Privacy Policy — Ole777

Ole777 ("Ole777", "We", "Us", "Our") operates the online casino and sports betting platform accessible at https://ole777.casa (the "Website"). In the course of providing our Services to registered players and processing Website visitors' interactions, Ole777 collects and processes personal data.

This Privacy Policy ("Policy") sets out, in clear and accessible terms, what personal data Ole777 collects, why it is collected, how it is processed and stored, with whom it may be shared, and what rights you hold as a data subject. This Policy applies to all registered players, prospective players, and visitors to the Website regardless of their location, with specific reference to players accessing Ole777 from Malaysia.

By registering an account with Ole777, making use of the Services, or continuing to browse the Website after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

If you do not agree with any aspect of this Policy, please discontinue your use of the Website and contact our support team to close your account and request data deletion.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or can identify a living individual, directly or indirectly, including name, identification number, location data, online identifiers, or factors specific to the physical, economic, or social identity of that individual.
• "Processing" — Any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure, or destruction, whether by automated means or otherwise.
• "Data Controller" — Ole777, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" — A third party that processes personal data on behalf of Ole777 under a data processing agreement, such as a payment processor or KYC verification provider.
• "Data Subject" — The individual whose personal data is being processed (i.e., you, the player or Website visitor).
• "Cookies" — Small text files placed on your device by a website to store information about your preferences or browsing activity.
• "KYC" — Know Your Customer: the regulatory-mandated identity and address verification process.
• "Services" — All products, gaming content, betting markets, promotions, account features, and support tools offered by Ole777 via the Website.

Ole777 collects the following categories of personal data from players and Website visitors:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (to verify that you meet the minimum age requirement of 21years)
• Malaysian IC number (MyKad), Passport number, or Driver's License number
• Nationality and country of residence
• Photograph or image of yourself, as provided during KYC selfie verification

3.2 Contact Data

• Email address (registered account email)
• Malaysian mobile phone number
• Residential or correspondence address (as submitted for proof of address purposes)
• City of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)

3.3 Financial Data

• Payment method details (bank account name, partial account number, e-wallet identifier)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment methods used (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch'n Go eWallet, Boost, GrabPay, or cryptocurrency wallet addresses)
• Account balance information

3.4 Gaming & Behavioural Data

• Betting history, game selections, wager amounts, and outcomes
• Session duration, login timestamps, and in-game activity logs
• Bonus usage history, including promotions claimed and wagering progress
• Responsible gambling tool usage (e.g., deposit limit settings, self-exclusion requests)

3.5 Technical Data

• IP address and geolocation data at time of login or transaction
• Device type, operating system, browser type and version
• Cookie identifiers and session tokens
• Referring URL and Website navigation path data

3.6 Communications Data

• Records of live chat conversations with Ole777 support staff
• Email correspondence with Ole777 support or compliance teams
• Promotional communication preferences (opt-in / opt-out status)

Ole777 collects personal data through the following means:

• Direct submission by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account settings.
• Automated technical collection: Via cookies, web beacons, server logs, and similar tracking technologies that record your interaction with the Website and its features.
• Payment processors: When you make a deposit or request a withdrawal via DuitNow, FPX, e-wallet providers (Touch 'n Go, Boost, GrabPay), or bank transfers (Maybank, CIMB, Public Bank, Hong Leong), relevant transaction data is shared with Ole777 by the payment processor.
• Third-party verification providers: During KYC verification, Ole777 may use licensed third-party identity verification services which cross-reference your submitted documents against official data sources.
• Fraud prevention services: Ole777 may receive risk and fraud-signal data from specialist third-party fraud detection services to protect the integrity of the platform.

Ole777 processes your personal data only for clearly defined and legitimate purposes. The table below summarises the primary purposes of processing and the data categories involved:

Ole777 processes personal data on the following legal grounds, consistent with applicable data protection legislation:

• Contract Performance: Processing that is necessary to fulfil our contractual obligations to you as a registered player — including managing your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification mandates, anti-money laundering (AML) requirements, responsible gambling obligations, and regulatory reporting duties.
• Legitimate Interests: Processing carried out for purposes that serve the legitimate business interests of Ole777, where such interests are not overridden by your rights — including fraud detection, platform security, customer support, and service improvement analytics.
• Consent: Where you have expressly opted in to receive marketing communications from Ole777. You may withdraw this consent at any time by contacting support or updating your account preferences.

Ole777 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared in the following limited circumstances:

7.1 Service Providers (Data Processors)

Ole777 engages third-party service providers who process data on our behalf under contractual data processing agreements. These include payment processors (DuitNow, FPX, e-wallet providers, bank transfer facilitators), KYC document verification services, fraud detection and risk management providers, and cloud infrastructure and data hosting providers. All processors are bound by strict confidentiality and security obligations.

7.2 Regulatory & Legal Disclosure

Ole777 may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other government bodies in response to a lawful request, court order, or statutory obligation. Ole777 will only disclose the minimum data necessary to satisfy such a legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Ole777's business assets, personal data held by Ole777 may form part of the transferred assets. Players will be notified of any such change and will have the option to request data deletion if they do not wish their data to be processed by a new entity.

7.4 Consent-Based Disclosure

Ole777 will not share your personal data with any third party for purposes other than those described in this Policy without your prior explicit consent, except where required by law.

Ole777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following general retention periods apply:

• Active account data: Retained for the duration of your registered account plus minimum of five (5) years after account closure, in compliance with standard financial record-keeping obligations.
• KYC identity documents: Retained for a minimum of five (5) years following account closure, as required under applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial regulatory requirements.
• Customer support communications: Retained for three (3) years from the date of the communication, unless the communication relates to an active dispute.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for audit trail purposes.
• Cookie and technical log data: Retained for up to thirteen (13) months, depending on the type of cookie.

When data reaches the end of its required retention period, Ole777 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

Ole777 uses cookies and similar tracking technologies to improve platform functionality, maintain session integrity, and gather anonymised analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for basic platform functions including account login sessions, game loading, and transaction processing. These cookies cannot be disabled as they are required for the platform to operate.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment methods, and interface display options. These improve your experience but are not essential for core platform function.
• Analytics Cookies: Used to collect anonymised data about how players use the Website — such as pages visited, time spent on site, and common navigation paths. This data helps Ole777 improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, support KYC processes, and protect account security.

Non-essential cookies are activated only with your consent. You may manage your cookie preferences through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of some platform features.

Ole777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and Ole777's servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms an active secure connection.
• Access Controls: Access to personal data within Ole777's systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with data access undergo regular data protection training.
• Secure Document Storage: KYC documents and identity records are stored in encrypted, access-controlled data repositories with audit logging of all access events.
• Intrusion Detection: Ole777's infrastructure is protected by firewall systems, intrusion detection software, and regular independent security audits.
• Incident Response: In the event of a personal data breach, Ole777 has a documented incident response procedure and will notify affected players without undue delay where the breach poses a risk to their rights.

As a data subject, you hold the following rights with respect to your personal data held by Ole777. To exercise any of these rights, please contact our support team via live chat or by email to[email protected]. Ole777 will respond to all data rights requests within thirty (30) calendar days of receipt.