OCS888 Privacy Policy – Member Personal Data Protection

This Privacy Policy is published by OCS888, a leading digital entertainment platform operating in Malaysia. We deeply value the trust you place in us when you register and use ocs888 services, and we are committed to protecting your personal information at all times.

This document details what information we collect from you, why we need it, how we use it, to whom we may disclose it, and what your rights are regarding that data. This Policy applies to all users of the ocs888 platform, including website visitors, mobile app users, and registered members.

OCS888 acts as the data controller for the personal information you provide to us. This means we determine the purposes and means of processing your personal data. Any privacy-related inquiries may be directed to the ocs888 data protection team through the channels stated in the final section of this document.

OCS888 collects various types of information from users depending on how you interact with our platform. Below is a detailed breakdown of the data categories collected:

Information You Provide Directly:

• Full name as stated on your official identification document.
• A valid, active email address for account communications.
• Malaysian mobile phone number for verification and notifications.
• Date of birth for age verification (minimum 18 years old).
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Identity document (MyKad or passport) for the KYC verification process.
• Current residential address for account records.

Information Collected Automatically:

• IP address and related location data.
• Device type, operating system, and web browser version used.
• Login session data, including date, time, and duration of use.
• Game history, wagering, and financial transaction records within the ocs888 platform.
• Website interaction data, including pages visited and links clicked.
• Cookie data and device identifiers to recognize returning users.

All information collected by ocs888 is used for legitimate and specific purposes. We do not use your data for any purpose beyond what is stated below without first obtaining your consent.

OCS888 uses your data to deliver a better gaming experience, personalize game recommendations and promotions based on your preferences, and to identify and prevent fraud. All data processing is carried out on one of the valid legal bases as outlined in the table above.

OCS888 does not sell, rent, or disclose your personal information to third parties for their own independent marketing purposes. However, there are specific situations where we need to share your data with selected parties:

• Payment Service Providers: Information required to process deposits and withdrawals will be shared with verified payment service providers such as DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and USDT processors. They only receive the data necessary for the relevant transaction.
• Game Software Providers: Account information required to operate games may be shared with third-party game platform providers integrated with ocs888.
• Statutory Authority: OCS888 will disclose personal information to the competent authorities when required to do so by law, court order, or a legitimate criminal investigation.
• Anti-Fraud Agency: Data related to suspicious activity may be shared with anti-fraud agencies to protect the ocs888 platform and its members as a whole.

OCS888 continuously invests in sophisticated cybersecurity infrastructure to ensure your personal data is protected to the highest standard. The following are the key security measures we implement:

• 256-bit SSL/TLS encryption for all data transferred between your device and ocs888 servers.
• Encryption of sensitive data in the database using the AES-256 encryption algorithm.
• Strict access controls — only authorized personnel may access member personal data, and every access is logged for audit purposes.
• 24/7 system monitoring to promptly detect and respond to any security threats.
• Regular penetration testing by independent security experts to identify and patch system vulnerabilities.
• Two-factor authentication (2FA) is available for all ocs888 member accounts as an added layer of security.
• Regular and secure data backups to ensure information recovery in the event of a technical incident.

While we take all reasonable steps to protect your data, no system is entirely risk-free. We encourage you to also play your part in keeping your ocs888 account secure by using a strong password and never sharing your login credentials with anyone.

The ocs888 platform uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and personalise content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Helps us understand how users interact with the ocs888 platform by anonymously collecting data on the most frequently visited pages.
• Functional Cookies: Allows the platform to remember your preferences such as language, region, and display settings to deliver a more personalized experience.
• Analytics Cookies: Used to analyze usage patterns and help us improve the design and content of the ocs888 platform over time.

You can manage cookie settings through your web browser. Most web browsers allow you to view, delete, or block cookies. Please note that disabling certain cookies may affect the functionality of the ocs888 platform.

As an OCS888 member, you have clear and enforceable rights regarding your personal data. We fully respect and support the exercise of these rights:

To submit any request regarding your privacy rights, please contact the ocs888 data protection team. We will process your request within 30 business days. No fees are charged for reasonable requests.

In operating the ocs888 platform, your personal data may be transferred to servers or systems located outside Malaysia. This may occur when we use cloud computing services or international game software providers.

Any such data transfers are carried out with appropriate safeguards in place, including:

• Use of internationally recognised standard contractual clauses to ensure equivalent data protection.
• Thorough assessment of data security requirements in the recipient country before any transfer is made.
• Binding data processing agreements with all service providers that receive ocs888 member data.
• Ongoing monitoring of third-party providers' compliance with established data protection standards.

OCS888 ensures that all international data transfers comply with applicable data protection legislation and that your privacy rights are upheld regardless of where the data is physically stored.

OCS888 retains your personal data for as long as needed to fulfill the purposes stated in this Privacy Policy or to comply with applicable legal requirements. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account termination.
• Financial Transaction Records: Retained for a minimum of 7 years to comply with anti-money laundering (AML) and financial reporting requirements.
• KYC Documents: Retained for the period required by applicable legislation, generally no less than 5 years after the termination of the business relationship.
• Communication Logs: Retained for 2 years for customer support and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

When data is no longer needed, ocs888 will securely delete it using methods that ensure it cannot be recovered or accessed again by any party.

OCS888 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our privacy practices, technologies used, legal requirements, or business operations. We will notify you of significant changes through:

• In-platform notifications on the ocs888 platform upon your next login.
• Notification emails to the address registered on your account.
• Updating the "Last Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the ocs888 platform after any amendments take effect will be considered your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding how OCS888 handles your personal data, or if you wish to submit a request to exercise your privacy rights, please contact our data protection team:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the live chat icon at the bottom corner of the ocs888 platform.
• Response Time: We aim to respond to all privacy inquiries within 3 business days and fulfill data rights requests within 30 business days.

We take every privacy-related complaint seriously. If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority in Malaysia. OCS888 will fully cooperate with any investigation conducted by the competent authorities.