Privacy Policy — OLX188

OLX188 ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at https://olx188.asia. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors, and prospective members.

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the legal bases for processing, the circumstances under which data may be shared with third parties, and the rights available to you as a data subject. This Policy applies to all personal data collected through the OLX188 website, mobile platform, customer support channels, and any other means through which you interact with OLX188.

By registering an account or using the OLX188 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how OLX188 processes personal data as described herein, please discontinue use of the platform and contact our support team to request account closure.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Data Subject" means the natural person to whom the Personal Data relates — in most cases, you as a registered player or visitor.
• "Data Controller" means OLX188, which determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of OLX188 and under OLX188's written instructions.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, erasure, or destruction.
• "KYC" means Know Your Customer — the identity and verification process mandated under applicable anti-money laundering and gaming compliance regulations.
• "Cookies" means small data files placed on your device by the OLX188 platform or its authorised third-party service providers to enable platform functionality, analytics, and personalisation.

OLX188 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration and Account Data

• Full legal name as stated on your identity document;
• Date of birth (for age verification — players must be 21 or above);
• Malaysian mobile phone number;
• Email address;
• Username and encrypted password;
• Preferred language (English, Bahasa Melayu, or Mandarin).

3.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad, Driver's Licence, or Passport;
• Proof of address documentation (e.g., utility bill from Tenaga Nasional or a bank statement from Maybank, CIMB, or Public Bank);
• Selfie or live photograph where enhanced verification is required.

3.3 Financial and Transaction Data

• Payment method details (bank account reference, e-wallet account identifiers for Touch 'n Go, Boost, GrabPay, DuitNow, or FPX — full card numbers are never stored);
• Deposit history, withdrawal history, and transaction reference numbers;
• Bonus crediting and wagering activity records;
• Currency: all transactions are recorded in Malaysian Ringgit (MYR).

3.4 Gaming and Betting Activity Data

• Game session history, bet placement records, game outcomes;
• Sports betting history across markets including EPL, Liga Super Malaysia, UEFA Champions League, UFC, and e-sports;
• Responsible gambling settings including deposit limits, session limits, and self-exclusion status.

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session timestamps, page visit duration, and navigation paths;
• Cookie identifiers and analytics identifiers (see Section 8).

3.6 Customer Support Data

• Live chat transcripts and email correspondence with OLX188 support;
• Nature of enquiries, complaints, and dispute records;
• Support agent notes and resolution outcomes.

OLX188 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, configure account settings, or contact customer support;
• Automatically through the platform — through cookies, session tracking, server logs, and analytics tools as you browse and interact with the OLX188 website or mobile platform;
• From third-party payment providers — when you initiate a transaction via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or any other approved payment channel, transaction confirmation data is shared with OLX188 by the payment provider;
• From identity verification services — OLX188 may use authorised third-party KYC service providers to validate identity documents and perform automated document checks;
• From fraud prevention and compliance services — OLX188 may receive data from screening services used to verify that players are not subject to sanctions, self-exclusion orders, or other restrictions.

OLX188 processes personal data for the following clearly defined purposes:

OLX188 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms and Conditions, including account management, payment processing, and the delivery of gaming services;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML obligations, record-keeping requirements, and responding to lawful authority requests;
• Legitimate Interests: Processing conducted to protect the security of the platform, prevent fraud, and improve our services — where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, freely given, and informed consent. You may withdraw consent at any time without prejudice to the lawfulness of prior processing.

OLX188 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:

7.1 Payment Service Providers

Transaction data is shared with our approved payment processing partners — including DuitNow operators, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank — for the sole purpose of processing your deposits and withdrawals in MYR.

7.2 Identity Verification Providers

KYC documentation may be transmitted to authorised identity verification service providers for document validation. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of OLX188.

7.3 Gaming Software Providers

To deliver live casino, slot, and e-sports content from providers such as Evolution Gaming and Pragmatic Play, certain gaming session identifiers are shared with these providers. These providers do not receive your full personal profile.

7.4 Fraud Prevention and Compliance Services

OLX188 may share data with sanctions screening services, fraud detection providers, and self-exclusion registries to comply with legal obligations and prevent prohibited conduct.

