ong77 Privacy Policy 🔒

1. Introduction

This Privacy Policy ("Policy") describes how ong77 ("ong77," "we," "us," "our") collects, processes, stores, and shares personal data in connection with the operation of the ong77 online gaming platform accessible at ong77.co (the "Platform"). It applies to all registered players, visitors, and any other individuals whose personal data ong77 processes in the course of providing its Services.

ong77 is committed to handling personal data responsibly and in compliance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and the data protection obligations imposed by our internationally recognised gaming authority licence.

2. Data Controller

For the purposes of applicable data protection legislation, ong77 is the data controller responsible for the personal data of its players and platform users. Our data protection contact can be reached via the support channels set out in Section 15 of this Policy. ong77 processes data in connection with its gaming licence issued by an internationally recognised gaming authority.

3. Personal Data We Collect

ong77 collects the following categories of personal data in the ordinary course of operating the Platform:

ong77 does not collect or process special category data (such as biometric, health, or political opinion data) unless strictly required by regulatory obligation and with appropriate legal basis.

4. How We Collect Personal Data

ong77 collects personal data through the following means:

• Direct provision: Data you submit when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting support.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you access the Platform.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance database partners; payment confirmation data from payment processors such as FPX operators, Touch 'n Go, and Boost.

5. How We Use Your Personal Data

ong77 uses personal data for the following purposes:

• Registering and maintaining your ong77 account, including authentication and account security.
• Processing deposits and withdrawals in Malaysian Ringgit (MYR) via approved payment channels.
• Verifying your identity and age (21+) in compliance with our licensing KYC obligations.
• Detecting, preventing, and investigating fraud, money laundering, collusion, and other prohibited activity.
• Providing customer support via live chat and email.
• Monitoring gameplay for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour.
• Complying with legal obligations, including reporting requirements to gaming regulatory authorities and financial intelligence units where legally required.
• Improving the Platform's features, performance, and user experience through anonymised analytics.
• Sending transactional and security communications (e.g., login alerts, withdrawal confirmations, KYC requests). Marketing communications are sent only with your explicit consent and can be opted out of at any time.

6. Legal Bases for Processing

ong77 processes personal data on the following legal bases under applicable data protection law:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to on registration (e.g., account management, payment processing).
• Legal obligation: Processing required to comply with AML legislation, gaming licence conditions, and regulatory reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional data uses where we have obtained your explicit, informed consent. You may withdraw consent at any time without affecting prior processing.

7. Data Sharing & Third Parties

ong77 does not sell or rent your personal data. We share personal data only in the following limited circumstances:

7.1 Service Providers

We engage third-party processors to assist in delivering the Platform, including KYC/identity verification providers, payment processors (including FPX operators, Touch 'n Go, Boost, and DuitNow), fraud detection services, cloud hosting providers, and customer support tools. All processors are bound by data processing agreements that restrict their use of data to the specific service they provide for ong77.

7.2 Game Software Providers

Your player ID and game session data are shared with licensed game software providers to facilitate gameplay. These providers are certified by independent gaming testing laboratories and operate under their own licence obligations regarding data protection.

7.3 Regulatory & Legal Disclosure

ong77 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required by law, court order, or to protect the rights, property, or safety of ong77, its players, or the public.

7.4 Corporate Transactions

In the event of a merger, acquisition, or sale of ong77's business or assets, personal data may be transferred to the relevant acquiring entity, subject to equivalent privacy protections.

8. International Data Transfers

ong77 operates globally and may transfer personal data to servers or processors located outside Malaysia. Where such transfers occur, ong77 ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with the Malaysian PDPA and the data protection requirements of our gaming licence jurisdiction. By using the Platform, you acknowledge that your data may be processed in jurisdictions outside Malaysia.

9. Data Retention

ong77 retains personal data for as long as your account remains active and for a period thereafter as required by our legal and regulatory obligations. Specifically:

• Account and KYC records are retained for a minimum of five (5) years following account closure, as required by AML compliance obligations.
• Transaction records (deposits, withdrawals, bets) are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for a minimum of two (2) years.
• Technical and usage data collected via cookies is retained for the period specified in Section 10.

Data retained solely for legal compliance purposes is stored securely with restricted access and is not used for any active processing purposes beyond the retention obligation.

10. Cookies & Tracking Technologies

ong77 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, CSRF protection tokens, and geolocation compliance cookies. These cannot be disabled without impacting Platform functionality.
• Performance Cookies: Used to collect anonymised analytics data on how players use the Platform (pages visited, session duration, error events). This data is used solely to improve Platform performance.
• Security Cookies: Used for fraud detection, device fingerprinting, and anomalous login pattern identification. These are integral to the Platform's security infrastructure.
• Preference Cookies: Used to remember your Platform settings (e.g., language preferences, lobby view settings). Retained for up to 12 months.

ong77 does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

11. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by ong77:

• Right of Access: You may request a copy of the personal data ong77 holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data where there is no overriding legal obligation for ong77 to retain it. Note that AML and gaming licence retention requirements may limit the scope of erasure requests.
• Right to Restrict Processing: You may request that ong77 restrict processing of your data in certain circumstances (e.g., while accuracy is disputed).
• Right to Data Portability: Where technically feasible, you may request a structured, machine-readable copy of personal data you have provided to ong77.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing), you may withdraw that consent at any time without affecting prior processing.
• Right to Object: You may object to processing based on legitimate interests grounds where your particular circumstances justify an override.

To exercise any of these rights, contact ong77 via 24/7 live chat or at the email address listed in Section 15. We will respond to all verifiable requests within 30 days.

12. Data Security

ong77 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include 256-bit SSL/TLS encryption of data in transit, encryption of sensitive data at rest, role-based access controls restricting staff access to personal data on a need-to-know basis, regular security audits and penetration testing, and incident response procedures for detecting and responding to data breaches.

In the event of a personal data breach that creates a risk to player rights, ong77 will notify affected players and the relevant regulatory authority within the timeframe required by applicable law.

While ong77 employs robust security measures, no system is entirely immune to risk. You are responsible for maintaining the security of your own account credentials. Do not share your ong77 password with any third party.

13. Minors

ong77 strictly enforces a minimum age requirement of 21 years. The Platform is not directed at persons under the age of 21, and ong77 does not knowingly collect personal data from minors. Any account found to be registered by a person under the age of 21 will be closed immediately and any balance forfeited, in accordance with the ong77 Terms & Conditions and applicable law. If you have reason to believe that a minor has registered an account with ong77, please contact our support team immediately.

14. Changes to This Privacy Policy

ong77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform functionality. Material changes will be notified to registered players via email or in-platform notification at least 7 days prior to taking effect. The date at the top of this Policy indicates when it was last revised. Your continued use of the ong77 Platform following a policy update constitutes your acknowledgment of the revised Policy. We encourage you to review this page periodically.

15. Contact Us

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a privacy concern, please contact the ong77 data protection team through the following channels:

• 24/7 Live Chat: Available on every page of the ong77 Platform — the fastest channel for urgent privacy requests, including data breach notifications or account security concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line. Responses within 1 business hour during operating hours; within 24 hours for complex requests.

ong77 is committed to resolving all privacy concerns promptly and transparently. If you believe your data protection rights have not been respected, you also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.