Ole99 Privacy Policy — Data Protection & User Privacy

Ole99 collects your personal information only when it is required to provide a safe, fair, and efficient service. We do not collect more data than necessary, and every category of data we collect has a clear and legitimate purpose.

Every piece of data we collect is used for a specific and legitimate purpose. We do not use your data for any purpose unrelated to providing ole99 services. The following are the primary ways we use your personal information:

• To verify your identity during registration and ensure compliance with KYC requirements and anti-money laundering (AML) laws applicable in Malaysia.
• To process deposits, withdrawals, and other financial transactions securely and efficiently through fully encrypted payment channels.
• To handle customer support, respond to your inquiries, and resolve any complaints or technical issues you report via Live Chat.
• To send important notifications related to your account, including new login activity, transaction confirmations, and policy updates that directly affect you.
• To analyze platform usage patterns in aggregate for product improvement, security anomaly detection, and new feature development.
• To fulfill legal obligations and mandatory regulatory compliance requirements, including providing records to relevant authorities when ordered by a court or law enforcement agency.
• To inform you about promotions, exclusive offers, and platform updates — you can opt out of marketing communications at any time through your account settings.

Ole99 will never sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our fundamental commitment to every platform user. However, in the following limited situations, we may need to share certain information:

• Trusted Service Providers: Payment processors, cloud service providers, and technology partners directly involved in operating the ole99 platform — all parties are bound by strict confidentiality agreements and may only use your data for purposes we specify.
• Legal Requirement: When required by Malaysian law or a valid court order, we may be obliged to disclose certain information to law enforcement authorities or regulatory agencies.
• Fraud Prevention: In cases where there is strong evidence of fraudulent activity, money laundering, or serious security threats, we may share relevant information with industry bodies or the appropriate authorities to protect other users.
• With Your Consent: In any other situation not described above, we will obtain your explicit consent before sharing any personal information with third parties.

Protecting your personal data from unauthorized access, disclosure, alteration, or destruction is our highest priority. ole99 implements multiple layers of technical and organizational security to keep your data safe at all times.

• 256-bit SSL/TLS encryption protects all data transmitted between your device and ole99 servers — ensuring no third party can intercept or read your communications with our platform.
• Data stored on our servers is also encrypted using AES-256 encryption standards — the same standard used by financial institutions and government agencies worldwide.
• Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operate 24 hours a day, 7 days a week to monitor and block any suspicious activity against our infrastructure.
• Internal access to user data is strictly limited under the principle of least privilege — only staff who genuinely need access to perform their duties are permitted to view the relevant data.
• Independent security audits are conducted periodically by qualified third parties to identify and address any vulnerabilities before they can be exploited.
• All ole99 staff who handle user data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

Ole99 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse platform performance, and secure your session. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification, account security, and basic preference memory. These cookies cannot be disabled as they are essential for the platform to function properly.
• Analytics Cookies: To help us understand how users interact with the platform — which pages are visited most, how long users spend, and where users encounter issues. This data is used in aggregate form and does not personally identify you.
• Preference Cookies: To save your preferences such as language, display settings, and other preferences so you do not need to reconfigure them each time you visit the platform.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. We recommend keeping essential cookies active for the best experience.

As a user of the ole99 platform, you have certain rights regarding your personal data. ole99 is committed to respecting and facilitating the exercise of these rights. The following are the key rights you hold:

Ole99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations. Once the retention period expires, your data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure to meet legal obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable Malaysian financial and tax legislation.
• Security Logs: Retained for three (3) months for the purposes of security incident investigation and fraud prevention.
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.
• KYC Documents: Retained for the minimum period required by applicable anti-money laundering regulations.

The ole99 platform may contain references to third-party services such as payment processors and game providers. This Privacy Policy applies to the ole99 platform only and does not cover the privacy practices of those third parties.

• Third-party game providers partnered with ole99 are subject to their own privacy policies. ole99 screens our partners to ensure they meet high data protection standards before any partnership is approved.
• The payment processors we use are licensed financial institutions that comply with PCI-DSS standards and maintain strict data protection protocols.
• Ole99 is not responsible for the privacy practices of any external platform. We recommend that you read the privacy policy of each service you use separately.

Ole99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. We are committed to informing you of any significant changes.

• Any changes to this Privacy Policy will be posted on this page with an updated "Last Updated" date. We recommend you review this page periodically.
• For significant changes that affect how we use your data, we will endeavour to notify you via an in-platform notice or email at least 14 days before the changes take effect.
• Continued use of the ole99 platform after changes are published will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you. We take every privacy enquiry seriously and will provide an accurate and transparent response.

• Contact us via Live Chat within the ole99 platform — available 24 hours a day, 7 days a week, with a response time of under 2 minutes for privacy-related inquiries.
• For formal inquiries regarding the exercise of your privacy rights, please state "Privacy Inquiry" as your message subject so it can be routed to the responsible team.
• We are committed to resolving every privacy complaint fairly, transparently, and within a reasonable timeframe — no more than 30 working days even for the most complex cases.