong777 Platform does not contain links to third-party websites or services outside of our controlled environment, in accordance with our link policy. In the event that any third-party service is referenced within the Platform, ong777 is not responsible for the privacy practices, content, or security of such services.

If you are redirected to a payment provider's interface to complete a transaction (for example, your Maybank2u or Touch 'n Go eWallet interface), you will be subject to that provider's privacy policy and terms of use for the duration of that interaction. Ong777 is not responsible for the data practices of independent payment providers.

Ong777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data practices, or the features of the Platform. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — we will notify registered players via email or on-platform notification at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with any amendment, you should cease using the Platform and close your account before the amendment takes effect.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way ong777 processes your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the ong777 Platform. This is the fastest way to reach our support team — average first response is under 2 minutes during peak hours.
• Email (non-clickable): [email protected] — for formal privacy requests, data subject access requests, and written complaints. We aim to respond within 5 business days for privacy-related enquiries.

When submitting a data subject access request or exercising any of the rights described in Section 12, please include your registered account username and a clear description of your request. This will help us identify your account and process your request efficiently.