Privacy Policy ovo33 — Protection Personal Data You

This Privacy Policy explains in detail how ovo33 ("we", "Platform") collects, processes, stores, and protects your personal information ("Member", "you") when you use the ovo33 platform accessible at ovo33.onl. This document forms part of a binding agreement between you and ovo33, and should be read together with our Terms and Conditions.

Ovo33 values the privacy of every member. We understand that the personal information you share is sensitive, and we are committed to handling it with full integrity, transparency, and accountability. This Policy explains your rights under Malaysia's Personal Data Protection Act 2010 (PDPA) and the measures we take to keep your data safe.

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you may provide the following information:

• Identity Information: Full name, date of birth, identity card or passport number.
• Contact Information: Email address, mobile number, residential address.
• Financial Information: Bank account number, bank name, e-wallet details (Touch 'n Go, GrabPay) for deposit and withdrawal processing purposes.
• KYC Verification Documents: A copy of your identity card, passport, or other official document required for identity verification.
• Communication: Any messages, enquiries, or feedback you send to our support team.

1.2 Information Collected Automatically

When you use the ovo33 platform, our systems automatically record certain technical information for security and service improvement purposes:

• Device Data: Device type, operating system, phone model, screen resolution.
• Network Data: IP address, general geographic location, internet service provider.
• Session Data: Login date and time, session duration, pages visited, in-game actions.
• Cookie Data: Language preferences, login status, display settings (see Section 5 for more information on cookies).

2.1 Purposes of Data Use

Ovo33 uses your personal information solely for legitimate and stated purposes. We will not use your data for any other purpose without first obtaining your consent. The primary purposes for which data is used are as follows:

3.1 Core Sharing Principles

Ovo33 does not sell, does not rent, and does not trade your personal information to any third party for their own commercial purposes. However, there are limited situations where we need to share your information with certain parties:

3.2 Parties Who May Receive Your Information

• Payment Processing Providers: Financial institutions, FPX providers, and e-wallet operators that need to process your transactions. They receive only the information required for payment purposes.
• Technology Service Providers: Companies that help us operate the platform, including cloud services, data analytics, and security infrastructure — all subject to strict confidentiality agreements.
• Regulatory Authority: Government bodies or legal authorities with legitimate authority to request specific information in the course of official investigations.
• Game Providers: Third-party game content providers may receive anonymised account identifiers for game processing purposes only.

3.3 Cross-Border Data Transfers

In certain cases, your information may be processed or stored outside Malaysia by our cloud or technology service providers. In such situations, ovo33 ensures that an equivalent or higher level of data protection is maintained in accordance with the requirements of PDPA 2010.

4.1 Technical Security Measures

Ovo33 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, modification, or destruction:

• 256-bit SSL/TLS Encryption: All communications between your browser and ovo33 servers are encrypted using the latest SSL/TLS protocols.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are encrypted when stored in our database.
• Multi-Layer Firewall: Our infrastructure is protected by a multi-layered firewall system that monitors and filters all incoming and outgoing traffic.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their account.
• 24/7 Monitoring: Our systems are continuously monitored by our security team to detect any suspicious activity.
• Regular Security Testing: ovo33 conducts regular security audits and penetration testing to identify and address any vulnerabilities.

4.2 Data Breaches

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a serious data breach, ovo33 is committed to notifying affected members and the relevant authorities within the timeframe stipulated by law, and to taking immediate action to contain and remediate the situation.

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the ovo33 platform. They help us recognise you, remember your preferences, and deliver a better, more personalised experience during your session.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies. Please note, however, that disabling certain cookies — especially essential cookies — may affect the functionality and user experience of the ovo33 platform.

As an ovo33 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information:

7.1 Data Retention Period

Ovo33 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. The following are general data retention guidelines:

• Active Account Information: Retained throughout the period your account is active, plus the mandatory retention period after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with the Anti-Money Laundering Act 2001.
• Communication & Support Logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Anonymous Analytics Data: May be retained indefinitely as it cannot be identified as belonging to any specific individual.

7.2 Data Deletion Process

When the retention period expires or you request account deletion, ovo33 will carry out a secure and thorough data deletion process. Data that must be retained for legal purposes will be separated, isolated, and accessible only to authorised personnel.

8.1 Right to Amend

Ovo33 reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, technological changes, or business developments. All amendments will take effect as soon as the latest version is published on the ovo33 platform.

8.2 Notification of Changes

For material or significant changes, ovo33 will endeavour to notify members via in-account notifications, a pop-up upon login, or an email to your registered address. However, it remains your responsibility to review this Privacy Policy periodically to ensure you are always aware of the latest version.

8.3 Continued Use

Continued use of the ovo33 platform after any Privacy Policy amendment is published will be considered full acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and may request account closure through our customer support.

8.4 Governing Law

This Privacy Policy is governed and interpreted in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA), the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, and any other relevant legislation in force from time to time.