Privacy Policy okta388 – Protection of Malaysian Members' Personal Data

Okta388 is an online sports betting and casino platform operating in Malaysia. We understand that privacy matters deeply to every individual, and we are committed to protecting the personal information of all members who use our services.

This Privacy Policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing how organisations process the personal data of Malaysians. As a responsible data controller, okta388 adheres to the seven core principles of the PDPA: the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, the Access Principle and the Data Transfer Principle.

This Policy applies to all personal information collected through the okta388.my website, the okta388 mobile app, email communications, live chat, WhatsApp and all other points of contact between okta388 and its members or prospective members.

Okta388 collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Okta388 does not collect sensitive data categories such as health information, political affiliations, religious beliefs or biometric data, except in specific identity verification cases that require photo comparison.

Okta388 collects your personal data through the following methods:

• Account registration: When you complete the registration form on okta388.my, you are directly providing us with your identification and contact information
• KYC Process: During identity verification, you submit documents such as your Malaysian identity card and a verification selfie
• Financial transactions: Every time you make a deposit or withdrawal using Touch 'n Go eWallet, GrabPay, DuitNow, FPX or any other method, the transaction details are automatically recorded
• Platform usage: Your activity on the okta388 platform — including games played, bets placed and play sessions — is automatically logged by our systems
• Communications: When you contact the okta388 support team via live chat, email or WhatsApp, the content of those communications is retained for reference and service improvement purposes
• Cookies and tracking technologies: Cookies are placed on your browser when you visit okta388.my to improve your user experience and analyse website traffic

Okta388 uses the personal data collected for the following purposes:

Okta388 does not sell or rent your personal data to third parties. However, we may share your personal data with the following categories of third parties in limited circumstances and for specific purposes only:

• Payment service providers: Malaysian e-wallet platforms (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) and banking services (DuitNow, FPX, Maybank2u, CIMB Clicks) to process your deposit and withdrawal transactions
• Game providers: Casino game providers that partner with okta388, such as Evolution Gaming and Pragmatic Play, receive only the minimum technical data required to ensure games function correctly. These providers do not have direct access to your personal identification information
• Identity verification service providers: Third parties that assist okta388 in conducting KYC processes and document verification to meet legal requirements
• Authorities and regulatory bodies: okta388 may be required to disclose personal data to Malaysian authorities where mandated by law, court order or to comply with an official investigation.
• Professional advisors: Lawyers, accountants or consultants engaged by okta388 are subject to strict confidentiality agreements

All third parties that receive personal data belonging to okta388 members are bound by strict data processing agreements and are required to comply with data protection standards equivalent to or higher than those applied by okta388.

Okta388 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction or unlawful disclosure:

• Data encryption in transit: All communications between your browser or app and okta388's servers are protected using TLS/SSL protocol with AES-256-bit encryption
• Stored data encryption: Sensitive information such as financial details is stored in encrypted form within okta388's databases.
• Employee access controls: Only okta388 staff who require access to members' personal data in order to perform their duties are permitted to do so — based on the principle of least privilege
• 24/7 security monitoring: Automated monitoring systems operate around the clock to detect and respond to any suspicious activity or intrusion attempts.
• Regular security testing: okta388 conducts regular security assessments and penetration testing to identify and address system vulnerabilities
• Incident response procedures: okta388 has clear procedures in place to respond to any data breach, including notification procedures for affected members and the relevant authorities in accordance with PDPA requirements.

While okta388 takes reasonable steps to protect your data, no security system can guarantee complete protection against all threats. You also play an important role in keeping your account safe — use a strong password and never share your login credentials with anyone.

Okta388 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit the okta388 website.

The types of cookies used by okta388 are as follows:

• Essential session cookies: Required for core platform functions such as maintaining your logged-in status during an active session. These cookies cannot be disabled without significantly affecting platform functionality.
• Preference cookies: Saving your preferences such as language, display settings, and game choices to enhance your experience in future sessions
• Analytics cookies: Collecting information about how you use okta388 — pages visited, time spent and navigation flow — to help us understand and improve the user experience. This data is collected in aggregate and does not personally identify you.
• Security cookies: Used to detect suspicious activity, prevent fraud and maintain the security of your session on the okta388 platform

You can manage your cookie settings through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your experience on the okta388 platform.

Okta388 does not retain your personal data indefinitely. Retention periods are determined based on the purpose of data collection, legal requirements and legitimate business interests. The following is a general guide to our data retention periods:

• Active account data: Retained for as long as your account remains active and in use on the okta388 platform
• Data following account closure: Identification data and KYC information are retained for seven years after account closure, to comply with Malaysia's anti-money laundering record-keeping legal requirements
• Financial transaction records: Retained for seven years in line with Malaysia's financial compliance requirements
• Customer support communication logs: Retained for two years after the last interaction for dispute resolution and service improvement purposes
• Analytics data and technical logs: Retained in anonymised form for 12 months before being deleted

Once the retention period expires, okta388 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or re-identified.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by okta388. These rights include:

• Right of access: You have the right to request a copy of the personal data we hold about you. okta388 will process access requests within 21 business days of receipt.
• Right to rectification: If the personal data held by okta388 is inaccurate, incomplete, or outdated, you have the right to request a correction. You may update certain information directly through your account settings
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time
• Right to withdraw consent: Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to the withdrawal
• Right to complain: If you believe that okta388 has violated your privacy rights, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of the rights mentioned above, please submit a written request to privacy@okta388.my or contact the okta388 support team via live chat. okta388 may need to verify your identity before processing your request in order to protect data security.

The okta388 platform is strictly for adults aged 18 and above. okta388 not intentionally collect, process or store the personal data of individuals under the age of 18.

If okta388 discovers or receives information that we have inadvertently collected data from a minor, we will take immediate steps to:

• Immediately closing the account in question
• Delete all personal data associated with the account
• Forfeit any remaining balance or winnings in the account
• Reporting the case to the relevant authorities where deemed necessary

Parents or guardians who believe their minor child has registered an okta388 account are advised to contact us immediately at support@okta388.my or via live chat for prompt resolution.

Okta388 reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary due to developments in Malaysian law, changes in business operations or to improve the clarity of information provided to members.

When material changes are made to this Privacy Policy, okta388 will:

• Update the "Updated" date at the top of this page
• Send email notifications to all members with active accounts
• Display a clear notice on the okta388.my homepage for a reasonable period of time

Your continued use of the okta388 platform after any amendments to the Privacy Policy are published will be considered as your acceptance of those changes. If you do not agree with the revised Privacy Policy, you have the right to close your account and withdraw any remaining balance.

If you have any questions, concerns, or complaints regarding the okta388 Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@okta388.my — for all privacy-related enquiries, data access requests and complaints
• General Support Email: support@okta388.my — for account enquiries and all other general enquiries
• Live Chat: Available 24 hours a day, 7 days a week at okta388.my
• WhatsApp: Number available after logging in to your account under the Support section

Okta388 is committed to responding to all privacy-related enquiries within 14 working days. For more complex data access requests, the process may take up to 21 business days in accordance with Malaysia's PDPA requirements.

If you are not satisfied with okta388's response to your privacy enquiry, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for enforcing the PDPA 2010 in Malaysia.