ong77 Privacy Policy

1.Introduction and Scope

ong77 ("ong77", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at ong77.app (the "Platform"). This Privacy Policy ("Policy") describes how ong77 collects, uses, stores, shares, and safeguards personal data in connection with the Services we provide to Members and visitors in Malaysia and internationally.

This Policy applies to all personal data processed in connection with your use of ong77, including account registration, identity verification, deposits and withdrawals, betting and gaming activity, customer support interactions, and any communications we send to you. By accessing ong77.app or registering an account, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the ong77 Terms & Conditions, which govern the overall relationship between you and ong77.

2.Data Controller

For the purposes of applicable data protection legislation, ong77 is the data controller responsible for the personal data collected through the Platform. All data processing activities are conducted in accordance with internationally recognised data protection standards applicable to online gaming operators.

3.Personal Data We Collect

ong77 may collect and process the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (e.g., MyKad, passport);
• Contact Data: Email address, Malaysian phone number, and residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar);
• Account Data: Username, encrypted password, account preferences, and communication settings;
• Financial Data: Payment method details including e-wallet identifiers (Touch n Go eWallet, Boost), bank account details (Maybank, CIMB, Public Bank), MYR transaction amounts, and withdrawal records;
• Gaming Activity Data: Betting history, game session data, wagering amounts, wins and losses, bonus usage, and responsible gaming tool activations;
• Technical Data: IP address, device type, browser type and version, operating system, session timestamps, and geolocation data (country-level);
• Communication Data: Records of support conversations, email correspondence, and feedback submitted to ong77;
• KYC Documentation: Copies of identification documents and proof of payment method provided for identity verification purposes.

4.How We Collect Your Data

ong77 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, server logs, and analytics tools that record your technical and behavioural interactions with the Platform;
• From third parties — including identity verification service providers, payment processors, fraud detection agencies, and gaming data partners, to the extent necessary to deliver and secure the Services.

5.Purpose and Legal Basis for Processing

ong77 processes your personal data for the following purposes, each supported by a corresponding legal basis:

• Account registration and management — necessary for the performance of the contract between you and ong77;
• Identity verification (KYC) and age verification — legal obligation to confirm Members are aged 21 or above and to comply with anti-money laundering requirements;
• Processing deposits, withdrawals, and payments — necessary for the performance of the contract;
• Providing gaming and betting services — necessary for the performance of the contract;
• Fraud prevention and security monitoring — legitimate interests of ong77 in protecting the platform and its Members from financial crime and abuse;
• Responsible gaming monitoring — legal obligation and legitimate interest in protecting player welfare and complying with gaming authority standards;
• Customer support — legitimate interests in resolving Member queries and improving service quality;
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from ong77. You may withdraw consent at any time via your account settings or by contacting support.

6.Sharing and Disclosure of Personal Data

ong77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors and e-wallet providers (Touch n Go eWallet, Boost, banking partners) — to process transactions;
• Identity verification and KYC service providers — to verify your age and identity;
• Technology and platform service providers — game studios, cloud hosting, and security vendors who process data on our behalf under contractual data protection obligations;
• Regulatory and law enforcement authorities — where required by applicable law, court order, or gaming regulator direction;
• Fraud prevention and anti-money laundering agencies — where ong77 has a legitimate interest or legal obligation to report or investigate suspicious activity.

All third-party service providers engaged by ong77 are required to handle personal data in a manner consistent with this Policy and applicable data protection standards.

7.International Data Transfers

ong77 operates a global platform. Your personal data may be transferred to and processed in countries outside Malaysia in connection with our technology infrastructure and service provider relationships. Where such transfers occur, ong77 ensures that appropriate safeguards are in place — including contractual data protection clauses — to protect your data to a standard equivalent to that required under applicable Malaysian and international data protection law.

8.Data Retention

ong77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. As a general guide:

• Account and KYC data is retained for a minimum of five years following account closure, as required by anti-money laundering regulations;
• Transaction and gaming activity records are retained for five years;
• Support communication records are retained for two years;
• Marketing preference data is retained until you withdraw consent or for two years of account inactivity, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ong77's internal data management procedures.

9.Cookies and Tracking Technologies

ong77 uses cookies and similar tracking technologies to operate and improve the Platform. These include:

• Essential cookies — required for core platform functionality, including session management and security;
• Analytics cookies — used to understand how Members interact with the Platform so we can improve user experience;
• Preference cookies — used to remember your account settings and display preferences.

You may control cookie settings through your browser preferences. Disabling essential cookies may impact the functionality of certain platform features. ong77 does not use third-party advertising cookies or cross-site tracking.

10.Security Measures

ong77 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include 256-bit SSL encryption for all data in transit, encrypted storage of passwords using industry-standard one-way hashing, two-factor authentication for account access, access controls restricting staff access to personal data on a need-to-know basis, and regular security assessments of our platform infrastructure.

Despite these measures, no digital platform can guarantee absolute security. If you suspect your ong77 account has been compromised, please contact our support team immediately so that appropriate protective measures can be taken.

11.Your Rights as a Data Subject

Subject to applicable law and our legitimate operational requirements, you have the following rights in relation to your personal data held by ong77:

• Right of access — to request a copy of the personal data ong77 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data in certain circumstances, subject to our legal retention obligations;
• Right to restriction of processing — to request that we limit the processing of your data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, machine-readable format where technically feasible;
• Right to withdraw consent — to withdraw consent to marketing communications at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact ong77 via live chat or the support email address listed on the About Us page. We will respond to verified requests within 30 days.

12.Children and Minors

ong77 strictly prohibits the use of its Services by any person under the age of 21. We do not knowingly collect personal data from individuals under 21. Age verification is conducted as part of the KYC process for all Members. If ong77 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the account closed immediately. Parents and guardians who believe a minor may have accessed ong77 are encouraged to contact our support team without delay.

13.Links and Third-Party Services

The ong77 platform may reference or link to third-party service providers in the context of payment processing or game delivery. ong77 is not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of any third-party service you interact with in connection with ong77.

14.Changes to This Policy

ong77 reserves the right to update this Privacy Policy at any time. The revised Policy will be published on ong77.app with an updated effective date. Where changes are material, registered Members will be notified via email or an in-platform notification. Continued use of the Services following publication of a revised Policy constitutes your acceptance of the updated terms.

15.Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data ong77 holds about you, please contact our Data Protection team via live chat available 24/7 on ong77.app, or by written communication to the support contact address published on the About Us page. We aim to acknowledge all privacy-related enquiries within two business days.