oclbet Privacy Policy

01 Who We Are

oclbet is an online gaming platform accessible at oclbet.co, providing sports betting, live casino, slots, and lottery services primarily to players in Malaysia. References to "oclbet", "we", "us", or "our" throughout this Privacy Policy refer to the operator of the oclbet platform.

oclbet is the data controller in respect of personal data collected from Users of the Platform. As data controller, oclbet is responsible for determining the purposes and means by which your personal data is processed.

For any privacy-related queries or to exercise your data rights, contact our Data Protection team at: [email protected]

02 Data We Collect

oclbet collects the following categories of personal data from Users:

oclbet does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless specifically required by applicable law or regulation.

03 How We Collect Data

oclbet collects personal data through the following channels:

• Direct interactions — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotional offer.
• Automated technologies — as you navigate the Platform, oclbet automatically collects Technical Data via cookies, server logs, and similar tracking technologies. See Section 7 for details.
• Third-party sources — oclbet may receive data from payment providers (including Touch n Go eWallet, Boost, DuitNow, and Malaysian banks) for the purpose of processing and verifying transactions, and from identity verification services used to conduct KYC checks.
• Publicly available sources — in limited circumstances relevant to fraud prevention or AML compliance, oclbet may cross-reference data against publicly available information.

04 How We Use Your Data

oclbet uses personal data for the following purposes:

• Account management — to create, maintain, and manage your oclbet account, including authentication at oclbet Login.
• Transaction processing — to process deposits and withdrawals in Malaysian Ringgit (RM) through your chosen payment method.
• Identity verification (KYC) — to verify your identity and age (21+) as required by our operating standards and applicable regulations.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming — to monitor gaming behaviour and enforce responsible gaming tools such as deposit limits and self-exclusion. For more information, see our Responsible Gaming page.
• Customer support — to respond to your queries, resolve complaints, and maintain support records.
• Marketing communications — to send you relevant promotional offers, bonus notifications, and product updates where you have consented to receive such communications or where we have a legitimate interest in contacting you as an existing customer.
• Platform improvement — to analyse usage patterns, test new features, and improve the overall oclbet experience.
• Legal compliance — to meet our obligations under applicable anti-money laundering, data protection, and gaming regulatory frameworks.

05 Legal Basis for Processing

oclbet processes personal data on the following legal bases:

• Contract performance — processing necessary to provide the services you have registered for and to manage your Account in accordance with the Terms & Conditions.
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC/AML obligations and gaming licence conditions.
• Legitimate interests — processing for fraud prevention, platform security, and the improvement of our services, where these interests are not overridden by your data protection rights.
• Consent — processing for direct marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

oclbet does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors — we share financial data with Malaysian payment providers (Touch n Go eWallet, Boost, DuitNow, Maybank, CIMB, Public Bank, and others) as necessary to process your transactions.
• Identity verification providers — we share Identity Data with third-party KYC services to verify your age and identity.
• Game providers — where necessary for game delivery, limited Usage Data may be shared with our licensed game content providers. These providers act as data processors under agreements that prohibit them from using the data for any purpose other than game delivery.
• Regulatory and law enforcement bodies — we may disclose personal data where required by applicable law, court order, or regulatory demand. oclbet will notify you of such disclosures where permitted by law.
• Corporate transactions — in the event of a merger, acquisition, or sale of all or part of oclbet's business, personal data may be transferred as part of that transaction. You will be notified of any such change and your rights under this Policy will be preserved.

07 Cookies & Tracking Technologies

oclbet uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and gather analytical data. The types of cookies oclbet uses are as follows:

You may configure your browser to reject non-essential cookies. Disabling strictly necessary cookies may impair your ability to use the Platform, including completing the oclbet Login process. oclbet does not serve third-party advertising cookies.

08 Data Retention

oclbet retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and reporting obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping requirements.
• Transaction data — retained for a minimum of five (5) years following the transaction date.
• Support and communications data — retained for three (3) years following the closure of the relevant support interaction.
• Technical and usage data — retained for up to twenty-four (24) months in identifiable form, after which it is anonymised or deleted.

Where retention is required beyond these periods by applicable law or ongoing legal proceedings, oclbet will retain the relevant data until the obligation is satisfied.

09 Data Security

oclbet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the oclbet Platform.
• Encryption at rest for sensitive personal and financial data stored on oclbet's servers.
• Access controls — oclbet staff access to personal data is restricted on a need-to-know basis and subject to confidentiality obligations.
• Intrusion detection systems and continuous security monitoring for the oclbet Platform infrastructure.
• Regular security audits and penetration testing conducted by independent security professionals.

While oclbet takes all reasonable precautions, no online system is completely immune to security threats. In the event of a data breach that is likely to result in high risk to your rights and freedoms, oclbet will notify affected Users in accordance with applicable legal requirements.

10 Your Rights

Subject to applicable data protection law, you have the following rights in respect of the personal data oclbet holds about you:

• Right of access — you may request a copy of the personal data oclbet holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to oclbet's legal retention obligations.
• Right to restrict processing — you may request that oclbet limits how it uses your personal data in certain circumstances.
• Right to data portability — where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, oclbet will cease using your data for that purpose immediately.
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact oclbet's Data Protection team at [email protected]. oclbet will respond to all valid requests within thirty (30) days. Where requests are complex or numerous, this period may be extended by a further two months, and you will be notified accordingly.

11 Children's Privacy

The oclbet Platform is strictly for individuals aged 21 years and above. oclbet does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted during the registration and KYC process.

If oclbet becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately closed, and the personal data will be deleted or anonymised in accordance with our data retention policy. Any funds associated with an underage account will be handled in accordance with applicable regulatory guidelines.

12 Third-Party Services

The oclbet Platform integrates with a number of third-party services necessary for its operation, including payment processors, game content providers, and identity verification services. Each of these third parties operates under its own privacy practices.

Where oclbet shares personal data with third-party processors, we require them to implement appropriate data protection measures and to process personal data only for the specific, documented purpose for which it was shared. oclbet does not permit third-party processors to use your data for their own independent commercial purposes.

oclbet is not responsible for the privacy practices of any third-party website that may be linked from the Platform. All links within the oclbet Platform point to pages within oclbet.co; no outbound external links are present on the Platform.

13 Cross-Border Data Transfers

In the course of operating the Platform, oclbet may transfer personal data to third-party service providers or infrastructure located outside of Malaysia. Where such transfers occur, oclbet will ensure that appropriate safeguards are in place to protect your personal data at a standard equivalent to or exceeding the protections applicable under Malaysian law.

These safeguards may include: contractual data transfer agreements, adherence to recognised international data protection frameworks, or transfers to jurisdictions that have been assessed as providing adequate data protection.

14 Policy Updates

oclbet may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services offered on the Platform. The effective date at the top of this page will be updated with each revision.

Where changes are material, oclbet will notify registered Users by email to the address associated with their Account, or through a prominent notice on the Platform, prior to the changes taking effect. Your continued use of the Platform following notification of material changes constitutes your acceptance of the updated Privacy Policy.

We recommend reviewing this Privacy Policy periodically. Historical versions are available upon request by contacting oclbet support.

15 Contact Us

For any privacy-related queries, data rights requests, or concerns about how oclbet handles your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform after oclbet Login
• FAQ: Common privacy questions answered on our FAQ page

oclbet aims to acknowledge all privacy queries within 3 business days and to provide a full response within 30 days of receipt of a valid request. For complex requests, this period may be extended as described in Section 10.