OVO99's Privacy Commitment
This Privacy Policy describes OVO99's data protection practices and applies to all users of the ovo99.ws platform. By using our platform, you agree to the collection and use of information as described here. If you do not agree, please discontinue use of our services.
Introduction & Scope of Privacy Policy
OVO99 is an online betting platform operated to provide online gambling services to Malaysian players. We understand that your trust depends not only on fair gameplay and fast payouts — but also on how we handle the personal information you entrust to us.
This Privacy Policy ("Policy") describes the types of personal data we collect, why we collect it, how we use it, who we share it with (if anyone), and your rights as the data owner. This Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 and international best practices in data protection.
This Policy applies to all users of the OVO99 platform, including website visitors, registered members, and anyone who interacts with our platform via the website, mobile app, or customer support channels.
Important: Please Read Before Registering
By registering an OVO99 account, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, you are advised not to register for or use OVO99's services.
Personal Data We Collect
OVO99 collects only the data genuinely required to provide our services. We do not collect excessive or irrelevant data. The categories of data we collect are as follows:
2.1 Data You Provide Directly
- Identity Information: Full name, date of birth, national identification number (MyKad) or passport.
- Contact Information: Email address, phone number, residential address.
- Financial Information: Bank account numbers, e-wallet numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay), for deposit and withdrawal purposes.
- Account Information: Username, password (stored in encrypted form), security questions.
- Verification Documents: A copy of your MyKad or passport uploaded during the KYC (Know Your Customer) process.
2.2 Automatically Collected Data
- Technical Data: IP address, device type, operating system, browser version.
- Usage Data: Pages visited, session duration, games played, and betting patterns.
- Location Data: General location based on IP address (not precise to GPS level).
- Cookie Data: Session cookies, preference cookies, and analytics cookies (see Section 6 for details).
| Data Category | Mandatory? | Primary Purpose | Retention Period |
|---|---|---|---|
| Name & IC / Passport | Required | Identity Verification & KYC | For the duration of active account + 7 years |
| Email & Phone Number | Required | Communication & Account Security | For the duration of the active account |
| Payment Information | Required | Deposits & withdrawals | For the duration of active account + 7 years |
| IP Address & Device | Auto | Security & Fraud Detection | 90 days |
| Betting Records | Auto | Audit & dispute resolution | 5 years |
| Analytics Cookie Data | Optional | Platform improvements | 12 months |
How We Use Your Personal Data
OVO99 processes your personal data on valid legal grounds — namely to perform a contract (member agreement), comply with legal obligations, pursue our legitimate interests, or act on your consent. The specific purposes for which data is used are as follows:
3.1 Service Provision
- Creating and managing your OVO99 member account.
- Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay.
- Processing withdrawals to your bank account or e-wallet.
- Enabling you to play slots, Live Casino, Sports Betting, poker, blackjack, cricket, and Virtual Sports.
- Providing customer support in Bahasa Malaysia.
3.2 Legal & Security Compliance
- Verifying your identity in accordance with KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
- Detecting and preventing fraud, money laundering, and other unlawful activities.
- Complying with directives from regulatory and law enforcement authorities.
- To verify that you meet the minimum age requirement of 18 years.
3.3 Service Improvements
- Analysing usage patterns to improve the OVO99 platform experience.
- Personalising content and game recommendations based on your preferences.
- Sending you relevant promotions and bonuses (with your consent).
- Conducting internal research to improve our products.
Purpose Limitation Principle
OVO99 adheres strictly to the principle of "limited purpose" – we only use your data for the purposes stated at the time of collection. We will not use your data for any other purpose without first obtaining your renewed consent.
Sharing Data with Third Parties
OVO99 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data sharing only occurs in the following limited circumstances:
4.1 Trusted Service Providers
We share necessary data with third-party service providers who support OVO99's operations, including:
- Payment Processors: E-wallet and banking service providers (only data required to process transactions).
- Game Providers: Gaming software companies that provide slots, live casino, and other games (anonymised data).
- Cloud Services: Technical infrastructure providers that store data in secure data centres.
- Analytics Tools: Web analytics services used to understand platform usage patterns (aggregated data).
All service providers are bound by strict data protection agreements and are only permitted to use your data for purposes specified by OVO99.
