1 Introduction
Ompong188 ("the Company", "we", "us", "our") is committed to protecting and respecting the privacy of all individuals who access or use the ompong188 platform, accessible at ompong188.cam. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by the Company.
This Policy applies to all users of the Platform, including visitors who browse without registering, registered account holders, participants in promotions, and any individual who communicates with us through our support channels. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
2 Definitions
For the purposes of this Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably identify a natural person, either directly or in combination with other data — including name, email address, NRIC number, IP address, and financial account details. |
| Processing | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction. |
| Data Controller | Ompong188 — the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| Data Subject | The individual to whom Personal Data relates — typically the registered user or Platform visitor. |
| Third Party | Any natural or legal person other than the Data Subject or the Company who processes data on behalf of, or in conjunction with, the Company. |
| KYC | Know Your Customer — the process of verifying the identity of a user through official documentation (e.g., NRIC, passport) as required under our anti-money laundering obligations. |
3 Data We Collect
Ompong188 collects Personal Data in the following circumstances: when you register an account, make a deposit or withdrawal, complete KYC verification, contact our support team, participate in a promotion, or simply browse the Platform. The categories of data we collect include:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, NRIC / passport number, nationality, selfie for liveness check. |
| Contact Data | Email address, mobile phone number, residential address (city, postcode — e.g., Kuala Lumpur, Petaling Jaya, Shah Alam). |
| Financial Data | Bank account number, e-wallet account (Touch 'n Go, Boost, GrabPay), FPX transaction references, cryptocurrency wallet address, deposit and withdrawal history. |
| Technical Data | IP address, browser type and version, device type and operating system, session timestamps, cookies and similar identifiers. |
| Gameplay Data | Betting history, game sessions, wager amounts, win/loss records, bonus usage, and responsible gambling tool selections. |
| Communications Data | Live chat transcripts, support email correspondence, promotional opt-in preferences, and feedback submissions. |
4 How We Use Your Data
We use the Personal Data we collect for the following purposes:
- Account Registration & Management: To create and maintain your ompong188 account, verify your identity, authenticate your login sessions, and communicate account-related updates.
- Payment Processing: To process deposits and withdrawals via your chosen payment method — including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect, and cryptocurrency channels.
- KYC & Fraud Prevention: To verify your identity and age (21+ requirement), prevent money laundering, detect fraudulent activity, and comply with anti-financial crime obligations.
- Platform Delivery: To provide access to casino games, the sportsbook (covering EPL, Liga Super Malaysia, UFC, and other markets), live dealer services, and all associated Platform features.
- Customer Support: To respond to enquiries, resolve account disputes, process complaints, and provide technical assistance.
- Promotions & Personalisation: To administer bonuses, loyalty rewards (birthday bonuses, VIP tier benefits, referral programs), and, where you have opted in, to send you personalised promotional communications.
- Responsible Gambling: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and comply with our responsible gambling obligations.
- Legal & Regulatory Compliance: To maintain transaction records, respond to legal process, cooperate with regulatory authorities, and comply with applicable international licensing conditions.
- Platform Improvement: To analyse usage patterns (via anonymised or aggregated data), improve user experience, test new features, and optimise platform performance.
5 Legal Basis for Processing
We process your Personal Data on one or more of the following legal grounds, depending on the specific processing activity:
- Contractual Necessity: Processing required to perform the contract between you and ompong188 — including operating your account, processing payments, and delivering gaming services.
- Legal Obligation: Processing necessary for compliance with legal obligations — including KYC identity verification, AML (anti-money laundering) record-keeping, and responding to lawful authority requests.
- Legitimate Interests: Processing necessary for the Company's legitimate business interests — including fraud detection, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your rights and interests.
- Consent: Where you have provided explicit consent — for example, opting in to receive marketing communications or promotional notifications. You may withdraw consent at any time by contacting support or updating your account preferences.
6 Data Sharing & Disclosure
Ompong188 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
- Payment Service Providers: Including DuitNow, FPX gateway operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services — solely to facilitate deposits and withdrawals.
