Privacy Policy

This Privacy Policy ("Policy") issued by oclbet ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at https://oclbet.cam and all associated subdomains and services. This Policy describes how oclbet collects, processes, stores, shares, and protects the personal data of individuals ("you", "User "Player", "Member") who access or use the Platform.

oclbet is committed to handling your personal data with the highest standards of care, transparency, and security. We recognise that trust is the foundation of the relationship between a gambling platform and its players, and privacy protection is integral to that trust — particularly for our members across Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

By accessing the Platform, creating an Account, or otherwise using oclbet's services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions, which are incorporated by reference.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, residential address, financial account details, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means oclbet, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of oclbet pursuant to a written data processing agreement.
• "KYC Data" means identity verification documentation including government-issued photo identification (Malaysian MyKad, passport), proof of address, and payment method verification materials.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, analytics, and personalisation.
• "Special Category Data" means sensitive personal data including health information that may arise in the context of responsible gambling assessments.

oclbet collects the following categories of personal data from Players and Platform visitors:

oclbet does not intentionally collect Special Category Data (e.g., health data, biometric data beyond liveness verification). Where health or wellbeing information is shared voluntarily in the context of responsible gambling support, it will be handled with the highest degree of confidentiality and used solely for player protection purposes.

oclbet collects personal data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal using payment methods such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT TRC20, or Bitcoin (BTC), contact our support team, or respond to any survey or communication from oclbet.
• Automatically: When you access or use the Platform, we automatically collect Technical Data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device information, and session activity.
• From third parties: We may receive data from payment processors, identity verification service providers, and fraud detection partners where necessary to fulfil our KYC obligations or verify payment transactions. We may also receive data from publicly available sources for AML screening purposes.

oclbet processes your personal data for the following specific purposes:

1. Account Registration & Management: To create, maintain, and administer your oclbet Account, including authentication, account security, and profile management.
2. Identity Verification (KYC): To verify your identity, age (21+ requirement), and payment methods in compliance with our licensing obligations and anti-money-laundering (AML) regulations.
3. Payment Processing: To process deposits and withdrawals via all supported Malaysian payment methods, including e-wallets, bank transfers, DuitNow, FPX, and cryptocurrency, and to maintain accurate financial records.
4. Service Delivery: To provide access to oclbet's casino games, sportsbook (including Liga Super Malaysia, EPL, and UFC markets), live dealer tables, e-sports, and all other platform features.
5. Responsible Gambling: To monitor gaming behaviour for signs of problematic gambling, to implement and manage deposit limits, session timers, self-exclusion, and other responsible gambling tools, and to fulfil our player protection obligations.
6. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct on the Platform.
7. Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
8. Legal & Regulatory Compliance: To comply with applicable law, our international gaming licence conditions, and orders or requests from regulatory or law enforcement authorities.
9. Marketing Communications: Where you have given your consent, to send you promotional offers, bonus notifications, and platform updates. You may opt out of marketing communications at any time.
10. Platform Improvement: To analyse aggregated, anonymised usage data to improve the Platform, fix technical issues, and develop new features.

oclbet processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to enter into or perform our contract with you — including account creation, KYC, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including AML regulations, licensing conditions, and orders from regulatory or law enforcement authorities.
• Legitimate Interests: Processing necessary foroclbet's legitimate interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and, where applicable, the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

oclbet does not sell, rent, or trade your personal data to third-party marketers or data brokers. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes identified in this Policy:

• Payment Service Providers: Including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX processors, major Malaysian banks, and cryptocurrency exchange partners, to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and liveness verification platforms engaged to assist with identity document verification and age confirmation.
• Fraud Detection & AML Partners: Specialist service providers engaged for transaction monitoring, fraud scoring, and sanctions screening.
• IT Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers operating under contractual data processing obligations.
• Regulatory & Law Enforcement Authorities: Where required to do so by applicable law, our licensing authority, or a valid court or governmental order.
• Professional Advisers: Legal, accounting, and audit professionals bound by confidentiality obligations, where necessary for oclbet's business operations.

