Privacy Policy

Introduction

This Privacy Policy (the "Policy") is published by OCBet (referred to herein as "OCBet", "we", "us", or "our"), the operator of the online sports betting and live casino platform accessible at https://ocbet.click (the "Platform"). This Policy governs the collection, processing, storage, and disclosure of personal data relating to individuals who use or access the Platform (referred to as "User", "you", or "your").

OCBet is committed to protecting the privacy and personal data of all users in accordance with applicable international data protection standards. We process personal data lawfully, fairly, and transparently, collecting only what is necessary for clearly specified, legitimate purposes.

By registering an account, accessing the Platform, or submitting any personal information to OCBet, you acknowledge that you have read, understood, and consent to the practices described in this Policy. This Policy is to be read alongside our Terms & Conditions.

Definitions

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, either directly or in combination with other available information.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means OCBet in its capacity as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party engaged by OCBet to process Personal Data on its behalf and in accordance with OCBet's instructions.
• "KYC Data" means identity and verification documentation collected as part of OCBet's Know Your Customer and Anti-Money Laundering compliance obligations.
• "Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, financial account details, or biometric data.
• "Cookies" means small text files placed on a User's device by the Platform to store session information and usage preferences.

Data We Collect

OCBet collects the following categories of Personal Data:

How We Collect Personal Data

OCBet collects Personal Data through the following means:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal, use live chat support, or submit any form on the Platform;
• Automated Technical Collection: Via server logs, session tokens, device fingerprinting, and cookies when you access the Platform;
• Payment Service Providers: Financial data associated with transactions processed through DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect;
• Third-Party Verification Services: Identity data received from KYC verification service providers engaged by OCBet for AML compliance purposes;
• Fraud Prevention Partners: Risk signals and device reputation data from fraud detection service providers to protect the integrity of the Platform;
• Publicly Available Sources: Where necessary for compliance purposes, data from sanctions lists, politically exposed persons registers, or publicly available court records.

Data Processing & Legal Basis

OCBet processes Personal Data only where a lawful basis for processing exists. The primary legal bases applicable to OCBet's data processing activities are as follows:

• Contractual Necessity: Processing required to perform the contract between OCBet and the User — including account operation, transaction processing, and customer support;
• Legal Obligation: Processing required to comply with OCBet's international licensing obligations, including Anti-Money Laundering (AML), Know Your Customer (KYC), and Counter-Terrorism Financing (CTF) requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and business analytics, where OCBet's legitimate interests are not overridden by User rights;
• Consent: Processing for direct marketing communications, where Users have explicitly opted in to receive such communications. Consent may be withdrawn at any time.

How We Use Your Personal Data

OCBet uses collected Personal Data for the following purposes:

• To create, maintain, and administer your Account on the Platform;
• To process deposits and withdrawals through Malaysian payment channels including DuitNow, FPX, and e-wallets;
• To verify your identity and age (minimum 21 years) in accordance with our KYC and responsible gambling obligations;
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities;
• To monitor betting activity for responsible gambling purposes, including applying self-imposed deposit limits and cooling-off periods;
• To provide 24/7 customer support and resolve disputes relating to bets, transactions, or account matters;
• To communicate account-related notifications including transaction confirmations, security alerts, and policy updates;
• To send promotional offers, bonuses, and marketing communications where you have provided consent;
• To analyse Platform usage, optimise performance, and improve the User experience for Malaysian players;
• To comply with legal and regulatory obligations under OCBet's international licensing framework.

Data Sharing & Disclosure

OCBet does not sell, rent, or trade Personal Data to third parties for commercial purposes. Personal Data may be disclosed in the following limited circumstances:

• Payment Service Providers: Financial data is shared with DuitNow, FPX, and Malaysian e-wallet operators solely to the extent necessary to process transactions;
• KYC & AML Partners: Identity verification data is shared with licensed third-party KYC service providers engaged for regulatory compliance;
• Fraud Prevention Services: Technical and behavioural data may be shared with fraud detection partners to protect the security of the Platform and its users;
• Game Studio Partners: Limited session and wagering data is shared with international game providers to facilitate game delivery and resolve disputes;
• Regulatory Authorities: OCBet may disclose Personal Data to its licensing authority or to law enforcement agencies where required by applicable law or a valid legal order;
• Business Transfers: In the event of a merger, acquisition, or sale of OCBet's business, Personal Data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

