Data & Privacy
Privacy at a Glance
Identity, contact, financial, and usage data — only what is necessary for account operation and compliance.
Account management, KYC verification, fraud prevention, AML compliance, and service improvement.
Licenced payment processors, KYC partners, and regulatory authorities only. Never sold to advertisers.
TLS encryption in transit, AES-256 at rest, access controls, and regular security audits.
Account data retained for the duration of your membership plus 7 years for regulatory obligations.
Access, correction, portability, and deletion rights subject to applicable law and licence obligations.
This Privacy Policy ("Policy") explains how ong66 ("ong66," "we," "our," "us") collects, uses, discloses, retains, and protects personal data in connection with the ong66 online gaming platform at ong66.asia ("Platform"). It applies to all persons who register an account, use any ong66 product or service, or interact with the Platform in any capacity.
ong66 is committed to handling personal data responsibly, in accordance with applicable data protection legislation and in fulfilment of the obligations imposed under its international gaming licence — including Anti-Money Laundering (AML) and Know Your Customer (KYC) regulatory requirements. By using the ong66 Platform, you acknowledge that you have read and understood this Policy.
This Policy should be read alongside the ong66 Terms & Conditions, which govern your use of the Platform generally. Defined terms used but not defined in this Policy have the meanings given to them in the Terms & Conditions.
For the purposes of applicable data protection law, ong66 is the data controller in respect of personal data collected through the Platform. As data controller, ong66 determines the purposes and means by which personal data is processed.
ong66 collects personal data through your interactions with the Platform. The categories of data collected, and the context in which they are collected, are set out in the table below.
| Category | Data Elements | Collection Trigger |
|---|---|---|
| Identity | Full name, date of birth, nationality, IC / passport number | Account registration; KYC verification |
| Contact | Email address, mobile number, residential address | Account registration; address verification |
| Financial | Payment method identifiers (e.g., last 4 digits), transaction amounts, deposit and withdrawal records | Deposit, withdrawal, or payment method registration |
| Gaming Activity | Bet history, game selections, session duration, win/loss records | Platform use; responsible gaming monitoring |
| Technical | IP address, device type, browser, operating system, cookies, session tokens | Each Platform visit |
| Communications | Support chat transcripts, email correspondence, survey responses | Customer support interactions |
Where ong66 is required to collect personal data to fulfil its legal and regulatory obligations (such as KYC identity verification), failure to provide the required data will prevent ong66 from opening or maintaining your account or processing withdrawal requests.
ong66 processes personal data for the following purposes:
ong66 does not use personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required by AML monitoring systems, in which case you have the right to request human review of any decision.
Where data protection law requires a legal basis for the processing of personal data, ong66 relies on the following bases:
ong66 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent necessary for each purpose:
ong66 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. They are used for the following purposes:
ong66 does not use third-party advertising cookies or share tracking data with advertising networks. You may manage or delete cookies through your browser settings; however, disabling strictly necessary cookies will impair Platform functionality including the ong66 login process.
ong66 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. Key measures include:
Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. ong66 will notify affected account holders promptly in the event of a personal data breach that is likely to result in a high risk to your rights and freedoms.
ong66 retains personal data for as long as necessary to fulfil the purposes for which it was collected, taking into account our legal and regulatory obligations. The following retention periods apply as a general guide:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ong66's data destruction policy.
Subject to applicable data protection law and the limitations imposed by our regulatory obligations, you have the following rights in relation to your personal data held by ong66:
To exercise any of the above rights, contact ong66 at the address in Section 13. ong66 will respond within 30 days. We may require identity verification before processing your request.
The ong66 Platform is strictly intended for users who are 21 years of age or older. ong66 does not knowingly collect personal data from individuals under the age of 21. If ong66 becomes aware that personal data has been collected from a person under 21, that data will be deleted and the account suspended immediately. If you believe that ong66 may have inadvertently collected data from a person under 21, please contact us immediately at the address in Section 13.
ong66 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated to registered account holders via the email address on file at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the ong66 Platform after the effective date of a revised Policy constitutes acceptance of the updated terms.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ong66, please contact our Data Protection team. All data protection enquiries are handled confidentially and responded to within 5 business days.
If you are dissatisfied with ong66's response to a data protection concern, you have the right to lodge a complaint with the supervisory authority responsible for data protection in the jurisdiction applicable under our gaming licence, or with the data protection authority in your country of residence.
Play With Confidence
ong66 is a licensed platform committed to data security and responsible gaming. Explore everything ong66 offers — in MYR, on mobile, with your privacy protected. 21+ only.
21+ only. Gambling involves financial risk. Play responsibly. See Responsible Gaming for support tools.