ocwins Privacy Policy

1. Introduction

ocwins ("we", "us", "our") is committed to protecting and respecting the privacy of all individuals who interact with the ocwins Platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by ocwins.

This Policy applies to all users of the ocwins website at ocwins.app, including registered players, visitors browsing without an account, and individuals who contact our support team. Please read this Privacy Policy carefully before using the ocwins Platform or submitting any personal information to us.

By registering an Account, making a deposit, or otherwise using the ocwins Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the ocwins Platform.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the ocwins operating entity that operates the Platform accessible at ocwins.app. References to "ocwins", "we", "us", and "our" in this Privacy Policy refer to that entity in its capacity as data controller.

If you have questions about how ocwins handles your personal data or wish to exercise any of your rights as described in this Policy, please contact us using the details provided in Section 16 of this document.

3. Data We Collect

3.1 Account Registration Data

When you register an Account with ocwins, we collect the following personal data:

• Full legal name
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address, including postcode and country
• Email address
• Mobile telephone number
• Username and password (passwords are stored in hashed, non-reversible form)
• Preferred currency (Malaysian Ringgit / MYR)

3.2 Identity Verification (KYC) Data

To comply with Know Your Customer obligations and to protect our players, ocwins may collect the following documentation:

• Copy of a government-issued photo identity document (e.g., Malaysian MyKad or passport)
• Proof of residential address (e.g., utility bill or bank statement dated within the last three months)
• Proof of payment method ownership (e.g., screenshot of Touch n Go eWallet registered to your name)
• Facial biometric data for identity matching, where required by our verification provider

3.3 Transaction Data

We collect records of all financial transactions conducted through your ocwins Account, including deposit amounts, withdrawal requests, payment method identifiers, transaction timestamps, and associated balances.

3.4 Gaming & Betting Activity Data

We collect records of your gameplay and betting activity on the ocwins Platform, including game types accessed, bet amounts, outcomes, session durations, and any responsible gaming limits you have set.

3.5 Technical & Device Data

When you access the ocwins Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and login history
• Referring URLs and on-site navigation paths
• Cookie identifiers and similar tracking technologies (see Section 7)

3.6 Communications Data

If you contact ocwins via live chat, email, or any other communication channel, we retain records of those communications including the content of messages, timestamps, and any resolution actions taken.

4. How We Collect Data

ocwins collects personal data through the following means:

• Directly from you: Information you provide during Account registration, KYC verification, deposit/withdrawal requests, support interactions, and any voluntary submissions via Platform features.
• Automatically: Technical data collected via server logs, cookies, pixel tags, and similar tracking technologies as you browse and interact with the ocwins Platform.
• From third parties: Identity verification data from KYC and fraud prevention partners; payment confirmation data from payment processors including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank; and fraud risk signals from anti-money laundering screening services.

5. Purpose & Legal Basis for Processing

ocwins processes your personal data for the following purposes, each supported by a legal basis for processing:

• Account management and service delivery: Processing is necessary for the performance of the contract between you and ocwins (i.e., the Terms & Conditions you accepted upon registration).
• Identity verification and age verification: Processing is required to comply with legal obligations, including anti-money laundering regulations and the 21+ age restriction applicable to online gaming.
• Fraud prevention and security: Processing is in ocwins's legitimate interest to protect the Platform, its players, and the integrity of gaming operations from fraudulent activity.
• Payment processing: Processing is necessary for the performance of the contract, specifically to credit deposits and fulfil withdrawal requests.
• Regulatory compliance: Processing is required to comply with applicable legal obligations, including financial reporting, anti-money laundering, and responsible gaming requirements.
• Platform improvement and analytics: Processing is in ocwins's legitimate interest to monitor Platform performance, identify technical issues, and improve the user experience for Malaysian players.
• Marketing communications: Where you have provided explicit consent, ocwins may process your contact details to send you information about promotions, bonuses, and Platform updates. You may withdraw this consent at any time.

