OLX168 Privacy Policy — Data Protection for Malaysian Players

OLX168 collects your personal data for platform operations, account security, and legal compliance. We only collect what is strictly necessary — nothing more. Below are the categories of data we collect and the purposes for doing so.

A) Information You Provide During Registration

• Full name as stated on your Malaysian MyKad or passport.
• An active Malaysian phone number — used for OTP verification and important communications.
• A valid email address — used for account notifications, promotions, and official communications.
• Date of birth — to verify that you are 18 years of age or older.
• Account passwords are encrypted using a secure hashing algorithm — OLX168 does not store your password in plain text.

B) Identity Information for KYC Verification

• MyKad number or Malaysian passport number — for identity verification and regulatory compliance.
• Identity document copies uploaded upon request for the KYC (Know Your Customer) process — stored securely and accessible only to authorised personnel.

C) Financial Information

• The account or e-wallet details you use for deposits and withdrawals — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks.
• Deposit and withdrawal transaction history within the OLX168 platform.
• OLX168 does not store credit or debit card numbers directly — all payment processing is handled through third-party payment gateways that comply with PCI-DSS standards.

D) Platform Usage Information

• Your device's IP address — used for account security and detection of unusual activity.
• Device type, operating system, and browser used.
• Betting history and gaming activity within the OLX168 platform.
• Logs of login, logout, and in-account actions with timestamps.
• Cookie and session data as described in the Cookies section below.

OLX168 uses the information collected exclusively for the purposes listed below. We will not use your data for any other purpose not stated here without obtaining your consent first.

For marketing communications such as promotional notifications and special offers, you may opt out at any time via the "unsubscribe" link in our emails or by contacting OLX168 customer support. Opting out of marketing communications will not affect essential operational communications such as deposit, withdrawal, or account security notifications.

OLX168 retains your personal data for as long as your account remains active, and for any additional period required by law or legitimate business needs following account closure.

• While your account is active: All data described in Section 1 is retained solely to ensure smooth account operations.
• After account closure: Financial records and transactions are retained for a minimum of 7 years as required by Malaysian law. Identity data is kept for 5 years. Usage data and activity logs are deleted within 12 months of account closure.
• Storage security: All data is stored on protected, encrypted servers. Regular backups are made to locations secured with the same level of protection.

When data is no longer needed and there is no legal obligation to retain it, OLX168 will securely delete or anonymise it so that it can no longer be linked back to you as an individual.

OLX168 does not sell or commercialise players' personal data. However, there are limited situations where we need to share certain information with selected third parties to enable the platform to operate smoothly and securely.

• Payment Providers: Payment gateways that process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX receive the transaction information required to complete your payment. All these providers comply with PCI-DSS security standards and maintain their own privacy policies.
• Technology Service Providers: Cloud service providers, customer support platforms, and analytics tools we use may process some of your usage data. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering services to OLX168.
• Statutory Authorities: OLX168 will disclose information to the relevant authorities when required by Malaysian law, court order, or a valid official investigation. In such circumstances, OLX168 will endeavour to notify you in advance where legally permitted to do so.
• Business Transfer: In the event of a merger, acquisition, or sale of OLX168 assets, player data may be transferred to the successor entity. Players will be notified in advance and given the option to opt out before any such transfer takes place.

In all data sharing scenarios described above, OLX168 ensures that only the minimum necessary data is shared — not your full account record. We also ensure that all data recipients are bound by confidentiality and security obligations equivalent to or stricter than OLX168's own standards.

OLX168 uses cookies and similar tracking technologies to enhance your experience on our platform and maintain the security of your session. Below are the types of cookies we use.

• Essential Cookies (Required): These cookies are required for the OLX168 platform to function properly. They include login session cookies, security tokens, and basic preference settings. Disabling these cookies will affect platform functionality.
• Performance Cookies: These cookies collect anonymous information about how players use OLX168 — the most frequently visited pages, time spent, and navigation paths. This information is used to improve the platform's design and performance.
• Functional Cookies: These cookies allow the OLX168 platform to remember your preferences — such as language, display settings, and your last selections — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: OLX168 uses analytics tools to understand platform usage patterns on an aggregate basis. This data informs decisions about new features and platform improvements.

You can manage your cookie settings through your browser preferences. However, disabling essential cookies may cause certain OLX168 platform features to function incorrectly. Disabling preference and analytics cookies will not materially affect your betting experience.

OLX168 continually invests in security infrastructure to ensure your personal data and financial information remain protected at all times. Below are the key security measures we have in place.

• Encryption in Transit: All communications between your device and OLX168 servers are encrypted using TLS 1.3 with a valid 256-bit SSL certificate. This ensures that no third party can read your data as it travels across the internet.
• Encryption at Rest: Sensitive data such as passwords, MyKad numbers, and financial details are encrypted in our database using industry-standard encryption algorithms — not stored in plain text.
• 24/7 Security Monitoring: OLX168 systems are automatically monitored to detect any unauthorised access attempts, suspicious login patterns, or unusual activity that may indicate an account compromise attempt.
• Two-Factor Authentication (2FA): OLX168 players can enable two-factor authentication through their account settings for an added layer of protection. When 2FA is enabled, logging in from a new device requires verification via an OTP sent to your registered mobile number.
• Regular Security Audits: OLX168 conducts regular internal security audits and engages external security assessors to test our systems, identifying and addressing any vulnerabilities before they can be exploited.

While OLX168 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. In the event of a material security breach affecting your personal data, OLX168 will notify you within a reasonable timeframe in accordance with Malaysia PDPA requirements and take immediate action to mitigate the risk.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and OLX168's internal policies, you have the following rights regarding your personal data held by us. To exercise any of the rights below, contact us at support@olx168.online.

To exercise any of the rights listed above, send an email to support@olx168.online stating your full name, OLX168 account number, and the specific right you wish to exercise. OLX168 will verify your identity before processing any privacy rights request to ensure the security of your account.

The OLX168 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we discover that data has been collected from someone under 18, the account in question will be terminated immediately and the data deleted as soon as possible in accordance with our security procedures.

If you believe that a child or minor under the age of 18 has registered an OLX168 account, please contact us immediately at support@olx168.online with the relevant details so we can take appropriate action without delay.

OLX168 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer. Whenever this Privacy Policy is updated, we will revise the "Updated" date at the top of this document.

For material amendments — meaning changes that significantly affect how we use or protect your data — OLX168 will notify you via email to your registered address or through a prominent in-platform notification at least 14 days before the amendment takes effect.

Continued use of the OLX168 platform after any amendment takes effect constitutes acceptance of the revised policy. We encourage you to review this page periodically to stay informed of how we protect your personal information.