Ong cuci Privacy Policy – Malaysian User Data Protection

Ong cuci collects various types of personal information depending on how you interact with our platform. We only collect data that is strictly necessary to provide the services you request.

1.1 Information You Provide Directly

• Registration information: full name, phone number, email address, date of birth, identification number (MyKad)
• Financial information: bank account number, e-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay) for deposit and withdrawal purposes via DuitNow or FPX
• KYC verification documents: MyKad copy, identity verification selfie, utility bill or recent bank statement where required
• Communications with us: complaint, enquiry or feedback content submitted to the ong cuci support team

1.2 Information Collected Automatically

• Device data: device type, operating system, phone model, screen resolution
• Network data: IP address, internet service provider (ISP) name, and approximate location (state/city) based on IP
• Activity data: pages visited, games played, session duration, login frequency, betting history and transactions
• Cookie and tracking data: session information, preference cookies, platform usage analytics data

Ong cuci uses collected data solely for legitimate and necessary purposes. Below is a complete list of how your data is used on the ong cuci platform:

2.1 Experience Personalisation

Ong cuci uses your activity data to surface relevant game recommendations — for example, suggesting slots similar to games you play frequently, or displaying odds for Malaysia Super League or EPL matches that align with your betting interests. This feature can be disabled in your account settings at any time.

2.2 Marketing Communications

Ong cuci will only send marketing communications (promotions, bonuses, and special offers) if you have given explicit consent during registration or through the communication preferences in your account settings. You may opt out of marketing communications at any time via the unsubscribe link in any email or through your ong cuci account settings.

Ong cuci does not sell, rent or trade your personal data to any third party. However, there are limited situations where we need to share your data with certain parties to enable our services to function:

3.1 Payment Processing Providers

Financial data required to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other FPX methods is shared securely with the relevant payment providers. This sharing is limited to information that is strictly necessary and is governed by strict confidentiality agreements.

3.2 Game Service Providers

Third-party game providers that supply slots and live casino games on the ong cuci platform may receive the minimum data necessary to process and verify game outcomes. All such providers are required to comply with data protection standards equivalent to or stricter than ong cuci's own policy.

3.3 Regulatory Authorities

Ong cuci may share user data with Malaysian authorities where required by law, court order, or a legitimate criminal investigation. In such cases, ong cuci will notify the relevant user where permitted by law.

Ong cuci takes serious investment in cybersecurity infrastructure to ensure your personal data is always protected. This is not just words — it is a real investment in systems and procedures that we regularly review and update.

4.1 Technical Safeguards

• Encryption in transit: All communications between your device and ong cuci servers are encrypted using TLS 1.3 with SSL 256-bit certificates.
• Data-at-rest encryption: Sensitive data stored in our databases is encrypted using AES-256
• Two-factor authentication (2FA): Users are encouraged to enable 2FA for an added layer of security on their ong cuci account
• 24/7 Monitoring: An intrusion detection system (IDS) operates around the clock to monitor for any suspicious activity.
• Periodic penetration testing: The ong cuci platform undergoes regular independent security testing to identify and address any vulnerabilities.

4.2 Internal Procedures

Access to user data within ong cuci is strictly limited on a need-to-know basis. Staff with access to sensitive data undergo data security training and are bound by strict confidentiality agreements.

4.3 Incident Response

In the event of a data breach affecting ong cuci user information, we are committed to notifying affected users within 72 hours of confirming the incident, in line with international data protection best practices.

The ong cuci platform uses cookies and similar tracking technologies to enhance user experience, analyse platform performance and maintain login session security.

5.1 Types of Cookies Used

• Essential cookies: Required for core platform functions — login, game sessions, and language preferences. Cannot be disabled.
• Performance cookies: Collects anonymised data on how users interact with the platform to help us improve ong cuci.
• Functional cookies: Saving your preferences such as favourite game selections and display settings.
• Analytics cookies: Helps us understand platform usage patterns in aggregate, anonymous form.

5.2 Managing Cookies

You can manage or delete cookies through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the ong cuci platform and you may be unable to log in or use certain features normally.

5.3 Analytics Data

Ong cuci uses internal analytics tools to understand platform usage patterns. This data is processed in aggregate form and cannot be attributed to any specific individual. It is used solely for the purpose of improving ong cuci's services.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ong cuci's internal policies, you have the following rights regarding your personal data:

Ong cuci retains your personal data only for as long as it is needed for the purposes set out in this policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for as long as the account is active and for 12 months after account closure at the user's request
• Financial transaction records: Retained for 7 years in compliance with Malaysian accounting and tax law requirements
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes
• Anonymised analytics data: Retained for 5 years for platform improvement purposes
• KYC data: Retained for 5 years from the date of the last transaction in accordance with Anti-Money Laundering (AMLA) requirements

When data is no longer required, ong cuci will delete or anonymise it using secure deletion procedures that ensure the data cannot be recovered or accessed again.

7.1 Inactive Accounts

Accounts inactive for more than 24 consecutive months may be archived. Users will be notified via their registered email before archiving takes place and given the opportunity to reactivate their account. Any cash balance in an inactive account will be kept secure and can be reclaimed through an identity verification process.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ong cuci handles your personal data, please reach out to us through the channels below. We are committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe.

• Privacy Email: support@ongcuci.click (Subject: Data Privacy Enquiry)
• Live Chat: Available on the ong cuci platform 24 hours a day, 7 days a week
• Support Language: Bahasa Melayu, English, Mandarin
• Response Time: Within 3 business days for privacy enquiries, 14 days for data rights requests

If you are not satisfied with how ong cuci has handled your privacy complaint after our internal process, you have the right to escalate the matter to the relevant authority, the Department of Personal Data Protection Malaysia (JPDP).