Privacy Policy ovo88 –
Data Protection & Information Security

Welcome to the ovo88 Privacy Policy. We understand that your personal information is a trust that must be handled with the utmost responsibility. As Malaysia's leading online gaming platform, ovo88 takes concrete and ongoing measures to ensure every member's privacy is protected at all times.

This Privacy Policy applies to all users of the ovo88 website, the ovo88 mobile app, and all services we provide. By registering or using any ovo88 platform, you consent to the data collection and usage practices described in this document.

If you disagree with any part of this Privacy Policy, please discontinue use of the platform and contact us to close your account. We are always available to clarify any aspect of this policy that you do not understand or require further explanation.

Ovo88 collects information necessary to provide a secure, fair, and personalised service to every member. The types of information we collect are as follows:

Your personal information is used by ovo88 solely for legitimate purposes related to the provision of platform services. We do not sell, rent, or disclose your data to third parties for marketing purposes without your explicit consent.

We also use aggregated data (with no personally identifiable information) for platform analytics and overall user experience improvement purposes. This aggregated data cannot be linked to any specific individual.

Ovo88 understands that sharing your personal information is a sensitive matter. We only share your data under circumstances that are genuinely necessary and subject to strict controls. Parties that may receive your data include:

• Payment service providers — FPX, DuitNow, Touch 'n Go eWallet, and GrabPay to securely process your financial transactions
• Identity verification service providers — to carry out the KYC process in compliance with Malaysia's legal requirements
• Cloud and hosting service providers — bound by strict data protection agreements
• Third-party game service providers — only the minimum data necessary for gaming operations
• Competent Authority — when required by law or a valid court order

Ovo88 continuously invests in advanced security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The technical and organisational security measures we implement encompass multiple layers of protection.

• Data encryption using 256-bit SSL/TLS for all data transmitted between your device and ovo88 servers
• Encryption of sensitive data stored in databases using AES-256
• Two-factor authentication (2FA) is available and strongly encouraged for all accounts
• Real-time security monitoring of systems 24 hours a day, 7 days a week
• Regular security audits by internal and independent external security teams
• Strict access controls — only authorised personnel may access members' personal data
• Cybersecurity awareness training for all ovo88 staff
• A comprehensive incident response plan to address any data breaches

While we take all reasonable security measures, no system can guarantee 100% security in an online environment. We therefore also encourage you to play your part in keeping your account secure by using a strong password and never sharing your login credentials with anyone.

Ovo88 uses cookies and similar tracking technologies to enhance your experience on our platform, understand usage patterns, and deliver more relevant content. Cookies are small text files stored on your device when you visit our website.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the ovo88 platform and your overall user experience.

As an ovo88 member and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information we hold about you. ovo88 fully respects these rights and will respond to your requests within a reasonable timeframe.

• Right of Access — You may request a copy of the personal information we hold about you at any time
• Right to Rectification — You may request that we correct any information that is inaccurate or incomplete
• Right to Erasure — You may request the deletion of your data under certain circumstances permitted by law
• Right to Restrict Processing — You may request that we restrict the way we process your data
• Right to Object — You may object to the processing of your data for direct marketing purposes
• Right to Withdraw Consent — You may withdraw any consent previously given at any time
• Right to Lodge a Complaint — You have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you feel it is necessary to do so

To exercise any of the above rights, please contact the ovo88 privacy team by email at [email protected] or via Live Chat on the platform. We will process your request within 14 business days.

Ovo88 retains your personal information only for as long as it is needed for the stated purposes or as required by Malaysian law. Retention periods vary according to the type of data and applicable legal requirements.

• Active account data — retained for as long as your account is active, plus 7 years after account closure for financial record requirements
• Financial transaction records — retained for a minimum of 7 years as required by Malaysia's tax and AML laws
• Customer support communication logs — retained for 3 years
• Session cookie data — automatically deleted when you close your browser or log out
• Security and audit logs — retained for 2 years for investigation purposes if required

Upon expiry of the retention period, data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified. The data deletion process is carried out periodically and documented for internal audit purposes.

In certain circumstances, your personal information may be transferred to or processed outside of Malaysia — for example, when we use technology service providers or cloud infrastructure based in other countries. ovo88 ensures that any such data transfers are protected with adequate and equivalent safeguards.

• All overseas service providers that receive ovo88 member data are bound by strict data processing agreements
• Protection provided is no less than that required by Malaysia's PDPA
• Ovo88 conducts due diligence on all third parties that receive members' personal data
• For transfers to countries without equivalent data protection, additional contractual agreements will be implemented

The ovo88 platform is intended exclusively for individuals aged 18 and above. ovo88 does not knowingly collect or process personal information from individuals under the age of 18. Should we discover that a child's personal information has been collected without proper verification, we will take immediate steps to delete that information and close the account in question.

Ovo88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to our services. Whenever material amendments are made, we will notify you via:

• In-platform or ovo88 mobile app notifications
• Email sent to your registered email address at least 7 days before amendments take effect
• Prominent notices on the ovo88 website homepage

The effective date of the latest version of this Privacy Policy is always displayed at the top of this document. Continued use of the ovo88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any enquiries, concerns, or wish to exercise your privacy rights, ovo88's Data Protection Officer team is ready to assist you. We are committed to providing prompt and detailed responses to all privacy-related enquiries.