Ojol77 Privacy Policy – Malaysia Member Personal Data Protection

1. Introduction

This Privacy Policy is published by ojol77 ("Platform", "We") and applies to all registered members and visitors of the ojol77 website at ojol77.run as well as our mobile app. It explains our practices for collecting, using, storing and protecting personal data.

Ojol77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We are committed to ensuring your personal data is handled with full accountability, transparency and within the bounds permitted by law.

By registering an account or using ojol77's services, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2. Information We Collect

Ojol77 collects various types of information depending on how you interact with our platform. This information is divided into three main categories:

3. How We Use Your Data

Personal information collected by ojol77 is used for the following purposes, which are necessary for platform operations and to fulfil our responsibilities to you:

• Account management — registration, identity verification, account settings and account-related support.
• Transaction processing — verifies deposits, processes withdrawals and maintains accurate financial records.
• KYC Verification — meets legal requirements relating to identity verification and anti-money laundering (AML).
• Service delivery — provides access to all games, personalises your experience and remembers your preferences.
• Platform security — detects and prevents fraud, account misuse and suspicious activity.
• Service communications — sends important notifications relating to your account, security and service updates.
• Responsible gaming — monitors usage patterns to identify signs of problem gambling and provide appropriate support tools.
• Platform improvement — analyses usage data in aggregate to improve service quality (no individual data is used).
• Legal compliance — fulfils reporting obligations and requirements of the relevant applicable authorities.

4. Legal Basis for Data Processing

Every processing of personal data by ojol77 has a valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract fulfilment — processing required to provide the services you requested through registration and use of the platform.
• Legal obligation — processing required to comply with legal obligations such as AML, KYC and financial reporting.
• Legitimate interest — processing for platform security, fraud prevention and service improvements that does not affect your rights.
• Consent — for certain types of processing such as marketing communications, we will obtain your explicit consent beforehand.

5. Data Sharing and Disclosure

Ojol77 does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your data is only shared under the following limited circumstances:

• Trusted service providers — payment processing companies, gaming software providers and technical infrastructure partners working on our behalf, all subject to strict data protection agreements.
• Legal requirement — when required by court order, authority investigation or applicable legal obligations in Malaysia.
• Fraud prevention — information shared with industry fraud prevention networks to protect all players from illegal activity.
• Business transfer — in the event of a merger or acquisition, data is transferred subject to equivalent or greater privacy protections.

6. Data Security

Ojol77 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

• Data encryption in transit — all communications between your device and ojol77 servers are protected by 256-bit SSL/TLS encryption.
• Data encryption at rest — sensitive information such as passwords and financial data is stored in encrypted form within our databases.
• Tiered access control — ojol77 staff only have access to the data needed to carry out their duties, with strict log monitoring in place.
• Regular security testing — our systems undergo regular penetration testing and security audits by independent parties.
• Incident response procedures — we have established security incident response procedures, including notification to affected members within the timeframe required by law.

7. Data Retention Period

Ojol77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law:

• Active account data — retained for the duration your account is active and for 5 years after account closure for legal requirements.
• Financial transaction records — retained for 7 years in accordance with applicable Malaysian financial legal requirements.
• Support communication logs — retained for 2 years for reference and service quality purposes.
• Technical data and system logs — retained for 12 months for security and technical troubleshooting purposes.
• KYC Documents — retained for the period required by the relevant authorities, typically 5–7 years.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with industry-standard procedures.

8. Cookies and Tracking Technologies

Ojol77 uses cookies and similar tracking technologies to enhance your experience on our platform. There are four types of cookies in use:

• Essential cookies — required for core platform functions such as login, gaming sessions and security. Cannot be disabled without affecting platform functionality.
• Functional cookies — remembers your preferences such as language, display settings and saved login information for your convenience.
• Analytical cookies — collects usage data anonymously to help us understand how the platform is used and improve it. This data does not identify you personally.
• Security cookies — used to detect suspicious activity, prevent fraud and ensure gaming session integrity.

9. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act (PDPA), you have the following rights regarding your personal data held by ojol77:

10. Protection of Children's Data

The ojol77 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from individuals below this age.

If you are under 18 years of age, you are not permitted to use ojol77's services or provide us with any personal information. Should we discover that personal data of an individual under 18 has been collected without our knowledge, that data will be deleted immediately and the associated account will be terminated.

If you believe that a minor has registered or is using the ojol77 platform, please contact us immediately so that appropriate action can be taken.

11. Amendments to the Privacy Policy

Ojol77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or new platform features.

Any significant amendments will be communicated to you via in-platform notification or your registered email at least 14 days before the changes take effect. Continued use of the platform after notice is given constitutes acceptance of the updated terms.

The "Last Updated" date at the top of this page indicates the current version of the Privacy Policy. We recommend reviewing this page periodically.

12. Contact Us Regarding Privacy

For any enquiries, concerns or requests relating to your privacy and personal data at ojol77, please contact us through the following channels:

• Live Chat — The fastest channel, available 24/7 within your account after login.
• Email: [email protected] (displayed as text only)

Our team will acknowledge receipt of your request within 3 business days and resolve the matter within 30 business days as required under Malaysia's PDPA. For more formal complaints regarding data protection, you may contact the Department of Personal Data Protection Malaysia.