Privacy Policy
This Privacy Policy explains how ong24a collects, processes, stores, and protects your personal information when you use our Platform. We are committed to handling your data with the highest standards of security and transparency.
Introduction
Ong24a ("we", "us", "our") operates the online sports betting and casino platform accessible at https://ong24a.cam ("Platform"). This Privacy Policy sets out how ong24a collects, uses, discloses, stores, and protects personal information provided by or collected from users ("you", "User") who access or use the Platform.
We are committed to maintaining the privacy and security of your personal data. This Policy applies to all personal information processed in connection with your use of the ong24a Platform, regardless of whether you access the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location in Malaysia.
By registering an account ong24a, depositing funds, placing a bet, or otherwise engaging with any feature of the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.
Your Privacy Matters. Ong24a does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data collected is used solely to operate the Platform, process transactions, comply with legal obligations, and improve your user experience.
Definitions
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes name, identification number, contact details, payment information, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether by automated or manual means. |
| "Data Controller" | Ong24a, as the entity that determines the purposes and means by which Personal Data is processed. |
| "Data Subject" | The individual to whom the Personal Data relates — in the context of this Policy, this refers to registered Users of the ong24a Platform. |
| "Third Party" | Any natural or legal person other than the Data Subject andong24a, including payment processors, identity verification providers, and analytics service providers. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for stated purposes. |
| "KYC" | Know Your Customer — the regulatory and operational process of verifying a User's identity and age before enabling full account functionality. |
Data We Collect
Ong24a collects the minimum personal data necessary to operate the Platform, comply with legal and regulatory obligations, and provide the services you request. The categories of data we collect are as follows:
3.1 Registration and Account Data
- Full legal name as it appears on your official identity document
- Date of birth (for mandatory 21+ age verification)
- Email address
- Country of residence and, where applicable, city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru)
- Chosen username and encrypted password hash
- Preferred currency (MYR)
- Mobile telephone number (where provided for two-factor authentication or account recovery)
3.2 KYC and Identity Verification Data
- Scanned or photographed copy of Malaysian MyKad, passport, or other government-issued photo identification
- Proof of address documentation where required for elevated transaction thresholds
- Selfie or liveness verification images, where required as part of the KYC process
3.3 Financial and Transaction Data
- Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
- Payment method details such as e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow QR data, and cryptocurrency wallet addresses (USDT TRC20)
- Betting and wagering history, including market selections, stake amounts, and settlement outcomes
- Bonus and promotional credit records
3.4 Technical and Device Data
- IP address and approximate geolocation data derived from IP
- Device type, operating system, and browser version
- Session duration, page navigation data, and click-stream analytics
- Cookie identifiers and similar tracking technologies (see Section 9)
3.5 Communication Data
- Content of messages sent tong24a via live chat, email support ([email protected]), or any other support channel
- Records of customer service interactions for quality assurance and dispute resolution purposes
Data Processing
Ong24a processes your personal data for the following specific purposes. We do not process Personal Data for purposes beyond those described in this Policy without your prior consent or a valid legal basis.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and administering your ong24a Account, including authentication, password recovery, and account security monitoring. |
| Service Delivery | Processing bets, casino game sessions, deposits, withdrawals, bonus claims, and all other Platform functions you engage with. |
| Identity Verification (KYC) | Verifying your identity and age (21+ requirement) in compliance with applicable anti-money-laundering and responsible gambling obligations. |
| Payments Processing | Facilitating MYR-denominated transactions through local payment channels including Touch 'n Go eWallet, FPX, DuitNow, and bank transfers. |
| Fraud Prevention & Security | Detecting, investigating, and preventing fraudulent activity money laundering, collusion, and other prohibited conduct on the Platform. |
| Regulatory Compliance | Meeting obligations under applicable laws relating to anti-money-laundering, counter-terrorism financing, data protection, and gambling regulation. |
| Customer Support | Responding to your enquiries, resolving disputes, processing complaints, and maintaining customer service records. |
| Responsible Gambling | Monitoring account activity to identify indicators of problem gambling behaviour and administering deposit limits, cool-off periods, and self-exclusion requests. |
| Platform Improvement | Analysing aggregated usage data to improve Platform features, user experience, and technical performance. |
| Marketing Communications | Sending promotional offers, bonus notifications, and relevant updates to Users who have opted in to marketing communications. You may withdraw consent at any time. |
Legal Basis for Processing
Ong24a processes your personal data under one or more of the following lawful bases, depending on the specific purpose of processing:
- Contractual Necessity: Processing required to perform the contract between you and ong24a — specifically, operating your Account, processing bets, and facilitating MYR transactions.