7.5 Legal Authorities

OLX188 may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required by law, court order, or other legally binding process. OLX188 will, where legally permitted, notify affected players of such disclosures.

OLX188 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform function correctly and allow us to analyse usage patterns to improve your experience.

8.1 Categories of Cookies

• Strictly Necessary Cookies: Essential for platform functionality, including session management, authentication, and security. These cannot be disabled without impairing the platform's operation.
• Functional Cookies: Remember your preferences such as language selection (English, Bahasa Melayu, or Mandarin) and display settings to personalise your experience.
• Analytics Cookies: Collect aggregated data about how visitors use the OLX188 platform, including pages visited, session duration, and navigation paths. Used to improve platform performance.
• Marketing Cookies: Used to deliver relevant promotional content. These are placed only with your consent and can be withdrawn at any time.

8.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the OLX188 platform. For analytics and marketing cookies, you may withdraw your consent at any time through your account settings.

OLX188 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with OLX188, plus a minimum of 5 years following account closure to satisfy legal and regulatory record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification, or as required by applicable AML and gaming regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping requirements.
• Customer Support Records: Retained for 3 years from the date of the most recent interaction, or longer where records are relevant to an ongoing dispute.
• Marketing Consent Records: Retained until you withdraw consent, plus 2 years to evidence compliance.
• Anonymous Analytics Data: May be retained indefinitely in anonymised, aggregated form that cannot be linked to an individual.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

OLX188 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and OLX188's servers;
• Encryption at rest for stored personal data and financial records;
• Role-based access controls ensuring that personal data is accessible only to staff members with a legitimate need for access;
• Multi-factor authentication (MFA) for internal system access by OLX188 staff;
• Regular penetration testing and security audits conducted by independent security professionals;
• Incident response procedures providing for prompt notification of affected players in the event of a data breach that is likely to result in risk to their rights and freedoms.

Subject to applicable law, you have the following rights in relation to your personal data held by OLX188. To exercise any of these rights, please contact our support team via Live Chat or email. We will respond within 14 business days of receiving a valid request.

OLX188 strictly prohibits access to and use of its platform by individuals under the age of 21. We do not knowingly collect, process, or retain personal data from any person below the minimum age requirement.

During the registration process, all applicants are required to confirm that they are at least 21 years of age. Age verification is enforced through KYC documentation checks. Where OLX188 becomes aware or has reason to believe that a person under the age of 21 has registered an account or provided personal data, we will immediately suspend the account, notify the relevant guardian where practicable, delete the personal data collected, and return any deposited funds.

OLX188 operates internationally and may transfer personal data to servers or Data Processors located outside of Malaysia in connection with platform operations, KYC verification, fraud prevention, or technical infrastructure. Any such cross-border transfers are conducted subject to:

• Written data processing agreements with the recipient entity imposing data protection obligations equivalent to those described in this Policy;
• Appropriate technical safeguards including encryption in transit and at rest;
• Transfer only to jurisdictions or recipients that provide an adequate level of data protection as determined by applicable law or contractual safeguards.

By using the OLX188 platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. OLX188 takes all reasonable steps to ensure that such processing is conducted securely and in accordance with this Privacy Policy.

OLX188 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform services. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent change.

Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — OLX188 will use reasonable efforts to notify registered players by email or via a platform notification prior to the changes taking effect. For non-material changes, your continued use of the platform following publication of the updated Policy constitutes acceptance.

We encourage all registered players to review this Privacy Policy periodically to remain informed about how OLX188 handles personal data. If you object to any change in how your data is processed, please contact our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or OLX188's handling of your personal data, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24/7 on olx188.asia. Select "Privacy / Data Request" as your enquiry type. Average response time: 3–5 minutes.
• Email: [email protected] — please include "Privacy Policy Request" in the subject line along with your registered account username.

Support is available in English, Bahasa Melayu, and Mandarin. All data subject requests will be acknowledged within 5 business days and fully responded to within 14 business days of receipt of a valid, verifiable request. We may require identity verification before processing certain requests to protect your personal data from unauthorised access.