Privacy Policy – ong918

1 Who We Are

ong918 is an online casino and sports betting platform operating at ong918.net, serving players primarily based in Malaysia since 2019. For the purposes of this Privacy Policy, ong918 is the data controller responsible for the personal data of registered players and visitors to the platform. ong918 processes personal data in accordance with applicable data protection laws and the requirements of its international gaming licensing authority.

Any reference to "ong918", "we", "us", or "our" in this Privacy Policy refers to the ong918 platform operator. References to "you" or "your" refer to any individual who accesses ong918.net or holds a registered ong918 account.

2 Data We Collect

2.1 Registration Data

When you register an account with ong918, we collect the personal data required to create and manage your account. This includes:

• Full name as it appears on your government-issued identification;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Mobile phone number;
• Username chosen by you; and
• Password (stored in cryptographically hashed form — ong918 does not store or have access to plain-text passwords).

2.2 Identity Verification Data

Where identity verification is required — whether as part of standard onboarding, withdrawal processing, or AML/KYC compliance procedures — ong918 may collect:

• Copies of government-issued identification documents (e.g., MyKad, passport);
• Proof of address documentation; and
• Source of funds documentation where required for AML compliance.

2.3 Financial Transaction Data

ong918 collects data relating to deposits and withdrawals processed through your account, including payment method details (e.g., registered e-wallet account identifier, bank name), transaction amounts, timestamps, and transaction status. ong918 does not store full card numbers or sensitive payment authentication credentials.

2.4 Platform Activity Data

ong918 automatically collects data relating to your activity on the platform, including: games played and wagers placed; login timestamps and session duration; device type, operating system, and browser version; IP address and approximate geolocation data derived from IP; and platform feature usage patterns used for service improvement.

2.5 Communications Data

Where you contact ong918 customer support or submit an enquiry, ong918 retains the content of that communication and any supporting documentation provided, together with the date, time, and channel of contact.

3 How We Collect Data

ong918 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit identity verification documents, make deposits or withdrawals, contact customer support, or opt in to promotions;
• Automatically — through cookies, server logs, and platform analytics tools when you access ong918.net or use any platform feature; and
• From third parties — where permitted by applicable law, ong918 may receive supplementary identity or fraud-screening data from licensed third-party identity verification or AML screening service providers.

4 How We Use Your Data

ong918 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your ong918 account, including processing login requests and enabling access to platform features;
• Identity and age verification: Confirming that you are 21 years of age or older and that your account details are accurate and consistent with your identity documents;
• Payment processing: Processing deposits and withdrawals and maintaining financial records as required by applicable law;
• AML/KYC compliance: Fulfilling our obligations under applicable anti-money laundering and know-your-customer requirements, including transaction monitoring and suspicious activity reporting;
• Responsible gaming: Monitoring account activity to identify potential problem gambling indicators and, where appropriate, proactively applying responsible gaming tools or contacting you regarding your account use;
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance;
• Platform improvement: Analysing aggregated, anonymised usage data to improve ong918 features, game selection, and overall platform performance; and
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications.

ong918 does not use personal data for purposes incompatible with those described above without obtaining further consent or establishing a separate legal basis.

5 Legal Basis for Processing

ong918 processes personal data on the following legal bases:

• Contractual necessity: Processing required to provide the services described in the ong918 Terms & Conditions, including account creation, payment processing, and game access;
• Legal obligation: Processing required to comply with applicable anti-money laundering, know-your-customer, responsible gaming, and data retention laws;
• Legitimate interests: Processing conducted for fraud prevention, platform security, and service improvement where such interests are not overridden by your data protection rights; and
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time.

6 Data Sharing & Disclosure

ong918 does not sell your personal data. ong918 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: Licensed payment service providers (including e-wallet operators and banks) for the purpose of processing your transactions. These providers are bound by their own data protection obligations;
• Identity verification providers: Accredited third-party KYC and AML screening services used to verify identity and screen against sanctions or fraud databases;
• Game software providers: Where technically necessary, limited session data (not your full personal profile) may be shared with certified game studios to enable game delivery and RNG audit trails;
• Regulatory and law enforcement authorities: Where ong918 is legally required to disclose data pursuant to a court order, regulatory demand, or mandatory reporting obligation; and
• Service providers: Contracted technical and operational service providers (e.g., hosting, customer support platforms) that process data on behalf of ong918 under strict data processing agreements.

