Privacy Policy

This Privacy Policy ("Policy") describes how ongmari44 ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "the User") who access or use our online casino and sports betting platform at https://ongmari44.cam (the "Website") and any associated mobile or progressive web application.

ongmari44 is committed to protecting your privacy and handling your personal data in a responsible, transparent manner. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of our platform.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference. Where a conflict arises between this Policy and our Terms & Conditions in relation to privacy matters, this Policy shall prevail.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, contact details, financial information, device identifiers, and behavioural data.
• "Data Controller" means ongmari44, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of ongmari44 under a contractual arrangement.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "KYC" (Know Your Customer) means the identity and address verification process required for regulatory compliance and fraud prevention.
• "Cookies" means small data files placed on your device by the Website to enable platform functionality, session management, and analytics.
• "AML" (Anti-Money Laundering) means the legal obligations applicable to financial services operators including the monitoring and reporting of suspicious transaction patterns.
• "MYR" means Malaysian Ringgit, the primary transaction currency of the platform.

ongmari44 collects the following categories of personal data from users of our platform:

We collect personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Technical and usage data collected automatically when you access the Website or platform, including IP addresses, device identifiers, and session activity logs.
• Payment Processors: Financial transaction data shared with us by our Malaysian payment partners including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank in the course of processing deposits and withdrawals.
• KYC and Identity Verification Partners: Identity and address verification data returned to us by our contracted KYC service providers when you submit identity documents.
• Cookies and Tracking Technologies: Behavioural and session data collected via cookies placed on your device as described in Section 9 of this Policy.
• Third-Party Game Providers: Gaming session and outcome data transmitted from our contracted game studio partners to our servers for the purpose of accurate balance management and dispute resolution.

ongmari44 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your player account, including account authentication, security, and access control.
• Payment Processing: Processing deposits and withdrawals in MYR via your chosen payment method, reconciling transactions, and managing chargebacks or payment disputes.
• Identity Verification (KYC): Verifying your identity, age (21+), and address to comply with our licensing obligations and anti-money laundering requirements.
• Regulatory Compliance: Fulfilling our legal obligations including AML reporting, suspicious activity monitoring, sanctions screening, and tax reporting where required.
• Customer Support: Responding to your queries, managing complaints, and providing technical assistance via live chat, email, and WhatsApp.
• Platform Security: Detecting, preventing, and investigating fraud, account takeover, collusion, bonus abuse, and other prohibited conduct.
• Responsible Gambling: Monitoring your gaming activity for patterns consistent with problem gambling and administering your chosen responsible gambling tools (deposit limits, self-exclusion, session timers).
• Platform Improvement: Analysing aggregated usage data to improve game offerings, payment flows, and platform performance.
• Marketing Communications: Sending you promotional offers, bonuses, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time.

ongmari44 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the contract formed between you and ongmari44 when you create an account and accept our Terms & Conditions — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, AML reporting duties, and gaming licence requirements.
• Legitimate Interests: Processing carried out in furtherance of ongmari44's legitimate business interests — including fraud prevention, platform security, and platform improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — principally for the sending of direct marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ongmari44 does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. We share your data only in the limited circumstances described below:

• Payment Service Providers: We share transactional data with our Malaysian payment partners (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, Visa, and Mastercard) to process deposits and withdrawals on your behalf.
• KYC and Identity Verification Partners: We share identity document images and personal details with contracted KYC service providers solely for the purpose of age and identity verification.
• Game Studio Partners: We share session tokens and anonymised player identifiers with our licensed game studio partners to facilitate game delivery. These partners do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities where required by law, court order, or regulatory obligation — including AML reporting and responses to lawful government requests.
• Fraud Prevention and Security Partners: We share technical data (IP addresses, device fingerprints) with our fraud detection partners to identify and prevent fraudulent activity on the platform.
• IT Infrastructure Providers: We use contracted cloud hosting and infrastructure providers who process data on our behalf under strict data processing agreements. These providers act only on our instructions.

ongmari44 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to satisfy applicable legal, regulatory, tax, accounting, or licensing requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

ongmari44 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your language and display preferences, and collect aggregated analytics data to improve platform performance.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the platform. These include session management cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language setting (English, Bahasa Melayu, or Mandarin), display theme, and notification preferences. These improve your experience but are not strictly required for core platform function.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform — pages visited, session duration, feature usage — to help us identify areas for improvement. No personally identifiable information is included in analytics reports.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. For browsers on Malaysian Android and iOS devices, cookie settings are typically accessible under Settings → Privacy → Site Settings (Chrome) or Settings → Safari → Privacy & Security (Safari).

ongmari44 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for all personal data and payment information held on our infrastructure.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Two-factor authentication (2FA) for all internal administrative system access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Formal data breach response procedures, including notification protocols for incidents that meet the threshold for regulatory reporting.

While ongmari44 takes all reasonable steps to safeguard your data, no system is completely immune to security risks. You are responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your ongmari44 account, please contact us immediately at [email protected].

ongmari44 operates under international gaming licensing, and our infrastructure and service providers may be located in countries outside Malaysia. As a result, your personal data may be transferred to and processed in jurisdictions other than Malaysia.

Where such international transfers occur, ongmari44 ensures that adequate safeguards are in place to protect your data, which may include:

• Transfers to jurisdictions recognised as providing an adequate level of data protection under applicable frameworks.
• Implementation of contractual data protection clauses between ongmari44 and the receiving data processor, requiring the processor to maintain standards of protection equivalent to those described in this Policy.
• Other safeguards as appropriate to the specific transfer and jurisdiction involved.

As an individual whose personal data is processed by ongmari44, you hold the following rights in relation to that data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request":

ongmari44 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21 years. Our account registration process includes date of birth verification, and our KYC process confirms age via government-issued identification.

If ongmari44 becomes aware that personal data has been inadvertently collected from a person under 21, we will take immediate steps to delete that data and close the associated account. Any deposits made to such an account will be returned to the original payment method, and any winnings will be forfeited.

ongmari44 reserves the right to amend, update, or replace this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where amendments are material — such as changes to the categories of data collected, the purposes of processing, or the third parties with whom data is shared — ongmari44 will notify registered account holders via their registered email address or via a platform notification at least five (5) days before the changes take effect.

Your continued use of the ongmari44 platform following the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ongmari44, please contact our Data Protection team through the following channels:

• Email: [email protected] — Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the platform — average response time 3–5 minutes
• Languages: Enquiries accepted in English, Bahasa Melayu, and Mandarin Chinese
• Operating Hours: 00:00–23:59, Monday to Sunday (Malaysian Standard Time, UTC+8)

We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response to formal data rights requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.