Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by olx100 ("we", "us", "the Company", "the Platform") and applies to all personal data collected, processed, and stored by olx100 in connection with the operation of its online casino, sportsbook, and associated digital services (collectively, the "Services") available at https://olx100.casa.

This Policy is intended to inform you — the Player, user, or visitor ("you", "your") — of the nature of personal data we collect, the purposes for which it is processed, how long we retain it, with whom we share it, and what rights you hold in respect of that data under applicable data protection legislation.

By registering an Account on olx100, making a deposit, placing a wager, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "Account" means the individual member account you create and maintain on the olx100 platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or any other handling thereof.
• "Data Controller" means olx100, the entity that determines the purposes and means of processing your Personal Data.
• "KYC" means Know Your Customer — the identity verification process required by olx100 before processing withdrawal requests.
• "Cookies" means small data files stored on your device by your web browser at the request of the olx100 platform.
• "Services" means all products, features, and functionality offered through the olx100 platform, including casino games, sportsbook, live dealer, and customer support.

3. Data We Collect

3.1 Information You Provide Directly

When you register an Account, complete KYC verification, make a deposit, contact our support team, or participate in a promotion, you provide us with certain Personal Data directly. This includes:

• Full legal name and date of birth;
• Residential address (including city, state, and postcode — e.g., Kuala Lumpur, Penang, Johor Bahru);
• Email address and mobile phone number;
• Government-issued identity document details (e.g., Malaysian MyKad or passport number) provided during KYC;
• Payment method details (e.g., bank account information, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, or cryptocurrency wallet addresses for USDT TRC20 deposits);
• Communications and correspondence submitted to our support team.

3.2 Information Collected Automatically

When you access or use the Services, certain data is collected automatically by our systems:

• IP address and approximate geolocation derived therefrom;
• Browser type, version, and operating system;
• Device type, unique device identifiers, and screen resolution;
• Pages visited, game sessions played, wagers placed, and time spent on the platform;
• Referral URLs and session duration data;
• Cookie identifiers and session tokens (see Section 8 for full details).

3.3 Information from Third Parties

We may, from time to time, receive Personal Data about you from third-party sources in connection with the operation of our Services. This includes:

• Identity and age verification data from KYC/AML compliance service providers;
• Fraud detection signals from payment processors and financial institutions;
• Responsible gambling data from self-exclusion registries where applicable.

4. Data Processing & Purpose

The table below summarises the key purposes for which we process your Personal Data and the categories of data involved:

5. Legal Basis for Processing

olx100 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing that is required to perform our contractual obligations to you under our Terms & Conditions, including Account management, payment processing, and game service delivery;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations and responsible gambling mandates;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and analytics, where such interests are not overridden by your data protection rights;
• Consent: Processing based on your specific, informed consent, such as receiving marketing emails or newsletters. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

olx100 does not sell, rent, or trade your Personal Data to third-party commercial entities. We share data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to operate aspects of our business on our behalf. These include payment processors (e.g., FPX gateway operators, e-wallet integration partners), KYC and identity verification platforms, hosting and infrastructure providers, fraud detection services, and customer support tools. All such providers are contractually bound to process your data only on our instructions and to maintain appropriate data security standards.

6.2 Game Software Providers

Certain data — primarily anonymous session and technical data — is shared with game software providers (such as live dealer studio operators) solely for the purpose of facilitating gameplay, settling wagers, and ensuring game integrity. These providers do not receive your identity documents or payment method details.

6.3 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required by applicable law, court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

6.4 Business Transfers

In the event that olx100 undergoes a merger, acquisition, reorganisation, or sale of all or substantially all of its assets, your Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to data processing arrangements that result from it.

7. Data Retention

olx100 retains your Personal Data for as long as your Account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specifically:

• Account registration and identity data are retained for a minimum of five (5) years following Account closure, in accordance with AML record-keeping requirements;
• Transaction and wagering records are retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications are retained for three (3) years from the date of each interaction;
• Marketing preferences and consent records are retained for the duration of your subscription and for one (1) year following unsubscription;
• Technical and log data (IP addresses, session logs) is retained for up to twelve (12) months, after which it is purged or anonymised.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with any individual.

8. Cookies & Tracking Technologies

8.1 What We Use

olx100 uses cookies, web beacons, pixel tags, and similar technologies to operate and improve the platform. These technologies allow us to recognise your browser, maintain your session, remember your preferences, and analyse how the platform is used.

8.2 Types of Cookies

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of these without ceasing to use the Services.
• Functional cookies: Remember your preferences such as language settings, display preferences, and game history. Disabling these may affect your experience.
• Analytics cookies: Allow us to understand how players use the platform in aggregate — which pages are visited most, how long sessions last, and where technical errors occur. This data is anonymised before analysis.

8.3 Managing Cookies

You can configure your browser to refuse or delete cookies. Please refer to your browser's help documentation for instructions. Note that disabling cookies may prevent some features of the olx100 platform from functioning correctly.

9. Data Security

olx100 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encrypted storage for sensitive data at rest;
• Role-based access controls ensuring only authorised personnel can access Personal Data;
• Multi-factor authentication required for administrative platform access;
• Regular third-party penetration testing and vulnerability assessments;
• Intrusion detection and anomaly monitoring systems operating around the clock;
• Incident response procedures with mandatory breach notification protocols.

10. Your Rights

As a data subject, you hold the following rights in respect of your Personal Data held by olx100. To exercise any of these rights, please contact our support team using the details in Section 15. We will acknowledge your request within 7 business days and provide a substantive response within 30 calendar days.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (e.g., AML record-keeping requirements).
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being verified.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, or to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11. International Data Transfers

olx100 may transfer your Personal Data to service providers or infrastructure partners located outside of Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure your data receives an adequate level of protection, including contractual clauses based on internationally recognised data transfer frameworks, and by selecting service providers whose data protection practices meet the standards described in this Policy.

12. Data of Minors

olx100's Services are strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has provided us with Personal Data or has accessed our Services, we will immediately close the associated Account and delete all related data, in addition to any winnings accrued, which will be forfeited.

If you are a parent or guardian who believes your child may have registered on olx100, please contact our support team immediately so we can investigate and take appropriate action.

13. Third-Party Services & Links

The olx100 platform may, from time to time, reference or integrate with third-party services necessary for platform operation (such as payment gateway redirects to your Maybank or Touch 'n Go eWallet login page). These third-party services operate under their own independent privacy policies, and olx100 is not responsible for their data practices.

We recommend that you review the privacy policy of any third-party service you are directed to as part of using olx100's payment or verification flows.

14. Amendments to This Privacy Policy

olx100 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or materially alter how data is shared — we will notify registered Players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. Your continued use of the Services following the effective date of any updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact our Data Privacy team. We are committed to resolving all privacy-related inquiries promptly, professionally, and in accordance with applicable data protection obligations.

For general platform support queries unrelated to data protection, please use our 24/7 live chat available within the olx100 platform, where our English-speaking support agents can assist you directly.