Olbwin Privacy Policy – How We Protect the Personal Data of Malaysian Members

This Privacy Policy is published by olbwin ("We", "Platform", or "olbwin") and describes our practices regarding the collection, use, storage, disclosure, and protection of personal data we receive from you as a user of the platform olbwin.best.

Olbwin takes the privacy of every member seriously. We understand that in today's digital landscape, trust in how personal data is handled is just as important as trust in the quality of the services we offer. That is why we are committed to being fully transparent about what we do with your information.

This Privacy Policy is drafted in compliance with Personal Data Protection Act (PDPA) Malaysia 2010 and adhere to all data processing principles set out therein. By registering for or using the olbwin platform, you confirm that you have read and understood this Privacy Policy.

Olbwin collects your personal data across the following categories. We affirm that all data collection is for legitimate purposes and is necessary to provide you with platform services:

Olbwin does not collect credit or debit card numbers directly. All payment transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed directly by the respective payment gateways, not through olbwin's servers.

Olbwin collects your personal data through the following channels:

• Account Registration: When you register an olbwin account, you directly provide identity and contact information such as your name, phone number, and email address.
• KYC (Know Your Customer) Process: When you are required to verify your identity for compliance purposes, you will be asked to upload a copy of your Malaysian identity card or other supporting documents.
• Financial Transactions: Information related to deposits and withdrawals in Malaysian Ringgit (RM) is recorded automatically when a transaction occurs — including the payment method used (e.g. Touch 'n Go eWallet, GrabPay, or DuitNow).
• Gaming Activity: The olbwin system automatically records all gaming activity, including Sports Betting, slots sessions, Baccarat games, E-Sports, and virtual sports, for account management and compliance purposes.
• Cookie Technology: The olbwin platform uses cookies and similar tracking technologies to collect technical and browsing behaviour data — further details are available in Section 8.
• Support Communications: When you contact the olbwin customer support team via live chat, email, or WhatsApp, the content of those communications is retained for service quality and compliance purposes.

Olbwin uses collected personal data only for legitimate purposes to which you have given explicit or implied consent. The primary purposes for which your data is used are:

• Service Provision: To manage your account, process deposits and withdrawals in RM, enable access to all games on olbwin, and provide effective customer support.
• Identity Verification (KYC): To verify that you meet our age eligibility and identity requirements, in line with olbwin's policies and industry compliance obligations.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, multi-account usage, system exploitation, and illegal activities such as money laundering (AML).
• Legal Compliance: To meet legal, regulatory, and directive requirements from relevant authorities applicable to the platform's operations.
• Platform Improvements: To analyse usage patterns, identify technical issues, and improve the overall experience on the olbwin platform for all users.
• Responsible Gaming: To monitor gaming patterns that may indicate signs of problem gambling and take appropriate preventive action, in line with olbwin's commitment to responsible gaming.
• Marketing Communications (with Consent): To send promotional information, bonus offers, and olbwin platform updates — only where you have given your consent at registration or at a later date.

Olbwin will not use your data for any purpose other than those stated above without first notifying you and obtaining fresh consent where required.

Olbwin does not sell, rent, or trade your personal data to any third party. However, in the course of operating the platform, we may share certain data with selected third parties in the following circumstances:

• Payment Processors: Required transaction information is shared with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, the DuitNow gateway, and Malaysian banks via FPX (Maybank2u, CIMB Clicks) to process your deposits and withdrawals in RM.
• Game Software Providers: The minimum technical data required is shared with game providers such as PG Soft, Pragmatic Play, and Spadegaming to ensure games function correctly within your account.
• Technology Service Providers: Companies we engage for server hosting, platform analytics, and cybersecurity may have limited access to the data necessary for their services, under strict confidentiality agreements.
• Relevant Authorities: olbwin will disclose data to Malaysian authorities — such as the police, courts, or regulatory bodies — when required by law or in the course of investigating suspected criminal activity.

All third parties that receive data from olbwin are required to process that data solely for the specified purposes and to maintain security standards equivalent to or higher than our own. We are not responsible for the privacy practices of third parties operating outside the scope of their agreement with olbwin.

