Privacy Policy — ojol77

1. Introduction

This Privacy Policy ("Policy") describes how ojol77 ("ojol77", "Platform", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("User", "Player", "you", "your") who access or use the online casino and sports betting platform operated at https://ojol77.lat and all associated services.

ojol77 operates as an online gaming entertainment platform under international licensing, serving players across Malaysia — including those based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other locations throughout the country. All real-money transactions are denominated in Malaysian Ringgit (MYR) and processed through trusted local and digital payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy, and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you should cease using the Platform immediately.

This Policy should be read in conjunction with our Terms & Conditions, which are incorporated by reference.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data held by ojol77.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination thereof.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, ojol77.
• "Data Processor" means any third party that processes personal data on behalf of ojol77 pursuant to a written data processing agreement.
• "KYC Data" means identity and address verification documents submitted by a Player as part of the Know Your Customer process.
• "Cookie" means a small text file placed on a User's device by the Platform to enable functionality, analytics, or personalisation.
• "Sensitive Personal Data" means categories of personal data that attract heightened protection under applicable law, including but not limited to financial account details and government-issued identity document numbers.

3. Data Controller Information

ojol77 is the Data Controller responsible for personal data collected through the Platform. As Data Controller, ojol77 determines the purposes for which your personal data is processed and the means by which it is processed. Certain operational functions may be performed by authorised Data Processors engaged by ojol77 under contractual data processing agreements that require those processors to handle your data in accordance with this Policy and applicable data protection law.

For all data protection enquiries, corrections, deletion requests, or complaints relating to the handling of your personal data, please contact our Data Protection team via: [email protected]

4. Personal Data We Collect

ojol77 collects personal data through several channels, including account registration, ongoing use of the Platform, payment processing, and communications with our support team. The categories of data we collect are described below.

4.1 Registration Data

When you create an account, we collect: your full legal name, date of birth, email address, mobile phone number, and chosen username.

4.2 Identity Verification (KYC) Data

To comply with our licensing obligations and applicable anti-money laundering (AML) requirements, we collect: a copy of your government-issued identification document (MyKad, passport, or driver's licence), proof of residential address (utility bill or bank statement dated within three months), and a selfie holding your ID for facial verification purposes.

4.3 Financial Data

To process deposits and withdrawals in MYR, we collect: your preferred payment method type (e-wallet, bank transfer, or cryptocurrency), e-wallet account identifiers (e.g., registered phone number for Touch 'n Go eWallet, Boost, or GrabPay), bank account details (account holder name, bank name such as Maybank/CIMB/Public Bank/Hong Leong Bank, and account number), and transaction history within the Platform.

4.4 Usage & Technical Data

We automatically collect technical data when you access the Platform, including: IP address, device type and operating system, browser type and version, session duration, pages visited, game history, betting activity, and error logs.

4.5 Communications Data

When you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution outcome.

5. How We Use Your Personal Data

ojol77 processes your personal data for the following purposes:

6. Legal Basis for Processing

ojol77 relies on the following legal grounds to process your personal data:

• Contract Performance: processing is necessary to provide you with the services you have requested by registering an account and placing bets on the Platform.
• Legal Obligation: processing is required to comply with applicable laws, including anti-money laundering legislation and licensing conditions imposed by our regulatory authority.
• Legitimate Interests: processing is necessary for our legitimate business interests, including fraud prevention, Platform security, and responsible gambling monitoring, provided those interests do not override your fundamental rights.
• Consent: for optional activities such as receiving marketing communications or accepting non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7. Sharing Your Personal Data

ojol77 does not sell your personal data. We may share your data with the following categories of recipients in limited circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, we share necessary financial data with payment processors operating services including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and relevant banking infrastructure. These providers are contractually bound to process your data solely for the purpose of executing the relevant transaction.

7.2 Identity Verification Providers

We engage specialist KYC verification vendors to assist with identity checks. These vendors process your KYC documents and biometric data solely for verification purposes under a data processing agreement with ojol77.

7.3 Game and Technology Providers

Third-party game studios and technology providers may receive pseudonymised usage data (e.g., session data and game round identifiers) to support game delivery, RTP auditing, and technical maintenance. These providers do not receive your name, financial data, or contact details.