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, anti-money-laundering, and responsible gambling obligations.
- Legitimate Interests: Processing carried out in pursuit of ong24a's legitimate business interests, including fraud detection, Platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
- Consent: Processing based on your freely given, informed consent — specifically for optional marketing communications. You may withdraw this consent at any time by contacting us at[email protected] or updating your account notification preferences.
Data Sharing
Ong24a does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only where strictly necessary and under the following limited circumstances:
6.1 Payment Service Providers
When you make a deposit or request a withdrawal, your transaction data is shared with the relevant payment service provider (for example, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, or USDT TRC20 network infrastructure providers) solely to facilitate the transaction. These providers process your data under their own privacy policies and are contractually required to maintain appropriate data security standards.
6.2 Identity Verification Providers
For KYC purposes, we may share identity document images and associated data with accredited third-party identity verification service providers. These providers are engaged solely to verify your identity and age and are contractually prohibited from using your data for any other purpose.
6.3 Regulatory and Law Enforcement Authorities
Ong24a may disclose personal data to regulatory bodies, law enforcement agencies, or government authorities in Malaysia or applicable international jurisdictions where required to do so by law, court order, or in response to lawful requests relating to fraud, anti-money-laundering investigations, or counter-terrorism financing obligations.
6.4 Analytics and Technology Providers
We engage reputable third-party technology service providers to support Platform analytics, infrastructure, and security monitoring. These providers access only the minimum data necessary to perform their contracted functions and are bound by strict data processing agreements.
In all cases where third-party data sharing occurs, ong24a ensures that appropriate contractual safeguards are in place to protect the security and confidentiality of your personal data.
Data Retention
Ong24a retains your personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to applicable legal and regulatory retention requirements. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of the account relationship, plus a minimum of 5 years following account closure, in accordance with applicable regulatory requirements. |
| KYC and Identity Documents | Minimum 5 years from the date of submission, or longer where required by applicable anti-money-laundering legislation. |
| Transaction and Betting Records | Minimum 5 years from the date of each transaction, in compliance with financial record-keeping obligations. |
| Customer Support Communications | Up to 3 years from the date of the interaction, for quality assurance and dispute resolution purposes. |
| Technical and Session Data | Up to 13 months from collection, after which data is aggregated or deleted. |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year to maintain a record of consent withdrawal. |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
Data Security
Ong24a implements technical and organisational security measures appropriate to the risk level associated with the processing of your personal data. These measures include but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and theong24a Platform.
- Encryption of sensitive data at rest, including stored passwords (using industry-standard hashing algorithms), payment method references, and identity document images.
- Role-based access controls limiting internal data access to authorised personnel on a strict need-to-know basis.
- Two-factor authentication (2FA) availability for all registered User accounts.
- Regular third-party security penetration testing and vulnerability assessments.
- Comprehensive audit logging of all data access and administrative actions within the Platform infrastructure.
- Secure data centre infrastructure with physical access controls, redundancy, and disaster recovery protocols.
Despite these measures, no online system can guarantee absolute security. If you become aware of any actual or suspected security breach affecting your ong24a Account, you must notify us immediately at [email protected] so that appropriate protective action can be taken without delay.
Cookies & Tracking Technologies
The ong24a Platform uses cookies and similar tracking technologies to support platform functionality, security, and performance analysis. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot be used to access personal files on your device.
Ong24a uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without impairing core Platform functionality.
- Functional Cookies: Enable enhanced features such as language preferences, remembered settings, and improved navigation. Disabling these may reduce the quality of your user experience.
- Analytics Cookies: Used to collect aggregated, anonymised data on how Users interact with the Platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve Platform performance.
- Security Cookies: Support fraud detection, bot prevention, and account security monitoring functions.
You may configure your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies will prevent access to the Platform. Instructions for managing cookies are available in your browser's help documentation.