All third parties with whom oclbet shares personal data are required to maintain appropriate technical and organisational security measures, and to process such data only in accordance with oclbet's instructions and applicable data protection law.

As an internationally licensed online gaming platform, oclbet may transfer your personal data to, or access it from, countries outside Malaysia. Where such transfers occur, oclbet ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law.

Safeguards may include: standard contractual clauses approved by the relevant data protection authority; adequacy decisions recognising the destination country as providing an adequate level of data protection; or other legally recognised transfer mechanisms. Details of the specific safeguards applicable to any particular transfer may be obtained by contacting our Data Protection team.

oclbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or our licensing obligations. The following retention periods are applied as baseline:

• Account & Identity Data: Retained for the duration of your Account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the verification date or account closure, whichever is later.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction.
• Gaming & Betting History: Retained for a minimum of three (3) years following account closure.
• Support Communications: Retained for three (3) years from the date of the interaction.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to legal retention obligations.
• Technical & Log Data: Typically retained for 12 months, subject to extension where required for security investigations.

On expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identified individual.

oclbet implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and oclbet's servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Access controls ensuring that personal data is accessible only to authorised oclbet personnel with a legitimate need to access it.
• Two-factor authentication (2FA) available to all registered Players and mandatory for oclbet administrative systems.
• Regular independent penetration testing conducted by qualified third-party cybersecurity firms.
• Formal data breach response procedures, including notification protocols where a breach poses a risk to player rights.
• Employee training on data protection obligations and information security practices.

Despite these measures, no data transmission over the internet or electronic storage system is entirely risk-free. oclbet cannot guarantee absolute security and recommends that Players maintain strong, unique passwords for their Accounts and enable two-factor authentication. If you suspect your Account has been compromised, please contact our support team immediately.

oclbet uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) on the Platform for the following purposes:

• Strictly Necessary Cookies: Essential to the operation of the Platform — including session management, authentication, and security functions. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences (such as language settings and interface layout) to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised information about how visitors use the Platform — including pages visited, time spent on site, and navigation paths — to help us improve Platform performance and user experience.
• Responsible Gambling Monitoring: Technical session data collected to support the delivery of session time reminders and responsible gambling monitoring tools.

On your first visit to oclbet, you will be presented with a cookie consent notice. You may accept all cookies, or manage your preferences to accept only strictly necessary cookies. You may update your cookie preferences at any time through your Account settings or browser controls. Disabling non-essential cookies will not affect your ability to use core Platform features.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by oclbet. To exercise any of these rights, please contact our Data Protection team using the contact details in Section 15 of this Policy.

oclbet will respond to verified data rights requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days with prior notice. We may ask you to verify your identity before processing a data rights request.

oclbet strictly prohibits use of the Platform by persons under the age of 21years. The Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory component of the KYC process. Any Account found to have been created by a person under 21 years of age will be immediately closed, all associated data will be securely deleted to the extent permitted by applicable law, and any funds held in the Account will be handled in accordance with our Terms and Conditions and applicable regulatory requirements.

If you are the parent or guardian of a minor who has accessed or registered on oclbet, please contact us immediately at [email protected] (plain text). We will take prompt action to close the Account and delete the associated data.

oclbet reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Players by email or through a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy will be revised to reflect any material amendments.

We encourage you to review this Policy periodically to remain informed of how oclbet handles your personal data. Your continued use of the Platform following any amendment constitutes acceptance of the updated Policy. If you do not agree to the amended Policy, you must cease all use of the Platform and may request account closure through our support team.

For all privacy-related enquiries, data rights requests, or questions regarding this Privacy Policy, please contact theoclbet Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Privacy / Data Request" as your email subject line so that your message is directed to our Data Protection team promptly.
• Live Chat: Available24 hours a day, 7 days a week through theoclbet Platform. For data rights requests, we recommend using email for a secure, documented communication trail.
• Response Time: We aim to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 days.

When submitting a data rights request, please include your full name, your registeredoclbet Account email address, and a description of your request. We may ask you to verify your identity before processing the request to protect your personal data from unauthorised access.