Ongcuci Privacy Policy – Protecting the Personal Data of Malaysian Users

This document is the official Privacy Policy of ongcuci operating through the website ongcuci.best. It explains how we collect, process, store, and protect the personal data of members who use the ongcuci online Sports Betting and casino platform. This policy applies to all ongcuci platform users – including website visitors, registration applicants, and registered members.

By using the platform ongcuci or registering an account, you give your consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the ongcuci platform and contact us to request account closure and deletion of your data.

Ongcuci collects various types of personal information from members depending on how the platform is used. The following are the categories of information we may collect:

Identity & Contact Information

• Full name as it appears on your official identification document.
• Date of birth (for age verification, minimum 18 years old).
• An active email address.
• Malaysian mobile phone number.
• Residential address (when required for identity verification).
• National identification card number or passport number (when identity verification is required).

Financial & Transaction Information

• E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) – linked account numbers only, not passwords or PINs.
• DuitNow account details or bank account number for withdrawal purposes via FPX.
• Records of all deposit and withdrawal transactions in Malaysian Ringgit (RM).
• Records of all Sports Betting and casino gaming activity.

Technical & Usage Information

• The IP address of the device used to access the ongcuci platform.
• Web browser type and version.
• Device type and model (smartphone, tablet, or computer).
• Device operating system.
• Login and logout timestamps.
• Platform usage data – pages visited, time spent, and actions taken.

Ongcuci collects personal information through several key channels:

• Account Registration: The information you provide when registering an ongcuci account – including your name, email address, and phone number – is collected directly from you.
• Platform Usage: When you use the ongcuci platform — making deposits via Touch 'n Go or DuitNow, placing bets on football or badminton, playing slots or poker — ongcuci's systems automatically log those activities and transactions.
• Identity Verification: When ongcuci requires identity verification (particularly for withdrawals exceeding a certain limit), you will be asked to submit an identity document such as a copy of your IC directly to our team.
• Customer Support: When you contact the ongcuci customer support team via live chat or email, records of those communications are retained for service improvement purposes and as a reference in the event of any future disputes.
• Cookies & Tracking Technologies: The ongcuci platform uses cookies and other tracking technologies to collect usage and performance data. Further details on the use of cookies are outlined in Section 7.

Ongcuci uses members' personal data only for the purposes set out below. We do not use your data for any purpose other than those listed here:

If ongcuci intends to use your personal data for purposes other than those set out in the table above, we will seek your consent beforehand, unless such use is required by law.

Ongcuci does not sell members' personal data to any third party. However, in the course of operating the platform, ongcuci may need to share certain personal data with the following limited categories of third parties:

• Payment Service Provider: ongcuci works with payment service providers that process deposit and withdrawal transactions — including DuitNow gateways, FPX providers, and Malaysian e-wallet integration providers. These providers receive only the information necessary to process the relevant transaction and are bound by strict confidentiality agreements with ongcuci.
• Identity Verification Provider: For compliance with anti-money laundering (AML) and Know Your Customer (KYC) requirements, ongcuci may engage specialist third-party services to verify member identities. These providers are not permitted to use that data for any other purpose.
• Game Software Providers: Third-party game providers that supply slots, Live Casino, and poker games to the ongcuci platform may receive the minimum technical data required to run those games properly.
• Legal Authorities: ongcuci will disclose personal data to the relevant authorities (such as the police or courts) when required to do so by law or a valid court order.

Ongcuci implements a range of technical and organisational security measures to protect members' personal data against unauthorised access, loss, destruction, or accidental disclosure:

• Data Encryption in Transit: All communication between your web browser and ongcuci's servers is protected by the latest version of the TLS (Transport Layer Security) protocol, ensuring two-way encryption of all transmitted data.
• Stored Data Encryption: Sensitive data stored in ongcuci's databases — including passwords (stored as irreversible hashes) and financial information — is protected with database-level encryption.
• Multi-Layer Access Control: Access to ongcuci systems and data is controlled through multi-factor authentication (MFA) for all staff, strict role-based access controls, and audit logs that record every instance of access to members' personal data.
• Continuous Security Monitoring: ongcuci systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts.
• Regular Security Audits: ongcuci conducts regular internal security audits and third-party assessments to identify and address system vulnerabilities.
• Staff Training: All ongcuci staff with access to members' personal data undergo regular data protection training.

Ongcuci does not retain members' personal data for longer than is necessary for the purpose it was collected. The following are general guidelines for ongcuci's data retention periods:

• Active Account Data: For as long as your account remains active and has not been closed, ongcuci retains all personal data and transaction records associated with that account.
• Financial Transaction Records: Deposit and withdrawal transaction records in Malaysian Ringgit (RM) are retained for a minimum of seven (7) years from the transaction date, for the purpose of complying with anti-money laundering and accounting requirements.
• Customer Support Communication Data: Communication records with ongcuci's customer support team are retained for three (3) years from the date of the last communication.
• After Account Closure: When an ongcuci account is closed, personal data that is no longer required for legal or compliance purposes will be deleted or anonymised within 90 days of the account closure date.
• Technical Log Data: Technical logs and usage data are typically retained for 12 months.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

The ongcuci platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and maintain session security. The following are the types of cookies used by ongcuci:

You can manage and control cookies through your web browser settings. Please note, however, that blocking essential cookies may affect the functionality of the ongcuci platform and prevent you from accessing certain features. Analytical and functional cookies can be disabled without impacting the platform's core functions.

As an ongcuci member, you have the following rights regarding your personal data held in ongcuci's systems. All requests relating to these rights may be submitted by email to support@ongcuci.best:

The ongcuci platform operates primarily for the Malaysian market, and the majority of members' personal data is stored in server environments located within the Asia region. In certain cases, for platform operational purposes — such as the use of international game provider services or cloud computing infrastructure — personal data may be processed or stored outside Malaysia.

In such situations, ongcuci ensures that any cross-border data transfer is carried out with adequate safeguards, including:

• Using standard data transfer agreements that ensure data is protected to a level comparable with protections afforded under Malaysian law.
• Ensuring that data recipients hold recognised information security compliance certifications (such as ISO 27001).
• Conducting a risk assessment prior to implementing any new cross-border data transfer.

The ongcuci platform is intended for adults aged Aged 18 and above only. ongcuci does not intentionally collect, store, or process any personal data belonging to individuals under the age of 18.

If ongcuci discovers that personal data belonging to a minor has been collected inadvertently — whether through falsification of age information during registration or by any other means — we will promptly delete that data and close the account in question. Any winnings obtained through such an account may not be paid out.

If you are a parent or guardian and believe your underage child has registered an account on ongcuci, please contact us immediately at support@ongcuci.best so we can take prompt action.

Ongcuci reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, relevant legislation, or ongcuci platform operations.

• Members will be notified of any material amendments to this Privacy Policy via their registered email address and/or a prominent notice displayed on the ongcuci platform at least 14 days before those changes take effect.
• For minor amendments that do not materially affect members' rights, ongcuci may update this policy without prior notice — however, the most recent update date will always be displayed at the top of this page.
• Continued use of the ongcuci platform after any policy amendment takes effect will be considered your acceptance of the updated policy.
• If you disagree with any proposed amendments, you may contact ongcuci to close your account before the changes take effect.

If you have any questions, concerns, or requests regarding ongcuci's Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

We aim to respond to all privacy-related enquiries within 3 working days. For formal requests relating to data rights (such as data access or deletion requests), the processing period is up to 14 working days from the date the request is received.