Ong777 Privacy Policy – Malaysian User Data Protection

This Privacy Policy ("Policy") is published by ong777 and describes our privacy practices relating to the collection, use, storage, sharing, and protection of personal data of users who access or use the ong777 platform through the website at ong777.in and all related services.

This Policy applies to all ong777 users regardless of location within Malaysia — whether you access the platform from Kuala Lumpur, Johor Bahru, Kota Kinabalu, Kuching, or any other city or region across Malaysia. It also applies to all access methods — website, mobile browser, or any other ong777 platform interface.

Ong777 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of handling users' personal data. As an ong777 user, you have legal rights under the PDPA that we fully respect and uphold.

By using the ong777 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the ong777 platform and contact us to discuss the options available to you.

Ong777 collects your personal data through several channels depending on how you interact with the platform. All data collection methods are lawful and transparent:

Directly from You:

• During the ong777 account registration process when you complete the form with your name, phone number, and date of birth
• During the identity verification (KYC) process when you upload a copy of your MyKad or other required documents
• When making a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — your payment method information is recorded for security and compliance purposes
• When contacting ong777 customer support via Live Chat or email — conversation records are retained for service quality purposes
• When you submit feedback or complete a user satisfaction survey

Automatically During Platform Use:

• Technical data such as IP address, device type, operating system, and browser version is collected automatically each time you access the ong777 platform.
• Session information including login date and time, session duration, and in-platform activity
• Betting activity data including all bets placed, markets selected, odds accepted, and outcomes
• Cookies and similar tracking technologies — further details are explained in Section 6

Ong777 uses your personal data only for legitimate purposes that are directly related to the delivery of platform services. The following is a complete list of the purposes for which ong777 uses your data:

• Account Management: Creating, verifying, and managing your ong777 account, including a secure login process
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, and other methods, as well as processing winnings withdrawals to your account
• Betting Services: Enables you to place sports bets, access in-play betting on live matches, and use all features of the ong777 platform.
• Legal Compliance: Fulfil KYC (Know Your Customer) requirements, anti-money laundering (AML) compliance, and reporting obligations to the relevant authorities
• Customer Support: Providing assistance when you contact the ong777 support team and resolving any issues or disputes
• Platform Security: Detecting and preventing fraud, unauthorised access, duplicate accounts, and activities that breach ong777's Terms & Conditions
• Responsible Gaming: Monitoring betting activity patterns to identify early signs of problem gambling and provide appropriate support
• Platform Improvements: Analysing usage data in aggregate (without identifying individuals) to improve ong777's features, performance, and user experience
• Service Communications: Sending important notifications relating to your account, policy changes, or security issues that require your attention
• Marketing (with consent only): Sending information about ong777 promotions, bonuses, and offers only where you have given consent to receive such communications

Ong777 does not sell users' personal data to any third party for commercial or marketing purposes. That said, there are limited situations where sharing data with trusted parties is necessary to deliver platform services safely and smoothly:

Payment Service Providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the necessary transaction information is shared with the relevant provider to process the payment. ong777 only shares the data required for this purpose, and all providers are bound by strict confidentiality agreements.

Platform Technology Provider: ong777 uses technical infrastructure services from selected providers to operate the platform. These providers may process technical data as part of their services but are not permitted to use that data for any other purpose.

Legal Authorities: ong777 will disclose users' personal data to competent authorities in Malaysia when required by law, court order, or valid legal process. This includes disclosures for financial crime investigations or compliance with regulatory body directives.

Business Transfer: If ong777 is involved in a merger, acquisition, or sale of business assets, user data may be transferred as part of that transaction. Users will be notified before their data becomes subject to a different privacy policy.

In all data-sharing situations described above, ong777 ensures that recipients adhere to data protection standards equivalent to or higher than those we apply ourselves.

Ong777 invests seriously in data security infrastructure to ensure users' personal and financial information remains protected at all times. The following security layers are in place:

• 256-Bit SSL Encryption: All communications between your browser or app and ong777's servers are encrypted using TLS 1.3 with AES 256-bit encryption — the highest industry standard available
• Secure Password Storage: ong777 user passwords are stored using a one-way hashing algorithm (bcrypt) — meaning your actual password is never stored in our systems in a readable form
• Regular Security Audits: ong777's security systems are independently audited on a regular basis to identify and address vulnerabilities before they can be exploited
• 24/7 Activity Monitoring: The ong777 security team monitors platform activity around the clock to detect suspicious patterns and respond promptly to identified threats.
• Internal Access Controls: Access to user data within ong777's systems is restricted to staff with a legitimate business need. All access is logged and audited regularly
• Financial Data Segregation: User funds are held in accounts separate from ong777's operational funds to ensure the safety and availability of user balances at all times

Ong777 uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better, more personalised user experience. The following is an overview of the types of cookies used:

In certain situations, ong777 users' personal data may need to be transferred to servers or facilities located outside Malaysia — for example, for data backup purposes or to utilise global technical infrastructure services.

When such data transfers occur, ong777 ensures that:

• The recipient country or region maintains a level of data protection equivalent to or higher than that provided under Malaysia's PDPA
• A legally compliant data transfer agreement has been signed with the receiving party
• Data transfers are limited strictly to what is necessary for legitimate operational purposes
• Technical security measures such as encryption are applied to all data transfers

Ong777 does not transfer users' personal data to entities in countries that lack adequate data protection laws without first obtaining explicit consent from the user concerned.

Ong777 retains users' personal data only for as long as necessary for the purposes stated in this Privacy Policy or to fulfil legal obligations. The following are general guidelines for data retention periods:

• Active Account Data: For as long as your ong777 account remains active and open, your account data is retained to enable continued use of the platform
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date for financial compliance purposes and audit requirements as prescribed by Malaysian law
• KYC Records (Identity Verification): Retained for a minimum of 5 years after the end of the business relationship with the user, in accordance with anti-money laundering compliance requirements
• Support Communication Logs: Retained for 2 years for reference and service quality control purposes
• Technical Data (System Logs): Retained for 90 days for security purposes and technical issue detection
• Marketing Data: Retained until you withdraw your consent to receive marketing communications from ong777

Once the relevant retention period has expired, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

As an ong777 user whose personal data is being processed, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA). ong777 is committed to facilitating the exercise of these rights promptly and without unreasonable obstacles:

Ong777 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If ong777 discovers that personal data has been collected from a person under the age of 18 without adequate age verification, we will take the following steps immediately:

• Immediately suspending the account in question pending investigation
• Securely delete all collected personal data
• Cancelling all related financial transactions
• Returning any deposited funds to the original payment method

Parents and guardians who believe their minor child has registered an account on ong777 are urged to contact us immediately at support@ong777.in. ong777 will handle such cases with the highest priority and with full respect for the privacy of all parties involved.

Ong777 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the technologies we use.

When material changes are made to this Privacy Policy, ong777 will:

• Updating the "Last Updated" date at the top of this page
• Displaying a clear in-platform notification to the user upon their next login to ong777
• Sending email notifications to users with a registered email address for changes that materially affect their privacy rights

Ong777 will provide at least 14 days before any material changes take effect, giving users sufficient time to review and understand the updates. Continued use of the ong777 platform after amendments come into effect will be considered acceptance of the updated policy.

Previous versions of this Privacy Policy are available upon request at support@ong777.in for reference purposes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how ong777 handles your personal data, we encourage you to reach out to us directly. The ong777 privacy team is here to help:

• Privacy Email: support@ong777.in (use the subject line "Privacy Enquiry" for a faster response)
• Live Chat: Available on the ong777 platform 24 hours a day, 7 days a week — the fastest way to get an immediate response

Ong777 is committed to responding to all privacy-related enquiries within 3 working days. For more complex requests such as data access or data deletion, the processing period is up to 21 working days.

If you are not satisfied with how ong777 has handled your privacy complaint after going through our internal process, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory body.