Privacy Policy

1. Who We Are

oc777 ("oc777", "we", "us", "our") operates the online casino and sports betting platform accessible at oc777.app. oc777 is the data controller responsible for the personal information collected through the platform. This Privacy Policy applies to all data processing activities carried out by oc777 in connection with the operation of the platform and the provision of services to registered players.

For the purposes of this policy, "you" and "your" refer to any individual who accesses, registers with, or uses the oc777 platform, regardless of whether they are located in Kuala Lumpur, Penang, Johor Bahru, Sabah, Sarawak, or any other location from which the platform is accessed.

2. Data We Collect

oc777 collects personal data from you in three primary ways: data you provide directly during registration and account management, data generated automatically through your use of the platform, and data obtained from third parties as part of identity verification and fraud prevention processes.

Category	Examples	Collection Method
Identity Data	Full name, date of birth, nationality, government-issued ID number	Provided during registration and KYC
Contact Data	Email address, mobile phone number, residential address	Provided during registration
Financial Data	Payment method type, transaction amounts, e-wallet identifiers (Touch n Go, Boost), bank account details for withdrawal	Provided during deposit/withdrawal
Account Data	Username, password (hashed), account settings, responsible gaming preferences	Generated during account creation and use
Usage Data	Games played, bets placed, session duration, login timestamps, device type, IP address, browser type	Collected automatically via platform logs
Communications Data	Live chat transcripts, support ticket content, email correspondence with oc777	Generated when you contact support

oc777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under applicable KYC requirements.

3. How We Use Your Data

oc777 processes personal data only for defined, lawful purposes. The primary purposes for which we use your data are:

• Account administration: Creating and managing your oc777 account, verifying your identity, and enabling you to access all platform features following successful login.
• Service delivery: Processing your deposits, withdrawals, bets, and game participation; communicating game results, bonus credits, and account notifications.
• KYC and AML compliance: Verifying your identity, age, and the source of your funds in accordance with anti-money-laundering obligations applicable under our international gaming licence.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and money laundering attempts that could harm you or other players.
• Responsible gaming: Monitoring for patterns that may indicate problem gambling behaviour; communicating responsible gaming resources; implementing deposit limits, cooling-off periods, or self-exclusion as requested by or applied to your account.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions.
• Legal compliance: Retaining records as required by applicable law and providing information to regulatory authorities where legally required.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, game selection, and user experience. This analysis does not result in decisions that individually affect your account.
• Marketing communications: Where you have opted in, sending you promotional offers, bonus notifications, and news about oc777. You may opt out of marketing communications at any time via your account settings or by contacting support.

4. Legal Basis for Processing

oc777 processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to provide the services you have requested under the oc777 Terms & Conditions, including account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC, AML, and record-keeping obligations under our international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where oc777's legitimate interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time without affecting prior processing.

5. Data Sharing

oc777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Service providers: Third-party vendors who process data on oc777's behalf, including payment processors (Touch n Go, Boost, and banking partners), identity verification services, cloud infrastructure providers, and customer support platform operators. All such vendors are contractually bound to process your data only as directed by oc777 and to maintain appropriate security standards.
• Game providers: Certified game studios whose titles are integrated into the oc777 platform may receive your anonymised player identifier and session data for the purpose of game delivery and RTP calculation. These providers do not receive your full identity or financial data.
• Regulatory authorities: We may disclose personal data to licensing authorities, law enforcement, or other government bodies when required to do so by law or in connection with an investigation into suspected unlawful activity.
• Business transfers: In the event of a merger, acquisition, or sale of oc777's business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to data processing arrangements.

Where personal data is shared with service providers outside of Malaysia, oc777 ensures that appropriate contractual safeguards are in place to maintain the level of protection required under applicable data protection standards.

6. Cookies & Tracking

The oc777 platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, prevent fraud, and collect aggregated usage analytics. Cookies used by oc777 fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled without affecting your ability to use the service. Includes session authentication cookies and security tokens.
• Functional cookies: Used to remember your language preferences, account settings, and responsible gaming configurations between sessions.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the platform, helping oc777 identify areas for improvement. Data collected via analytics cookies does not identify you personally.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to access the platform. oc777 does not use third-party advertising cookies or cross-site tracking technologies.

7. Data Retention

oc777 retains your personal data for as long as your account is active and for such additional periods as are required to comply with legal obligations. The following retention periods apply as a general guide:

• Account and identity data: retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• Transaction records: retained for a minimum of five years from the date of the transaction.
• Support communications: retained for three years from the date of the last interaction.
• Marketing consent records: retained for the duration of your consent and for two years following withdrawal of consent.

Where retention beyond these periods is required by a legal investigation or dispute, oc777 will retain the relevant data until the matter is resolved.

8. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by oc777:

• Right of access: You may request a copy of the personal data oc777 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to oc777's legal retention obligations.
• Right to restrict processing: You may request that oc777 limit its use of your data in certain circumstances.
• Right to data portability: You may request a copy of data you have provided to oc777 in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including processing for direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the oc777 support team via live chat. oc777 will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

9. Data Security

oc777 implements technical and organisational security measures appropriate to the sensitivity of the data processed. These include SSL/TLS encryption for all data in transit, hashed storage of passwords (no plaintext credential storage), role-based access controls limiting staff access to personal data, regular security assessments, and incident response procedures for detecting and addressing data breaches.

In the event of a data breach that poses a risk to your rights and freedoms, oc777 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

10. Children & Minors

11. Third-Party Links

The oc777 platform does not contain links to third-party websites. This Privacy Policy applies solely to data processed by oc777 through the oc777.app platform. oc777 is not responsible for the privacy practices of any third-party service providers beyond the contractual obligations described in Section 5 of this policy.

12. Changes to This Policy

oc777 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or an in-platform notification prior to the changes taking effect. The updated policy will be published on this page with a revised effective date. Your continued use of the platform following notification of changes constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the oc777 Data Support team: