ovvo99's commitment: We never sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. Your data belongs to you — we are only the custodian.

1Introduction and Scope of This Policy

Welcome to the ovvo99 Privacy Policy page. This document is designed to give you full clarity on how the ovvo99 platform at ovvo99.win and the ovvo99 mobile app handle member personal information. This policy applies to all users of our platform — whether you are just browsing the website, in the process of registering an account, or already an active member who enjoys playing in the ovvo99 Game Lobby.

Ovvo99 operates with full commitment to privacy protection and is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia. We believe that transparency is the foundation of trust, and your trust is the asset we value most.

By using the ovvo99 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform. Any enquiries regarding this policy may be directed to our support team via 24/7 live chat.

2Types of Personal Data We Collect

Ovvo99 only collects data that is strictly necessary to provide a safe, fair, and legally compliant service. The data we collect falls into three main categories:

Data Category Data Examples Collection Method
Identity Data Full name, date of birth, identity card number (MyKad/passport), facial photo Registration form, KYC process
Contact Data Email address, phone number, residential address Registration form, profile updates
Financial Data Bank account number, bank name, deposit and withdrawal records First deposit/withdrawal process
Usage Data Game history, activity logs, pages visited, session duration Automated system logs
Technical Data IP address, device type, operating system, browser version, device ID Cookies, mobile app SDKs
Communication Data Live chat conversation transcripts, support email content, complaint feedback Interactions with the support team
ovvo99 never collect credit/debit card information directly. All payments are processed through certified third-party payment gateways that comply with PCI-DSS security standards.

3Data Collection and Usage Purpose

Every piece of data we collect has a specific and legitimate purpose. ovvo99 does not collect data excessively or for purposes unrelated to platform operations. The following are the primary purposes for which your personal data is used:

  • Account management: Creating, verifying, and managing your member account, including a secure login process
  • Identity verification (KYC): Fulfilling anti-money laundering (AML) legal obligations and keeping the platform free from fraudulent activity
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and securely
  • Gaming service provisioning: Ensuring a smooth, personalized gaming experience that matches your preferences
  • Service communications: Sending important notices relating to your account, security, promotions you have consented to receive, and platform updates
  • Platform security: Detecting and preventing fraud, unauthorized access, and suspicious activity
  • Legal compliance: Meeting reporting and record-keeping requirements set by Malaysian authorities
  • Service improvement: Analyzing usage patterns in aggregate (without identifying individuals) to improve the user experience

4Legal Basis for Data Processing

Ovvo99 processes your personal data on valid legal bases in accordance with Malaysia's PDPA. We do not process data without solid justification. The legal bases we rely on are:

  • Your consent: For marketing communications, promotional notices, and non-essential cookies — you may withdraw consent at any time
  • Contract performance: Data required to provide the services you have requested, including payment processing and account management
  • Legal obligations: Compliance with KYC, AML, and reporting requirements set by Malaysian authorities
  • Legitimate interests: Platform security, fraud prevention, and service improvement — provided these interests do not override your fundamental rights

5Data Sharing with Third Parties

Ovvo99 applies a "need-to-know" principle in data sharing. We does not sell your personal data to any third party for marketing or commercial purposes. However, there are limited situations where data sharing is necessary:

  • Payment service providers: Payment gateways integrated with the ovvo99 platform to securely process your deposits and withdrawals
  • KYC service providers: A third-party identity verification company that helps us authenticate your documents
  • Game providers: Gaming technology companies that provide game content on the ovvo99 platform — only the minimum data required for game functionality will be shared
  • Legal authority: Where required by Malaysian law, court order, or upon request from a legitimate enforcement authority
  • Infrastructure providers: Cloud and hosting service providers that store data to the highest security standards

All third parties we work with are required to sign strict data protection agreements and comply with the security standards set by ovvo99. They are not permitted to use your data for any purpose beyond what has been agreed.

If ovvo99 undergoes a merger, acquisition, or asset sale, member personal data may be transferred as part of the business assets. You will be notified via email or an in-platform notice before your data becomes subject to a different Privacy Policy.

6Data Security Measures

Your personal data security is ovvo99's number one priority. We continuously invest in the latest security technologies and procedures to ensure your data is always protected against unauthorized access, loss, or misuse.

Key security measures we have implemented include:

  • Data encryption in transit: All communications between your device and ovvo99's servers are protected by 256-bit SSL/TLS encryption — the same standard used by banking institutions
  • Data encryption at rest: Sensitive data stored in the ovvo99 database is encrypted using AES-256 algorithm
  • Two-Factor Authentication (2FA): Additional security feature available to all member accounts to prevent unauthorised access
  • Role-based access control: Only ovvo99 staff who require data access to perform their specific duties are permitted to do so — applying the principle of least privilege
  • 24/7 Monitoring: An automated security monitoring system that detects and alerts on any suspicious activity in real time
  • Regular security audits: Security assessments and penetration testing by independent cybersecurity experts are conducted on a regular basis
  • Strong password policy: ovvo99 enforces strong password requirements and supports password managers
While we take all reasonable precautions, no security system can be guaranteed 100% secure. If you suspect your account has been compromised, contact the ovvo99 support team immediately via live chat.

7Data Retention Period

Ovvo99 does not retain your personal data longer than necessary. Retention periods are determined based on the purpose of data collection and applicable legal requirements:

  • Active account data: Retained for as long as your account is active or as long as required to provide the service
  • KYC and financial data: Retained for a minimum of 7 years after account closure, in line with Malaysian legal requirements relating to AML and tax reporting
  • Activity and game logs: Retained for 2 years for security, dispute resolution, and audit purposes
  • Support communication data: Retained for 1 year after case resolution
  • Marketing data: Retained until you withdraw consent or close your account

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8Your Rights as a Data Subject

As an ovvo99 member, you have guaranteed rights under Malaysia's PDPA regarding your personal data. ovvo99 respects and facilitates the exercise of these rights:

Right of Access — Request a copy of the personal data we hold about you
Right to Rectification — Correct inaccurate or incomplete data
Right to Erasure — Request deletion of data in certain situations
Right to Object — Object to processing for direct marketing purposes
Right to Restriction — Restrict data processing under certain circumstances
Right to Portability — Receive your data in a machine-readable format

To exercise any of the above rights, contact the ovvo99 support team via live chat or email at [email protected]. We will process your request within 14 business days. In complex cases, this period may be extended by up to 30 days with prior notice to you.

9Cookies and Tracking Technology

Ovvo99 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the ovvo99 website. The types of cookies we use include:

  • Essential cookies (required): Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Preference cookies: Remembering your language settings, display preferences, and personal preferences for a more comfortable experience
  • Analytics cookies: Collecting aggregate information on how users interact with the platform to help us improve design and content
  • Security cookies: Helping detect fraudulent activity and verifying that login sessions are legitimate

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the ovvo99 platform. For more information on managing cookies, refer to your browser's help guide.

10Changes to This Privacy Policy

Ovvo99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technology, legal requirements, or other operational reasons. When material changes are made, we will notify you via:

  • In-app notification on ovvo99 the first time you log in after changes are published
  • Notification email sent to the address registered on your account
  • Update the "Last Updated" date shown at the top of this page

We encourage you to review this Privacy Policy page periodically. Continued use of the ovvo99 platform after changes are published constitutes your acceptance of the updated Privacy Policy.

11How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ovvo99 handles your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us via:

  • Live Chat: Stay within the ovvo99 platform — available 24 hours a day, 7 days a week, with an average response time of under 2 minutes
  • Email: [email protected] — for privacy inquiries requiring detailed clarification or data rights requests
  • FAQ: Visit the page Frequently Asked Questions for instant answers to the most frequently asked questions

We are committed to responding to all privacy-related enquiries within 3 business days. For unresolved complaints, you have the right to refer to the Personal Data Protection Commissioner of Malaysia.