This Privacy Policy Protects Your Rights
This Privacy Policy document outlines og321's commitment to protecting the personal information of every member. By using the og321 platform, you agree to the data collection and usage practices described here. Please read it carefully and contact us if you have any questions.
01 Introduction & og321's Privacy Commitment
Og321 ("we", "our platform") operates the og321.xyz website and all related services, including Sports Betting, live casino, slots, poker, and table games. We understand that when you entrust us with your personal information, you expect us to handle it responsibly and transparently.
This Privacy Policy clearly outlines:
- The types of personal information we collect from you
- How and why we use your information
- Who your information may be shared with and under what circumstances
- The security measures we implement to protect your data
- Your rights regarding your personal data and how to exercise them
This Privacy Policy applies to all registered og321 members, website visitors and any individual who interacts with our platform or services, including via mobile device. It is designed to comply with Personal Data Protection Act 2010 (PDPA) Malaysia.
og321 is the Data Controller responsible for processing your personal information. If you have any concerns about how we handle your data, you can reach our Privacy Officer at support@og321.xyz at any time.
02 Personal Information We Collect
Og321 collects personal information in the following categories when you register, use, or interact with our platform:
A. Information You Provide Directly
- Registration information: Full name, Malaysian phone number, email address, date of birth
- Identity verification information: National identification number (MyKad) or passport number, along with supporting documents if required for verification
- Financial information: Payment method details (digital wallet account numbers for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or bank account numbers for FPX/Maybank2u/CIMB Clicks) – stored in encrypted format
- Communication details: Any messages, complaints, or feedback you submit to the og321 support team
B. Automatically Collected Information
- Technical data: IP address, browser type, operating system, screen resolution, time zone
- Usage data: Pages visited, games played, bets placed, session duration, click actions
- Device data: Unique device identifier, smartphone or tablet model, mobile operating system version
- Cookie data: Session cookies, preference cookies, and analytics cookies (further details in Section 6)
| Data Categories |
Example |
Primary Purpose |
Basis for Processing |
| Identity |
Name, MyKad, date of birth |
Identity & age verification |
Legal obligations |
| Contact |
Email address, phone number |
Communications & notifications |
Contract performance |
| Financial |
Deposit methods, transaction history |
Payment processing |
Contract performance |
| Technical |
IP, device, browser |
Security & Fraud Detection |
Legitimate interest |
| Usage |
Gaming activity, preferences |
Service improvement |
Legitimate interest |
03 How og321 Uses Your Information
Og321 uses the personal information collected for the following purposes, all of which are grounded in a valid legal basis:
- Account management: To create and manage your og321 account, process registration, and verify your identity and age eligibility
- Transaction processing: To process deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost or ShopeePay, and to process your winnings withdrawals
- Service provision: To provide access to Malaysia Super League sports betting, BWF badminton, MPL esports, live casino, slots and all other og321 services
- Security and fraud detection: To detect and prevent fraud, money laundering, unauthorised access, and other unlawful activity
- Service communications: To send important notifications related to your account, transactions, promotions you have subscribed to, and system updates
- Legal compliance: To comply with the Personal Data Protection Act 2010, anti-money laundering requirements, and other legal obligations
- Platform improvements: To analyse usage patterns and improve og321 platform features in order to enhance the member experience
- Responsible gambling: To monitor gambling patterns and send responsible gambling alerts to members showing warning signs
og321 only sends marketing communications via email or SMS if you have given explicit consent during registration or at a later time. You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting our support team.
04 Information Sharing & Disclosure
Og321 does not sell your personal information to any party. We only share information in limited, legitimate circumstances, as outlined below:
Trusted Third-Party Service Providers
Og321 works with carefully selected service providers to manage platform operations. This includes:
- Payment processors: Payment processing partners for Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay – receive only the data necessary to process your transactions
- Game software providers: Casino and slots game development companies that supply games on the og321 platform
- Cloud service providers: Technical infrastructure services that store and process data in a secure environment
- Analytics services: Tools that help us understand platform usage patterns for improvement purposes
All third-party service providers working with og321 are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by og321.
Mandatory Disclosure to Authorities
Og321 may disclose your personal information to the relevant authorities where required by law, including:
- Pursuant to a court order or valid legal process
- To comply with the requirements of relevant regulatory authorities
- To prevent or investigate fraudulent activity or money laundering
- When required to protect public safety
Where possible and permitted by law, og321 will notify you before disclosing your information to authorities. We always strive to disclose only the minimum amount of information necessary in any such case.
