Privacy Policy og321 — Our Commitment to Protecting Your Data

1Introduction & Scope of This Policy

Og321 is an online casino and betting platform operating under a recognised international licence, offering a wide range of games including live casino, slots, Malaysia Super League and EPL football betting, badminton, e-sports, 4D lottery, Toto, and more to Malaysian players.

We understand that entrusting any online platform with your personal information is a significant decision. That is why we have prepared this privacy policy with full transparency — so you know exactly what we do with your data, why we need it, and how it is protected.

This policy applies to all information you provide to og321 directly, as well as data we collect automatically when you use our platform — including through our website, mobile app, and official communication channels.

2Personal Data We Collect

Og321 only collects data that is strictly necessary to provide a safe, efficient, and responsible service to its members. We do not collect data excessively or without a clearly defined purpose.

Data you provide directly:

• Full name as shown on your identity card or passport
• Active email address and Malaysian mobile number
• Date of birth for age verification (18 years and above)
• Payment account details — Touch 'n Go, GrabPay, DuitNow, Boost, or ShopeePay account name, or your FPX bank account number (Maybank2u, CIMB Clicks)
• Identity verification (KYC) documents such as a photo of your IC or passport when required
• Communications you send to the og321 support team

Data we collect automatically:

• IP address and device information used to access og321
• Your web browser type and version
• Records of gaming activity, bets placed, winnings, and losses
• Complete records of all deposits and withdrawals with timestamps
• Login and logout session logs
• Cookie data and tracking technologies you have consented to

All data we collect is for purposes clearly stated in section 3 below. We do not collect biometric data, real-time location data, or any other category of sensitive data without your explicit consent.

3How og321 Uses Your Data

Your personal data is used by og321 solely for legitimate, necessary purposes directly related to the provision of our platform services. We will not use your data for any purpose not stated here without first obtaining fresh consent from you.

• Account Management: Creating, verifying, and securely maintaining your og321 account
• Payment processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, and FPX, and withdrawals within three minutes
• Identity verification (KYC): Verifying your age and identity to comply with regulatory requirements
• Fraud prevention: Detecting and preventing fraud, money laundering, and platform abuse
• Customer support: Helping you resolve any issues related to your account, payments, or gameplay
• Service communications: Sending important notifications about your account, security, and policy changes
• Marketing communications: Sending information about bonuses, promotions, and new offers — only with your consent
• Platform improvements: Analysing usage patterns to improve the experience for all og321 members
• Legal compliance: Meeting applicable legal and regulatory requirements

4Sharing Your Data with Third Parties

Og321 does not sell, rent, or share your personal information with third parties for marketing or commercial purposes. This is a commitment we take seriously. That said, there are limited situations where data sharing is necessary and permitted:

• Payment providers: Information required to process your deposits and withdrawals is shared with the relevant payment providers — Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX — all of which are certified and compliant with international security standards
• Technology providers: Cloud service and technical infrastructure providers that help us operate the og321 platform securely — bound by strict confidentiality agreements
• Authorities and law enforcement: When required by court order, criminal investigation, or legitimate AML compliance obligations — we are legally bound to comply and have no discretion to refuse
• Regulatory body: Information required for compliance with og321's licensing authority when formally requested
• Business transfers: In the event of a merger or acquisition, your data may be transferred, but the new party is required to adhere to the same or stricter privacy policy

In all instances of data sharing described above, og321 ensures that only the minimum necessary data is shared and that all recipients are bound by strict data protection agreements.

5Data Security Measures

Og321 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, modification, disclosure, or destruction. This goes well beyond the basics — we invest in security infrastructure that meets banking-industry standards.

• 256-bit SSL Encryption: All data transmitted between your web browser and og321's servers is protected with the latest TLS/SSL protocols
• Data-at-rest encryption: Sensitive data such as financial details and KYC documents are stored in encrypted form within our databases
• Two-factor authentication (2FA): og321 supports and encourages the use of two-factor authentication to keep your account secure
• 24/7 monitoring: Our security systems monitor for suspicious activity around the clock — 24 hours a day, seven days a week
• Internal access controls: A "minimum necessary access" principle is enforced — only staff with a legitimate operational need may access specific data
• Regular security testing: og321's systems undergo regular penetration testing and security audits conducted by independent third parties
• Staff training: All og321 staff undergo regular data privacy and security training

6Cookies, Tracking & Similar Technologies

Og321 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser that help us recognise you and remember your preferences.

