Privacy Policy og321 – Personal Data Protection for Malaysian Players

Og321 collects members' personal data in two main ways — information you provide directly during registration and use of the platform, and information collected automatically through industry-standard tracking technologies. Below is a summary of the types of data we collect:

Og321 does not collect credit or debit card information directly. All payments are processed through approved payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX. Your payment details are managed by those providers in accordance with their respective privacy policies.

Og321 uses collected personal data only for legitimate and specific purposes. We do not use your data for anything outside the following list without first obtaining your consent:

• Account Management: To create, verify, and manage your og321 account, including the registration process, login, and any required identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions carried out on the og321 platform using your chosen Malaysian payment method.
• Platform Security: To detect and prevent fraud, unauthorised access, money laundering, and other suspicious activities that threaten the security of og321 members.
• Customer Support: Providing assistance and resolving enquiries, complaints, or technical issues reported by members to the og321 support team.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including the retention of transaction records as required by law.
• Experience Personalisation: With your consent, tailoring game recommendations, promotions, and platform content based on your preferences and playing patterns at og321.
• Service Communications: Sending important notifications related to your account, transactions, security updates, and any changes to terms or policies that affect you.
• Responsible Gaming: Detecting playing patterns that may indicate problem gambling and providing appropriate support or intervention to protect member wellbeing.

Og321 does not sell or trade members' personal data. That said, there are limited situations where og321 may need to share certain information with carefully selected third parties, solely to operate the platform safely and efficiently:

• Payment Providers: Required transaction information is shared with designated payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX to process deposits and withdrawals. These providers are subject to their own privacy policies and strict financial security standards.
• Platform Technology Provider: Game software providers, cloud infrastructure providers, and analytics tools that support og321's technical operations may have limited access to data necessary to perform their services. All such providers are bound by strict data protection agreements.
• Authorities and Regulatory Bodies: og321 will disclose member information to law enforcement authorities or regulatory bodies when legally required to do so under applicable law — for example, in cases involving financial crime investigations or valid court orders.
• Identity Verification Provider: For KYC (Know Your Customer) and age verification purposes, og321 may use approved third-party services to verify the identity information you provide.

In all data-sharing situations described above, og321 ensures that the relevant third parties maintain adequate data protection policies and use the data provided solely for the stated purposes. og321 does not share data with advertisers, marketing companies, or any party that does not have a direct operational relationship with this platform.

Og321 consistently invests in cybersecurity infrastructure to ensure that members' personal data is protected to the highest industry standards. The following are the key security measures we have put in place:

• Data Encryption in Transit: All data transmitted between your device and og321's servers is encrypted using TLS 1.3 with AES-256 encryption standards. This includes login credentials, financial transactions, and all communications with customer support.
• Data Encryption at Rest: Sensitive data stored in og321's databases is encrypted at rest using robust encryption methods. Member passwords are never stored in plain text — they are stored using irreversible hashing algorithms.
• Internal Access Controls: Access to member data within og321 is restricted to staff with a legitimate operational need. All access is logged, audited, and reviewed on a regular basis. No individual staff member may access sensitive data without dual authorisation.
• 24/7 Security Monitoring: og321's cybersecurity team monitors the platform infrastructure around the clock using real-time threat detection tools. Any suspicious activity is identified and addressed promptly.
• Regular Penetration Testing: og321 conducts regular penetration testing using independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): og321 offers two-factor authentication (2FA) as an added layer of security for member accounts. We encourage all members to enable this feature in their account security settings.

Og321 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the og321 platform to function properly. They manage your login session, maintain account security, and enable core platform functionality. They cannot be disabled without affecting the platform's basic operation.
• Functional Cookies: These cookies store your preferences — such as your preferred language, display settings, and platform configuration — so you don't have to re-configure them each time you use og321.
• Analytics Cookies: og321 uses analytics tools to understand platform usage patterns on an aggregate, anonymised basis — for example, the most visited pages, time spent on the platform, and device types used. This information helps us continuously improve the og321 platform over time.
• Security Cookies: This specific cookie helps detect and prevent fraudulent activity by identifying devices typically used to access your account, and alerting you when a login attempt is made from an unrecognised device.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect your experience on the og321 platform. For more information on managing cookies in popular web browsers, please refer to your browser's help documentation.

As an og321 member, you have clearly defined and enforceable rights regarding your personal data. og321 respects these rights and will process every valid request within 14 business days from the date the request is received:

• Right of Access: You have the right to request a copy of all personal data that og321 holds about you. This request can be made via og321's live chat or support email.
• Right to Rectification: If personal data stored in og321's systems is inaccurate or out of date, you have the right to request a correction. You can also update much of your profile information directly through your og321 account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that og321 delete your personal data. Please note that this right may be limited where og321 has a legal obligation to retain such data.
• Right to Restrict Processing: You have the right to request that og321 restrict how your data is processed in certain circumstances — for example, while you are disputing the accuracy of that data.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format so you can transfer it to another platform if you choose.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, such as direct marketing. Any objection to marketing communications will be acted upon immediately.

Og321 retains members' personal data only for as long as necessary for the purposes outlined in this policy, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Personal data of members with active accounts is retained for the duration of their membership and used to provide ongoing og321 services.
• Financial Transaction Data: Deposit and withdrawal transaction records are retained for a minimum of 7 years after the transaction occurs, in line with standard legal requirements for financial records in Malaysia.
• Security Log Data: Security logs and account activity are retained for 2 years for the purpose of investigating security incidents if required.
• Support Communication Data: Customer support interaction records are retained for 3 years to allow us to provide consistent service and resolve any disputes that may arise.
• After Account Closure: When an og321 account is voluntarily closed, personal data not subject to legal retention obligations will be deleted or anonymised within 90 days of the account closure date.

Once the retention period has expired or data is no longer needed, og321 will securely delete or anonymise it using methods that ensure the data cannot be recovered. The data deletion process is periodically audited to ensure compliance with this retention policy.

Og321 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to og321 platform services. Members will be notified of any significant amendments via in-platform notifications and email at least 7 days before the changes take effect.

The effective date of the latest version of the Privacy Policy is always displayed at the top of this page. Continued use of the og321 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendments, you may close your og321 account and request deletion of your personal data.

If you have any questions, concerns, or complaints regarding og321's Privacy Policy or how we handle your personal data, our team is here to help. og321 takes every privacy enquiry seriously and will respond with full transparency.

• Live Chat: The fastest way — access it directly through the og321 platform. Response times are typically under 3 minutes, available 24/7 including Malaysian public holidays.
• Privacy Email: support@og321.best — for privacy-related enquiries that require detailed written clarification, or to formally submit a request concerning your data rights.
• Response Time: og321 is committed to responding to all privacy-related inquiries within 3 business days and resolving data rights requests within 14 business days.

In all privacy-related communications, please include your og321 username and clearly describe the nature of your enquiry or request. This will help our team process it more quickly and accurately.