ojol500 Privacy Policy

ojol500 ("we", "us", "our", "the Company") operates the online gaming platform accessible atojol500.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you", "Player "User") who access or use our services, which include live casino, sports betting, slots, lottery, arcade games, and related entertainment products.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It applies to data collected through the Platform, via email correspondence, through our customer support channels, and through any other interaction you have with ojol500.

By registering an account, using the Platform, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree with this Policy, please do not use the Platform or provide us with your personal data.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, device identifiers, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means ojol500, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of ojol500, under contract and subject to confidentiality obligations.
• "Account" means a registered player account on the ojol500 Platform.
• "KYC" means Know Your Customer — the identity and eligibility verification process conducted by ojol500 on all registered Players.
• "Cookie" means a small text file stored on your device by a website, used to remember preferences, session state, and enable certain functionality.
• "Sensitive Personal Data" means Personal Data relating to race, religion, health, political opinions, biometric data, or criminal history, as classified under applicable data protection law.

ojol500 collects Personal Data that is necessary to operate the Platform, verify player identity, process financial transactions, and comply with applicable legal and regulatory obligations. The categories of data we collect include:

3.1 Identity & Registration Data

Full legal name, date of birth, gender, nationality, and identification document details (Malaysian IC / MyKad number, Passport number, or Driver's Licence number) as provided during registration or KYC verification.

3.2 Contact Information

Email address, mobile phone number, and residential address (including city, state, and postcode). Malaysian users typically provide addresses in Kuala Lumpur, Selangor, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or other localities.

3.3 Financial Data

Payment account details used for deposits and withdrawals, including: e-wallet identifiers (Touch 'n Go eWallet account, Boost wallet ID, GrabPay number), bank account numbers and bank names (Maybank, CIMB, Public Bank, RHB, Hong Leong, AmBank), DuitNow / FPX transaction references, and cryptocurrency wallet addresses (BTC, ETH, USDT, LTC). We do not store full card numbers in unencrypted form.

3.4 Gaming & Transactional Data

Deposit history, withdrawal requests, game activity logs (bets placed, amounts wagered, wins and losses), bonus usage records, wagering turnover data, and account balance history.

3.5 Technical & Device Data

IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone, geographic location data derived from IP, pages visited, session duration, and click-path data.

3.6 Communications Data

Records of correspondence with our support team via live chat, email ([email protected]), or any other communication channel, including the content of messages and timestamps.

3.7 KYC & Verification Documents

Copies of identity documents, proof of address documents (utility bills, bank statements), and selfie images submitted during the KYC verification process.

We collect Personal Data through the following means:

• Direct submission: Information you provide voluntarily when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform, via server logs, session tracking, and cookies (see Section 10).
• Payment processors: Transaction reference data returned by payment processors (e.g., DuitNow transaction IDs, FPX reference numbers, cryptocurrency confirmation hashes) when you complete a financial transaction.
• Third-party KYC services: In some cases, identity verification data may be cross-referenced with third-party identity verification databases to confirm the accuracy of the information you provide.
• Fraud prevention partners: Device fingerprinting, IP reputation data, and risk-scoring signals provided by anti-fraud service providers to protect the integrity of the Platform.

ojol500 processes your Personal Data for the following specific purposes:

1. Account creation and management: To register your Account, verify your identity, and maintain your profile on the Platform.
2. KYC and age verification: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations, including confirming that all players are aged 21 and above.
3. Payment processing: To process deposits from and withdrawals to your nominated Malaysian payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported cryptocurrencies.
4. Game operation and personalisation: To operate casino and sports betting games, record your bets and winnings, calculate balances, and apply bonuses in accordance with applicable promotional terms.
5. Fraud detection and security: To identify, investigate, and prevent fraudulent activity, money laundering, multiple account abuse, and other prohibited conduct.
6. Customer support: To respond to your enquiries, resolve disputes, and communicate Account-related updates.
7. Regulatory compliance: To fulfil reporting obligations to regulatory authorities where required by applicable law.
8. Platform analytics and improvement: To analyse usage patterns, improve the user experience, and develop new features and products.
9. Marketing communications (with consent): To send promotional offers, bonus notifications, and platform updates to users who have opted in to marketing communications (see Section 14).

ojol500 processes Personal Data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered Player, including Account management, game operation, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, KYC requirements, and regulatory reporting.
• Legitimate interests: Processing conducted for the legitimate business interests of ojol500, including fraud prevention, platform security, analytics, and responsible gambling monitoring, where such interests are not overridden by your rights and interests.
• Consent: Where you have provided explicit consent for a specific processing activity, such as receipt of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ojol500 does not sell, rent, or share your Personal Data with third parties for their own marketing purposes. We may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors and financial institutions: To facilitate deposit and withdrawal transactions via your chosen Malaysian payment method. Data shared is limited to what is technically necessary for transaction processing.
• KYC and identity verification providers: To verify the identity, age, and eligibility of registered Players as required by our AML/CTF compliance programme.
• Fraud prevention and security services: To detect, prevent, and investigate fraudulent activity, chargebacks, and abuse of promotional offers.
• Game content providers: Licensed third-party game studios and live dealer platform operators who provide the games available on ojol500 may receive limited gameplay data necessary to operate their systems.
• IT infrastructure and hosting providers: Cloud hosting, database management, and cybersecurity service providers who process data as Data Processors under our instruction.
• Regulatory authorities: Where required by law, court order, or regulatory direction, we may disclose Personal Data to law enforcement agencies, financial intelligence units, or other competent authorities.