Your Rights as a Data Subject
Subject to applicable data protection law, you have the following rights with respect to your personal data held by ong24a:
- Right of Access: You may request a copy of the personal data ong24a holds about you, together with information about how it is being processed.
- Right to Rectification: You may request the correction of inaccurate or incomplete personal data held on your Account.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ong24a's overiding legal and regulatory retention obligations.
- Right to Restriction of Processing: You may request that ong24a restrict the processing of your personal data in certain circumstances, such as during a dispute about its accuracy.
- Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Objection to marketing will be honoured immediately upon receipt.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request".Ong24a will respond to all valid requests within 30 calendar days. We may require identity verification before processing a data rights request to protect against unauthorised access to your personal data.
Please note that certain rights are subject to limitations where legal or regulatory obligations requireong24a to retain or continue processing your data — for example, anti-money-laundering record-keeping requirements that mandate minimum data retention periods.
Minors and Age Restriction
The ong24a Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. All new account registrations are subject to KYC age verification before full account functionality, including deposits and withdrawals, is activated.
If ong24a discovers or is made aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data to the extent permissible by law, and notify the appropriate authorities if required.
Parents and guardians who have concerns that a minor may have accessed or registered on the ong24a Platform are encouraged to contact us immediately at [email protected]. We strongly recommend the use of parental control software on shared devices to prevent underage access to online gambling platforms.
International Data Transfers
In the course of operating the Platform and engaging third-party service providers, your personal data may be transferred to and processed in countries or jurisdictions outside Malaysia. Where such transfers occur, ong24a ensures that appropriate safeguards are in place to protect the security and confidentiality of your personal data, including:
- Standard contractual clauses or equivalent data transfer mechanisms with receiving third parties.
- Assessment of the adequacy of data protection standards in the destination jurisdiction prior to transfer.
- Contractual obligations on receiving parties to maintain data security standards equivalent to those applied by ong24a.
By using the Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data outside Malaysia where necessary for the operation of the Service, subject to the safeguards described above.
Amendments to this Policy
Ong24a reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, we will notify registered Users via email or a prominent notice on the Platform, and update the "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The most current version of this Policy is always available at https://ong24a.cam/privacy-policy. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.
If you do not agree to any amendment to this Privacy Policy, you must cease using the Platform and may request account closure by contacting us at [email protected].
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to howong24a processes your personal data, please contact our Data Support team using the following details:
- Data Support Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related requests.
- Live Chat: Available24 hours a day, 7 days a week via the Platform. Average first-response time under 90 seconds during Malaysia time (MYT).
- Response Time: Privacy and data rights requests are addressed within 30 calendar days of receipt. Standard support queries are typically resolved within 2 working hours.
For questions specifically relating to ong24a's Terms and Conditions, bonus terms, or account eligibility requirements, please refer to our Terms & Conditions page.
For responsible gambling support resources, self-exclusion tools, and deposit limit assistance, please visit our Responsible Gambling page.
How We Protect Your Data
A summary of the key data protection commitments ong24a makes to every registered Malaysian player.
256-Bit SSL Encryption
Every connection between your device and the ong24a Platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including passwords and payment identifiers — is encrypted using industry-standard algorithms.
No Data Sales, Ever
Ong24a does not sell, rent, or trade your personal information to third parties for commercial purposes. Data sharing is strictly limited to payment processing, identity verification, legal obligations, and Platform security functions.
21+ Age Verification
All ong24a accounts are subject to KYC identity and age verification. We do not knowingly collect data from individuals under 21. Any underage account discovered is immediately suspended and its data deleted to the extent permitted by law.
Your Rights, Enforced
You have the right to access, correct, delete, or port your personal data. All valid data rights requests submitted to[email protected] are processed within 30 calendar days with identity verification.
Defined Retention Periods
Ong24a retains personal data only for as long as required by applicable law and operational necessity. Transaction and KYC records are held for a minimum of 5 years. Session and analytics data is anonymised after13 months.
Regular Security Audits
The ong24a Platform undergoes regular third-party security penetration testing and vulnerability assessments. Role-based access controls restrict internal data access to authorised personnel on a strict need-to-know basis.
Questions About Your Privacy?
Our English-speaking support team handles all data rights requests and privacy queries 24/7 on Malaysia time. Submit a request to [email protected] or start a live chat session from the Platform.21+ only. Play responsibly.