Types of cookies we use:

• Essential cookies: Required for core platform functionality — login, game sessions, and security. Cannot be disabled without affecting platform performance
• Performance cookies: Collects information about how you use the platform to help us make improvements — data is gathered anonymously
• Preference cookies: Saves your preferences such as language selection and display settings
• Marketing cookies: Used to display relevant og321 ads — only with your consent

You can manage and control cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of the og321 platform. Please refer to your browser's cookie settings guide for more information.

7Dedicated Financial Data Protection

Og321 takes special care to protect financial data given its high sensitivity. All information related to your deposits and withdrawals — whether via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX through Maybank2u and CIMB Clicks — is handled with an elevated level of protection.

• Og321 does not store your full bank account number or credit/debit card details in our systems — only a token (a secure reference) is retained to facilitate repeat transactions
• All payment processing is carried out through PCI-DSS (Payment Card Industry Data Security Standard) certified payment gateways
• Financial data is stored in a server environment separate from gaming data — with stricter access controls in place
• Every financial transaction is recorded in an immutable audit log for your protection and ours
• Additional verification may be required for withdrawals exceeding a certain amount as an extra security measure

Og321 complies with international Anti-Money Laundering (AML) and Know Your Customer (KYC) standards. This means we may be required to share certain transaction information with the relevant authorities where there are indicators of suspicious financial activity.

8Child Protection

The og321 platform is strictly for adults aged 18 and above. We do not knowingly collect, store, or process the personal data of individuals under the age of 18.

Og321 applies an age-verification process during registration and throughout the KYC process to ensure that only adults can use our platform. Should we discover that a minor's data has been collected inadvertently, we will delete it immediately and close the associated account.

9Data Retention Period

Og321 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Once the retention period expires, data will be securely deleted or anonymised.

• Active account data: Retained for the duration of your active og321 account, plus any additional period required by law
• Financial transaction records: Retained for a minimum of 7 years to comply with AML and accounting requirements
• Support communication records: Retained for 3 years for reference and dispute resolution purposes
• Security logs: Retained for 12 months for investigation purposes in the event of a security incident
• Marketing data: Retained until you request deletion or unsubscribe from marketing communications
• KYC documents: Retained for the duration of the active account plus 5 years after account closure

Once the retention period expires, your data will be securely deleted using industry-recognised data disposal methods — ensuring it cannot be recovered by any party.

10Your Rights as an og321 Member

As an og321 member, you have several rights regarding your personal data, all of which we fully respect. These rights can be exercised at any time by contacting the og321 support team.

• Right of access: You have the right to request a copy of all personal data we hold about you
• Right to rectification: You have the right to request correction of any inaccurate or incomplete data
• Right to erasure: Under certain circumstances, you have the right to request deletion of your personal data — subject to any applicable legal retention requirements
• Right to restriction of processing: You have the right to request that we restrict how we process your data in certain circumstances
• Right to object: You have the right to object to the use of your data for direct marketing purposes at any time
• Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another service
• Right to withdraw consent: You may withdraw any previously given consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal

To exercise any of the rights above, please submit your request to support@og321.click, specifying the right you wish to invoke and providing sufficient information for us to verify your identity. og321 will process your request within 24 hours and provide a full response within 30 business days.

11Cross-Border Data Transfers

As og321 operates under an international licence and uses global cloud infrastructure, your personal data may be stored or processed on servers located outside Malaysia. In such cases, og321 ensures a level of protection equal to or greater than that available in Malaysia.

Every cross-border data transfer takes place only when:

• The destination country or region provides an adequate level of data protection
• An appropriate transfer mechanism is in place, such as a standard data protection agreement or recognised contractual clauses
• Data recipients are required to comply with og321's privacy policy and all applicable legal obligations

You may contact the og321 support team for more information about the data transfer mechanisms used for your specific personal data.

12Amendments to the Privacy Policy

Og321 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via your registered email or a prominent in-platform notification at least 30 days before taking effect.

The latest version of this Privacy Policy will always be available on this page, with a clear last-updated date at the top of the document. We encourage you to check this page periodically to stay informed about our current privacy practices.

13Contact Us About Privacy

If you have any questions, concerns, or requests regarding og321's Privacy Policy or the use of your personal data, our Bahasa Malaysia-fluent support team is available to assist you 24 hours a day, seven days a week.

You can reach us through:

• Email: support@og321.click — include the subject line "Data Privacy Inquiry" for a faster response
• LiveChat: Available directly within the og321 platform — responses are typically received within two minutes

For data rights requests (access, correction, deletion), please include your full name, registered email address, and a clear description of your request. og321 is committed to handling all privacy requests carefully, sensitively, and within a reasonable timeframe.