4.2 Legal Requirements
OVO99 may disclose your personal data to the relevant authorities when required by Malaysian law, including the police, tax authorities, or applicable regulators. We will notify you of any such disclosure unless prohibited by law.
We Never
Ovo99 never sells your personal data to advertisers, data brokers, or any third party for commercial purposes. Your data is not a commodity to us.
Ovo99's Data Security Measures
The security of your data is ovo99's top priority. We continuously invest in the latest security technologies and processes to keep your data protected at all times.
Technical Security Measures
- 256-bit SSL/TLS Encryption: All communications between your device and ovo99's servers are encrypted to the highest security standards.
- Data-at-Rest Encryption: Sensitive data such as passwords and financial information is stored in encrypted form — no OVO99 staff member can view your password.
- Two-Factor Authentication (2FA): An additional layer of security for your account.
- Intrusion Detection System: Automated 24/7 monitoring to detect and block unauthorised access.
- Regular Data Backups: Data is backed up regularly to a separate secure location.
Operational Security Measures
- Employee data access rights are governed by a least-privilege principle — each staff member can only access the data necessary for their role.
- Mandatory information security training is conducted regularly for all OVO99 staff.
- Independent security audits by external firms are conducted every quarter.
- Clear, well-practised incident response procedures to handle any data breach effectively.
Shared Responsibility
While OVO99 takes all reasonable steps to protect your data, account security also depends on your own actions. Do not share your password, use unsecured public WiFi networks, or click suspicious links claiming to be from OVO99.
Cookies & Tracking Technologies
OVO99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
You can manage or disable cookies (except essential cookies) through your web browser settings or via the cookie preference centre in your OVO99 account. Please note that disabling certain cookies may affect some platform functionality.
Your Rights Under Malaysia's PDPA
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:
Right of Access
Request a copy of all personal data we hold about you at any time.
Right to Rectification
Request corrections to any inaccurate or incomplete data in your account.
Right to Erasure
Request the deletion of your personal data (subject to legal retention requirements).
Right to Restrict Processing
Request that we restrict how we process your data under certain circumstances.
Right to Data Portability
Request your data in a structured format for transfer to another provider.
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
How to Submit a Data Rights Request
To submit any request related to your data rights, please contact OVO99's Data Protection Officer by email at privacy@ovo99.ws or via LiveChat. We will process your request within 21 business days as required under Malaysia's PDPA.
Data Retention & Deletion
OVO99 retains your personal data only for as long as necessary for the original purpose of collection, or as required by applicable law. A data minimisation principle applies — no data is kept longer than necessary.
Data Retention Policy
- Active Account Data: Retained for as long as your ovo99 account remains active.
- Financial & Transaction Records: Retained for 7 years from the transaction date in accordance with Malaysian financial regulatory requirements.
- KYC Records (Identity Documents): Retained for the duration of the active account and 7 years after account closure for AML purposes.
- Betting Records: Retained for 5 years for audit and dispute resolution purposes.
- Access & Security Logs: Retained for 90 days and then automatically deleted.
- Marketing Data: Deleted immediately upon withdrawal of your consent.
International Data Transfers
In certain cases, your personal data may be processed or stored outside Malaysia by OVO99's cloud service providers or operating partners. In all such cases, OVO99 ensures that:
- The recipient country or entity provides a level of data protection equivalent to Malaysia's PDPA.
- Binding data transfer agreements compliant with international standards have been signed.
- Additional safeguards such as end-to-end encryption are applied during data transfers.
- You will be notified, where permitted by law, of any significant data transfers.
Primary Server Location
OVO99's primary servers are located in Asia, and all core data for Malaysian players is stored with preference in the Asia-Pacific region to comply with local data sovereignty requirements.
Privacy Policy Updates
OVO99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. You will be notified of significant amendments through:
- An in-platform OVO99 notification will be sent upon your next login.
- An email will be sent to the address registered in your account at least 14 days before the changes take effect.
- A prominent notice on the OVO99 website homepage.
The latest version of this Privacy Policy is always available on this page. The "Updated" date at the top of the page indicates when the most recent amendment was made.
Contact OVO99's Data Protection Officer
If you have any questions, concerns, or complaints regarding this Privacy Policy or how ovo99 handles your personal data, please reach out to us through the following channels: