ocs8my Privacy Policy

Introduction

This Privacy Policy is issued by ocs8my and governs the collection, use, storage, and disclosure of personal data relating to individuals who visit, register with, or otherwise interact with the ocs8my platform. It should be read together with the Terms & Conditions.

ocs8my operates a sports betting and online casino platform serving adult players in Malaysia. Account holders and visitors may include residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations. This policy describes how we handle personal data regardless of the device or connection used to access ocs8my.

By using ocs8my you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the practices described, please discontinue use of the platform. This policy does not override mandatory protections that apply to you under applicable law.

Definitions

In this Privacy Policy the following terms carry the meanings stated below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, financial account information, device identifiers, and behavioural data linked to an individual.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, modification, disclosure, erasure, and transmission.
• "Controller" refers to ocs8my as the entity that determines the purposes and means of processing personal data.
• "Processor" means a third party that processes personal data on behalf of ocs8my under a contractual arrangement that restricts how the data may be used.
• "User" means any natural person who accesses, browses, registers with, or otherwise interacts with the ocs8my platform.
• "KYC Data" refers to identity documents, verification selfies, proof of address, and related materials submitted to satisfy Know Your Customer requirements.

Data We Collect

The categories of personal data ocs8my may collect are described in the table below. Not every category applies to every user; the data collected depends on how you use the platform and which features you access.

How We Collect Your Data

Directly from you

Most personal data is collected directly when you complete the registration process, submit KYC documents, initiate or receive a payment, contact support, or adjust your account settings. You are responsible for the accuracy and completeness of information you provide.

Automatically during your use of ocs8my

When you access ocs8my, technical data including your IP address, device identifiers, browser characteristics, and session behaviour is recorded automatically. This data helps us maintain platform security, investigate unusual access patterns, and improve performance for Malaysian users on mobile and desktop connections.

From payment and verification providers

Where you use a third-party payment service such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong to fund your account, the relevant provider may share transaction confirmation data with ocs8my to reconcile payments. ocs8my does not receive your full banking credentials from these providers.

From identity verification services

ocs8my may use specialist KYC service providers to assist in verifying the documents you submit. These providers return a verification outcome and relevant confidence indicators; they do not receive full access to your ocs8my account.

Legal Basis for Processing

ocs8my relies on one or more of the following legal grounds when processing your personal data:

• Contractual necessity: Processing required to perform the user agreement, including account operation, payment execution, withdrawal processing, and KYC compliance.
• Legitimate interests: Processing necessary for fraud detection, account security, platform improvement, responsible gambling monitoring, and the prevention of money laundering, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements, or lawful instructions from competent authorities.
• Consent: For optional data collection activities — such as non-essential cookies or promotional communications — where consent is required and has been obtained. Consent may be withdrawn at any time without affecting previous lawful processing.

Purposes of Processing

Your personal data is used by ocs8my for the following purposes:

• Creating and managing your ocs8my account and verifying your eligibility to use the platform.
• Conducting Know Your Customer and age verification checks to confirm identity and compliance with the 21+ minimum age requirement.
• Processing deposits and withdrawals in Malaysian Ringgit through your chosen payment channel.
• Detecting, investigating, and preventing fraud, money laundering, unauthorised account access, and other prohibited activity.
• Administering bonuses, promotions, loyalty rewards, birthday bonuses, and referral programmes in accordance with their terms.
• Operating and improving the responsible gambling tools available to you, including deposit limits, cooling-off periods, and self-exclusion.
• Providing customer support via live chat and email and maintaining records of significant interactions.
• Monitoring and improving platform performance, security, reliability, and user experience for Malaysian users.
• Complying with applicable legal, regulatory, financial, and anti-money-laundering obligations.
• Sending account-related service communications including transaction confirmations, security alerts, and policy updates.

Data Sharing and Disclosure

ocs8my does not sell personal data to third parties. We may share your data with the following categories of recipient only to the extent described:

Payment service providers

Transaction data is shared with the payment provider you select — such as Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, or your designated bank — solely to execute and confirm your deposit or withdrawal.

Identity and KYC verification services

Document images and registration details may be shared with a contracted verification provider to complete identity checks. Verification providers operate under data processing agreements that restrict use to the verification purpose.

Technology and infrastructure providers

Cloud hosting, security, database, and platform infrastructure services may be provided by third-party technology companies. These parties process data on our behalf under contractual controls and may not use your data for their own purposes.

Legal and regulatory disclosure

ocs8my may disclose personal data to competent authorities, courts, regulators, or law enforcement agencies where required by applicable law, a lawful order, or in connection with the prevention or investigation of a serious crime.

