Effective Date
1 January 2026
Current Version
v2.4
Jurisdiction
Malaysia (PDPA 2010)
Language
Bahasa Malaysia
This document should be read together with Terms and Conditions ong33.
Quick Summary: ong33 only collects data that is strictly necessary, does not sell it to third parties for marketing purposes, and protects it with banking-grade security technology. You have the full right to access, correct, or request deletion of your data at any time.

1 Introduction and Scope of This Policy

This Privacy Policy is published by ong33, operator of the online entertainment platform at ong33.app. It explains how we, as the data controller, handle your personal information in the context of the services we provide to registered users in Malaysia.

This Policy applies to all users who access or use the ong33 platform, including the ong33.app website, the ong33 mobile app for Android and iOS, and any official ong33 communication channels. It covers data collected through account registration, service usage, financial transactions, and interactions with our support team.

Ong33 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which sets out the principles governing how Malaysian users' personal data must be handled responsibly and transparently.

2 Types of Personal Data We Collect

Ong33 collects various categories of data depending on the type of interaction you have with our platform. We only collect data that is genuinely required for clear and legitimate purposes.

Data Category Example Information When Collected
Identity Data Full name, MyKad/passport number, date of birth, document images During registration & KYC
Contact Data Email address, mobile phone number During registration
Financial Data Bank account number, e-wallet details (encrypted), transaction history During deposit & withdrawal
Usage Data Game history, session duration, betting patterns, preference settings During platform use
Technical Data IP address, device type, operating system, browser version Automatically upon access
Communication Data Support chat logs, inbound/outbound emails, complaint records During support interactions
ong33 not store credit or debit card numbers directly in our systems. All card processing is handled by third-party payment providers that hold PCI-DSS certification.

3 How Your Data Is Used

Every piece of data we collect has a clear purpose and is not used beyond the stated scope. Below are the primary purposes for which ong33 uses your data:

3.1 Account Management and Identity Verification

Your identity data is used to create and maintain your ong33 account, verify your identity during the KYC process, and protect your account from unauthorised access. This is a fundamental requirement for legal compliance and platform security.

3.2 Financial Transaction Processing

Financial and identity data is used to securely process deposits and withdrawals, verify payment account ownership, meet financial compliance requirements, and prevent money laundering and financial fraud.

3.3 Service Delivery

Usage data helps ong33 deliver a well-functioning gaming experience, detect and resolve technical issues, and maintain platform stability for all users.

3.4 Communication and Support

We use contact information to send important account notices, respond to support inquiries, and — with your consent — keep you informed about promotions and platform updates that may interest you.

3.5 Security and Fraud Prevention

Technical data and usage data are continuously analysed by ong33's security systems to detect suspicious activity, unauthorised access attempts, and fraud patterns that may involve your account.

3.6 Responsible Gaming

Your gaming pattern data is used internally to identify signs of problem gambling and trigger appropriate support interventions, in line with ong33's commitment to responsible gaming.

4 Data Sharing with Third Parties

Ong33 does not sell, rent, or share your personal data with third parties for their own marketing purposes. Your data is only shared in the following limited situations:

  • Payment Providers: Information required to process transactions is shared with licensed payment providers that handle DuitNow, FPX, Touch 'n Go, GrabPay, and Boost. All providers are bound by strict confidentiality agreements.
  • Game Providers: Minimal account information is shared with third-party game providers solely for the purpose of delivering a seamless gaming experience.
  • Technical Service Providers: The ong33 technical infrastructure uses recognized cloud and security service providers that store and process data in accordance with the highest security standards.
  • Legal Compliance: ong33 will disclose data to the relevant authorities when required by Malaysian law, court order, or financial crime investigation requirements.
All third parties who receive ong33 user data are bound by data protection agreements that require them to handle your information to the same or higher security standards.

5 Data Security and Protection

Ong33 invests seriously in security infrastructure to ensure your data is always protected. The technical and organizational measures we implement include:

  • 256-bit SSL Encryption for all data transferred between your browser and the ong33 servers
  • Encryption at rest for all sensitive data stored in our databases
  • Two-factor authentication (2FA) available to all user accounts
  • 24/7 security monitoring by automated threat detection systems
  • Strict access controls — only staff who require access to specific data for their job responsibilities are granted permission
  • Regular security audits by independent third parties to identify and address any vulnerabilities
  • Incident response plan in the event of a data breach

While no system is 100% breach-proof, ong33 takes all reasonable steps in line with industry best practices to minimise risk to your data.

6 Cookies and Tracking Technologies

The ong33 platform uses cookies and similar tracking technologies to ensure the website and app function properly. Below are the categories of cookies we use:

6.1 Essential Cookies

These cookies are required for core platform functions such as login session management, security, and basic preferences. They cannot be disabled without affecting the core functionality of the ong33 platform.

