Privacy Policy
of ong66

01 Introduction

ong66 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at ong66.cam. We are committed to protecting the privacy and personal data of all individuals who register for, access, or interact with our services ("you", "the Player", "User").

This Privacy Policy ("Policy") sets out how ong66 collects, processes, stores, shares, and protects personal information in connection with your use of the Platform. It also explains your rights in relation to your personal data and how you can exercise those rights.

ong66 primarily serves players in Malaysia. Our platform is denominated in Malaysian Ringgit (MYR) and integrates local payment infrastructure including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and other domestic payment channels. Data processing activities relating to these payment methods are governed by the respective terms of those service providers, as well as by this Policy.

02 Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — Any information that directly or indirectly identifies a living individual, including name, identification number, contact details, IP address, or financial information.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — ong66, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — A third party that processes Personal Data on behalf of ong66 under a contractual obligation (e.g., payment processors, KYC verification providers).
• "KYC" — Know Your Customer; the identity and document verification process required before full account access is granted.
• "Cookie" — A small text file placed on your device by the Platform to enable certain functionality, analytics, and personalisation features.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

03 Personal Data We Collect

ong66 collects the following categories of personal data, depending on how you interact with the Platform:

04 How We Collect Personal Data

ong66 collects personal data through the following primary channels:

• Direct provision by you — when you register an account, complete KYC, contact our support team, participate in promotions, or update your profile.
• Automated technical collection — through cookies, server logs, and analytics tools that capture device, browser, and session information during your use of the Platform.
• Payment service providers — when you make deposits or withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, or other integrated channels, transaction data is shared between ong66 and the respective payment processor.
• Third-party KYC and identity verification providers — who process your identification documents on our behalf under strict confidentiality agreements.
• Fraud detection and AML screening services — which may cross-reference your details against public and commercially licensed databases as part of our compliance obligations.

05 Purposes of Data Processing

ong66 processes your personal data for the following purposes:

1. Account creation and management — registering and maintaining your player account, verifying your identity, and providing access to the Platform.
2. Payment processing — facilitating deposits in MYR and processing withdrawal requests to your nominated payment method.
3. KYC and regulatory compliance — meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection laws.
4. Fraud prevention and security — monitoring account activity for suspicious behaviour, investigating suspected fraud, and preventing unauthorised access.
5. Responsible gambling monitoring — tracking behavioural patterns to identify potential problem gambling activity and administer responsible gambling tools such as deposit limits and self-exclusion.
6. Customer support — responding to your queries, resolving disputes, and maintaining records of support interactions.
7. Platform improvement — analysing aggregate usage data to improve the performance, features, and user experience of the Platform.
8. Marketing and promotions — sending you information about bonuses, offers, and events where you have consented to receive such communications. You may withdraw consent at any time.
9. Legal obligations — complying with court orders, regulatory requests, or other legally mandated disclosures.

06 Legal Basis for Processing

ong66 relies on the following legal bases to process your personal data:

• Contractual necessity — processing required to perform the contract between you and ong66 (e.g., account registration, payment processing, KYC verification).
• Legal obligation — processing required to comply with applicable laws, including AML/CTF regulations and data protection legislation.
• Legitimate interests — processing necessary for our legitimate business interests, including fraud prevention, platform security, and analytics, where those interests are not overridden by your privacy rights.
• Consent — where you have given explicit consent to specific processing activities (e.g., receiving marketing communications). Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Third Parties

ong66 does not sell, rent, or trade your personal data to unaffiliated third parties for their independent marketing purposes. We may share your personal data with third parties only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage vetted third-party service providers to support the operation of the Platform. These include payment processors (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Visa/Mastercard), KYC and identity verification providers, cloud infrastructure providers, fraud detection and AML screening services, and customer support tools. All processors are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service.

7.2 Regulatory and Legal Authorities

ong66 may disclose personal data to government bodies, regulatory authorities, law enforcement agencies, or courts where required by applicable law, court order, or legitimate regulatory request.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, personal data held by ong66 may be transferred to the successor entity, subject to equivalent privacy protections.

08 Cookies & Tracking Technologies

ong66 uses cookies and similar tracking technologies to enable essential Platform functionality, maintain your session state, and collect aggregate analytics data that helps us improve the user experience.

Categories of Cookies Used

• Strictly Necessary Cookies — Essential for the Platform to function correctly. These cannot be disabled without affecting core functionality (e.g., session authentication, security tokens).
• Performance & Analytics Cookies — Collect anonymised information about how players use the Platform (e.g., page visits, error reporting) to help us improve performance.
• Functional Cookies — Remember your preferences such as language selection and display settings to provide a more personalised experience.
• Marketing Cookies — Used only where you have consented, to deliver relevant promotions and measure the effectiveness of our marketing communications.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled.

09 Data Retention

ong66 retains personal data for as long as your account remains active or as required to fulfil the purposes outlined in this Policy. Specific retention periods are as follows:

• Account and identity data — retained for the duration of the account and for a minimum of 5 years following account closure, as required by AML regulations.
• Financial transaction records — retained for a minimum of 7 years in accordance with applicable financial record-keeping requirements.
• KYC documents — retained for the duration of the account relationship and for the minimum period required by applicable law thereafter.
• Support communications — retained for up to 3 years from the date of the interaction.
• Technical and usage logs — typically retained for up to 12 months for security and analytics purposes.
• Marketing preferences — retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

10 Data Security

ong66 implements a range of technical and organisational measures to safeguard your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive stored data including identity documents and financial records.
• Multi-factor authentication (MFA) options for Player accounts.
• Role-based access controls restricting internal access to personal data to authorised personnel only.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Real-time fraud monitoring and anomaly detection systems.
• Incident response procedures with defined notification obligations in the event of a data breach.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by ong66:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge receipt within 48 hours and respond within 30 days. In some cases, we may need to verify your identity before processing a request.

12 Children's Privacy

The ong66 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered on the Platform or provided us with personal data, please contact us immediately at [email protected].

Upon receiving a credible report of a minor's account, ong66 will suspend the relevant account, delete any personal data associated with the minor to the extent permissible by law, and refund any deposits in accordance with our standard account closure procedure.

13 Third-Party Links & Integrations

The ong66 Platform may display or reference third-party services such as payment processors, game providers, and responsible gambling support organisations. While we take care in selecting our partners, ong66 is not responsible for the privacy practices of external third-party websites or services. This Policy applies solely to data processed by ong66 in connection with the Platform.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of ong66.

14 Amendments to This Policy

ong66 reserves the right to update this Privacy Policy at any time. The effective date of the current version is displayed at the top of this page. Where amendments are material, we will make reasonable efforts to notify registered players via email or in-platform notification prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any amendments, you should cease using the Platform and may request account closure by contacting our support team.

15 Contact Us & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ong66 Data Support team through any of the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. Document Version: 2.4. This version supersedes all prior versions of the ong66 Privacy Policy.