Privacy Policy OCMY8 – Your Information is Protected

1. Introduction

Welcome to the OCMY8 Privacy Policy page. We, OCMY8 (trusted by hundreds of thousands of members in Malaysia), we take the protection of your personal information very seriously. This policy explains in detail how we collect, process, store and protect your data when you use the OCMY8 platform — whether through our website at ocmy8.fun or our mobile app.

By registering as a member and using OCMY8 services, you agree to the terms set out in this privacy policy. We encourage you to read this document carefully and contact our support team if you have any questions.

2. Information We Collect

OCMY8 collects only the information necessary to ensure a safe, seamless, and trustworthy gaming experience. The categories of information collected include:

• Registration Information: Full name, date of birth, identification number (MyKad/passport), email address, and mobile phone number.
• Financial Information: Bank account details, deposit and withdrawal records, and transaction history for secure payment processing purposes.
• Identity Verification (KYC) Data: Copies of identification documents submitted during the account verification process, in line with Malaysia's legal compliance requirements.
• Platform Usage Data: Gaming history, login activity, account setting preferences, and communication records with the support team.
• Technical Data: IP address, device type, operating system, web browser, and session data collected automatically when you use our platform.

3. Purpose of Use of Information

Every piece of information we collect has a clear and legitimate purpose. OCMY8 uses your data to:

• Create and manage your member account securely.
• Process deposits and withdrawals quickly and accurately.
• Conduct KYC checks in line with anti-money laundering (AML) regulations.
• Provide responsive and effective customer support.
• Analyze usage patterns to improve platform performance and user experience.
• Send promotional information, bonuses, and exclusive offers — only to members who have given their consent.
• Fulfill legal and regulatory obligations in force in Malaysia.

4. Legal Basis for Data Processing

The processing of your personal data by OCMY8 is based on one or more of the following lawful grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: You have voluntarily agreed during the account registration process.
• Contractual Necessity: Processing is necessary to provide the service you have requested.
• Legal Obligation: We are required to comply with applicable financial, tax, and regulatory requirements.
• Legitimate Interest: Protecting platform security and preventing fraud is our legitimate interest as a platform operator.

5. Sharing Information with Third Parties

OCMY8 does not sell or transfer your personal information to any third party for their own commercial purposes. However, in certain situations we may share data with:

• Payment Service Providers: Integrated payment processors used to handle your deposits and withdrawals securely.
• Game Software Providers: Game provider partners who require minimal session data to ensure smooth game functionality.
• Statutory Authorities: Government agencies or law enforcement bodies when required by court order or Malaysian legislation.
• Auditors and Professional Advisors: Audit firms, lawyers, or consultants bound by strict confidentiality agreements.

All third parties working with OCMY8 are required to adhere to data protection standards equivalent to our own.

6. Data Storage and Retention Period

Your data is stored on secure servers with multiple layers of physical and digital protection. OCMY8 retains your personal information for as long as your account is active or as long as necessary to provide services to you.

Following account closure, we will retain certain records for the period required by Malaysian law — typically between 5 and 7 years — for compliance and audit purposes. After that period, data will be securely deleted using industry-recognized methods.

7. Your Rights as a Data Subject

Under Malaysia's PDPA, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request that we update or correct inaccurate or outdated data.
• Right to Erasure: Request deletion of your data, subject to legal retention obligations.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time, without affecting the validity of any prior processing.
• Right to Object: Object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact the OCMY8 support team through the channels provided in the platform. We will respond to your request within 14 business days.

8. Data Security

OCMY8 implements comprehensive technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. These include:

• End-to-end encryption using the latest TLS/SSL protocols for all data transfers.
• Role-based access control (RBAC) ensuring that only authorized personnel can access sensitive data.
• Regular security audits and penetration testing by independent third parties.
• Two-factor authentication (2FA) for member account login as an added layer of security.
• 24/7 monitoring systems to detect and respond to any suspicious activity.

9. Cookies and Tracking Technologies

The OCMY8 website uses cookies and similar technologies to enhance your experience. There are three main types of cookies we use:

• Essential Cookies: Required for basic website functions such as login sessions and account security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymized usage data to help us understand how members interact with the platform so we can improve it.
• Functional Cookies: Remember your preferences such as language, display settings, and login information for your convenience.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of our platform.

10. Links to Third-Party Sites

The OCMY8 platform may contain links to third-party websites or services in certain contexts. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

11. Changes to This Privacy Policy

OCMY8 reserves the right to update or modify this Privacy Policy at any time. Any significant changes will be communicated to you via in-platform notifications or email to your registered address at least 14 days before the changes take effect.

Your continued use of the OCMY8 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal information, please contact the OCMY8 Data Protection Officer via our support email. Our team is ready to assist you at any time.

Effective Date: 1 January 2026  |  Version: 2.1