ong66 Privacy Policy

1. Who We Are

ong66 operates the online gaming platform accessible at ong66.club, providing slots, live casino, sports betting, and Toto 4D services to registered players. In the context of this Privacy Policy, references to "ong66", "we", "us", or "our" refer to the operator of the ong66 platform and its associated infrastructure.

ong66 acts as the data controller in respect of personal data collected from players and visitors in connection with the platform's services. For any privacy-related enquiries, contact us at [email protected] or via 24/7 live chat in-platform.

2. Personal Data We Collect

ong66 collects personal data that is necessary to provide the platform's services, comply with legal obligations, and maintain a safe gaming environment. The categories of personal data we may collect include:

2.1 Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (collected to verify that you meet the 21+ age requirement).
• Email address and mobile phone number.
• Residential address (city and postcode at minimum; full address for KYC-verified accounts).
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID — Malaysian MyKad, passport, or equivalent.
• Proof of residential address (utility bill, bank statement, or equivalent document).
• Payment method ownership verification documents where required.

2.3 Financial Data

• Deposit and withdrawal transaction records, including amounts in MYR, dates, and payment method references.
• Touch n Go eWallet or Boost account identifiers (partial references only — ong66 does not store full wallet credentials).
• Bank account name and account number suffix for FPX transactions via Maybank2U, CIMB Clicks, or Public Bank.

2.4 Gaming Activity Data

• Bet history, game session records, win/loss data, and wagering patterns across slots, casino, sportsbook, and Toto 4D.
• Bonus redemption and promotional activity records.
• Account balance history and wallet transaction logs.

2.5 Technical & Usage Data

• IP address, device type, operating system, and browser type at the time of each session.
• Geolocation data (country and region level) derived from IP address.
• Session timestamps, page navigation data, and feature interaction logs.
• Cookie identifiers and analytics tracking parameters (see Section 8).

2.6 Communications Data

• Contents of support chat interactions and email correspondence with ong66 support.
• Records of promotional notifications sent to your registered email or phone.
• Feedback submitted through in-platform feedback channels.

3. How We Collect Your Data

ong66 collects personal data through the following mechanisms:

• Direct submission: Data you provide voluntarily during registration, KYC verification, support interactions, or when completing deposit and withdrawal transactions on the ong66 platform.
• Automated technical collection: Data collected automatically when you access the ong66 platform, including IP address, device identifiers, session data, and browser information via server logs and analytics tools.
• Third-party payment processors: Transaction confirmation data received from payment service providers including Touch n Go eWallet, Boost, and FPX banking partners when you initiate a deposit or withdrawal.
• Identity verification services: Data returned by third-party KYC verification services used to validate the authenticity of identity documents submitted during the verification process.
• Cookies and tracking technologies: Data collected through cookies placed on your device when you visit ong66.club, as described in Section 8 of this Policy.

4. How We Use Your Personal Data

ong66 uses collected personal data for the following purposes:

• Creating, maintaining, and administering your ong66 account and providing access to all gaming products on the platform.
• Processing deposits and withdrawals in MYR and maintaining accurate Wallet records.
• Verifying your identity and age in compliance with KYC obligations and the platform's 21+ age restriction policy.
• Detecting, investigating, and preventing fraud, money laundering, multi-accounting, and other prohibited conduct as defined in the ong66 Terms & Conditions.
• Providing customer support through live chat and email, and maintaining records of those interactions for quality assurance.
• Sending you transactional communications, including account notifications, deposit confirmations, and withdrawal status updates.
• Where you have consented, sending you promotional communications about bonuses, new game launches, and platform news via your registered email or phone.
• Complying with legal and regulatory obligations applicable to the operation of the ong66 platform.
• Analysing gaming behaviour data in aggregate (anonymised) form to improve platform features and responsible gaming tools.
• Enforcing the ong66 Terms & Conditions and protecting the rights and interests of the platform and its players.

5. Legal Basis for Processing

ong66 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the player account agreement — including account creation, payment processing, game access, and support services.
• Legal obligation: Processing required to comply with applicable KYC, anti-money laundering (AML), age verification, and other regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and improving the quality and safety of ong66 services, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where we have obtained your explicit prior consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe function in any marketing email.

