Malaysia PDPA Data Protection • Updated January 2026

Ong77 Privacy Policy — Full Commitment to Protecting the Personal Data of Malaysian Members

Your personal data is a trust we take seriously. This page transparently explains how ong77 collects, uses, stores, and protects each member's personal information in accordance with Malaysia's data protection laws and the highest security standards.

Effective Date
1 January 2026
Legal Compliance
Malaysia PDPA 2010
Data Encryption
SSL 256-bit AES
Contact the Privacy Officer
privacy@ong77.ws

Ong77 Data Protection Principles

Six core principles that guide how ong77 manages the personal data of every Malaysian member.

256-bit SSL Protection

All data transmitted between your browser and ong77's servers is protected by military-grade 256-bit SSL encryption. No one can intercept or read your information while it is in transit.

Secure Data Storage

Members' personal data is stored on servers protected by multi-layered firewalls, strict access controls, and 24/7 monitoring. Only authorised personnel may access member data for legitimate service purposes.

Your Data, Your Control

You have full control over your personal data. ong77 allows members to view, update, transfer, or request deletion of their data at any time through account settings or by contacting our privacy team.

No Sale of Data to Third Parties

Ong77 has never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes, and never will. Your data belongs to you — it is not a business asset of ours.

Malaysia PDPA Compliance

All of ong77's data management practices comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We conduct regular compliance audits and update this policy in line with any relevant changes in legislation.

Data Breach Notification

In the event of any security incident involving member data, ong77 is committed to notifying affected members within 72 hours and taking immediate steps to contain and remediate the situation.

Latest Version: This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions. By continuing to use the ong77 platform, you agree to this updated policy.

1Introduction — Who We Are & Why This Policy Matters

Ong77 Gaming Sdn. Bhd. ("ong77", "we") is an online betting platform operator serving exclusively the Malaysian market, covering slots, Sports Betting, Live Casino, poker, and virtual sports. We understand that members' trust in ong77 goes beyond game quality or withdrawal speed — it also depends on the confidence that their personal information is handled with the utmost responsibility.

This Privacy Policy clearly and transparently explains how ong77 handles the personal data of our members in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010. It applies to all members who use the ong77 platform via our website, mobile app, or any other digital channel we operate.

Key definitions: "Personal data" in the context of this policy refers to any information that can be used to identify you, directly or indirectly, including your name, identification number, phone number, email address, banking information, and platform usage data.

2Types of Personal Data ong77 Collects

Ong77 only collects data that is genuinely necessary to provide members with a reliable and secure service. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Identity Data
Full name, identification number, date of birth, gender, nationality.
Contact Data
Mobile phone number, email address, residential address in Malaysia.
Financial Data
Bank account number, account holder name, and deposit and withdrawal transaction history in MYR via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks.
Gaming Activity Data
Sports betting records, slots sessions, poker hands, live casino history, VIP level, and bonuses received.
Technical & Device Data
IP address, browser type, device type, operating system, cookie data, login timestamps, and in-platform activity.
Communication Data
Records of conversations with the customer support team, feedback, complaints, and any other communications you have sent to ong77.

2.1 How Data Is Collected

  • Directly: Data you provide when registering an account, making a deposit, submitting a withdrawal request, or contacting customer support.
  • Automatically: Technical data collected automatically when you use the ong77 platform, including IP address, session data, and click activity.
  • From third parties: In certain cases, ong77 may receive identity verification information from licensed service providers, including e-KYC providers or anti-fraud services.

3How ong77 Uses Your Personal Data

Ong77 uses members' personal data for lawful and necessary purposes in the context of operating a responsible betting platform. We do not use your data for any purpose not stated here without first obtaining your consent.

Purpose of UseTypes of Data CollectedLegal Basis
Identity verification & account registrationIdentity data, contact dataContractual necessity
Deposit & withdrawal processingFinancial data, identity dataContractual necessity
Fraud prevention & anti-money launderingAll data categoriesLegal obligations
VIP programme & bonus managementGame activity data, contact dataContractual necessity
Customer support & complaint resolutionCommunication data, account dataContractual necessity
Platform improvement & analyticsTechnical data, activity data (anonymised)Ong77's legitimate interests
Marketing communications (with consent)Contact data, game preferencesMember consent

Marketing Communications: ong77 only sends promotional emails or SMS to members who have agreed to receive such communications. You may unsubscribe from marketing communications at any time via the "unsubscribe" link in any email or by contacting our team.

4Sharing Data with Third Parties

Ong77 does not sell or trade members' personal data to third parties. However, to operate the platform safely and efficiently, we may need to share certain data with the following parties on a strictly "need-to-know" basis:

  • Payment service providers: Financial institutions and e-wallet providers that process your transactions — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank, CIMB, and others — receive only the minimum data necessary to complete each transaction.
  • Game providers: Third-party gaming platforms that provide slots, live casino, and poker may receive usernames and session IDs for technical purposes. These providers are bound by strict data confidentiality agreements with ong77.
  • Anti-fraud & KYC services: Licensed identity verification providers assist ong77 in verifying member identities and preventing fraud. This sharing is a legal obligation.
  • Legal authorities: ong77 will disclose member data to Malaysian government authorities or law enforcement agencies when required to do so by a court order or applicable law.
  • Professional advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations, where required for legitimate business purposes.

