Privacy Policy ong39 — Malaysian Player Data Protection

Ong39 operates as an online entertainment platform offering casino games, sports betting, and live wagering to eligible users in Malaysia and related regions. We understand that your trust is the most valuable asset we must safeguard.

This Privacy Policy is designed to provide full transparency on how we handle your personal information from the moment you first visit the ong39 platform until you stop using it. We operate under strict data protection principles and comply with all applicable legal requirements.

This policy should be read together with the Terms & Conditions and Responsible Gaming Policy us for a comprehensive overview of how we operate and protect your interests.

Ong39 collects several categories of information depending on how you interact with our platform. All data collection is carried out lawfully and with a clear purpose:

Information you provide directly:

• Full name as stated on your official identification document.
• Date of birth for age verification.
• Active email address and mobile phone number.
• Full current residential address.
• Bank account or eWallet details for processing financial transactions.
• Identity verification documents (KYC) such as a copy of your national ID or passport.

Information collected automatically:

• IP address and general location information.
• Device type, operating system, and web browser version used.
• Gaming activity records including dates, times, and wagering amounts.
• Login and logout session data.
• Information related to cookies and tracking technologies.

Every piece of information we collect is used for a specific and lawful purpose. ong39 does not use your data for any other purpose without first obtaining your consent.

The primary purposes for which we use your data are as follows:

• Service Provision: Allowing you to register, log in, make deposits, play games, and process withdrawals seamlessly.
• Identity Verification: Verifying that you meet the age and location eligibility requirements to use the ong39 platform.
• Financial Processing: Verifying and processing all deposit and withdrawal transactions accurately and securely.
• Account Security: Detecting and preventing any unauthorized access, fraud, or suspicious activity on your account.
• Customer Support: Providing effective assistance whenever you need help with your account or transactions.
• Legal Compliance: Fulfilling our obligations under anti-money laundering laws and applicable gambling regulations.
• Platform Enhancement: Understanding usage patterns to continually improve the quality and user experience at ong39.
• Account-Related Communications: Sending important notifications regarding your account, transactions, eligible bonuses, or changes to our terms.

Ong39 does not sell your personal data to any third party. However, there are limited situations where we need to share certain information to ensure smooth platform operations and legal compliance.

Parties who may receive your information:

• Payment Service Providers: Payment gateways and financial institutions required to process your deposits and withdrawals. They receive only the information necessary for the transaction.
• KYC Service Providers: Third-party identity verification companies that help us securely and efficiently verify your document information.
• Legal Authority: Law enforcement agencies or regulatory bodies when required by law or a valid court order.
• Technology Infrastructure Providers: Cloud and hosting service providers that store our data, all bound by strict confidentiality agreements.

All third parties working with ong39 are required to sign data protection agreements binding them to security standards equivalent to those we uphold ourselves.

Ong39 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us identify technical issues and improve performance.
• Functional Cookies: Saving your preferences such as language and display settings so you do not have to re-enter them each time.
• Analytics Cookies: Helping us understand traffic and usage patterns in aggregate, anonymized form for ongoing improvements.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the ong39 platform.

The security of your personal data is ong39's highest priority. We continuously invest in security infrastructure to ensure your information remains protected against increasingly sophisticated cyber threats.

Key security measures we employ:

• End-to-End Encryption: All data communications between your browser and the ong39 server are encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): An additional security layer available to all user accounts to prevent unauthorized access.
• Real-Time Security Monitoring: A 24/7 automated monitoring system that detects and responds to any suspicious activity immediately.
• Strict Access Controls: Principle of minimum access rights — staff can only access data required for their specific tasks.
• Secure Data Backup: Data is regularly backed up to separate locations to ensure service continuity and data recovery in the event of an unexpected incident.
• Regular Penetration Testing: Independent security experts conduct regular tests on our systems to identify and patch any vulnerabilities before they can be exploited.

As an ong39 user, you have certain rights regarding your personal data that we fully respect. Here are your rights and how to exercise them:

Ong39 does not retain your personal data longer than necessary for the stated purposes or as required by applicable law.

In general, our data retention policy is as follows:

• Active Account Data: Retained for as long as your account is active and for the required period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years to meet anti-money laundering compliance requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by law.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution.
• Technical Data & System Logs: Retained for 12 months for security purposes and technical troubleshooting.

Once the designated retention period has expired, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Ong39 does not provide services to individuals under 18 years of age. Our platform is designed exclusively for adult users, and we take child protection responsibilities very seriously.

We do not knowingly collect any personal information from minors. Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to:

• Deleting all related data immediately.
• Closing the relevant account.
• Returning any funds that may have been deposited.

Ong39 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements that come into effect.

When material changes are made, we will:

• Updating the "Last updated" date at the top of this page.
• Displaying a clear change notice on the platform for a set period.
• Sending a notification to your registered email address if the changes affect the fundamental way we use your personal data.

We encourage you to revisit this page periodically to stay informed about how we protect your information. Continued use of the ong39 platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, our team is ready to assist you at any time.

You can reach ong39 through the following methods:

• Live Chat: Available 24/7 directly on the ong39 platform — the fastest way to get help.
• Official Email: [email protected] — for detailed enquiries or requests related to personal data.

We aim to respond to all privacy-related inquiries within 3 business days. For more complex data rights requests, processing may take up to 30 business days as permitted by law.