Privacy Policy ong24 — Our Commitment to Protecting Your Data

Ong24 collects your personal information through three main channels: information you provide directly when registering and using the platform, information collected automatically as you browse the platform, and information we receive from legitimate third parties such as payment service providers.

1.1 Information You Provide Directly

When you register an account with ong24 or use our services, you may provide the following information:

• Identity information: Full name as per identification document, identification number (MyKad or passport), date of birth, and gender;
• Contact information: Mobile phone number, email address, and residential address in Malaysia;
• Financial information: Details of the payment methods used, including bank account numbers, e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow), or relevant FPX information;
• Verification documents: A copy of your identity card, utility bill, or other documents required during the KYC (Know Your Customer) process;
• Communications: Records of your conversations with the ong24 customer support team via live chat, email, or WhatsApp.

1.2 Automatically Collected Information

When you browse and use the ong24 platform, our systems automatically record the following technical information for security and service improvement purposes:

• IP address, device type, operating system, and web browser used;
• In-platform activity records, including games played, bets placed, session duration, and pages visited;
• Cookie data and related tracking technologies (detailed in Section 6);
• Financial transaction records, including deposit and withdrawal history.

Ong24 uses your personal information only for legitimate purposes that are directly related to delivering our platform services to you. The following are the primary purposes for which your data is used:

2.1 Account Management & Identity Verification

The identity information you provide is used to create and manage your ong24 account, carry out the required KYC process, verify that you meet the minimum age requirement of 21 years, and confirm that you are the rightful owner of the registered payment method. This process is essential to protect both you and the platform against fraud and unauthorised use.

2.2 Financial Transaction Processing

Your financial information is required to process deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, as well as to process withdrawal of your winnings to the relevant account. This information is also used to detect any suspicious transactions for your own protection.

2.3 Gaming Services Provision

Your gaming and betting activity records are used to ensure fair and accurate gameplay, calculate correct odds and payouts for Sports Betting, maintain a game history log you can access at any time, and identify patterns that may indicate a need for responsible gambling control tools.

2.4 Customer Support

Records of your communications with the ong24 support team are retained so we can provide effective support, train our support staff, and resolve any disputes that may arise. All communications are confidential and are not shared unless required by law.

2.5 Security & Fraud Prevention

Technical data such as IP addresses and device information is used to detect unauthorised access attempts on your account, identify fraudulent activity or money laundering, prevent the creation of multiple accounts, and maintain the overall integrity of the ong24 platform.

Ong24 does not sell your personal data. That is an unwavering commitment. However, there are specific situations where ong24 needs to share information with selected third parties to keep the platform running properly and to meet legal requirements.

3.1 Payment Service Providers

Transaction information required for processing is shared with your chosen payment service provider — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or banks offering FPX services — solely for the purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and adhere to strict industry payment standards.

3.2 Regulatory Authorities and Law Enforcement

Ong24 may be required to disclose information to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction when mandated under applicable Malaysian law. This includes Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) compliance obligations under Malaysian legislation.

3.3 Technical Service Providers

Ong24 works with carefully selected third-party technical service providers — such as server hosting providers, game software developers, and analytics service providers — who may have limited access to certain data solely for necessary technical purposes. All such providers are bound by strict confidentiality agreements and are not permitted to use the data for any other purpose.

3.4 What We Do NOT Do

• We do not sell your personal data to any party for marketing purposes;
• We do not share your gaming activity records with advertisers without your consent;
• We do not transfer your data outside Malaysia without adequate safeguards in place;
• We do not disclose more information than is necessary for each specific purpose.

4.1 ong24 Security Infrastructure

Ong24 invests seriously in security infrastructure to ensure your personal data is protected at every level. The technical security measures we employ include:

• Transit encryption: All data transmitted between your device and ong24's servers is encrypted using TLS 1.3 with 256-bit SSL;
• Storage encryption: Sensitive data stored in ong24's databases is encrypted using AES-256 standards;
• Access controls: Only authorised ong24 staff with a legitimate business need are permitted to access players' personal data;
• Continuous monitoring: ong24's systems are monitored around the clock to detect any unauthorised activity or intrusion attempts;
• Regular security testing: Vulnerability assessments and penetration testing are conducted regularly by independent security specialists.

4.2 Data Retention Period

Ong24 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by law. In general:

• Active account data is retained for as long as your account remains active;
• Following account closure, basic personal data and transaction records are retained for a minimum of five (5) years for AML compliance and legal requirements;
• Technical data and activity logs are retained for twelve (12) months from the date of generation;
• Customer support communication records are retained for two (2) years.

4.3 Response to Data Breaches

While ong24 takes all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach affecting your personal information, ong24 will: notify the relevant authorities within the timeframe required by law; inform you via your registered email within a reasonable period; and take immediate remedial action to contain and mitigate the impact of the breach.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by ong24. ong24 respects and facilitates the exercise of these rights.

The ong24 website and app use cookies and similar tracking technologies to deliver a better experience, keep your session secure, and help us understand how the platform is used so we can continue to improve it.

6.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember your preferences and actions — such as login details and language settings — so you don't have to re-enter them each time you visit.

6.2 Types of Cookies Used

Ong24 may use your contact information to send relevant marketing communications, including updates on new promotions, special bonuses, enhanced odds for upcoming Malaysia Super League or EPL matches, and new game releases on the ong24 platform.

7.1 Types of Marketing Communications

• Email: Weekly newsletters on promotions and new games;
• SMS: Brief notifications about limited-time offers or reminders for your favourite matches;
• In-app notifications: Real-time updates on match odds and current promotions while you use the ong24 app.

7.2 Unsubscribe Rights

You may opt out of marketing communications from ong24 at any time by: clicking the "unsubscribe" link in any marketing email you receive; updating your communication preferences in your ong24 account settings; or contacting the ong24 support team directly to make the change. Please note that even after opting out of marketing communications, ong24 may still send you essential transactional communications — such as deposit confirmations, withdrawal notifications, or account security alerts.

The ong24 platform is strictly for individuals aged 21 and above. ong24 does not knowingly collect or process personal data from individuals under the age of 21. Should ong24 discover that data belonging to an underage individual has been collected, we will take immediate steps to delete that data and close the associated account.

8.1 Age Verification Measures

As a protective measure, ong24 conducts age verification during the registration process and may request additional documentation to confirm a user's age when necessary. If you become aware that a minor has registered or attempted to register an account on ong24, please notify us immediately at support@ong24.click so that appropriate action can be taken.

8.2 Protection of Vulnerable Players

Ong24 takes the protection of players at risk of gambling-related harm seriously. Gaming activity data is monitored to detect patterns that may indicate a problem, and proactive steps may be taken — including reaching out to players, imposing additional limits, or referring them to support resources such as Talian Kasih: 15999. For more information on player protection, visit ong24 Responsible Gaming page.

9.1 Privacy Policy Amendments

Ong24 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements, or improvements in how we handle data. When significant amendments are made, ong24 will notify you via your registered email or through an in-platform notification at least three days before the changes take effect. We recommend that you review this Privacy Policy periodically to stay informed about how your data is protected at ong24.

9.2 How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ong24, please reach out to us through the following channels:

• Privacy Email: support@ong24.click — include "Privacy Inquiry" in your email subject line;
• Live Chat: Available 24 hours a day on the ong24 platform — our Malay-speaking agents are always ready to help;
• FAQs: Visit ong24 FAQ page for answers to frequently asked privacy questions.

9.3 Complaints to the Authorities

If you are not satisfied with how ong24 has handled your personal data after contacting us, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the authority responsible for overseeing compliance with the Personal Data Protection Act 2010 in Malaysia.