Data Processing Agreement: All third parties that receive ong77 member data are required to sign data processing agreements setting out the security and confidentiality standards they must uphold. We have zero tolerance for data misuse by any business partner.

5Cookies & Tracking Technologies

Ong77 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit the ong77 platform.

5.1 Types of Cookies Used by ong77

  • Essential Cookies (Required): Required for core platform functions such as login, session management, and security. Cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects data on how members use the ong77 platform to help us identify issues and improve performance. All data is anonymised.
  • Functional Cookies: Saves your preferences — such as language, display settings, and game choices — so you don't have to reconfigure them each time.
  • Marketing Cookies (with consent): Used to deliver relevant promotional content based on your interests and gaming activity on ong77, only where you have given your consent.

5.2 Managing Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to log in or use certain features of the ong77 platform properly.

6Data Security Measures at ong77

The security of members' personal data is a core technical and operational priority at ong77. We continually invest in the latest security infrastructure and practices to ensure your data remains protected at all times:

  • SSL 256-bit End-to-End Encryption for all communications between your browser and ong77's servers.
  • Encryption of data at rest for all sensitive data stored in our databases.
  • Role-based access control (RBAC) — only staff with explicit authorisation may access member data, and every instance of access is recorded in an audit log.
  • Multi-layer firewall and intrusion detection and prevention systems (IDS/IPS) active 24/7.
  • Penetration testing periodically by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
  • Encrypted backup storage at geographically separate locations to ensure continuity of service.
  • Two-factor authentication (2FA) available to all members and mandatory for all internal staff accessing sensitive systems.

Shared Responsibility: While ong77 takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong password, never share your login credentials, and keep your device protected from malware.

7Data Retention & Deletion

Ong77 does not retain members' personal data longer than necessary for the stated purpose or as required under Malaysian law. The following are general guidelines for our data retention periods:

Data TypeRetention PeriodReason
Active Account DataThroughout the active account periodService requirements
Financial transaction records7 years after the transactionMalaysian financial legal obligations
Betting & game records5 yearsCompliance & dispute resolution
Support communication logs3 yearsService quality & audits
Technical data & access logs12 monthsSecurity & fraud detection
Data following account closureUp to 7 yearsLegal obligations & potential claims

Once a retention period expires and there is no legal requirement to keep the data, ong77 will securely delete or anonymise it in accordance with established procedures.

8Your Rights as an ong77 Member

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and ong77's commitment to transparency, you have the following rights regarding your personal data:

1
Right of Access

You have the right to request and receive a copy of the personal data ong77 holds about you. Requests will be processed within 14 business days.

2
Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction and ong77 will update it within 7 business days.

3
Right to Erasure

You may request the deletion of your personal data once your account is closed, subject to any applicable legal retention obligations.

4
Right to Object to Marketing

You may withdraw your consent to receive marketing communications at any time without affecting your other ong77 services.

5
Right to Data Portability

You have the right to request a copy of your data in a machine-readable format for transfer to another service provider should you choose to do so.

6
Right to Complain

If you are dissatisfied with how ong77 handles your data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact ong77's Privacy Officer via email privacy@ong77.ws including your username and the details of your request. We will verify your identity before processing any data-related request.

9Protection of Children's Data

The ong77 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from minors. Should ong77 discover that a child's data has been collected without proper age verification, we will delete that data immediately and close the account in question.

If you become aware that a minor has registered an account on ong77, please notify us immediately at support@ong77.ws so that prompt action can be taken.

10Links to Third-Party Platforms

The ong77 platform may contain links to third-party websites or services in certain contexts. ong77's Privacy Policy does not apply to those third-party platforms or services. We encourage you to read the privacy policy of each third-party platform you visit, as we are not responsible for their privacy practices.

Third-party game providers integrated with ong77 (such as slots and Live Casino providers) operate under data processing agreements that bind them to ong77's security standards. However, their own privacy policies may differ, and you are advised to review them separately if needed.

11Amendments to This Privacy Policy

Ong77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, technology, or our business practices. Material amendments will be communicated to members via email or an in-platform notice at least 14 days before taking effect.

The "Updated" date at the top of this page always reflects the latest version of this policy. We encourage you to check this page periodically, especially after receiving a change notification from ong77. Your continued use of the ong77 platform after any amendments take effect constitutes your acceptance of the latest version of this policy.

12Contact ong77's Privacy Officer

If you have any questions, concerns, or requests regarding how ong77 handles your personal data, please do not hesitate to contact our Privacy Officer:

Privacy Officer Email
privacy@ong77.ws
General Customer Support
support@ong77.ws  |  Live Chat 24/7
Response Time
Within 3 business days for privacy enquiries

When reaching out to the Privacy Officer, please include your ong77 username and a clear description of your request or concern. This helps us process your request more quickly and accurately.

Your Data Is Safe with ong77

Bet with Peace of Mind — Your Privacy Is Our Priority

A secure platform starts with a clear privacy policy and consistent enforcement. At ong77, we don't just write good policies — we put them into practice every day, for every Malaysian member.

Bahasa Melayu