- Identity Verification Providers: Third-party KYC and AML screening services that verify your identity documents and screen against international sanctions and fraud watchlists.
- Game Software Providers: Licensed casino game studios and sportsbook data providers whose software is integrated into the Platform — where technical data is shared for game delivery and RNG certification purposes.
- Legal Authorities: Law enforcement agencies, regulatory bodies, or courts when required by law, court order, or where disclosure is necessary to prevent or detect financial crime.
- IT & Infrastructure Providers: Hosting services, cloud storage, cybersecurity vendors, and analytics platforms — all operating under strict data processing agreements and confidentiality obligations.
7 Data Retention
We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law or legitimate business interest. Our general data retention schedule is as follows:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years following account closure, in line with AML record-keeping requirements. |
| Financial & Transaction Data | 5 years from the date of the transaction, as required under international licensing conditions and financial crime regulations. |
| KYC Documents | 5 years following account closure or last transaction. Documents are purged securely on schedule. |
| Support Communications | 3 years from the date of the last communication, for dispute resolution and quality assurance purposes. |
| Technical & Log Data | Up to 13 months for session logs and technical records; shorter periods for raw server logs. |
| Marketing Preferences | Until you withdraw consent or close your account, whichever is earlier. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to any individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.
8 Data Security
The security of your Personal Data is a priority at ompong188. We implement a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, loss, alteration, or disclosure:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security), ensuring that your account credentials, payment details, and personal information cannot be intercepted in transit.
- Encryption at Rest: Sensitive data fields — including financial account numbers and identity document data — are encrypted at rest using AES-256 encryption.
- Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
- Two-Factor Authentication: 2FA is available to all users and is mandatory for staff accounts with access to Personal Data systems.
- Regular Security Reviews: We conduct periodic security assessments, penetration testing, and vulnerability scanning of our Platform infrastructure.
- Data Breach Protocol: In the event of a Personal Data breach that poses a risk to your rights and freedoms, we will notify affected users as promptly as practicable and take all necessary steps to contain and remediate the breach.
9 Cookies & Tracking Technologies
The ompong188 Platform uses cookies and similar tracking technologies to deliver core functionality, improve user experience, and gather anonymised analytical data. A cookie is a small text file placed on your device by a website when you visit it.
We use the following categories of cookies:
- Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect your account. These cannot be disabled.
- Functional Cookies: Remember your preferences — such as language settings, preferred payment method, and responsible gambling limit selections — to improve your experience across sessions.
- Analytics Cookies: Collect anonymised, aggregated data about how users navigate and interact with the Platform. This data helps us identify usability issues and improve our service. No individual user is identified through analytics cookies.
- Security & Fraud Detection Cookies: Used by our fraud prevention systems to identify unusual access patterns and protect your account from unauthorised use.
You may configure your browser to refuse cookies or to alert you when cookies are being placed. However, disabling strictly necessary cookies will prevent you from accessing the Platform's core features. Our Platform does not currently respond to Do Not Track (DNT) browser signals.
10 Your Rights
As a Data Subject, you have the following rights in respect of your Personal Data held by ompong188. These rights are exercisable by submitting a written request to our support team (see Section 11 — Contact Us). We will respond to all valid requests within a reasonable timeframe, typically within 30 days:
Right of Access
Request a copy of the Personal Data we hold about you and information on how it is processed.
Right to Rectification
Request correction of any inaccurate or incomplete Personal Data held about you.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances — for example, while a dispute is being resolved.
Right to Portability
Receive a copy of your data in a structured, machine-readable format for transfer to another service.
Right to Object
Object to processing based on legitimate interests or to direct marketing communications at any time.
Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time — without affecting prior processing.
Right to Complain
Lodge a complaint with the relevant data protection authority if you believe your data rights have been infringed.
11 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by ompong188, please contact us through one of the following channels:
When submitting a data rights request, please include your registered email address and a clear description of your request. We may need to verify your identity before processing certain requests (e.g., data access or erasure) to ensure we are responding to the legitimate account holder.
This Privacy Policy was last reviewed and updated on 1 January 2026. We recommend reviewing it periodically to stay informed about how your data is handled.