Data Retention

OCBet retains Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or OCBet's licensing obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations;
• Transaction & Financial Data: Retained for a minimum of five (5) years following the date of each transaction;
• Betting & Gaming Records: Retained for a minimum of three (3) years following the date of each betting event;
• Support Correspondence: Retained for three (3) years following resolution of the relevant support interaction;
• Marketing Preferences: Retained until withdrawal of consent or account closure, whichever is earlier;
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders re-identification impossible.

Data Security

OCBet implements industry-standard technical and organisational security measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the OCBet Platform is encrypted using TLS 1.3 (Transport Layer Security);
• Encryption at Rest: Personal Data and financial records stored in OCBet's databases are encrypted using AES-256 encryption;
• Access Controls: Access to Personal Data is restricted to authorised OCBet personnel and third-party processors on a strict need-to-know basis, enforced through role-based access controls;
• Two-Factor Authentication: Account access is protected by optional two-factor authentication, and we strongly encourage all Users to enable this feature;
• Penetration Testing: OCBet's Platform undergoes periodic independent security audits and penetration testing;
• Incident Response: OCBet maintains a documented data breach response procedure and will notify affected Users and relevant authorities in the event of a significant breach, in accordance with applicable obligations.

Cookies & Tracking Technologies

OCBet uses cookies and similar tracking technologies to provide a functional, personalised, and secure platform experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the operation of the Platform, including session management, login authentication, and fraud prevention. These cookies cannot be disabled.
• Functional Cookies: Store User preferences such as language, deposit limit settings, and interface preferences to personalise the Platform experience.
• Analytics Cookies: Collect aggregated, anonymised data about Platform usage to help OCBet understand user behaviour and improve platform performance. No personally identifiable information is shared through analytics cookies.
• Security Cookies: Support fraud detection and anti-bot mechanisms by assessing device and session risk signals.

You may manage non-essential cookie preferences through your browser settings. However, disabling essential cookies may impair Platform functionality or prevent you from accessing certain features. OCBet does not use third-party advertising cookies or share tracking data with advertising networks.

Your Data Rights

Subject to applicable law and OCBet's compliance obligations, you have the following rights with respect to your Personal Data held by OCBet:

To exercise any of the rights above, please contact OCBet via live chat or email (details in Section 15). We will respond to all verifiable rights requests within thirty (30) calendar days of receipt. Some requests may be declined where they conflict with OCBet's mandatory legal obligations, including AML and KYC record-keeping requirements.

International Data Transfers

OCBet operates under an international gaming licence and engages service providers located in various jurisdictions. As a result, your Personal Data may be transferred to, and processed in, countries other than Malaysia. Such transfers may include storage on cloud infrastructure with servers located outside Malaysia.

Where Personal Data is transferred internationally, OCBet implements appropriate safeguards to ensure that the receiving party provides a level of data protection equivalent to that required under OCBet's international licensing obligations. These safeguards may include contractual data processing agreements, standard contractual clauses, or equivalent measures.

Minors & Age Protection

The OCBet Platform is strictly prohibited to persons under the age of 21. OCBet does not knowingly collect Personal Data from individuals under 21 years of age. All accounts are subject to mandatory KYC identity verification, which includes confirmation of age.

Amendments to This Policy

OCBet reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, OCBet's data processing practices, or our licensing obligations. Where amendments are material, OCBet will notify registered Users by email to their registered address or via a prominent notice on the Platform, at least seven (7) days prior to the amendments taking effect.

Your continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Policy. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage Users to review this Policy periodically.

Contact Us

For any queries, concerns, or rights requests relating to this Privacy Policy or OCBet's personal data practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest channel for real-time queries and urgent matters.
• Email: [email protected] — please include "Privacy Request" in your subject line for data rights enquiries.

OCBet targets a response to all privacy-related written enquiries within five (5) business days. Complex rights requests such as data portability or erasure may require up to thirty (30) calendar days for full resolution.