ocwins Privacy Policy

1. Introduction

Welcome to ocwins. This Privacy Policy ("Policy") sets out how ocwins ("we", "us", "our") collects, uses, stores, and protects the personal data of players and visitors who access the ocwins website at https://ocwins.lat and all associated sub-pages ("Platform"). We operate as an internationally licensed online casino and sportsbook primarily serving the Malaysian market.

By accessing or using the ocwins Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the terms described herein, please discontinue use of the Platform. This Policy applies alongside our Terms & Conditions and any other agreements you have entered into with ocwins.

We are committed to handling your personal data responsibly and in accordance with applicable data protection legislation. Our practices are informed by internationally recognised standards including the principles under Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

When you register for an account, place a bet, make a deposit, or interact with the ocwins Platform, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and a copy of your government-issued identification document (MyKad, passport, or driving licence) collected during Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile phone number, and residential address (including city, state, and postcode within Malaysia or elsewhere).
• Account Data: Username, encrypted password, account preferences, language settings, and communication preferences.
• Financial Data: Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), transaction history, deposit and withdrawal records, and payment method information. We do not store full card numbers on our servers.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and cookies or similar tracking technologies.
• Usage Data: Pages visited, games played, betting history, session duration, search queries, and click-stream data within the Platform.
• Communications Data: Records of any messages you send to our customer support team via live chat, email, or other channels.
• Responsible Gaming Data: Self-exclusion elections, deposit limits set by you, cool-off period requests, and any referrals to problem gambling support services.

We collect data directly from you when you fill in registration or verification forms, indirectly through automated technologies as you navigate the Platform, and occasionally from third-party identity verification or fraud-prevention service providers.

3. How We Use Your Data

ocwins uses the personal data we collect for the following purposes:

• Account Registration & Management: To create, maintain, and administer your ocwins player account, including verifying your identity and age (you must be 21 years or older to register).
• Service Delivery: To process deposits and withdrawals in MYR and other accepted currencies, settle bets, and provide access to casino games, live dealer tables, sportsbook, virtual sports, and slots.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal or unauthorised activities on the Platform.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-financing of terrorism (CFT), and gaming regulations, including record-keeping and reporting duties.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing & Promotions: Where you have given explicit consent or where we have a legitimate interest, to send you information about ocwins bonuses, promotions, and new product features. You may opt out at any time.
• Analytics & Product Improvement: To understand how players use the Platform so we can improve user experience, optimise game offerings, and develop new features.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to enforce self-exclusion or limit requests you have submitted.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and ocwins — for example, operating your account and settling your bets.
• Legal Obligation: Processing is required for us to comply with applicable laws, including AML reporting, KYC verification, and tax record-keeping.
• Legitimate Interests: Processing is necessary for our legitimate business interests (such as fraud prevention, network security, and service improvement) provided those interests are not overridden by your rights and freedoms.
• Consent: Where required by law, we will ask for your explicit consent before processing data — particularly for direct marketing communications. You may withdraw consent at any time without affecting prior processing.

5. Cookies & Tracking Technologies

The ocwins Platform uses cookies and similar technologies to enhance your experience and to help us understand how the site is used. Cookies are small text files stored on your device. We use the following types:

• Strictly Necessary Cookies: Required for core Platform functionality such as session authentication and security. These cannot be disabled without affecting site operation.
• Analytical/Performance Cookies: Help us understand visitor behaviour, measure page performance, and identify areas for improvement. Data collected is aggregated and anonymised where possible.
• Functional Cookies: Remember your preferences such as language, currency (MYR), and display settings to personalise your experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your browsing activity on the Platform. These are only set where you have given consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some sections of the Platform.

6. Sharing of Information

ocwins does not sell or rent your personal data to third parties. We may share your information with trusted third parties only in the following circumstances:

• Payment Processors: Banks, FPX, DuitNow, and e-wallet providers (such as Touch 'n Go eWallet, Boost, and GrabPay) to process your financial transactions securely.
• Identity Verification Providers: Third-party KYC service providers who assist us in verifying player identities in line with regulatory requirements.
• Fraud Prevention & AML Partners: Specialist providers who help detect and prevent fraudulent, illegal, or high-risk activity on the Platform.
• IT & Cloud Infrastructure Providers: Third-party hosting and technology partners who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory & Law Enforcement Authorities: Where we are required or permitted by law to disclose information to regulators, courts, law enforcement agencies, or other authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ocwins' business, your data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party service providers are contractually bound to process your personal data only for the specified purpose and in accordance with this Policy and applicable data protection law.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and regulatory reporting requirements.

• Active Accounts: Data is retained for the duration of your player account relationship with ocwins.
• Closed Accounts: Upon account closure, we retain identity and transaction data for a minimum of five (5) years in accordance with AML and gaming regulatory requirements.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the last communication.
• Marketing Data: If you opt out of marketing, we retain a suppression record to ensure we honour your preference going forward.

When data is no longer required, we will securely delete or anonymise it in line with our data destruction procedures.

8. Security Measures

ocwins takes the security of your personal data seriously. We have implemented a range of technical and organisational security measures to protect against unauthorised access, disclosure, alteration, or destruction of your information. These include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options for player accounts and mandatory MFA for all internal administrative access.
• Regular independent security audits, penetration testing, and vulnerability assessments.
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Comprehensive incident response procedures with defined timelines for breach notification to affected players and relevant authorities.

While we take every reasonable precaution, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your ocwins account and to enable two-factor authentication where available.

9. Your Rights

As a data subject, you have the following rights with respect to your personal data held by ocwins:

• Right of Access: You may request a copy of the personal data we hold about you. We will respond within 21 days of receiving a valid request.
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data. Many details can be updated directly within your account profile.
• Right to Erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while we verify the accuracy of disputed data.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team at the email address provided in Section 12. We may need to verify your identity before processing a request. There is no charge for reasonable data access requests; however, we reserve the right to charge a reasonable administrative fee for manifestly unfounded or repetitive requests.

10. Children & Age Verification

The ocwins Platform is strictly for adults. You must be at least 21 years of age to register and use our services. We do not knowingly collect personal data from individuals under 21. As part of our KYC process, we verify the age of all registering players.

If we become aware that a person under the age of 21 has provided us with personal data or has accessed the Platform, we will immediately suspend the account, reverse any transactions to the extent possible, and delete the associated personal data. If you believe a minor has created an account on ocwins, please contact us immediately at the details in Section 12.

11. Changes to This Policy

ocwins reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify registered players via email or through a prominent notice on the Platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ocwins handles your personal data, please reach out to our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the ocwins Platform
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and resolve them within 21 calendar days.

For matters relating to Responsible Gaming, self-exclusion, or account limits, please visit our dedicated Responsible Gaming page or speak with our support team at any time. If you need to review the full terms governing your use of the Platform, please see our Terms & Conditions.