Privacy Policy ong24 —
Your Information, Our Responsibility

1. Introduction

Ong24 ("we", "Platform", "ong24.vin") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, store, use, and protect your personal information when you register, log in, or interact with the ong24 platform in any form.

We understand that trust is the foundation of a good relationship between a platform and its users. That's why we've written this Privacy Policy in plain, easy-to-understand language — free from confusing legal jargon — so you truly know the rights and protections you have as an ong24 member.

This policy applies to all ong24 services, including the main website at ong24.vin, Android and iOS mobile apps, and all official communication channels of the platform.

2. Data We Collect

Ong24 only collects data that is strictly necessary to provide a secure, fair, and legally compliant service. The following are the categories of data we collect:

2.1 Information You Provide Directly

• Full name as shown on a valid identification document
• Date of birth for age verification (18+ requirement)
• Active email address for account communications
• A valid Malaysian phone number
• Current residential address
• KYC documents: MyKad, passport, utility bill, or recent bank statement
• Payment method details registered under your name

2.2 Automatically Collected Information

• IP address and general location information (country/city)
• Device type, operating system, and web browser version
• Login session data and activity timestamps
• Records of deposit, wagering, and withdrawal transactions
• Gaming history and platform usage patterns
• Cookie and related tracking technology data

2.3 Information from Third Parties

In certain cases, we may receive information from third-party identity verification providers used during the KYC process, payment processors that confirm transaction status, or fraud prevention agencies that help us identify suspicious activity.

3. How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. ong24 uses your personal information for the following:

3.1 Account Management & Services

We process your data to create and manage your ong24 account, verify your identity through KYC, securely process deposits and withdrawals, and provide effective customer support whenever you need assistance.

3.2 Security & Fraud Prevention

Technical data such as IP addresses, device information, and login patterns are actively used to detect and block suspicious login activity, prevent bonus abuse, identify duplicate accounts, and protect your account from unauthorised access.

3.3 Legal Compliance

As a law-compliant platform, ong24 is required to retain certain transaction records, report suspected money laundering activities to the relevant authorities, and comply with any lawful information requests from law enforcement agencies.

3.4 Platform Improvement

Anonymised usage data helps us understand how members interact with the platform, which games are most popular, and where we can improve the user experience. This data is not linked to your individual identity.

3.5 Marketing Communications

With your consent, we send promotional notices, bonus offers, and platform updates via email or in-app notifications. You can opt out of marketing communications at any time through your account settings.

4. Data Sharing with Third Parties

Ong24 does not sell or transfer your personal data to third parties for their own commercial purposes. However, there are limited situations where we may need to share your data with trusted parties:

4.1 Trusted Service Providers

Third parties that help us operate the platform — such as payment processors, KYC service providers, server hosts, and technical support providers — may need to access certain data to perform their functions. All such providers are bound by strict confidentiality agreements and may only use your data for the specified service purposes.

4.2 Legal Requirements

Ong24 will disclose your personal data to the relevant authorities where required by law, court order, or official directive from an enforcement agency. In all such cases, we will only disclose the specifically required data.

4.3 Business Transfers

If ong24 is involved in any merger, acquisition, or asset transfer, members' personal data may form part of the transferred assets. Members will be notified in advance and will have the option to close their account before the transfer takes place.

5. Data Security

Ong24 implements multiple layers of technical and organisational safeguards to keep your personal data secure at all times:

• Encryption in transit: All communications between your device and ong24 servers are secured with TLS 1.3 / 256-bit SSL, ensuring your data cannot be intercepted in transit.
• Encryption at rest: Sensitive data such as payment information and KYC documents are encrypted at rest in our database using AES-256 standards.
• Tiered access control: Only staff with legitimate operational needs may access member personal data, and every access is logged for audit purposes.
• Continuous monitoring: An intrusion detection system (IDS) operates 24/7 to detect and respond to any security threats in real time.
• Regular security testing: ong24 conducts regular penetration testing through independent cybersecurity firms to identify and patch vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): Members can enable 2FA via account settings for an extra layer of protection during login.

While we take all reasonable precautions, no system on the internet can be guaranteed 100% secure. In the event of a security incident involving your data, we will notify you within 72 hours of identifying the incident.

6. Cookies & Tracking Technologies

Ong24 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

6.1 Essential Cookies

These cookies are required for core platform functionality, such as maintaining your login session, remembering language preferences, and ensuring transaction security. The platform cannot function properly without them and they cannot be disabled.

6.2 Performance & Analytics Cookies

We use trusted third-party analytics tools to understand how members use the platform — which pages are visited most, average session duration, and where users encounter issues. All data is processed in aggregate form that does not identify individuals.

6.3 Preference Cookies

These cookies store your personal preferences — such as display settings, language selection, and notification settings — so you don't have to reconfigure them each time you log in.

7. Your Rights as a User

Under Malaysia's PDPA and global data protection best practices, you have the following rights regarding your personal data at ong24:

To exercise any of the above rights, contact our data protection team via live chat or email at [email protected]. We will process your request within 30 business days.

8. Data Retention & Deletion

8.1 Retention Period

Ong24 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. In general:

• Active account data is retained for as long as your account remains active.
• Financial transaction records are retained for a minimum of 7 years to comply with Malaysian tax and financial legal requirements.
• KYC documents are retained for a minimum of 5 years after account closure.
• Customer support communication logs are retained for 2 years.
• Anonymous analytics data is retained indefinitely as it cannot be linked to any individual.

8.2 Deletion Process

When data is no longer needed and there is no legal obligation to retain it, ong24 will securely delete or anonymise it using industry-standard methods. Anonymised data cannot be re-linked to your identity and may be retained for statistical purposes.

9. Children's Privacy

The ong24 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal information from underage children or minors. Should we discover that information from an underage individual has been collected without our knowledge, we will immediately delete that data and close the relevant account.

Parents or guardians who suspect their child may have registered on the ong24 platform are encouraged to contact us immediately via customer support so that appropriate action can be taken without delay.

Ong24 also provides parental control tools and responsible gambling educational resources on the Responsible Gaming us.

10. Privacy Policy Amendments

Ong24 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform technology developments. All amendments will be posted on this page with a clear update date.

For material amendments that significantly affect your privacy rights, we will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

We recommend reviewing this page periodically. If you disagree with any amendments, you have the right to close your account before the changes take effect.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the ong24 data protection team is ready to assist through the following channels:

• Live Chat: Available 24/7 via the chat icon in the bottom corner of the platform — the fastest way to get a response.
• Email: [email protected] — we aim to respond within 24 hours for all privacy-related enquiries.
• FAQ: Visit page Frequently Asked Questions for answers to the most frequently asked questions about your account and privacy.
• Terms of Use: Read Terms and Conditions us to understand the full agreement between you and ong24.

For official requests relating to data rights (access, correction, deletion), please include "PDPA Data Rights Request" in your email subject line along with your account number and full name to expedite the process.