ong67 Privacy Policy: What We Keep and Who Can See It

What ong67 Records When You Open an Account

Registration asks for the basics: your full name as printed on your ID, date of birth, mobile number and home address. We also store a password hash and the device and browser you signed in from. Nothing more is needed to walk into the lobby, and you can read the game list before you put in a single ringgit.

Once you deposit, the record grows. We keep the amount, the channel used (Touch ’n Go eWallet, DuitNow, FPX Online Banking or bank transfer), the reference number and the exact time. A deposit usually clears in about 4 minutes, and that timestamp is what lets us trace a payment when something goes missing.

What we do not collect

We do not buy contact lists, we do not read your phone gallery, and the ong67 app never asks for your contacts or your location. If a future build needs a new permission, it gets named on this page before that update reaches you.

Why Every Ringgit Needs a Paper Trail

Malaysian anti-money-laundering rules expect a licensed operator to know who it is paying. That is the whole reason behind the KYC step: one clear photo of your National ID Card, passport or driving licence, matched against the name on the account. Reviews take around 2 hours once the images are readable.

The check runs once, before your first withdrawal. After that, payouts above the RM100 minimum are typically settled in about 15 minutes on the same e-wallet or bank account you deposited from.

Session Cookies and What the Browser Remembers

ong67 sets one session cookie to keep you signed in and a small preference cookie for language and layout. Neither follows you to other websites. We do not run third-party advertising pixels inside the lobby, so a slot you open here will not trail you around the internet afterwards.

Inside the app

The ong67 app (version 2.7.7, 36 MB, Android 8.0 and above) stores your session token and your last-used payment method so you are not retyping it every time. Clearing the app cache wipes both. Your balance and your history live on our servers, never on the phone.

Who Inside ong67 Can Open Your File

Access is narrow. Support agents see account status and chat history, the payments team sees transaction references, and compliance sees the KYC images. Every lookup is written to a staff audit log with the account name and the time it happened.

Game studios such as Pragmatic Play, FA Chai, Red Tiger, CQ9, Playtech and Sexy Gaming receive round identifiers and bet amounts so that 4,400 games settle correctly across the lobby. They never receive your name, mobile number or ID. We do not sell data, and we do not hand it to advertisers.

Your Rights Under Malaysia’s PDPA

The Personal Data Protection Act 2010 gives you the right to see the data we hold, correct anything wrong, withdraw consent for marketing, and ask for deletion once the account is closed and statutory retention has run out. Requests cost nothing.

1. Message Live Chat

   Open the 24/7 Live Chat and say you want to make a data request. You get a case reference straight away.

2. Confirm it is you

   Answer two account questions and state your last deposit amount. This stops someone else from pulling your file.

3. We scope the request

   Compliance lists exactly which records are covered and which must stay under record-keeping rules.

4. Receive the summary

   The extract arrives in the same chat thread, or as a printed copy posted to your registered address if you prefer.

How Long a Record Stays With Us

An open account keeps its full history so that support can answer a question about a bet placed last month. A closed account moves into an archive that only the compliance team can read, and it stays there for as long as Malaysian gaming and tax rules require. Once that period ends the file is destroyed, not resold or handed to a broker.

When This Notice Changes

If a new payment channel, a fresh app permission or a change in the law alters what we collect, this page is edited first and a short notice sits in the lobby until you have seen it once. Play on after a change and the updated notice applies to you.

If you disagree with a change, close the account and ask for deletion of anything we are not obliged to keep.