Privacy Policy

This Privacy Policy ("Policy") is issued by OC777 ("OC777", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://oc777.cam. It applies to all individuals who visit, register on, or interact with the OC777 Platform in any capacity, including prospective players, registered account holders, and past users whose data we continue to retain for legally required periods.

OC777 takes its obligations under applicable data protection legislation seriously. We collect, process, and store personal data only to the extent necessary for the legitimate operation of a licensed online gaming platform — which includes ensuring regulatory compliance, preventing fraud and financial crime, supporting responsible gambling measures, and delivering a high-quality, personalised player experience.

This Policy is designed to be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy. In the event of any conflict between this Policy and the Terms & Conditions on matters of data handling, this Privacy Policy shall prevail with respect to personal data processing.

The following terms carry specific meanings throughout this Policy:

• "Personal Data" — any information that identifies or could reasonably identify a living natural person, directly or in combination with other data points available to OC777.
• "Processing" — any operation performed on Personal Data, including but not limited to collection, storage, use, disclosure, transfer, deletion, and anonymisation.
• "Data Controller" — OC777, in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on OC777's behalf, subject to a binding data processing agreement.
• "Data Subject" — the natural person whose Personal Data is being processed — in this context, the registered Player or Platform visitor.
• "KYC Data" — Know Your Customer documentation, including government-issued identification, proof of address, and payment method verification documents.
• "Cookies" — small text files stored on a User's device by the Platform to facilitate session management, analytics, and personalised features.
• "Platform" — the OC777 website, mobile interface, and all associated services accessible at https://oc777.cam.

OC777 collects Personal Data across several categories depending on the nature of your interaction with the Platform:

3.1 Identity & Registration Data

When you register an Account, we collect: full legal name, date of birth, nationality, gender, and a unique username. This data is used to create and administer your Account and to verify that you meet the minimum age requirement of 21 years.

3.2 Contact Data

We collect email address, mobile telephone number, and residential address (including city and country). For Malaysian players, this typically includes a Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, or Shah Alam address. Contact data is used for account communications, transaction notifications, and support interactions.

3.3 KYC & Verification Data

In accordance with our licensing obligations and anti-money laundering (AML) requirements, we may collect copies of government-issued photo identification (such as a Malaysian MyKad, passport, or driving licence), proof of residential address (such as a bank statement or utility bill), and proof of ownership of payment methods used on the Platform.

3.4 Financial & Transaction Data

We record all deposit transactions, withdrawal requests, bet history, bonus claims, and wallet balance movements. For Malaysian players, this includes transactions made via Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, USDT, and BTC. We do not store full card numbers or banking credentials — payment processing is handled by accredited third-party payment providers.

3.5 Behavioural & Gaming Data

We collect data on your gaming activity, including games played, session duration, wager amounts, bonus usage, sports betting markets accessed (including Liga Super Malaysia, EPL, and UFC markets), and platform navigation patterns. This data is used for personalisation, responsible gambling monitoring, and platform improvement.

3.6 Technical & Device Data

We automatically collect IP address, device type, operating system, browser type and version, screen resolution, time zone, and referring URL. This data is used for fraud detection, security monitoring, and analytics.

3.7 Communications Data

Records of your communications with OC777's customer support team — including live chat transcripts, WhatsApp messages (where applicable), and email correspondence — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

OC777 collects Personal Data through the following means:

• Directly from you — through Account registration forms, KYC submissions, deposit and withdrawal requests, support enquiries, and any other interaction where you voluntarily provide information to OC777.
• Automatically — through cookies, session tracking technologies, server logs, and analytics tools that capture technical and behavioural data as you navigate the Platform.
• From third-party payment providers — transaction confirmation data and fraud screening results received from Malaysian e-wallet providers, banking institutions, and cryptocurrency payment processors used by the Platform.
• From identity verification services — confirmation of identity document authenticity from third-party KYC verification service providers engaged by OC777.
• From fraud prevention and AML screening services — risk scores and sanctions screening results provided by third-party compliance tools as part of OC777's anti-money laundering programme.

The table below sets out the primary purposes for which OC777 processes Personal Data and the corresponding data categories involved:

OC777 processes Personal Data one or more of the following legal grounds:

• Contractual necessity — processing required to perform the contract between OC777 and the Player (i.e., the Terms & Conditions), including Account operation, transaction processing, and customer support.
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC verification requirements, and reporting duties to licensing authorities.
• Legitimate interests — processing carried out in the legitimate interests of OC777 or third parties, including fraud prevention, platform security, responsible gambling monitoring, and analytics — provided that such interests are not overridden by the Data Subject's fundamental rights and freedoms.
• Consent — where no other legal ground applies and the Data Subject has provided explicit, informed, and freely given consent to a specific processing activity (e.g., marketing communications). Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

OC777 does not sell, rent, or trade your Personal Data to unafiliated third parties for their own marketing or commercial purposes. Personal Data may be shared in the following limited circumstances:

7.1 Payment Service Providers

To facilitate deposits and withdrawals, necessary transaction data is shared with accredited Malaysian payment providers and banking institutions — including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other supported channels — solely for transaction processing purposes.

7.2 KYC and Compliance Vendors

Identity and document verification data may be shared with third-party KYC service providers and AML screening tools contracted by OC777 to fulfil its regulatory obligations. All such providers operate under binding data processing agreements.

7.3 Game and Technology Providers

Certain technical and gameplay data may be processed by third-party game suppliers and platform technology partners who provide the infrastructure underlying the OC777 gaming environment. These entities act as Data Processors and are contractually prohibited from using your data for any purpose beyond supporting OC777's platform.

7.4 Legal and Regulatory Authorities

OC777 may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction — including disclosures required under applicable anti-money laundering and counter-terrorism financing legislation.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving OC777, Personal Data held by OC777 may be transferred to the relevant successor entity, subject to equivalent privacy protections and prior notification to affected Data Subjects where legally required.

OC777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations.

As a general principle: Account-related Personal Data is retained for a minimum of five (5) years from the date of Account closure or last activity, in compliance with standard anti-money laundering data retention requirements. KYC documentation is retained for at least five (5) years from the completion of verification. Transaction records are retained for the duration of the Account and for a minimum of five (5) years thereafter. Communications data (support transcripts, emails) is retained for three (3) years from the date of the last communication, unless a longer retention period is required for ongoing dispute resolution.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in manner that prevents re-identification. Anonymous or aggregated data derived from Personal Data may be retained indefinitely for analytical and reporting purposes.

OC777 implements technical and organisational security measures comensurate with the sensitivity of the Personal Data held and the risks associated with its processing. Key security measures include:

• 256-bit TLS (Transport Layer Security) encryption for all data in transit between user devices and OC777 servers;
• AES-256 encryption for sensitive Personal Data stored at rest on OC777 infrastructure;
• Access controls and role-based permissions restricting internal access to Personal Data on a strict need-to-know basis;
• Two-factor authentication (2FA) options available to all registered Account holders;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Automated fraud and anomaly detection systems monitoring account activity in real time;
• Staff training on data protection responsibilities and secure data handling practices.

While OC777 employs industry-standard security measures, no system can guarantee absolute protection against all possible threats. In the event of a data breach that is likely to result in high risk to affected individuals, OC777 will notify relevant Data Subjects and applicable authorities in accordance with its breach notification obligations under applicable law.

OC777 uses cookies and similar tracking technologies to operate improve the Platform. Cookies are small text files placed on your device when you access the Platform. They are used for session management, security, analytics, personalisation, and responsible gambling functionality.