Privacy Policy ONS88 – Protection of Malaysian Members' Personal Data

1Introduction & Scope of Privacy Policy

Welcome to the ONS88 Privacy Policy. This document clearly and transparently explains how the ons88 platform (ons88.my) collects, uses, stores, protects, and discloses your personal data as a member or visitor of our website.

ONS88 takes our responsibilities under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. Every aspect of personal data handling at ons88 is designed to fully safeguard your privacy while enabling us to deliver a secure, seamless, and enjoyable online betting experience to all our Malaysian members.

This Privacy Policy applies to all users of the ons88 platform, including registered members, website visitors, and anyone who interacts with ons88 services through any channel. By using the ons88 platform, you agree to the terms of this Privacy Policy in full.

2Types of Personal Data Collected

ONS88 only collects personal data that is genuinely necessary to provide our services safely and efficiently. The following categories of data are collected:

ONS88 does not collect sensitive data such as medical information, political affiliations, or religious beliefs unless specifically required by law.

3How We Collect Personal Data

Your personal data is collected by ons88 through the following methods:

• Account Registration: Information you provide when first registering an ons88 account, including your name, email, phone number and login credentials.
• Identity Verification (KYC): Documents you upload for identity verification purposes, such as a copy of your MyKad or passport, and proof of address.
• Financial Transactions: Information collected when you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, or Maybank2u/CIMB Clicks.
• Platform Usage: Data automatically generated when you use the ons88 platform, including games played, bets placed, and session duration.
• Support Communications: Information you share when contacting the ons88 support team via live chat, email or other channels.
• Cookies & Tracking Technologies: Technical data collected via cookies, pixels, and similar technologies while you browse the ons88 platform.
• Authorised Third Parties: In certain circumstances, data may be received from payment service providers or legitimate business partners for identity verification purposes.

4Purposes for Using Personal Data

ONS88 uses the personal data collected solely for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: Creating, maintaining, and managing your ons88 account, including identity verification and account recovery.
• Transaction Processing: Securely and efficiently processing deposits, withdrawals, and all financial transactions associated with your ons88 account.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, or any security threats to the ons88 platform and its members.
• Legal Compliance: Fulfilling ons88's legal obligations under PDPA 2010 and relevant Malaysian legislation, including anti-money laundering (AML) requirements.
• Service Communications: Sending you important notifications relating to your account, transactions, promotions, and policy updates.
• Experience Improvement: Analysing platform usage patterns to improve the interface, speed, and functionality of ons88 for a better member experience.
• Responsible Gambling: Monitoring betting patterns to identify members who may need assistance and support related to responsible gambling.
• Related Marketing: Sending you relevant ons88 promotional information, bonuses, and special offers (subject to your communication preferences).

5Sharing & Disclosure of Data to Third Parties

ONS88 does not sell, rent or trade your personal data to any third party for their own commercial purposes. Your data is shared only under the following limited circumstances:

• Payment Service Providers: Transaction details that must be shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow or local Malaysian banks to process your deposits and withdrawals.
• Game Software Providers: The minimum data required by ons88's third-party game providers to deliver a functioning gaming experience — this does not include your personal financial information.
• Legal Authorities: ons88 will disclose personal data if required by court order, regulatory directive or applicable Malaysian law, including anti-money laundering agencies.
• Technical Service Providers: Companies providing infrastructure, server hosting, analytics and cybersecurity services to ons88 — all bound by strict confidentiality agreements.
• Identity Verification: Third-party services used to verify member identities during the KYC process in compliance with legal requirements.

All third parties working with ons88 are bound by data protection agreements and are prohibited from using ons88 members' personal data for any purpose beyond what is specified in those agreements.

