ofa168 Privacy Policy

ofa168 ("we", "us", "our") operates the online gambling platform accessible at ofa168.win and is committed to protecting the privacy and personal data of all individuals who interact with our Platform, whether as registered Members or as visitors.

This Privacy Policy sets out in clear terms what personal data ofa168 collects from you, the purposes for which that data is collected and processed, the legal bases on which processing is carried out, and the rights available to you in relation to your personal data.

By registering an Account with ofa168, accessing the Platform, or using any Service offered by ofa168, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

ofa168 collects personal data through multiple channels in the course of providing its Services. The categories of data we collect include:

2.1 Registration Data. When you create an Account with ofa168, we collect your full legal name, date of birth, residential address, email address, and mobile telephone number. This data is required to establish your Account and verify your eligibility to use the Platform.

2.2 Identity Verification Data. To comply with our Know Your Customer (KYC) obligations under international gaming authority requirements, ofa168 collects copies of government-issued identity documents (such as a Malaysian identity card or passport) and, where applicable, proof of address and payment method documentation.

2.3 Financial Data. We collect records of deposits, withdrawals, and transaction history associated with your Account. This includes details of the payment methods you use, such as Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, or FPX online banking. We do not store full card numbers or full bank account credentials.

2.4 Gameplay Data. ofa168 records all betting and gaming activity on your Account, including bet amounts, game selections, outcomes, and session timestamps. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical Data. When you access the Platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, referring URLs, and pages visited. This data is collected via server logs and analytics tools.

2.6 Communications Data. If you contact ofa168 support via live chat, email, or any other channel, we retain records of those communications for quality assurance, compliance, and dispute resolution purposes.

2.7 Responsible Gaming Data. Where you use ofa168's responsible gaming tools — such as deposit limits, session timers, or self-exclusion — we record these elections and the dates on which they were made to ensure proper enforcement.

ofa168 processes personal data only for specific, legitimate purposes. The purposes for which we use your data are as follows:

• Account Management: To create, maintain, and administer your ofa168 Account, verify your identity, and process your transactions.
• Service Delivery: To provide you with access to ofa168's casino, sportsbook, and slots products and to process bets and gaming activity in accordance with applicable game rules.
• KYC & Regulatory Compliance: To fulfil our obligations under international gaming authority requirements, including age verification, identity verification, and anti-money laundering checks.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account compromise, collusion, and other prohibited conduct on the Platform.
• Financial Processing: To process deposits and withdrawals accurately and to maintain complete financial records associated with your Account.
• Customer Support: To respond to your enquiries, handle complaints, and resolve disputes in a timely and informed manner.
• Responsible Gaming: To monitor gambling behaviour for patterns that may indicate problematic gambling and to enforce responsible gaming elections such as self-exclusion and deposit limits.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, reliability, and user experience of the ofa168 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about ofa168 Services, subject to your communication preferences. You may opt out of marketing communications at any time via Account Settings or by contacting support.

ofa168 processes personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between ofa168 and you as a Member — specifically, to provide the gambling Services you have registered to use.
• Legal Obligation: Processing is necessary for ofa168 to comply with applicable legal and regulatory requirements, including KYC, AML, and responsible gaming obligations imposed by international gaming authorities.
• Legitimate Interests: ofa168 processes certain data on the basis of its legitimate business interests, including fraud prevention, Platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.1 Service Providers. ofa168 shares personal data with carefully selected third-party service providers who assist in delivering our Services. These include payment processors, KYC and identity verification providers, game software providers, fraud detection services, and IT infrastructure providers. All service providers are contractually bound to process data only as instructed by ofa168 and to maintain appropriate security standards.

5.2 Regulatory Bodies. ofa168 may disclose personal data to gaming regulators, financial intelligence units, and law enforcement authorities where required to do so by law or where disclosure is necessary to protect against fraud, money laundering, or other criminal activity.

5.3 No Sale of Data. ofa168 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of ofa168's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications via the Platform or registered email.

ofa168 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you access the Platform.

6.1 Essential Cookies. These cookies are strictly necessary for the Platform to function. They include session management cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.

6.2 Analytics Cookies. ofa168 uses analytics tools to understand how Members navigate the Platform, which features are most used, and where technical issues occur. Analytics data is aggregated and does not identify individual users.

6.3 Preference Cookies. These cookies remember your Platform preferences, such as language settings and display options, to improve your experience on return visits.

6.4 Managing Cookies. You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential cookies will impair your ability to use certain features of the ofa168 Platform, including maintaining a logged-in session.

ofa168 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law and regulatory requirements.

• Account Data: Retained for the duration of your Account and for a minimum of 5 years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of 7 years following the date of the transaction.
• KYC Documents: Identity verification documents are retained for a minimum of 5 years following Account closure or the completion of the last transaction, whichever is later.
• Support Communications: Records of support interactions are retained for 3 years from the date of the interaction.
• Marketing Preferences: Records of marketing consent and opt-out requests are retained indefinitely to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ofa168's data disposal procedures.

ofa168 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data transmitted between your device and the ofa168 Platform is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive data stored in ofa168's systems, including KYC documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data within ofa168's systems is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: ofa168's infrastructure is monitored continuously for unauthorised access attempts and security anomalies.
• Incident Response: ofa168 maintains a documented data breach response plan. In the event of a data breach affecting your personal data, ofa168 will notify you and the relevant regulatory authority in accordance with applicable breach notification requirements.

You have the following rights in relation to your personal data held by ofa168. To exercise any of these rights, please contact ofa168 support with your Account username and registered email address.

• Right of Access: You may request a copy of the personal data ofa168 holds about you. ofa168 will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Corrections to core Account data may require re-verification.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ofa168's legal obligation to retain certain records as set out in Section 7.
• Right to Restriction: You may request that ofa168 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You may request that ofa168 provide your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or contract performance.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ofa168's overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

ofa168 is strictly an adult platform. Our Services are intended exclusively for individuals aged 21 and above. ofa168 does not knowingly collect personal data from anyone under the age of 21.

ofa168 employs age verification procedures during the registration process and at the KYC stage to prevent underage access to the Platform. If you believe a minor has registered an Account with ofa168, please contact our support team immediately.

ofa168 operates globally and your personal data may be transferred to, stored, or processed in countries outside Malaysia. Where such transfers occur, ofa168 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the applicable data protection framework.

Safeguards used for international transfers include contractual data protection clauses with service providers, data processing agreements incorporating standard data protection obligations, and transfer to jurisdictions that maintain adequate data protection standards as determined by relevant authorities.

ofa168 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Privacy Policy will always be available at ofa168.win/privacy-policy, with the effective date clearly displayed at the top of the document.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect or use your data, or the rights available to you — ofa168 will notify registered Members via the Platform or by email to your registered address at least 14 days before the changes take effect.

Your continued use of the ofa168 Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any update, you should cease using the Platform and may request Account closure by contacting ofa168 support.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern relating to ofa168's data practices, please contact our support team.

You may reach ofa168 support via the live chat function available on the Platform at any time, or by writing to us at:

ofa168 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.