olx100 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how olx100 ("olx100", "we", "us", "our") — the operator of the online gaming platform at https://olx100.asia ("the Platform") — collects, processes, stores, and discloses personal data relating to registered players, visitors, and prospective customers ("you", "your").

olx100 is committed to protecting your personal data and respecting your privacy. This Policy is drafted in compliance with our obligations under our international gaming authority licence and applicable data protection principles, including those reflected in Malaysian data protection legislation. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the olx100 Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with the Platform.

2. Data Controller

olx100 is the data controller in respect of personal data collected and processed through the Platform. As data controller, olx100 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted in accordance with applicable data protection principles.

For all data protection enquiries, including the exercise of your rights under this Policy, please contact our Data Protection team at: [email protected]

3. Categories of Personal Data We Collect

olx100 collects and processes the following categories of personal data:

3.1 Identity Data: Full legal name, date of birth, nationality, government-issued identification number (MyKad number, passport number), and copies of identity documents provided for KYC verification purposes.

3.2 Contact Data: Email address, phone number, and residential address (including postcode, city, and state within Malaysia, such as Kuala Lumpur, Penang, or Johor Bahru).

3.3 Account Data: Username, encrypted password (stored as a cryptographic hash — we do not have access to your plaintext password), account registration date, and account status.

3.4 Financial Data: MYR transaction history (deposits and withdrawals), payment method identifiers (eWallet account identifiers, masked bank account numbers for Maybank, CIMB, Public Bank, and other accepted methods), and balance information. Full payment credentials are never stored by olx100 — they are processed exclusively by our licensed payment processing partners.

3.5 Gaming Activity Data: Betting history, game session records, wager amounts, game outcomes, bonus usage, and responsible gaming tool settings (deposit limits, loss limits, session limits, self-exclusion status).

3.6 Technical Data: IP address, device type, browser type and version, operating system, device identifiers, and approximate geolocation derived from IP address.

3.7 Usage Data: Pages visited on the Platform, navigation patterns, session duration, and feature interaction logs.

3.8 Communications Data: Records of your interactions with olx100 player support, including live chat transcripts, email correspondence, and support ticket history.

3.9 Source of Funds Data: Where required by our anti-money laundering (AML) obligations under our international gaming licence, documentation demonstrating the lawful origin of funds used for deposits on the Platform.

4. How We Collect Your Personal Data

olx100 collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting player support, or responding to surveys.
• Automated collection: Technical Data and Usage Data collected automatically through cookies, server logs, and similar technologies when you access or interact with the Platform. See Section 9 (Cookies & Tracking) for details.
• Third-party sources: Identity verification data from licensed KYC service providers used to authenticate your identity documents. Fraud screening data from licensed fraud prevention partners. Payment verification data from payment processing partners.
• Publicly available sources: In limited circumstances, publicly available information may be consulted for AML screening purposes in accordance with our licensing obligations.

5. Purposes of Processing & Legal Basis

olx100 processes your personal data for the following purposes:

• Account registration and management — to create and maintain your olx100 account. Legal basis: performance of a contract.
• Identity and age verification (KYC) — to verify that you are who you say you are and that you are at least 21 years of age, as required by our international gaming licence. Legal basis: legal obligation and legitimate interests.
• Payment processing — to process MYR deposits and withdrawals via Touch n Go eWallet, Boost, and local bank transfers. Legal basis: performance of a contract.
• Responsible gaming compliance — to monitor gaming activity, apply responsible gaming tools, and identify at-risk players in accordance with licensing requirements. Legal basis: legal obligation and legitimate interests.
• Anti-money laundering (AML) and fraud prevention — to screen transactions and player activity for signs of money laundering, fraud, and match-fixing in accordance with our licensing obligations. Legal basis: legal obligation.
• Customer support — to respond to your enquiries and resolve disputes. Legal basis: performance of a contract and legitimate interests.
• Platform improvement and analytics — to understand how players use the Platform and improve our products. Legal basis: legitimate interests.
• Marketing communications — to send you information about promotions, new features, and relevant offers, where you have given your consent or where permitted under applicable law. Legal basis: consent or legitimate interests. You may opt out at any time.
• Legal and regulatory compliance — to comply with orders from courts, regulators, and our gaming licence authority. Legal basis: legal obligation.

