Privacy Policy ong24

01 Introduction

Welcome to the ong24 Privacy Policy. This document is a binding agreement between you as a user and ong24 regarding how we handle your personal data. By using the ong24 platform — whether through the website or mobile app — you agree to the terms set out in this policy.

Ong24 is an online casino platform that operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We believe that player trust is our most valuable asset, and that trust begins with responsible, transparent, and secure data handling.

This Privacy Policy applies to all personal information collected through:

• The official ong24 website at ong24.vu;
• The ong24 mobile app for Android and iOS;
• Email, live chat, and customer support communications;
• Any other digital channels related to ong24 services.

02 Personal Data We Collect

Ong24 only collects data that is strictly necessary to provide a safe, lawful, and high-quality service. The following are the categories of data we collect and their purposes:

Ong24 never collects sensitive data such as health information, religious beliefs, or political views unless you voluntarily share them in communications with our support team.

03 How We Use Your Data

Collected data is used in a limited and purposeful manner. ong24 uses your personal data for the following purposes:

• Account management — create, verify, and securely maintain your player account;
• Transaction processing — process deposits, withdrawals, and bonus conversions accurately and promptly;
• Identity verification (KYC) — fulfil anti-money laundering (AML) and fraud prevention legal obligations;
• Service Communications — send important notifications regarding your account, transactions, and security updates;
• Customer Support — resolve complaints, enquiries, and technical support requests effectively;
• Security Monitoring — detect suspicious activity, fraud attempts, and unauthorised access;
• Platform improvements — analyse usage patterns to improve the gaming experience and technical performance;
• Legal Compliance — fulfil reporting obligations to relevant authorities when required by law.

04 Data Sharing with Third Parties

Ong24 does not sell or disclose your personal data to third parties for marketing purposes. However, in certain limited situations, we may share data with the following parties:

• Payment providers — required transaction information is shared with providers such as DuitNow, FPX, and e-wallets solely for processing your payments;
• Game providers — basic game data is shared with game software providers to ensure games function correctly;
• Legal authorities — ong24 will disclose data when required by court order, money laundering investigation, or direction from a lawful authority;
• Cloud service providers — our data storage infrastructure uses high-security cloud services subject to strict confidentiality agreements.

All third parties that receive your data are required to comply with data protection standards equal to or exceeding those of ong24. We have zero tolerance for any misuse of data by our partners.

05 Cookies & Tracking Technologies

Ong24 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled;
• Preference cookies — save your preferences such as language, theme, and display settings for a more comfortable experience;
• Analytics cookies — helps us understand how players use the platform for continuous improvement. This data is aggregated and does not identify individuals;
• Security cookies — detect suspicious access attempts and protect your account from unauthorised activity.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the ong24 platform. Continued use of the platform is considered consent to the use of cookies as described above.

06 Data Security

Ong24 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols;
• Stored data encryption using the AES-256 algorithm;
• Role-based access control (RBAC) for all internal systems;
• Mandatory two-factor authentication (2FA) for administrative access;
• Regular security audits by independent third-party firms;
• Real-time threat monitoring using a SIEM system;
• Mandatory cybersecurity training for all ong24 staff.

07 Data Retention Period

Ong24 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this policy. Specific retention periods are as follows:

• Active account data — retained for the duration your account is active and for any additional period required by law;
• Financial transaction records — retained for a minimum of 7 years in compliance with Malaysia's anti-money laundering legal requirements;
• Activity and security logs — retained for 2 years for investigation and audit purposes;
• Support communication data — retained for 3 years for reference and service improvement;
• Closed account data — basic information is retained for 5 years after account closure before being permanently deleted.

Upon expiry of the retention period, your data will be securely deleted or anonymised so that it can no longer be re-identified. The data deletion process follows approved and documented procedures.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by ong24:

09 International Data Transfers

Some player data may be stored or processed outside Malaysia, particularly through the cloud infrastructure we use. ong24 ensures all international data transfers are protected by the following mechanisms:

• Comprehensive data processing agreements (DPA) with all international service providers;
• Use of recognised standard contractual clauses for cross-border data transfers;
• Data protection impact assessment (DPIA) for every new data transfer identified as high-risk;
• Ensuring that recipient countries maintain an adequate or equivalent level of data protection.

Ong24 prioritises storing Malaysian player data in data centres close to the Asia-Pacific region to ensure optimal performance and compliance with local laws.

10 Children's Privacy

The ong24 platform is exclusively for individuals aged 18 and above. ong24 does not knowingly collect, store, or process personal data of minors.

Should ong24 discover that personal data of a minor has been collected without our knowledge, such data will be deleted immediately and the associated account will be terminated. Parents or guardians who become aware that their child has registered an ong24 account should contact our support team immediately for prompt action.

11 Privacy Policy Amendments

Ong24 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data protection improvements. When significant changes are made, we will notify you via:

• A clear notice displayed on the ong24 platform homepage at least 14 days before changes take effect;
• In-app notifications on the ong24 mobile app;
• Email notification to your registered address for changes that materially affect your privacy rights.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. Continued use of the ong24 platform after the effective date of any changes constitutes acceptance of the updated terms.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data by ong24, please contact us through the following channels:

• Live Chat — available 24/7 within the ong24 platform, the fastest way to get a response;
• Email — send detailed enquiries to [email protected];
• FAQ Section — visit FAQ page us for answers to the most frequently asked questions.

The ong24 Data Protection Team operates Monday to Friday, 9 AM to 6 PM (Malaysia time). All privacy-related enquiries will be responded to within 3 business days, and data rights requests within 21 business days.