05 og321 Data Security Measures
Protecting members' personal and financial data is og321's top priority. We implement multiple layers of security to ensure your information remains protected at all times:
- 256-bit SSL encryption: All communications between your browser or app and og321 servers are encrypted using TLS 1.3 — the highest industry standard
- Static data encryption: Sensitive data, including financial information, is encrypted at rest in our database using AES-256
- Strict access controls: Least privilege access principle – only staff who require access for a specific task are permitted, and all access is audited
- Two-factor authentication (2FA): The 2FA feature is available on all og321 accounts and is strongly encouraged to be enabled for an added layer of security
- 24/7 security monitoring: Automated monitoring systems and a dedicated security team watch for suspicious activity around the clock
- Regular penetration testing: Independent security audits are conducted periodically to identify and address potential vulnerabilities
- Incident response plan: og321 has clear procedures in place to respond to any data breach, including notifying the relevant authorities and affected members within the required timeframe
While og321 implements comprehensive security measures, no online system can be guaranteed completely secure. You also play an important role — always use strong passwords, enable 2FA, and never share your login credentials with anyone.
06 Cookies & Tracking Technologies
Og321 uses cookies and similar tracking technologies to improve your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of Cookies We Use
| Cookie Type |
Purpose |
Duration |
Can Be Disabled? |
| Essential Cookies |
Login, session security, authentication |
Session only |
No – required for core functionality |
| Preference Cookies |
Language, theme, game preferences |
1 year |
Yes |
| Analytics Cookies |
Usage statistics, platform improvements |
90 days |
Yes |
| Security Cookies |
Fraud detection, CSRF protection |
Session only |
No – required for security |
You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the og321 platform — for example, disabling essential cookies may prevent you from logging in to your account.
07 Your Rights Regarding Personal Data
As an og321 member residing in Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Update or correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data when it is no longer needed
Right to Object
Object to the processing of your data for direct marketing purposes
Right to Restrict
Restrict the processing of your data under certain circumstances
Right to Portability
Receive your data in a structured, machine-readable format
To exercise any of these rights, contact the og321 Privacy Officer at support@og321.xyz and specify the right you wish to invoke. og321 will respond within 30 business days. In certain situations, we may need to verify your identity before processing your request in order to protect your account security.
Certain deletion rights may be limited by legal obligations — for example, og321 is required to retain financial transaction records for a minimum period prescribed under Malaysian law for audit and compliance purposes. In such cases, we will inform you of the reason and the applicable retention period.
08 Data Retention & Deletion
Og321 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, including to meet legal, accountability and audit requirements. General data retention guidelines are as follows:
- Active account information: Retained for as long as your og321 account remains active
- Financial transaction records: Minimum 7 years from the date of transaction, in line with Malaysian legal requirements
- Customer support communication logs: 3 years from the date of last communication
- Analytics data and technical logs: 12 months, after which it is deleted or anonymised
- Closed account data: Deleted or anonymised within 90 days of account closure, unless retention is required by law
When personal data is no longer needed, og321 will securely delete it using industry-approved data erasure methods, or anonymise it in a way that can no longer be linked back to you.
09 Privacy of Children & Minors
Og321 services are strictly prohibited and not permitted under any circumstances for individuals under the age of 21. og321 does not knowingly collect, store or process any personal information from individuals under the age of 21.
If we discover that we have inadvertently collected information from an underage individual, we will:
- Immediately suspending the account in question pending investigation
- Delete all related personal information as soon as reasonably possible
- Returning any unused funds through a secure process
- Reporting the incident to the relevant authorities if necessary
If you know or suspect that someone under the age of 21 is using the og321 platform, please contact us immediately at support@og321.xyz. og321 enforces a strict age verification process during registration, including MyKad verification where required.
10 Links to Third-Party Websites or Services
The og321 platform may contain links to third-party websites or services in certain contexts, such as links to game providers or sports statistics resources. og321 has no control over, and accepts no responsibility for, the privacy policies or data protection practices of those third-party websites or services.
We recommend reading the Privacy Policy of every website you visit. Links to third-party websites from the og321 platform do not imply our endorsement of or responsibility for their content or privacy practices.
When you click a link that takes you away from the og321 platform, this Privacy Policy no longer applies. og321 is not responsible for how third parties handle your personal data once you leave our platform.
11 Amendments to This Privacy Policy
Og321 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other operational reasons. When we make significant changes, we will:
- Updating the "Last Updated" date at the top of this page
- Displaying a prominent notice on the og321 homepage for a minimum of 7 days
- Sending email notifications to all active registered members
- In the case of material amendments, seeking members' renewed consent before the changes take effect
Continued use of the og321 platform after any amendments are published constitutes acceptance of the updated Privacy Policy. You are encouraged to review this page periodically.
This Privacy Policy is the latest version and takes effect from January 2026 and supersedes all previous versions. An amendment history is available upon request — contact our support team to obtain a copy of any earlier version.
12 Contact Us – Privacy-Related Enquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or how og321 handles your personal data, please contact us through the following channels:
- og321 Privacy Officer: support@og321.xyz (please state "Privacy Enquiry" in the email subject line)
- Live Chat: Available 24/7 via the chat icon on the og321 platform
- Response Time: og321 aims to respond to all privacy-related enquiries within 5 business days. Data rights requests will be processed within 30 business days
If you are dissatisfied with og321's response to your privacy concerns, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.
og321's experienced support team is here to help with any questions related to account privacy and security. We're committed to responding to every enquiry accurately, clearly, and within a reasonable timeframe.