6. Data Sharing

ocwins does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following circumstances:

• Payment processors: Your transaction data is shared with our payment processing partners (including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank) solely for the purpose of processing deposits and withdrawals.
• Identity verification providers: KYC documentation is shared with our approved identity verification partners for the purpose of conducting required player verification checks.
• Fraud prevention services: Certain Account and transaction data may be shared with fraud detection and anti-money laundering screening services to protect the integrity of the Platform.
• Game software providers: Your gaming session data is shared with the certified studio and RNG providers whose games you access through the ocwins Platform, solely for the purpose of delivering the game service.
• Legal and regulatory authorities: Where required by law, court order, or a lawful request from a competent regulatory or law enforcement authority, ocwins may disclose personal data without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of the ocwins business, personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

All third-party service providers who receive personal data from ocwins are required to process that data only for the specified purpose and in accordance with applicable data protection requirements.

7. Cookies & Tracking Technologies

The ocwins Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain your login session, remember your preferences, detect fraud, and analyse Platform performance.

7.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your ocwins login state. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalise your ocwins experience.
• Analytics cookies: Collect anonymised data about how visitors interact with the ocwins Platform — pages visited, session duration, error events — to help us improve the service.
• Security cookies: Assist in identifying and preventing fraudulent login attempts and automated bot activity on the ocwins Platform.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the ocwins Platform and may prevent you from accessing your Account.

8. Data Security

ocwins implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the ocwins Platform
• Encryption of sensitive personal data and payment information at rest
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for administrative access to ocwins systems
• Regular security assessments and vulnerability testing of Platform infrastructure
• Segregation of player funds from operational accounts

9. Data Retention

ocwins retains your personal data for as long as your Account is active and for a defined period after Account closure, in order to:

• Comply with applicable financial record-keeping and anti-money laundering obligations, which typically require retention of transaction records for a minimum of five (5) years following the end of the customer relationship.
• Resolve any outstanding disputes, complaints, or legal claims involving your Account.
• Comply with any court order, regulatory directive, or legal obligation requiring retention of specific data.

Where data is no longer required for any of the above purposes, ocwins will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

10. International Data Transfers

The ocwins Platform serves Malaysian players. Certain service providers used by ocwins — including KYC verification partners, fraud prevention services, and game studio providers — may be located outside Malaysia. Where personal data is transferred internationally, ocwins ensures that appropriate safeguards are in place, including contractual data protection clauses requiring the recipient to provide a level of data protection equivalent to that described in this Privacy Policy.

11. Your Rights

Subject to applicable law and ocwins's legal obligations, you have the following rights in relation to your personal data held by ocwins:

• Right of Access: You may request a copy of the personal data ocwins holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to ocwins's legal obligations to retain certain records.
• Right to Restrict Processing: In certain circumstances, you may request that ocwins restricts the processing of your data.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing of your data where ocwins relies on legitimate interests as the legal basis for processing.

To exercise any of these rights, please contact the ocwins support team via live chat or email. We will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing data rights requests.

12. Children's Privacy

The ocwins Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If ocwins becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated Account will be immediately terminated.

If you are a parent or guardian and believe a minor has accessed the ocwins Platform or provided personal data, please contact our support team immediately so that we can take appropriate action.

13. Marketing Communications

Where you have provided explicit consent during registration or through your Account settings, ocwins may contact you with information about promotions, bonuses, new games, and Platform updates relevant to Malaysian players. These communications may be sent via email or SMS to your registered contact details.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the ocwins Account settings panel
• Clicking the unsubscribe link included in any marketing email we send
• Contacting our support team via live chat and requesting removal from marketing lists

Opting out of marketing communications will not affect the delivery of transactional communications relating to your Account, such as deposit confirmations, withdrawal notifications, and security alerts.

14. Third-Party Links

The ocwins Platform may contain references to third-party services, including payment providers and game studios. This Privacy Policy applies only to data processed by ocwins directly. ocwins is not responsible for the privacy practices of any third-party services, and we encourage you to review the privacy policies of those services before providing them with any personal data.

15. Changes to This Privacy Policy

ocwins reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players via the email address on file or by a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.

Continued use of the ocwins Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease use of the Platform and request Account closure.

16. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or ocwins's handling of your personal data, please contact our Data & Privacy team:

• Live Chat: Available 24/7 on the ocwins Platform — the fastest way to reach our team
• Email: [email protected]

We aim to acknowledge all privacy-related requests within two (2) business days and to respond fully within thirty (30) days of receipt, or such shorter period as required by applicable law.