Privacy Policy

This Privacy Policy (the "Policy") describes how OCWins ("OCWins", "we", "our", or "us"), operating the online gaming and sports betting platform at ocwins.cam, collects, processes, stores, and protects the personal data of individuals ("you", "User", or "Member") who access or use the OCWins platform and associated services.

OCWins is committed to handling your personal information in a responsible, transparent, and secure manner, consistent with applicable data protection legislation and best-practice standards in the digital financial services sector. Our approach to data privacy is modelled on the trust architecture used by Malaysia's regulated banking and payment infrastructure, including the standards expected of institutions integrated with FPX and DuitNow.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together govern your use of the OCWins platform.

For the purposes of this Policy, the following terms are defined as follows:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, contact details, identification documents, financial information, and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" — OCWins, as the entity that determines the purposes and means by which your Personal Data is processed.
• "Data Processor" — Any third party that processes Personal Data on behalf of OCWins pursuant to a written agreement.
• "KYC Data" — Identity verification documents submitted during the Know Your Customer process, including government-issued identification, proof of address, and selfie photographs.
• "Cookies" — Small text files placed on your device by the OCWins platform to enable certain functionality and analytical capabilities.
• "Platform" — The OCWins website, mobile-optimised web application, and all associated services operated at ocwins.cam.

OCWins collects the minimum personal data necessary to provide our services, comply with legal and regulatory obligations, and maintain the security of the platform. The categories of data we collect are as follows:

We collect personal data through the following means:

• Direct Submission — Information you provide when registering an account, completing KYC, contacting customer support, or participating in promotions.
• Automated Technologies — Data collected automatically as you use the platform, including cookies, log files, session data, and device fingerprinting used for fraud prevention and security purposes.
• Payment Processors — Transaction reference data received from FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and partner banks upon the processing of deposits and withdrawals.
• Third-Party Verification Providers — Identity verification data obtained through authorised KYC and anti-money laundering (AML) screening services used to comply with regulatory requirements.
• Public Sources — Publicly available information used for the purposes of identity verification or fraud detection where lawful and proportionate.

OCWins processes your personal data only where a lawful basis exists. The following sets out the primary purposes for which we process your data and the corresponding legal basis:

• Account Registration and Management — Processing is necessary for the performance of the contract between you and OCWins.
• KYC and Age Verification — Processing is necessary for compliance with legal obligations, including anti-money laundering (AML) and age verification requirements.
• Transaction Processing — Processing is necessary for the performance of the contract, specifically to execute deposits and withdrawals via FPX, DuitNow, and other Malaysian payment channels.
• Fraud Prevention and Platform Security — Processing is necessary for the purposes of our legitimate interests in protecting the platform and its Members from fraudulent or harmful activity.
• Responsible Gambling Monitoring — Processing is carried out in pursuit of legitimate interests and compliance with responsible gambling obligations, including the identification of at-risk players.
• Marketing Communications — Processing is based on your freely given, specific, and informed consent at the time of account registration or at a subsequent opt-in point.
• Legal and Regulatory Compliance — Processing is necessary to comply with applicable laws, including reporting obligations to competent regulatory and law enforcement authorities.

OCWins does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers — FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, GrabPay, and Boost, solely for the purpose of processing financial transactions.
• KYC and AML Compliance Providers — Authorised third-party identity verification and screening providers engaged to assist OCWins in fulfilling its regulatory obligations.
• Game Software Providers — Third-party game studios and live dealer platform operators whose games are hosted on OCWins, where limited session data is required for game delivery.
• Technology and Infrastructure Providers — Cloud hosting, cybersecurity, and platform infrastructure partners who process data exclusively on OCWins' behalf under binding data processing agreements.
• Regulatory and Law Enforcement Authorities — Where required by applicable law, court order, or at the direction of a competent regulatory authority, OCWins may disclose personal data without prior notice to the Member concerned.

OCWins retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data — Retained for the full duration of your membership and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC Documents — Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Transaction Records — Retained for a minimum of five (5) years to satisfy financial reporting and AML compliance requirements.
• Marketing Preferences — Retained until you withdraw consent, after which they are updated promptly within our communications systems.
• Technical and Log Data — Retained for up to twelve (12) months for security and fraud investigation purposes, unless a longer period is required by an active investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with an identified individual.

OCWins employs a layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data in transit;
• Encryption at rest for sensitive data categories, including KYC documents and financial records;
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need may access personal data;
• Regular internal security audits and vulnerability assessments;
• Multi-factor authentication (MFA) for internal administrative access;
• Automated real-time monitoring for unusual account activity, login anomalies, and potential fraud indicators.

Despite our extensive precautions, no digital platform can guarantee absolute security against all conceivable threats. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, OCWins will notify affected Members without undue delay in accordance with applicable law.

OCWins uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The categories of cookies we use are:

• Strictly Necessary Cookies — Essential for the platform to function, including maintaining your session, processing bets, and enabling secure login. These cannot be disabled without affecting core functionality.
• Performance and Analytics Cookies — Used to collect anonymised data about how Members use the platform, such as which pages are visited most frequently, to enable us to improve service performance.
• Functional Cookies — Used to remember your preferences, such as language settings, preferred payment method, and display options.
• Security Cookies — Used for fraud detection, identifying suspicious device configurations, and preventing unauthorised access.

You may manage your cookie preferences through your browser settings. Please be aware that disabling certain categories of cookies may affect the availability and performance of specific platform features.

As a Member of OCWins and a data subject, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Customer Support team. We will respond to all verifiable requests within a reasonable and lawful timeframe.

• Right of Access — You may request a copy of the personal data OCWins holds about you, along with information about how it is processed.
• Right of Rectification — You may request correction of inaccurate or incomplete personal data held by OCWins.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing — You may request that OCWins restricts the processing of your personal data in certain circumstances, such as where the accuracy of data is contested.
• Right to Data Portability — Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of your data.
• Right to Withdraw Consent — Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object — You may object to processing based on legitimate interests, including direct marketing.

OCWins is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the account registration and KYC process, and we reserve the right to request additional proof of age at any point.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through registration, KYC review, or any other means — we will immediately suspend the associated account, delete the personal data concerned to the extent permitted by law, and take appropriate follow-up action in accordance with applicable legislation.

If you are a parent or guardian and believe that a minor has registered an account on OCWins, please contact our Customer Support team immediately so that we may investigate and act without delay.

The OCWins platform operates with infrastructure and service providers that may be located in jurisdictions outside Malaysia. Where personal data is transferred to countries that may not provide an equivalent level of data protection to that applicable in Malaysia, OCWins implements appropriate safeguards, including:

• Binding contractual clauses requiring receiving parties to maintain data protection standards consistent with this Policy;
• Transfers only to jurisdictions and entities that have demonstrated adequate data protection practices;
• Encryption of data in transit and at rest for all cross-border transfers involving sensitive personal data categories.

By using the OCWins platform, you acknowledge and consent to the transfer of your personal data in accordance with the safeguards described in this section.

OCWins reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Members via in-platform notification or registered email address. The updated Policy will take effect from the date of publication on the platform.

We encourage you to review this Policy periodically. Your continued use of OCWins following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 10, please contact the OCWins Data Privacy team through the following channels:

This Privacy Policy was last reviewed and published on 1 January 2026. We recommend bookmarking this page and returning periodically to stay informed of any updates.