Olbwin applies multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, misuse, or disclosure:

• 256-bit SSL Encryption: All data transmitted between your browser and olbwin's servers is protected by TLS/SSL protocol with 256-bit encryption keys — the highest standard available for secure web communications.
• Data-at-Rest Encryption: Sensitive data stored in olbwin's databases — including verification information and financial records — is encrypted using industry-standard cryptographic algorithms.
• Internal Access Controls: Only olbwin staff with a legitimate business need are permitted to access member personal data. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): olbwin's internal systems containing member data are protected with multi-factor authentication to prevent unauthorised access even if a password is compromised.
• Continuous Security Monitoring: An automated monitoring system operates 24/7 to detect any suspicious activity or intrusion attempts against the olbwin infrastructure.
• Regular Security Audits: olbwin conducts regular vulnerability assessments and penetration testing by independent third parties to identify and address weaknesses before they can be exploited.

Olbwin retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active on the olbwin platform, your personal data and activity records will be retained for the purpose of providing ongoing services.
• Financial Transaction Records: Deposit, withdrawal, and winnings records in RM are retained for a minimum of 7 years from the transaction date, in line with Malaysian legal requirements on financial documentation and AML compliance.
• Data After Account Closure: Upon account closure, identity information and core records are retained for 5 years for legal compliance purposes and to address any claims or disputes that may arise thereafter.
• Technical Logs: Server logs and technical data are retained for a maximum of 12 months for security and technical troubleshooting purposes.
• Support Communication Records: Customer support conversation records are retained for 2 years from the date of the last communication.

Once the applicable retention period has elapsed, data will be securely deleted or anonymised in accordance with olbwin's established procedures. Anonymised data (from which all personal identifiers have been fully removed) may be retained for longer for analytics and platform improvement purposes.

The olbwin platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how users interact with the platform. The following are the types of cookies we use:

Cookies classified as "Essential" cannot be disabled, as they are required for the platform's core functions — such as keeping you logged in during your gaming session. "Analytics" and "Functional" cookies can be managed through your browser settings, though disabling them may affect your experience on the olbwin platform.

Olbwin does not use cookies for third-party advertising purposes or to track your activity outside of our own platform.

Under the Personal Data Protection Act (PDPA) Malaysia 2010, you have the following rights with respect to the personal data held by olbwin. All requests to exercise these rights should be submitted to us via support@olbwin.best with the subject line "PRIVACY REQUEST":

The olbwin platform is exclusively for individuals aged 21 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

Should olbwin discover that personal data belonging to an underage individual has been collected inadvertently — for example, as a result of fraudulent registration — we will take immediate action to:

• Immediately closing the account in question.
• Deleting all personal data of the individual from our systems within a reasonable timeframe.
• Reporting the matter to the relevant Malaysian authorities if fraud is suspected.

If you believe that an individual under the age of 21 has registered an account on olbwin, please contact us immediately at support@olbwin.best so that immediate action can be taken.

Olbwin reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any updates will be published on this page with a revised "Last Updated" date.

For material changes — that is, changes that could significantly affect how we handle your data — olbwin will notify you via:

• A prominent notification on the olbwin platform upon your next login.
• Email to your registered address (for significant changes).
• Update the date on this page.

Your continued use of the olbwin platform after any Privacy Policy changes take effect will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and discontinue use of the platform.

If you have any questions, concerns, or complaints regarding olbwin's Privacy Policy or how we handle your personal data, please reach out to our team through the following channels:

• Privacy Email: support@olbwin.best — Use the subject line "PRIVACY INQUIRY" or "DATA REQUEST" for priority handling.
• Live Chat: Available 24/7 via the olbwin platform — for general enquiries and request verification.
• WhatsApp: Contact our support team via WhatsApp for privacy-related enquiries that require a faster response.

We are committed to responding to all privacy-related enquiries within 24 business hours. For formal requests relating to data rights (access, rectification, deletion), please provide your account details and sufficient identity verification documents so that we can process your request accurately and securely.

If, after contacting olbwin, you remain dissatisfied with how we have handled your privacy complaint, you have the right to lodge a formal complaint with Personal Data Protection Department (JPDP) Malaysia which is the regulatory authority under the PDPA 2010.