As an international online gaming platform, some of the third-party service providers we engage — including game studios, hosting infrastructure providers, and security services — may process your data in jurisdictions outside Malaysia. Where such transfers occur, ojol500 takes reasonable steps to ensure that your data receives a level of protection consistent with the principles in this Policy.

Safeguards we apply to international transfers include: contractual data processing agreements incorporating appropriate data protection clauses, use of providers operating under recognised international security certifications, and limiting the scope of data shared to the minimum necessary for the specific service purpose.

ojol500 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Our general retention periods are as follows:

• Account and registration data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, to meet regulatory and AML recordkeeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable AML regulations.
• Financial transaction records: Retained for a minimum of seven (7) years to comply with financial recordkeeping requirements.
• Gaming activity logs: Retained for five (5) years from the date of activity to support dispute resolution and responsible gambling monitoring.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Marketing preferences: Retained until you opt out or withdraw consent, after which preference data is retained for suppression purposes only.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be linked to any individual.

ojol500 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your session, and analyse usage patterns. The following categories of cookies may be set on your device:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without impairing your ability to use the site. They include session management, authentication, and security cookies.
• Functional cookies: Remember your preferences such as language settings, display preferences, and previously entered information to improve your experience.
• Analytics cookies: Collect anonymous statistical information about how users navigate the Platform, which pages are visited, and how long sessions last. This data is used to improve the Platform's design and performance.
• Security cookies: Used for fraud detection, bot prevention, and protecting the integrity of the Platform against abuse.

You can control cookie settings through your browser's privacy settings. Please note that disabling certain cookies may affect the functionality of the Platform. ojol500 does not set third-party advertising or tracking cookies for remarketing purposes.

ojol500 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using 256-bit SSL/TLS encryption. Sensitive stored data including payment credentials and identity documents is encrypted at rest.
• Access controls: Personal Data is accessible only to authorised personnel who require it for specific operational purposes. Access is controlled through role-based permissions and multi-factor authentication requirements.
• Intrusion detection: Automated systems monitor for suspicious access patterns, brute-force attempts, and anomalous behaviour on the Platform in real time.
• Penetration testing: Regular security assessments and penetration tests are conducted to identify and remediate vulnerabilities in the Platform infrastructure.
• Data minimisation: We collect only the Personal Data that is strictly necessary for the stated processing purposes, consistent with the principle of data minimisation.

While we employ robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials. Please notify us immediately at [email protected] if you suspect any unauthorised access to your Account.

Subject to applicable data protection laws and any overiding legal obligations (including AML/CTF retention requirements), you have the following rights in relation to your Personal Data held by ojol500:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. Note that we may be required to retain certain data for regulatory compliance purposes even after Account closure.
• Right to Restrict Processing: You may request that we temporarily limit the processing of your Personal Data in certain circumstances, for example while a dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, or to direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact our Data Privacy team via live chat or by email at [email protected]. We will respond to verified requests within thirty (30) days. We may require you to verify your identity before processing a data rights request.

The ojol500 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect, solicit, or process Personal Data from persons under the age of 21. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete such data and permanently close the associated Account.

Parents and guardians are encouraged to use appropriate parental control and internet filtering software to prevent underage access to online gambling platforms. If you believe a minor may have accessed our Platform, please contact us immediately at [email protected] so that we can investigate and act accordingly.

With your explicit consent, ojol500 may send you marketing communications about new games, promotional bonuses, VIP rewards, sports betting offers, and other Platform news via email or SMS. Such communications are sent only to registered Players who have opted in through the Account settings or registration process.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email;
• Updating your communication preferences in your Account settings; or
• Contacting our support team via live chat or email to request removal from our marketing list.

Opting out of marketing communications does not affect transactional communications necessary for Account operation, such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification communications. These service messages are sent regardless of your marketing preferences.

The Platform may reference third-party payment brands (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, etc.) by name for informational purposes. These are independent companies with their own privacy policies and data practices. ojol500 has no control over and accepts no responsibility for the privacy practices of third-party services. We encourage you to review the privacy policy of any third-party service before providing your personal information.

ojol500 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be communicated to registered Players by email or through a prominent notice on the Platform at least fourteen (14) days before the changes take effect, except where earlier implementation is required by law.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. We recommend reviewing this Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ojol500 handles your Personal Data, please contact our support team through the following channels:

• Live Chat: Available 24/7 within the Platform. The fastest channel for all account and privacy-related enquiries.
• Email: [email protected] — please include "Privacy Query" or "Data Rights Request" in the subject line for faster routing. We aim to respond within 30 days.

We take privacy complaints seriously and will investigate any concerns raised promptly and in good faith. If you remain unsatisfied with our response, you may be entitled to raise a complaint with the relevant data protection authority in your jurisdiction.