ocmy8 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how ocmy8 ("the Company", "we", "us", "our"), the operator of the online gaming platform at ocmy8.win, collects, uses, stores, shares, and protects the personal data of users and registered account holders ("you", "the Player").

1.2 ocmy8 is committed to protecting the privacy and personal data of all its users, including Malaysian players whose data is processed in connection with their use of the ocmy8 platform. We process personal data in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia where applicable, and the requirements of our international gaming licence jurisdiction.

1.3 By registering an account, accessing, or using the ocmy8 platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree, you must cease using the platform and may request account closure by contacting our support team.

1.4 This Policy should be read in conjunction with the ocmy8 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

2.1 ocmy8 collects personal data through your direct interactions with the platform, automated technical means, and in some cases from third-party sources as described below. The categories of personal data collected include:

2.2 Where ocmy8 requires personal data to fulfil legal obligations (such as KYC/AML verification) and you choose not to provide that data, ocmy8 may be unable to open, maintain, or process withdrawals from your account.

3. How We Use Your Personal Data

3.1 ocmy8 uses the personal data collected for the following purposes:

• Account Management: Creating, verifying, and maintaining your ocmy8 player account; processing logins and session management; implementing account security features such as two-factor authentication.
• Transaction Processing: Processing deposits via GrabPay, Touch 'n Go eWallet, DuitNow, FPX, and other supported Malaysian payment channels; processing withdrawal requests; maintaining accurate transaction records.
• Legal and Regulatory Compliance: Fulfilling obligations under Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements imposed by ocmy8's gaming licence; complying with applicable data protection laws; responding to lawful requests from regulatory or law enforcement authorities.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; implementing account limits, cool-off periods, and self-exclusion measures as required by the platform's responsible gaming obligations.
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of support services.
• Platform Security: Detecting and preventing fraud, account takeovers, money laundering, collusion, and other prohibited conduct; maintaining audit trails for security investigation purposes.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent and have not opted out. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform features, game recommendations, and user experience.

4. Legal Basis for Processing

4.1 ocmy8 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between ocmy8 and the Player — including account creation, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations, including AML/KYC requirements under ocmy8's gaming licence.
• Legitimate Interests: Processing conducted for ocmy8's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given consent, including for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

5.1 ocmy8 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes.

5.2 ocmy8 may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Payment Service Providers: GrabPay, Touch 'n Go eWallet, Boost, DuitNow gateway operators, FPX, and Malaysian banking institutions, solely for the purpose of processing your deposit and withdrawal transactions.
• KYC/Identity Verification Providers: Third-party identity verification services engaged to carry out document verification, liveness checks, and AML screening as required by ocmy8's licence obligations.
• Game Content Providers: Software studios and live casino operators (e.g., Evolution, Pragmatic Play, SA Gaming) who supply game content to the ocmy8 platform. Such providers may receive limited technical session data necessary to authenticate your game session.
• IT and Platform Infrastructure Providers: Cloud hosting, cybersecurity, and platform monitoring service providers operating under strict data processing agreements with ocmy8.
• Regulatory and Law Enforcement Authorities: Where ocmy8 is legally required to disclose personal data to a competent regulatory authority, law enforcement body, or gaming licencing authority, including in connection with AML investigations.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by ocmy8, subject to confidentiality obligations.

5.3 All third-party service providers who receive personal data from ocmy8 are required to process such data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

6. Cookies & Tracking Technologies

6.1 The ocmy8 platform uses cookies and similar tracking technologies to operate certain platform functions, enhance your experience, and collect analytical data. The categories of cookies used include:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Store user preferences such as language settings and remembered login state.
• Analytical Cookies: Collect aggregated, anonymised data on platform usage patterns to help ocmy8 improve performance and usability.
• Session Integrity Cookies: Used to detect and prevent fraud and multi-accounting, and to maintain the integrity of the responsible gaming session monitoring tools.

6.2 You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies may prevent certain platform features from functioning correctly. ocmy8 does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

7. Data Retention

7.1 ocmy8 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account and for a period thereafter as required by applicable legal and regulatory obligations.

7.2 Specific retention periods include:

• Account and Transaction Data: Retained for a minimum of five (5) years following account closure, as required by AML regulations and gaming licence obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by regulatory authority.
• Communications and Support Records: Retained for a minimum of three (3) years.
• Technical and Log Data: Retained for up to twelve (12) months, except where longer retention is required for security investigation purposes.

7.3 Following the applicable retention period, personal data is securely deleted or anonymised in accordance with ocmy8's data destruction procedures.

8. Data Security

8.1 ocmy8 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ocmy8 platform;
• Encryption of sensitive data (including financial data and identity documents) at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for administrative platform access;
• Fraud detection and anomaly monitoring systems operating on a 24/7 basis.

8.2 In the event of a personal data breach that poses a risk to your rights and freedoms, ocmy8 will notify the relevant regulatory authority and affected individuals in accordance with applicable law.

9. Your Data Rights

9.1 Subject to applicable law, you have the following rights in relation to your personal data held by ocmy8:

• Right of Access: The right to request a copy of the personal data ocmy8 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to ocmy8's legal obligations to retain certain data (including AML/KYC records).
• Right to Restriction: The right to request that ocmy8 restricts processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Object: The right to object to processing based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, please contact the ocmy8 Data Privacy team at [email protected]. We will respond to all verified requests within thirty (30) days. We may request proof of identity before processing your request.

9.3 If you are dissatisfied with how ocmy8 has handled your personal data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

10. Children's Privacy

10.1 The ocmy8 platform is strictly intended for persons aged 21 years and above. ocmy8 does not knowingly collect personal data from persons under the age of 21. If ocmy8 becomes aware that personal data has been collected from an underage person, that data will be deleted and the associated account closed immediately.

10.2 If you are a parent or guardian and believe that a minor has registered an account on the ocmy8 platform or provided personal data to ocmy8, please contact our support team immediately at [email protected].

11. International Data Transfers

11.1 ocmy8 is operated under an international gaming licence and may engage service providers located outside Malaysia for certain data processing activities (such as cloud infrastructure, KYC verification, and game content delivery). Where personal data is transferred outside Malaysia, ocmy8 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those applicable under Malaysian data protection law.

11.2 By registering and using the ocmy8 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia as described in this Policy.

12. Changes to This Privacy Policy

12.1 ocmy8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or platform data practices. Material changes will be communicated to registered users via the email address on file or via a prominent notice on the ocmy8 platform prior to the effective date of the change.

12.2 Your continued use of the platform following the effective date of any updated Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the platform and request account closure.

13. Contact Us

13.1 For any questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by ocmy8, please contact our Data Privacy team:

13.2 For responsible gaming enquiries and self-exclusion requests, please refer to the Responsible Gaming page. For general platform terms, refer to the Terms & Conditions.