All third parties with whom ong918 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for their own marketing or commercial purposes.

7 International Data Transfers

ong918 operates with infrastructure that may involve the transfer of personal data to jurisdictions outside of Malaysia. Where such transfers occur, ong918 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, or adequacy determinations — to ensure that your personal data receives a level of protection consistent with applicable data protection standards. ong918 does not transfer personal data to jurisdictions that do not provide adequate protections without implementing compensatory safeguards.

8 Data Retention

ong918 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. Specific retention periods include:

• Account data: Retained for the duration of your active account and for a period of up to 7 years following account closure, as required for AML, taxation, and dispute resolution purposes;
• Transaction records: Retained for a minimum of 7 years from the date of each transaction in compliance with applicable financial record-keeping obligations;
• Identity verification documents: Retained for the duration required by applicable KYC and AML regulations, typically 5 to 7 years from the date of verification; and
• Communication records: Customer support interactions are retained for up to 3 years from the date of the communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9 Cookies & Tracking Technologies

9.1 Cookies Used by ong918

ong918 uses the following categories of cookies on ong918.net:

• Strictly necessary cookies: Required for login session management, security token validation, and the basic functioning of the ong918 platform. These cookies cannot be disabled without impairing platform functionality;
• Performance cookies: Collect anonymised data on how visitors use ong918.net (e.g., pages visited, error messages encountered) to help us improve the platform. These cookies do not identify you personally; and
• Functional cookies: Remember your preferences (e.g., language settings, game lobby sort order) to provide a more personalised experience.

9.2 What ong918 Does Not Use

ong918 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking technologies on ong918.net. You will not be tracked across other websites by ong918 cookies.

9.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use ong918 services. Your cookie preferences for non-essential cookies may also be managed from the cookie settings panel accessible on ong918.net.

10 Your Rights

Subject to applicable data protection laws and any overriding legal obligations (including AML retention requirements), you have the following rights with respect to your personal data held by ong918:

• Right of access: You may request a copy of the personal data ong918 holds about you;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected;
• Right to erasure: You may request deletion of your personal data where retention is no longer necessary and no overriding legal obligation applies;
• Right to restriction: You may request that ong918 restrict processing of your personal data in certain circumstances;
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the data you provided to ong918;
• Right to object: You may object to processing based on ong918's legitimate interests; and
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact ong918 customer support at [email protected]. ong918 will respond to all valid data rights requests within 30 days. Where a request is complex or numerous, ong918 may extend this period by a further 30 days with notification.

11 Security Measures

ong918 implements technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL encryption on all data transmissions between your device and ong918 servers;
• Cryptographic hashing of all stored account passwords — plain-text passwords are never stored or accessible;
• Access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Optional two-factor authentication for all registered ong918 accounts;
• Regular security reviews and penetration testing of platform infrastructure; and
• Automatic session timeout for inactive ong918 login sessions.

Notwithstanding these measures, no online system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, ong918 will notify you and the applicable regulatory authority in accordance with applicable breach notification requirements.

12 Children's Privacy

ong918 is strictly an adult platform. Access is prohibited for persons under 21 years of age. ong918 does not knowingly collect personal data from individuals under the age of 21. If ong918 becomes aware that personal data has been collected from an underage individual, that data will be deleted, the associated account will be permanently closed, and the matter may be referred to the relevant authorities. If you believe that an underage person has registered an account with ong918, please contact ong918 support immediately.

13 Changes to This Privacy Policy

ong918 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Privacy Policy will be communicated to registered players via the email address on record or through a prominent notice on ong918.net, with a minimum of 7 days' notice before the changes take effect, except where a shorter period is required by law.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. Continued use of ong918 following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this Privacy Policy periodically.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ong918's data practices, please contact the ong918 data team through the following channels:

• Email: [email protected] — Subject line: "Privacy Enquiry"
• Live Chat: Available on ong918.net, daily from 8:00 AM to 12:00 AM MYT
• Response Time: Privacy-related enquiries are given priority and are typically addressed within 5 to 10 business days.

For responsible gaming enquiries, account limits, or self-exclusion requests, please visit the Responsible Gaming page. For general account terms, refer to the Terms & Conditions.