Business transfers

In the event of a merger, acquisition, asset sale, or restructuring involving ocs8my, personal data may form part of the transferred assets, subject to the same privacy protections described in this policy.

International Data Transfers

Some service providers engaged by ocs8my may process data in jurisdictions outside Malaysia. Where personal data is transferred internationally, ocs8my uses appropriate safeguards — such as contractual clauses between the relevant parties — to maintain protections consistent with the standards described in this policy.

If you wish to obtain further information about the international transfer arrangements applicable to your data, you may contact ocs8my through our support channels.

Data Security

ocs8my implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it holds. These include:

• Encrypted connections using TLS/SSL for all data transmitted between your browser or app and the ocs8my platform.
• Encryption of stored data at rest, including identity documents and payment references, using industry-standard algorithms.
• Access controls that restrict data access to staff and processors with a demonstrated operational need.
• Security monitoring to detect unusual access patterns, potential intrusions, and account compromise attempts.
• Regular internal reviews of security practices and third-party system assessments.

No security system can be guaranteed to be completely impenetrable. In the event of a security incident that materially affects your personal data, ocs8my will take appropriate action and communicate with affected users in accordance with applicable legal requirements.

You are responsible for keeping your ocs8my password secure, not sharing login credentials, and using a device that you control. If you believe your account has been compromised, contact ocs8my support immediately.

Data Retention

ocs8my retains personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer period is required by applicable law, regulatory obligation, or legitimate operational need. The following general principles apply:

• Account registration data and KYC records are retained for the duration of your active account and for a further period required to satisfy legal and compliance obligations following closure.
• Financial transaction records, including deposit and withdrawal history, are retained for the period required by applicable financial record-keeping requirements.
• Support communications are retained for a period sufficient to resolve disputes, address complaints, and maintain service improvement records.
• Technical and session data is retained for a shorter period consistent with its security and performance functions.
• Responsible gambling records, including self-exclusion requests and limit settings, are retained to prevent circumvention and to support ongoing player protection.

Data held beyond its primary retention period is subject to anonymisation or secure deletion. If you have requested account closure, ocs8my may continue to hold certain data where a legal obligation requires it.

Cookies and Tracking Technologies

ocs8my uses cookies and similar technologies to support platform functionality, maintain sessions, and collect technical usage information. Categories of cookies used may include:

• Strictly necessary cookies: Required for platform operation, session management, fraud prevention, and security functions. These cannot be disabled without affecting core functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and previously entered account information in non-sensitive fields.
• Analytics cookies: Used to measure aggregate platform usage patterns, identify performance issues, and improve navigation. Where consent-dependent analytics tools are used, we will request your permission before activation.

You may manage or disable non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of specific platform features. Strictly necessary cookies cannot be disabled through this mechanism as they are required for secure platform operation.

Your Rights

Subject to applicable law and the legitimate interests of ocs8my, you hold the following rights in respect of your personal data:

• Right of access: You may request confirmation of whether ocs8my holds personal data about you and, if so, a copy of that data together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may also update many details directly through your account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances, including where it is no longer necessary for its original purpose and where no overriding legal obligation requires its retention.
• Right to restriction: You may request that ocs8my limit the processing of your data in certain circumstances, for example while the accuracy of that data is contested.
• Right to object: You may object to processing based on legitimate interests where you consider that your privacy rights outweigh ocs8my's stated purpose.
• Right to withdraw consent: Where processing relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact ocs8my using the details in Section 15. We may require identity verification before processing your request. We will respond within a reasonable period consistent with applicable requirements. Some requests may be declined where a legal obligation, security concern, or legitimate operational necessity outweighs the request.

Minors

ocs8my is strictly for adults aged 21 and above. We do not knowingly collect, store, or process personal data from individuals under 21 years of age. Where ocs8my identifies or is notified that an account holder is under the minimum age, we will close the account, investigate related transactions, and remove personal data held in respect of that individual in accordance with applicable law.

If you believe that ocs8my holds data relating to a person under 21 who should not have been permitted to register, please contact our support team immediately.

Policy Amendments

ocs8my may update this Privacy Policy to reflect changes in the platform, applicable law, data processing practices, or security requirements. Material amendments will be accompanied by an updated effective date shown at the top of this page. Where a change is significant, we may notify active account holders through a platform notice or account communication.

We encourage you to review this policy periodically. Your continued use of ocs8my following a notified amendment constitutes acknowledgement of the revised privacy practices from their stated effective date.

Contact Us

To exercise your data rights, ask a question about this Privacy Policy, report a privacy concern, or request further information about data sharing arrangements, please contact ocs8my through the channels below. We aim to respond to privacy-related enquiries within a reasonable period. Complex requests may require additional time.