Privacy Policy oc777 – Data Protection & Privacy for Malaysian Players

This Privacy Policy explains in detail how oc777 ("we", "platform", "oc777") collects, uses, stores, protects, and in certain circumstances shares the personal information you provide when registering for and using our services.

When you register an oc777 account, make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX, or any other Malaysian payment method, place a Sports Betting wager, play slots or Live Casino games, or simply browse our platform – you may be sharing personal information with oc777. We take that responsibility very seriously.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international industry best practices for user data protection. By using the oc777 platform, you agree in full to the terms of this Privacy Policy.

Oc777 collects two main categories of information – what you provide directly to us, and what is collected automatically when you use the platform.

We are guided by the principle of minimal data collection – meaning oc777 only collects information that is strictly necessary to deliver the services you request and to ensure compliance with applicable laws.

Every piece of information we collect has a specific and legitimate purpose. Here are the primary ways oc777 uses your personal data:

• Account Management: Creating, verifying, and maintaining your oc777 account – including secure login and profile management.
• Financial Transaction Processing: Verifying and processing all deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), as well as withdrawal of winnings to your account.
• Service Delivery: Giving you access to all games – from slots, live baccarat, blackjack and other table games, to Sports Betting on the Malaysia Super League, EPL, BWF badminton, MPL Malaysia esports, and cricket.
• Fraud Prevention & Security: Detecting suspicious activity, preventing fraud and money laundering, and keeping the platform safe for all users.
• Legal Compliance: To fulfil legal obligations under the PDPA 2010, including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Service Communications: Sending important account-related notifications – including transaction confirmations, security updates, and changes to our terms of service.
• Platform Improvements: Analysing aggregated (not individual) usage patterns to improve the user experience, resolve technical issues, and develop new features relevant to Malaysian players.
• Responsible Gaming Programme: Monitoring betting patterns to identify players who may need assistance or support through oc777's responsible gaming programme.

Oc777 does not sell, rent, or trade your personal information to any third party for their marketing purposes. This is our absolute commitment.

However, there are limited circumstances where oc777 may need to share your data with trusted third parties, strictly for service operational purposes:

• Payment Service Providers: Providers such as Touch 'n Go, GrabPay, DuitNow, and banks via FPX require minimum transaction details to process your deposits and withdrawals. They are governed by their own privacy policies and security standards.
• Game Providers: oc777's live casino game studios and slots providers receive only the minimum session data required to operate the games — no personal identity information is shared beyond what is technically necessary.
• Identity Verification Service (KYC): Accredited third parties may assist us in verifying your identity during the KYC process, in accordance with Malaysia's anti-money laundering legal requirements.
• Authorities & Regulatory Bodies: oc777 will disclose information where required by court order, directive from Malaysian authorities, or other applicable legal obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of oc777's assets, user data may form part of the transferred assets – with appropriate notice given to users.

All third parties working with oc777 are required to sign data protection agreements ensuring they handle your information to a standard equal to or higher than our own.

Oc777 invests seriously in security infrastructure to ensure your data remains protected at all times. The technical and organisational measures we employ include:

• 256-bit SSL Encryption: All communications between your device and oc777's servers are encrypted using TLS 1.3 with 256-bit keys – the same technology used by Malaysia's leading banks, including Maybank and CIMB.
• Hashed Password Storage: Your account password is never stored in plain text. oc777 uses the robust bcrypt hashing algorithm to ensure your password remains unreadable — even to our own internal team.
• Financial Data Segregation: Sensitive financial information is stored in an environment segregated from general profile data, with strict access controls and comprehensive audit logs.
• Two-Factor Authentication (2FA): oc777 offers two-factor authentication as an additional layer of security for your account – we strongly encourage all members to enable this feature.
• 24/7 Security Monitoring: Our automated monitoring system detects suspicious access attempts, brute-force attacks, and unusual activity in real time.
• Periodic Security Audits: oc777 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.

Oc777 uses cookies and similar tracking technologies to enhance your experience on our platform. Here is a clear explanation of what we use and why:

• Essential Cookies (Required): These cookies are essential for the platform's core functions – including keeping you logged in, remembering your language preferences, and securing your transactions. Without them, the oc777 platform will not work properly.
• Performance & Analytics Cookies: We use aggregated analytics data (not individually identifiable) to understand how players use the platform — the most visited pages, time spent, and navigation paths. This helps us improve the platform for all Malaysian players.
• Functional Cookies: These cookies remember your personal preferences, such as your preferred odds format (decimal or fractional), game settings, and interface language, for a more personalised experience.
• Secure Session Cookies: Encrypted session tokens are used to verify your identity throughout your gaming session, without requiring you to repeatedly log in.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the oc777 platform. For more information on managing cookies on your device, please refer to your browser's help guide.

Under Malaysia's Personal Data Protection Act 2010 and oc777's commitment to user privacy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the oc777 privacy team by email at privacy@oc777.biz or via our customer support live chat. We will process your request within 14 business days.

Oc777 does not retain your personal data longer than necessary. Below are general guidelines on retention periods by data category:

• Active Account Data: Retained for the duration your account remains active with oc777, plus any mandatory retention period following account closure.
• Financial Transaction Records: Stored for a minimum of 7 years from the transaction date, in compliance with Malaysian tax and financial regulatory requirements.
• KYC Records (Identity Verification): Stored for a minimum of 5 years from the date of verification or account closure, in line with Malaysia's Anti-Money Laundering requirements.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Technical & System Logs: Retained for 90 days for technical troubleshooting and security monitoring purposes.
• Marketing Data (with consent): Stored until you withdraw consent or request deletion.

Once the applicable retention period has elapsed, your data will be securely deleted or anonymised in accordance with oc777's established security procedures.

The oc777 platform is intended exclusively for adults aged 18 and above. We take the protection of minors extremely seriously.

• Oc777 does not knowingly collect, process, or store personal information from individuals under the age of 18.
• If we determine that a user has registered with information indicating they are under 18 years of age, that account will be immediately suspended and all associated data will be deleted.
• Parents or guardians who discover that their child has registered on oc777 are asked to contact us immediately at support@oc777.biz for immediate action.

Oc777 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or newly introduced services.

• You will be notified of any material changes to this Privacy Policy via email or in-account notification at least 14 days before the amendments take effect.
• The "Last Updated" date at the top of this page will always reflect the date of the most recent version of this Privacy Policy.
• Continued use of the oc777 platform after the effective date of any amendment will be deemed as acceptance your acceptance of the updated policy.
• Version history of the oc777 Privacy Policy is available upon request — contact our privacy team if you wish to review a previous version.

If you have any questions or concerns, or wish to exercise your privacy rights, the oc777 team is ready to assist through the following channels:

• Dedicated Privacy Email: privacy@oc777.biz – for all enquiries related to personal data, access requests, rectification, or data deletion.
• 24/7 Live Support: Live chat within the oc777 platform – for urgent account security or privacy queries in real time.
• General Support Email: support@oc777.biz – for general enquiries regarding your account and services.

We are committed to responding to all privacy-related enquiries within 14 business days. For cases requiring further investigation, we will keep you informed of progress within that period.