Privacy Policy ofa168

This Privacy Policy applies to all users who register, browse or use ofa168 services through our website at ofa168.one. It covers all information you provide directly to us, data collected automatically during platform use, and information we receive from legitimate third parties.

This policy does not apply to third-party websites that may be linked or referenced in certain contexts. ofa168 is not responsible for the privacy practices of any party outside our platform.

ofa168 collects two main categories of information from users:

Information You Provide Directly:

• Full name as stated on your identity document (MyKad or passport)
• Identity card number (MyKad) or passport number for identity verification purposes
• Active email address and mobile phone number registered in Malaysia
• e-wallet account details such as Touch 'n Go, Boost or ShopeePay used for transactions
• Online banking account information (FPX) for deposit and withdrawal purposes
• Proof of residential address documents if requested during the KYC (Know Your Customer) process

Information Collected Automatically:

• Device IP address, browser type and operating system used
• Game activity records, login dates and times, and session duration
• Cookie data and tracking technologies that help us understand usage patterns
• General geolocation information to ensure compliance with service area requirements

ofa168 uses collected information solely for legitimate purposes related to the operation of our platform. The main purposes for data use include:

• Identity verification and account registration — ensuring every user meets the minimum age requirement of 21 years and membership conditions.
• Financial transaction processing — handling minimum deposits of RM30 and minimum withdrawals of RM100 securely through available methods.
• Customer service delivery — enabling our support team to assist you via live chat and email in Malay and English.
• Bonus calculation and management — including a 150% first bonus of up to RM1,500 and the VIP programme that includes weekly cashback.
• Legal compliance — including anti-money laundering (AML) requirements and monitoring of suspicious activity.
• Service improvement — analysing usage patterns to enhance the user experience on the ofa168 platform.

ofa168 does not sell or commercialise user personal information. Data sharing only occurs in the following limited and controlled situations:

• Payment service providers that process deposit and withdrawal transactions on our behalf, including DuitNow, FPX and listed digital wallet providers.
• Game software providers that supply slot, live casino and sports platforms to ensure a smooth gaming experience.
• Competent authorities when required by law, court order or direction from a legitimate regulatory body.
• Companies within the same group for internal platform operation and administration purposes.

All third parties that receive ofa168 user data are required to comply with data security standards equal to or higher than those we practise.

User personal information is retained for the period necessary to fulfil the purpose for which it was collected, or as required by applicable law. Generally:

• Active account data is retained for as long as the account remains active and in use.
• Financial transaction records are retained for the period set by the licensing authority and international financial laws.
• System activity logs are retained for a limited period for security and investigation purposes if required.

Once the relevant retention period ends, your data will be securely deleted or anonymised in accordance with established procedures.

ofa168 implements multiple layers of technical and organisational security to protect user data from unauthorised access, disclosure, alteration or destruction:

• SSL/TLS encryption protocols for all data communication between users and servers.
• Strict internal access controls, where only authorised personnel can access sensitive data.
• Continuous security monitoring and periodic system audits.
• Established incident response procedures in the event of a security breach.
• Ongoing data security training for all ofa168 staff.

ofa168 reserves the right to change, amend or update this Privacy Policy at any time based on changes in business operations, technology, legal requirements or directions from the licensing body that regulates our platform.

When significant changes occur, we will:

• Display a clear notice on the ofa168 website homepage for an appropriate period.
• Send notifications via email to registered users if the changes directly affect their rights.
• Update the "Version" and "Updated" dates shown at the top of this document.

Continued use of the ofa168 platform after those changes take effect will be considered your acceptance of the updated version of the Privacy Policy. If you do not agree with any changes, you are advised to stop using the services and contact our support team to close your account.

This Privacy Policy and all matters relating to data processing under it are subject to the laws and regulations set by the international licensing authority with which ofa168 is registered and operates.

For users residing in Malaysia, ofa168 acknowledges local requirements regarding data protection and works to ensure a level of protection consistent with international standards. Any privacy-related disputes will be resolved through the dispute resolution channels established by our licensing authority.