6. Disclosure of Your Personal Data

olx100 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:

• Licensed service providers: KYC verification providers, payment processors, fraud prevention services, cloud infrastructure providers, and customer support platform providers — solely to the extent necessary to deliver the service and subject to confidentiality and data processing obligations.
• Game providers: Certified gaming studios (such as Pragmatic Play, PG Soft, and Evolution Gaming) may receive limited session data necessary to render and log game outcomes. These providers are contractually prohibited from using such data for any purpose other than game delivery.
• Regulatory and licensing authorities: Our international gaming licence authority and, where legally required, Malaysian regulatory and law enforcement authorities.
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal, financial, or compliance purposes, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of the Platform, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

olx100 operates from an international jurisdiction under its gaming licence. Your personal data may be transferred to, stored in, and processed in countries outside Malaysia. Where such transfers occur, olx100 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses with recipient organisations and, where applicable, adequacy assessments. If you have questions about the specific safeguards applicable to a particular transfer, please contact us at [email protected].

8. Data Retention

olx100 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and licensing obligations. Specific retention periods include:

• Account and KYC data: retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under our gaming licence.
• Transaction records: retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: retained for a minimum of three (3) years from the date of the session.
• Customer support records: retained for two (2) years from resolution of the relevant enquiry or dispute.
• Marketing data: retained until you withdraw consent or opt out, after which it will be deleted within 30 days.

Where personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

9. Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to operate core functions and improve the player experience. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load balancing identifiers.
• Functional cookies: Store your preferences such as language settings, preferred bet size defaults, and recently played games.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, which features are most used, and where players encounter difficulties. This data is used to improve the Platform.
• Fraud prevention cookies: Support device fingerprinting and session integrity checks to detect and prevent fraud and unauthorised account access.

You may control non-essential cookies through the cookie preference centre accessible from the Platform. Note that disabling certain cookies may affect Platform functionality. olx100 does not use third-party advertising cookies or track users across third-party websites.

10. Your Data Subject Rights

Subject to applicable law and our legal obligations (including AML and KYC record-keeping requirements), you have the following rights in respect of your personal data held by olx100:

• Right of access: Request a copy of the personal data olx100 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations. Note that KYC and AML records cannot be deleted before the end of the mandatory retention period.
• Right to restrict processing: Request that olx100 limit the processing of your data in certain circumstances.
• Right to data portability: Request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to object: Object to processing of your data for direct marketing purposes. This right is absolute and will be actioned without delay.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. Identity verification may be required before processing certain requests.

11. Security Measures

olx100 implements technical and organisational security measures appropriate to the risk profile of the data processed. These include: TLS 1.2+ encryption for all data in transit; AES-256 encryption for sensitive data at rest; salted cryptographic hashing for account passwords; role-based access controls limiting employee access to personal data to those with a legitimate operational need; regular penetration testing and security audits by independent third parties; and intrusion detection monitoring on all production infrastructure.

While olx100 takes its security obligations seriously, no system is entirely immune from breach. In the event of a data breach that is likely to result in a high risk to your rights, olx100 will notify affected players without undue delay in accordance with applicable law and our licensing obligations.

12. Children's Privacy

The Platform is strictly for adults aged 21 and above. olx100 does not knowingly collect personal data from individuals under the age of 21. If olx100 discovers that personal data has been collected from an underage individual, that data will be deleted and the associated account will be immediately closed. If you believe that a person under 21 has registered an account, please contact us at [email protected] immediately.

13. Third-Party Links

The Platform may contain links to third-party websites or services (including payment provider portals). olx100 is not responsible for the privacy practices of third-party sites and encourages you to review the privacy policies of any third-party service you access through or in connection with the Platform.

14. Amendments to This Policy

olx100 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised to reflect any changes. Your continued use of the Platform following notification of an amendment constitutes acceptance of the revised Policy.

15. Contact & Complaints

For questions, requests, or complaints relating to this Privacy Policy or olx100's data processing activities, please contact:

• Email: [email protected]
• Live Chat: Available 24/7 from within your logged-in olx100 account

If you are not satisfied with olx100's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or our gaming licence authority's player dispute resolution process.