Privacy Policy

1. Introduction and Data Controller

This Privacy Policy ("Policy") describes the practices of ocs88 ("ocs88", "we", "us", "our") as the data controller in respect of personal data collected from users ("you", "your") of the ocs88 platform accessible at ocs88.app and any associated interfaces.

ocs88 is operated under an international gaming authority licence and is committed to complying with applicable data protection legislation. This Policy should be read alongside the ocs88 Terms and Conditions, which govern the contractual relationship between you and ocs88.

By registering an account with ocs88 or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not register for or use the ocs88 platform.

2. Personal Data We Collect

ocs88 collects personal data through various means in the course of providing its services. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification.
• Date of birth (for age verification — ocs88 requires all users to be 21 years of age or older).
• Email address and mobile telephone number.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya) and postcode.
• Username and encrypted account password.

2.2 Identity Verification Data

• Copies of government-issued identification documents (e.g., Malaysian MyKad, passport).
• Proof of address documents where required.
• Source of funds documentation where required under anti-money laundering procedures.

2.3 Financial Data

• Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, FPX bank details including Maybank, CIMB, or Public Bank account identifiers).
• Transaction history including deposits, withdrawals, and gaming activity records.

2.4 Technical and Usage Data

• IP address, device type, browser type and version, and operating system.
• Session duration, pages visited, game activity, and betting history.
• Login timestamps and geographic location data derived from IP address.

2.5 Communications Data

• Records of communications with ocs88 support, including live chat transcripts and email correspondence.
• Survey responses and feedback submitted voluntarily.

3. How We Use Your Personal Data

ocs88 uses your personal data for the following purposes:

• Account management: To register and administer your ocs88 account, verify your identity and age, process deposits and withdrawals, and communicate account-related information.
• Service delivery: To provide access to gaming products, process bets and wagers, calculate and pay winnings, and administer promotional offers and bonuses.
• Regulatory compliance: To fulfil obligations under our international gaming authority licence, including age verification, identity verification, anti-money laundering checks, and responsible gaming monitoring.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of the platform.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to enforce self-exclusion and deposit limit requests.
• Marketing communications: Where you have consented or where permitted by applicable law, to send promotional offers, bonus notifications, and platform updates. You may opt out at any time.
• Platform improvement: To analyse usage patterns, improve platform performance, and develop new features and products.
• Legal proceedings: To establish, exercise, or defend legal claims and comply with court orders, regulatory requests, or other legal obligations.

4. Legal Basis for Processing

ocs88 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have contracted for, including account registration, gaming access, and payment processing.
• Legal obligation: Processing required to comply with gaming licence conditions, anti-money laundering legislation, age verification requirements, and other applicable laws and regulations.
• Legitimate interests: Processing for fraud prevention, platform security, service improvement, and responsible gaming monitoring, where our interests do not override your data protection rights.
• Consent: Where you have provided explicit consent, including for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Cookies and Tracking Technologies

ocs88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and deliver relevant content. The types of cookies we use include:

• Essential cookies: Required for the platform to function, including session management and login authentication. These cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect aggregate data on how users interact with the platform, enabling ocs88 to improve performance and user experience.
• Functional cookies: Used to remember your preferences, such as language settings and display preferences.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the ocs88 platform. Please note that clearing cookies may require you to re-authenticate your session.

6. Data Sharing and Disclosure

ocs88 does not sell your personal data. We may share personal data in the following circumstances:

• Service providers: With trusted third-party processors including payment processors (e.g., Touch n Go eWallet, Boost, FPX), identity verification providers, customer support platforms, and IT infrastructure providers, under strict data processing agreements that prohibit use of your data for any purpose other than providing services to ocs88.
• Regulatory authorities: With our gaming licence regulator and other competent authorities where required by our licence conditions or applicable law, including for anti-money laundering reporting purposes.
• Law enforcement: Where required by a valid court order, legal process, or law enforcement request, or where disclosure is necessary to prevent fraud or protect the rights and safety of ocs88, its users, or third parties.
• Business transfers: In connection with a merger, acquisition, or sale of assets involving ocs88, subject to the acquiring entity honouring the commitments made in this Policy.

7. International Data Transfers

As an internationally licensed platform, ocs88 may process and store your personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, ocs88 ensures that appropriate safeguards are in place, including contractual protections equivalent to applicable data protection standards.

By using the ocs88 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy.

8. Data Retention

ocs88 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including for the duration of your account relationship with ocs88 and for a period thereafter as required by applicable gaming regulations, anti-money laundering legislation, and other legal obligations.

As a general guideline, ocs88 retains account and transaction records for a minimum of five (5) years following account closure, in compliance with gaming licence and anti-money laundering requirements. Marketing data is retained only for the duration of your consent or until you opt out.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Security Measures

ocs88 implements technical and organisational security measures appropriate to the risk associated with the personal data we process. These measures include:

• TLS encryption for all data in transit between your device and the ocs88 platform.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Access controls limiting employee access to personal data to those with a legitimate need.
• Regular security assessments and penetration testing of the platform infrastructure.
• Two-factor authentication available to all users as an additional account security measure.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. ocs88 cannot guarantee absolute security and encourages users to take personal responsibility for their account security, including using strong passwords and enabling two-factor authentication.

10. Your Rights

Subject to applicable data protection law and the requirements of our gaming licence, you have the following rights in respect of your personal data held by ocs88:

• Right of access: To request a copy of the personal data ocs88 holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to regulatory retention obligations that may prevent full erasure.
• Right to restriction: To request that ocs88 restrict the processing of your personal data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to withdraw consent: To withdraw consent to marketing communications or non-essential cookies at any time without affecting prior processing.
• Right to object: To object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact the ocs88 data privacy team via live chat or at [email protected]. ocs88 will respond to data rights requests within thirty (30) days. In certain cases, this period may be extended by a further two months where the request is complex or numerous, in which case you will be notified of the extension.

11. Children and Minors

The ocs88 platform is strictly for individuals aged 21 and above. ocs88 does not knowingly collect personal data from persons under the age of 21. If ocs88 becomes aware that personal data has been collected from a person below the age of 21, the relevant account will be suspended immediately and the data deleted or handled in accordance with regulatory requirements.

If you believe that a minor has registered an account on ocs88 or has accessed the platform using your account credentials, please notify ocs88 support immediately. Parents and guardians are encouraged to use parental control software as a supplementary measure.

12. Changes to This Policy

ocs88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or gaming licence requirements. Material changes will be communicated to registered users via their registered email address or through a prominent notice on the platform prior to taking effect.

The date of the most recent update is displayed at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of the ocs88 platform following any update constitutes acceptance of the revised Policy.

13. Contact and Data Requests

For all privacy-related enquiries, data rights requests, or to report a suspected data protection concern, please contact the ocs88 privacy team through the following channels:

• Live Chat: Available 24/7 through the ocs88 platform, with an average response time of 3–5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered username and email address to facilitate verification.

ocs88 may be required to verify your identity before processing any data rights request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party.