Privacy Policy Ongcuci — Protecting Your Personal Data

To provide you with the best experience, ongcuci collects several categories of personal information at various stages of platform use. We only collect information that is genuinely necessary for the stated purposes and do not collect data excessively.

Information provided directly by you:

• Full name, date of birth, gender, and identification card number (MyKad) upon registration.
• Active email address and mobile phone number.
• Current residential address including postcode and state.
• Bank account details, account numbers, and payment method information for deposit and withdrawal purposes.
• KYC supporting documents such as a copy of your MyKad and a utility bill as proof of address.
• Any additional information you provide when contacting our customer support team.

Automatically collected information:

• IP address, device type, operating system, and web browser version used.
• Login history, session times, pages visited, and navigation patterns within the platform.
• Geolocation data based on IP address for geographic region verification purposes.
• Financial transaction logs including deposits, withdrawals, and wagering.
• Cookie data and session identifiers.

Ongcuci uses collected information solely for legitimate, stated purposes. Every use of data has a solid legal basis — whether grounded in your consent, contractual necessity, our legitimate interests, or a legal obligation.

You may withdraw consent for marketing purposes at any time via your account settings or by contacting our support team, with no fees or penalties.

Ongcuci does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited circumstances where we need to share your information with parties required to deliver ongcuci's services to you:

• Payment processors: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and crypto processors required to carry out your financial transactions. They receive only the minimum data necessary to process payments.
• Technology service providers: Cloud computing companies, infrastructure providers, and cybersecurity services that help us operate the platform securely and efficiently.
• Game providers: Third-party game providers supplying slots, live casino, and fish shooting games — only the minimum technical data required to enable gameplay is shared.
• Authorities and law enforcement agencies: When required by law, court order, or a competent government agency under the applicable laws of Malaysia.

Ongcuci uses cookies and similar technologies such as web beacons and local identifiers to enhance your experience on our platform, secure your login session, and understand how our platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are essential to platform operation.
• Performance Cookies: Collects information on how you use the platform — which pages are visited most, load times, and errors encountered. All data is collected anonymously.
• Functional Cookies: Stores your preferences such as language selection, display settings, and search history to enable a more personalised experience.
• Analytics Cookies: Helps us understand overall platform usage patterns for continuous product and service improvement.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's help section.

The security of your personal data is ongcuci's top priority. We continually invest in the latest security infrastructure and adopt a multi-layered defence approach to protect your information from unauthorised access, loss, misuse, or disclosure.

The technical and organisational measures we implement include:

• 256-bit SSL/TLS encryption for all communications between your browser and ongcuci servers.
• AES-256 encryption for all data stored in our databases.
• Intrusion detection system (IDS) and intrusion prevention system (IPS) operating 24/7.
• Regular security audits by independent third parties and quarterly penetration testing.
• Role-based access control (RBAC) ensuring each staff member can only access data relevant to their responsibilities.
• Two-factor authentication (2FA) is mandatory for all ongcuci internal staff accounts.
• Real-time activity log monitoring with automated alert systems for unusual access patterns.
• Daily data backup procedures stored at physically and virtually separate locations.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ongcuci's privacy policy, you have several important rights regarding your personal data. We are committed to helping you exercise these rights without any undue obstacles.

To exercise any of the above rights, contact our privacy team via live chat within the platform or by email at [email protected]. We will respond within 21 business days from the date the request is received.

Ongcuci retains your personal data only for as long as it is needed for the purpose it was collected, or as required by law. Once the retention period expires, data will be permanently deleted or anonymised so it can no longer be linked to you.

• Active account data: Retained for as long as your account is active and up to 5 years after account closure for anti-money laundering compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's applicable accounting and taxation laws.
• Customer support communication logs: Retained for 3 years from the date of last interaction for quality control and dispute resolution purposes.
• Technical log data: Retained on a rolling 12-month basis for security and technical debugging purposes.
• Marketing data (with consent): Retained until you withdraw consent or request deletion.

The ongcuci platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we discover that an individual under the age of 18 has registered an account on ongcuci, the account will be closed immediately and all related data will be deleted as soon as possible. Any deposits made will be fully refunded subject to the required verification process.

Ongcuci reserves the right to update or modify this privacy policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. Any material changes will be communicated to you through the following means:

• In-platform notifications via banners or pop-ups displaying a summary of key changes.
• Sent to your registered email address at least 7 days before the changes take effect.
• The "Last Updated" date at the top of this policy will be updated to reflect the date of the latest amendment.

Your continued use of the ongcuci platform after any changes take effect constitutes your acceptance of the revised privacy policy. If you do not agree with the amendments, you have the right to close your account and stop using the platform at any time.

If you have any questions, concerns, or complaints regarding ongcuci's privacy policy or how we handle your personal data, we are always here to help. You can reach our privacy team via:

• Live Chat: Available 24/7 directly within the ongcuci platform — the fastest way to get an immediate response from our team.
• Email: [email protected] — for privacy enquiries requiring an official written response, we aim to reply within 24 hours on business days.
• FAQ: Visit page FAQ us for answers to the privacy questions most frequently asked by our members.