6Data Security Measures

Protecting the personal data of ons88 members is our top priority. ONS88 implements multiple layers of technical and organisational security to keep your data safe at all times:

• 256-bit SSL Encryption: All data transmitted between your device and ons88's servers is encrypted using industry-standard TLS/SSL protocols, making it unreadable to any unauthorised parties.
• Data-at-Rest Encryption: Sensitive data stored in the ons88 database, including financial information and identity documents, is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): ons88 members are encouraged to enable 2FA for an additional layer of protection on their accounts.
• Strict Access Controls: Only ons88 employees who genuinely require access to specific data to carry out their duties are permitted to do so, with continuous monitoring in place.
• Regular Security Audits: ons88 conducts regular penetration testing and security audits carried out by independent cybersecurity experts.
• 24/7 Monitoring: ons88's automated monitoring system runs continuously to detect and respond to any security threats or unauthorised access attempts.

7Cookies & Tracking Technologies

The ons88 platform uses cookies and similar tracking technologies to enhance the user experience, analyse traffic and maintain platform security. The following types of cookies are used:

• Essential Cookies: Cookies that are strictly necessary for core ons88 platform functions, such as login session authentication and security. These cookies cannot be disabled.
• User Preference Cookies: Saving your personal settings such as language, theme, and display preferences to ensure a more comfortable experience each time you use ons88.
• Analytics Cookies: Helping ons88 understand how members use the platform — including most-visited pages, session duration, and navigation patterns — for continuous improvement.
• Security Cookies: Detecting suspicious activity, repeated failed login attempts, and potential security threats to your account.

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the ons88 platform and could prevent you from logging in or completing transactions.

8Data Retention Period

ONS88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account Data: Your personal data will be retained for as long as your ons88 account remains active and in use, to support your continued access to the platform.
• After Account Closure: Personal data is retained for a minimum of 5 years following account closure to comply with legal requirements and reporting obligations under PDPA and AML regulations.
• Financial Transaction Records: All deposit, withdrawal, and related transaction records are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Communication Logs: Customer support communication records are retained for 2 years for service quality and dispute resolution purposes.
• Analytics Data: Aggregated, non-personally identifiable data may be retained for longer periods for business analytics purposes.

When personal data is no longer needed, ons88 will ensure it is securely deleted or anonymised using industry-standard methods.

9Your Rights Regarding Personal Data

As an ons88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data ons88 holds about you at any time.
• Right to Rectification: If your personal data is inaccurate or outdated, you may request ons88 to correct it promptly.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time by contacting ons88.
• Right to Withdraw Consent: You may withdraw previously given consent for data processing, provided that doing so does not affect ons88's legal obligations.
• Right to Complain: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data has not been handled properly.

To exercise any of the above rights, please contact the ons88 privacy team by email at privacy@ons88.my. Requests will be processed within 21 working days and we may need to verify your identity before processing the request.

10Children's Data Protection

The ons88 platform is intended exclusively for users aged 18 years and above only. ONS88 does not knowingly collect or process personal data from individuals under the age of 18.

Should ons88 discover that personal data of an underage individual has been collected without our knowledge, immediate steps will be taken to delete that data and close the associated account. Parents or guardians who become aware that their child has registered on ons88 should contact us immediately at support@ons88.my.

11Privacy Policy Amendments

ONS88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or business operations. Any material changes will be communicated to members via:

• A prominent notice displayed on the ons88.my homepage at least 14 days before any changes take effect.
• A notification email sent to your registered email address.
• A pop-up notice upon logging in to the ons88 platform for significant changes.

Continued use of the ons88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The "Last updated" date at the top of this document will always reflect the latest version in force.

12Contact Us – Privacy Enquiries

If you have any questions, concerns, or requests regarding ons88's Privacy Policy or the handling of your personal data, the ons88 privacy team is here to help:

• Privacy Email: privacy@ons88.my
• General Support Email: support@ons88.my
• Live Chat: Available 24/7 on the ons88.my platform
• Response Time: Allow 3–5 business days for general enquiries; 21 business days for formal rights requests under the PDPA.

ONS88 is committed to addressing every privacy enquiry with care, transparency, and in a timely manner. Your satisfaction and trust are the foundation of ons88's relationship with all our Malaysian members.