6. Data Sharing & Disclosure

ong66 does not sell your personal data to third parties. We may disclose personal data in the following limited circumstances:

6.1 Service Providers

ong66 engages trusted third-party service providers who process data on our behalf under strict data processing agreements. These include payment processors (Touch n Go, Boost, FPX banking partners), KYC verification platforms, cloud infrastructure providers, and fraud detection services. These providers are contractually prohibited from using your data for any purpose other than fulfilling their service to ong66.

6.2 Game Studios

Anonymised or pseudonymised gaming session data may be shared with game providers (e.g., JILI Games, PG Soft, Evolution Gaming) for technical support and game performance monitoring. These providers do not receive your full personal identity data in connection with game session logs.

6.3 Legal & Regulatory Disclosure

ong66 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of ong66, its players, or third parties.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ong66's assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via their registered email address prior to any such transfer where practicable.

7. Data Retention

ong66 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention standards:

• Account data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for seven (7) years from the date of each transaction in compliance with applicable financial record-keeping obligations.
• Support communications: Retained for two (2) years from the date of the interaction.
• Technical and usage data: Retained in aggregated and anonymised form for analytical purposes indefinitely; identifiable technical logs retained for up to twelve (12) months.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

8. Cookies & Tracking Technologies

ong66.club uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse usage patterns. The following types of cookies are used:

• Essential cookies: Required for core platform functionality, including session authentication and Wallet state management. These cookies cannot be disabled without affecting core features.
• Analytics cookies: Used to collect anonymised data about how visitors interact with ong66.club pages. This helps us understand which features are most used and identify areas for improvement.
• Preference cookies: Store your display preferences (language, game category selections) to personalise your experience across sessions.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to ong66 but may affect platform personalisation features.

9. Data Security

ong66 implements technical and organisational security measures commensurate with the sensitivity of the personal data it processes. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ong66 platform — the same encryption standard used by Maybank, CIMB, and Public Bank for their online banking portals.
• Encrypted storage of passwords using industry-standard hashing algorithms. ong66 does not store plain-text passwords and cannot retrieve your password — only reset it.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions enforced at the infrastructure level.
• Regular security audits and vulnerability assessments of the ong66 platform infrastructure.
• Incident response procedures for detecting, reporting, and containing personal data breaches in accordance with applicable notification obligations.

While ong66 employs robust security practices, no online platform can guarantee absolute security. You are encouraged to use strong, unique passwords and enable two-factor authentication on your ong66 account.

10. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data ong66 holds about you:

• Right of access: You may request a copy of the personal data ong66 holds about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data in your account.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ong66's legal retention obligations.
• Right to restriction: You may request that ong66 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact ong66 at [email protected] or via in-platform live chat, clearly stating your request and your registered account username. ong66 will respond within thirty (30) calendar days. Requests may require identity verification before we can action them.

11. Minors

The ong66 platform is strictly for individuals aged 21 years and above. ong66 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If ong66 becomes aware that an account has been registered by a person under 21, that account will be immediately closed and any associated data deleted in accordance with our retention obligations, except where retention is required by law for fraud or abuse investigation purposes.

If you believe that a minor has registered an account on ong66, please notify us immediately at [email protected].

12. Third-Party Services & Links

The ong66 platform may display content or integrate services from third-party providers, including game studios and payment processors. These third parties operate under their own privacy policies, which are independent of this ong66 Privacy Policy. ong66 is not responsible for the privacy practices of third-party service providers beyond the contractual data processing obligations described in Section 6.1.

ong66 does not endorse and is not responsible for any third-party websites that may be linked to from external sources referencing ong66 content.

13. Changes to This Privacy Policy

ong66 reserves the right to update or amend this Privacy Policy at any time. Material changes — such as new categories of data being collected or new purposes for processing — will be communicated to registered players via in-platform notification and/or email to your registered address, with a minimum of seven (7) days' advance notice before the change takes effect.

The "Last Updated" date at the top of this Policy will be revised with each amendment. Your continued use of the ong66 platform following the effective date of any revised Policy constitutes your acknowledgement of the changes. If you do not agree with a material change, you may close your account by contacting support.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or ong66's data handling practices, please contact us through the following channels:

• Live Chat: 24/7 live chat support available in-platform via your ong66 account dashboard — the fastest route for urgent privacy matters.
• Email: [email protected] — include your registered username and clearly state that your enquiry relates to a privacy matter. Response time is typically within 2 business days.