Ongcuci Privacy Policy — How We Protect Your Personal Data

1. Information We Collect

Ongcuci collects several categories of personal information when you use our platform. This is collected directly from you, automatically through your use of the platform, and in some cases from legitimate third parties.

Data Category	Sample Information	Collection Method
Identity Data	Full name, date of birth, identification number	Account registration, KYC
Contact Data	Email address, phone number, residential address	Account registration
Financial Data	Bank account details, transaction records	Deposits and withdrawals
Technical Data	IP address, device type, web browser, operating system	Automatically during use
Usage Data	Game records, betting history, login timestamps	Automatically during use
Communication Data	Support chat records, emails, and feedback	Interactions with ongcuci

2. How We Use Your Data

Data collected by ongcuci is used solely for legitimate, stated purposes as outlined below. We do not use your data beyond the limits set in this privacy policy:

• Account management — register, verify your identity, and manage your account;
• Transaction processing — process deposits, withdrawals, and any related payments;
• Service provision — enable you to access all games and features on the ongcuci platform;
• Security and fraud prevention — detect and investigate suspicious or fraudulent activity;
• Legal compliance — fulfil obligations under Malaysian law, including AML and KYC requirements;
• Service communications — send important notifications relating to your account;
• Marketing — send promotional offers and new product information, subject to your communication preferences;
• Platform improvement — analyse usage patterns to improve the user experience.

3. Legal Basis for Data Processing

Ongcuci processes your personal data based on one or more of the following legal bases as recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent — you have given explicit consent for the processing of your data for a specific purpose;
• Contract performance — processing is necessary to perform an agreement between you and ongcuci;
• Legal obligation — processing is required to comply with applicable law;
• Legitimate interest — processing is necessary for the legitimate interests of ongcuci or a third party, provided those interests do not override your fundamental rights and freedoms.

4. Data Sharing and Disclosure

Ongcuci does not sell or trade your personal data. However, under certain limited circumstances, we may share your data with the following parties:

• Payment service providers — to process your deposits and withdrawals securely;
• KYC and identity verification service providers — to verify your identity as required by law;
• Technology service providers — companies that assist us in operating the platform, all bound by strict confidentiality agreements;
• Regulatory authorities and law enforcement agencies — when required by law or a valid court order;
• Business partners — only with your explicit consent and for purposes that have been made known to you.

Every third party that receives your data from ongcuci is bound by a data protection agreement ensuring they handle your information to a standard equivalent to our privacy policy.

5. Data Security Measures

Ongcuci implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL encryption for all data transmission between your browser and ongcuci servers;
• Password storage using one-way hashing algorithms that cannot be decrypted;
• Two-factor authentication (2FA) is available and encouraged for all accounts;
• Continuous security monitoring and periodic penetration testing by independent security experts;
• Strict internal access controls — only staff who require your data for their specific duties are permitted to access it;
• Data storage in certified data centres that comply with international security standards.

6. Data Retention Period

Ongcuci retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy, or as required by applicable law. In general, the retention periods are as follows:

• Active account data — retained for as long as your account is active and for a reasonable period following closure;
• Financial transaction records — retained for a minimum of seven (7) years as required by Malaysian tax and financial laws;
• KYC and identity verification records — retained for the period prescribed by anti-money laundering legislation;
• Customer support communication logs — retained for three (3) years from the date of last communication;
• Analytics data — stored in anonymised form with no specific time limit.

Once the relevant retention period has ended, your data will be securely deleted or anonymised in accordance with established procedures.

7. Cookies and Tracking Technologies

The ongcuci platform uses cookies and similar tracking technologies to enhance the user experience and gather analytics information. Cookies are small files stored on your device when you browse our website.

The types of cookies we use include:

• Essential cookies — required for core platform functions such as login and session security;
• Performance cookies — collect information about how you use the platform to help us improve it;
• Functional cookies — remember your preferences such as language and display settings;
• Analytics cookies — help us understand aggregated usage patterns for platform improvements.

You can manage or block cookies through your web browser settings. However, blocking certain essential cookies may affect the functionality of the ongcuci platform.

8. How to Exercise Your Rights

To exercise any of the data protection rights outlined in this privacy policy, you may contact the ongcuci customer support team via live chat, available 24 hours a day. We will process your request within thirty (30) business days from the date it is received.

Please include the following information when submitting a data-related request:

• Your full name and ongcuci account username;
• The type of request you wish to make (access, correction, deletion, etc.);
• Any additional information relevant to processing your request;
• Valid identification document for identity verification purposes.

9. International Data Transfers

In the course of operating the ongcuci platform, your personal data may be transferred to and stored on servers located outside Malaysia. Any such transfer will be carried out with appropriate safeguards to ensure your data remains protected to a standard equivalent to Malaysia's PDPA.

Ongcuci ensures that all international data transfers are conducted under recognised protection mechanisms, including standard contractual clauses and adequacy assessments of the recipient country's data protection standards.

10. Children's Privacy

The ongcuci platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. Should we become aware that data has been collected from someone under 18, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who suspect their child has registered on ongcuci are urged to contact our support team immediately via the platform's live chat.

11. Amendments to the Privacy Policy

Ongcuci reserves the right to amend this privacy policy at any time to reflect changes in our business practices, legal requirements, or data protection improvements. Any material changes will be communicated to you via email or a prominent notice on the platform at least seven (7) days before the amendments take effect.

The latest version of this privacy policy is always available on the ongcuci website. We encourage you to review this policy from time to time to ensure you stay up to date on our privacy practices.

12. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding ongcuci's privacy policy or how we handle your personal data, our team is ready to assist via the platform's live chat, available 24 hours a day, seven days a week. You may also reach us by email at the address listed in the footer of this website.

For more information about your rights under Malaysia's PDPA, you may refer to the Department of Personal Data Protection Malaysia. For matters relating to responsible gaming and account controls, please visit the Responsible Gaming us.