7.4 Regulatory and Law Enforcement Authorities

ojol77 may disclose personal data to regulatory bodies, licensing authorities, or law enforcement agencies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of ojol77, its players, or the public.

7.5 Professional Advisers

We may share data with legal counsel, auditors, or other professional advisers where strictly necessary, subject to confidentiality obligations.

8. International Data Transfers

As an internationally licensed platform serving users in Malaysia, some of your personal data may be processed or stored on servers located outside Malaysia. Where such transfers occur, ojol77 ensures that appropriate safeguards are in place to protect your data, including standard contractual clauses approved under applicable data protection frameworks, or reliance on adequacy decisions where available.

By using the Platform, you acknowledge and consent to the transfer of your personal data to servers located in jurisdictions that may have different data protection standards than Malaysia. We take all reasonable steps to ensure your data remains protected regardless of where it is processed.

9. Data Retention

ojol77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following retention guidelines apply:

• Active account data: retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with standard AML record-keeping requirements applicable to internationally licensed gaming operators.
• KYC documents: retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: retained for a period of three (3) years from the date of the last communication.
• Marketing consent records: retained until you withdraw consent and for a reasonable period thereafter as evidence of your historical consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data destruction procedures.

10. Security Measures

ojol77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Two-factor authentication (2FA) available to all registered users and mandatory for internal administrative access;
• Role-based access controls limiting employee access to personal data to those with a specific operational need;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Incident response procedures, including breach notification protocols aligned with applicable regulatory requirements;
• Staff data protection training as part of onboarding and annual compliance refresh programmes.

Notwithstanding the measures above, no data transmission over the internet or electronic storage system is entirely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect your account has been compromised.

11. Cookies & Tracking Technologies

ojol77 uses cookies and similar tracking technologies to operate the Platform efficiently, to understand how users interact with it, and where consented, to deliver relevant content. The categories of cookies we use are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as session management, security authentication, and load balancing. These cookies cannot be disabled without materially impairing your ability to use the Platform.

11.2 Functional Cookies

Functional cookies remember your preferences (such as language settings and preferred currency display) to deliver a more personalised experience on return visits. Disabling these cookies may result in some features not functioning as expected.

11.3 Analytical Cookies

With your consent, we use analytical cookies to collect aggregated, pseudonymised data about how users navigate the Platform. This information helps us identify usability issues, popular features, and areas for improvement. You may opt out of analytical cookies at any time via your browser or cookie settings.

11.4 Managing Cookies

Most web browsers allow you to control cookies via browser settings. You can typically set your browser to refuse all cookies, accept only first-party cookies, or notify you when a cookie is being set. Instructions for managing cookies are available in your browser's help documentation. Please note that disabling strictly necessary cookies will affect the functionality of the Platform.

12. Your Data Rights

Subject to applicable law and any overriding legal obligations ojol77 may have, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We aim to respond to all verified requests within 30 days.

13. Minors & Age Verification

The ojol77 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to persons under the age of 21. Age verification is a mandatory step in our KYC process and is applied to all accounts prior to the processing of any withdrawal.

If ojol77 discovers that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the collected data to the extent not required to be retained for legal or regulatory purposes, and — where applicable law requires — notify relevant authorities.

Parents and guardians who believe a minor may have accessed or registered on the Platform are encouraged to contact us immediately at [email protected].

14. Third-Party Links and Services

The Platform may contain references to or integrations with third-party services (for example, game studios or payment processors). This Privacy Policy applies solely to personal data collected and processed by ojol77. We are not responsible for the privacy practices of any third-party service provider, and we encourage you to review the privacy policies of any third parties whose services you access in connection with using the Platform.

15. Amendments to This Policy

ojol77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing your personal data or a new category of data sharing — we will notify registered users by email or through a prominent in-Platform notice at least seven (7) days before the changes take effect.

Where changes are minor or administrative in nature (such as corrections to contact details or clarifications that do not alter your rights), we may update the Policy without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ojol77, please contact our Data Protection team using the details below. We are committed to addressing all enquiries promptly and professionally.