6.2 Analytics Cookies

Analytics cookies help ong33 understand how users interact with the platform — which pages are visited most often, how long sessions last, and where users encounter issues. This information is used for continuous product improvement.

6.3 Preference Cookies

These cookies store your preferences such as language selection, display settings, and game choices to make your experience more personalized and consistent every time you log in.

You can manage cookies through your browser settings, though please note that disabling essential cookies may affect the functionality of the ong33 platform.

7 Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have several rights regarding the personal data held by ong33. These rights can be exercised by contacting our support team:

8 Child Data Protection

The ong33 platform is strictly limited to users aged 18 and above. ong33 does not intentionally collect or process personal data of minors.

If we become aware that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor is using the ong33 platform, please notify us immediately via customer support.

Registration by individuals under the age of 18 is strictly prohibited and constitutes a serious violation of the ong33 Terms and Conditions.

9 Data Retention and Deletion

Ong33 retains your personal data for as long as necessary to fulfill the purposes stated in this policy, or for as long as required under Malaysian law.

  • Active account data: Retained for the duration your account is active and for a specified period after account closure for compliance purposes
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia financial legal requirements
  • KYC Records: Retained for a minimum of 5 years after the business relationship ends
  • Support communication logs: Retained for 2 years from the date of last interaction
  • Technical data and access logs: Retained for 90 days for security and troubleshooting purposes

When the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any specific individual.

10 Amendments to This Privacy Policy

Ong33 reserves the right to update or amend this Privacy Policy from time to time in line with changes to business practices, technology, or legal requirements. When any material change occurs, we will:

  • Displaying a clear notice on this page describing the nature of such changes
  • Updating the "Last Updated" date at the top of the page
  • Sending email notifications to all registered users for changes that materially affect how their data is handled

Continued use of the ong33 platform after changes to the Privacy Policy take effect will be considered acceptance of the updated terms. We encourage you to review this page periodically.

11 Contact Us for Privacy Inquiries

If you have any questions, concerns, or wish to exercise your data rights, the ong33 data protection team is ready to assist. You can reach us via:

  • Live Chat: Available 24/7 within the ong33 platform — the fastest way to get a response
  • Email: [email protected] — for enquiries requiring written documentation

Our team will respond to personal data requests within 30 business days of receiving your complete request. For complex requests, we may require additional information to verify your identity before processing.

All personal data requests are handled with full seriousness and confidentiality by a team trained in Malaysia data protection law.

Your Rights as an ong33 User

Under the Malaysia PDPA, you have the following rights, which ong33 is committed to upholding.

👁️
Access Rights

You have the right to request a copy of the personal data ong33 holds about you. We will provide this information in a readable format within 30 days.

✏️
Right to Rectification

If any data held about you in the ong33 system is inaccurate or outdated, you have the right to request a correction and we will update it promptly.

🗑️
Right to Erasure

Under certain circumstances, you may request the deletion of your data. ong33 will fulfil this request to the extent permitted by legal obligations.

🚫
Right to Object

You have the right to object to the processing of your data for specific purposes, such as marketing communications, and ong33 will respect your preference.

📦
Right to Data Portability

You can request your data in a portable format — useful if you wish to switch platforms or keep a personal record of your activity.

⏸️
Right to Restrict Processing

In certain situations, you may request ong33 to restrict the processing of your data while a dispute or review is in progress.

Why You Can Trust ong33 with Your Data

Privacy is not just a slogan at ong33 — it is how we operate every day.

End-to-End Encryption

All sensitive data — from KYC information to payment details — is encrypted using 256-bit SSL during transmission and advanced encryption at rest.

Data Minimisation Principle

Ong33 only collects data that is genuinely necessary for the requested function — no excessive or irrelevant data collection beyond the purpose of the service.

No Data Sales to Advertisers

Your data is never sold, rented, or exchanged with advertising companies or data brokers. This is an absolute and unwavering commitment by ong33.

Independent Security Audit

The ong33 data security infrastructure is periodically audited by independent third-party security experts to ensure protection standards remain consistently high.

Full Control in Your Hands

From marketing communication settings to deposit limits and account privacy features — you have direct control over how the ong33 platform interacts with you.

Prompt Incident Notification

In the event of a security incident involving your data, ong33 is committed to notifying affected users within the timeframe required under PDPA.

🔒

Your Data Is Safe at ong33 — Register with Confidence

Ong33 takes your privacy seriously. Register today and enjoy a safe, transparent, and trusted online entertainment experience in Malaysia.

Bahasa Melayu