Privacy Policy

Ocmy Privacy Policy – Data Protection Your Privacy Is Our Priority

Effective: 1 January 2026 Latest Version

This document describes how ocmy collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

ocmy's Commitment: We do not sell, rent, or trade your personal data to any third party for marketing purposes. Your data is used solely to provide and improve ocmy services for you.

01 Introduction and Scope of This Privacy Policy

Welcome to the ocmy Privacy Policy. This document is our written commitment to you — a user of the ocmy online casino platform — regarding how we respect and protect the personal information you entrust to us.

Ocmy operates under the domain ocmy.fun and offers online casino services to users in Malaysia. As a platform operating within Malaysia's digital ecosystem, we strictly adhere to Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations legally binding upon us.

This privacy policy applies to all information we collect through the ocmy.fun website, the ocmy mobile app, email communications, and any other interactions between you and our platform. By using ocmy services, you acknowledge that you have read and understood this privacy policy.

We update this policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page with the update date clearly displayed.

02 Types of Personal Data We Collect

Ocmy collects several categories of information to enable us to provide a safe, fair, and personalised service to every user. Below are the full details of the data we collect:

A) Personal Identification Information

  • Full name as stated in your official identification document.
  • National identification number (MyKad) or passport number for international users.
  • Date of birth for age verification purposes (18 years and above).
  • Current residential address including state and postcode.
  • An active mobile number and a valid email address.

B) Financial Information

  • Bank account number for deposit and withdrawal purposes.
  • Bank name and account holder name for verification.
  • A record of all deposit and withdrawal transactions on the platform.
  • A history of your betting and gaming activity within your account.

C) Technical and Usage Data

  • The IP address of your device when accessing the ocmy platform.
  • Browser type, operating system, and device information.
  • Session data including login times, session duration, and pages visited.
  • Cookie and analytics data for improving user experience.
  • Activity logs for security purposes and fraud detection.

D) KYC Verification Information

  • A copy of your identity document (front and back of MyKad, or passport).
  • Proof of address such as a recent utility bill or bank statement.
  • A selfie or facial photo for digital identity verification.
  • Bank statement for source of funds verification if required.
Note: We only collect data that is strictly necessary to provide our services, comply with legal requirements, and protect the security of your account. We do not collect excessive or irrelevant data.

03 How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. ocmy does not use your data for any purpose other than those stated below:

Purpose of Use Data Type Legal Basis
Registration and account management Name, email, phone number, date of birth Contract performance
Identity verification (KYC) MyKad, passport, selfie, proof of address Legal obligation
Deposit and withdrawal processing Bank details, transaction records Contract performance
Fraud prevention and security IP address, session data, activity logs Legitimate interest
AML compliance and regulatory obligations All related data Legal obligation
Communication and customer support Email, phone number Contract performance
Platform improvement and analytics Usage data, cookie data Legitimate interest
Marketing (with consent) Email, game preferences User consent

For marketing communications such as promotional notifications and special bonus offers, we will only send you messages if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via the notification settings in your ocmy account.

04 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), ocmy processes your personal data on valid legal grounds. We do not process your data arbitrarily — every processing activity has a clear and legally defensible justification.

  • Contract performance: We need to process certain data to enable you to use ocmy services, including account management, payment processing, and game delivery.
  • Legal obligation: As a financial platform, we are legally required to conduct identity verification (KYC) and comply with anti-money laundering (AML) regulations.
  • Legitimate interest: We process certain data to prevent fraud, ensure platform security, improve our services, and protect the legitimate interests of all users.
  • Consent: For activities such as marketing communications, we will request your explicit consent in advance, and you may withdraw that consent at any time.

05 Data Sharing with Third Parties

Ocmy takes the trust you place in us seriously. We does not sell, rent, or trade your personal data to any third party for their own marketing or commercial gain.

However, there are certain situations where we need to share your data with the following parties in order for ocmy's services to function properly:

  • Payment providers: Transaction information is shared with the FPX payment gateway and our partner banks to securely process your deposits and withdrawals.
  • KYC service providers: Identity verification data is shared with approved third-party verification services to fulfil our compliance requirements.
  • Game providers: Some game data may be shared with third-party game software providers that supply content on the ocmy platform.
  • Statutory authority: We will disclose data where required by law, court order, or directive from a competent enforcement agency in Malaysia.
  • Professional advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations when required for legitimate business needs.

All third parties we work with are required to comply with data protection standards equal to or higher than those of ocmy, and are not permitted to use your data for any purpose other than what is specified in their agreement with us.

06 Data Security Measures We Implement

The security of your personal data is ocmy's highest priority. We continuously invest in the latest security infrastructure to ensure your information is protected against unauthorized access, data breaches, misuse, or destruction.

  • 256-bit SSL encryption: All data transmitted between your browser and the ocmy servers is encrypted using the latest TLS protocol, on par with Malaysia's leading online banking systems.
  • Hashed password storage: Your password is never stored in plain text. We use strong cryptographic hashing algorithms with a unique random salt for each account.
  • Two-factor authentication (2FA): An additional security layer is available for all user accounts to prevent unauthorized access even if your password is compromised.
  • 24/7 Monitoring: Our automated threat detection system monitors all platform activity around the clock to identify and respond to any security threats.
  • Restricted staff access: Only ocmy staff who require access to specific data to perform their duties are permitted to do so, with all access logged and audited.
  • Encrypted data backups: Data is securely and regularly backed up at separate locations to ensure service continuity and recovery in the event of an emergency.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. We therefore encourage you to also take precautions such as using a strong password and not sharing your login credentials.

07 Cookies and Tracking Technologies

The ocmy platform uses cookies and similar tracking technologies to enhance your experience, understand usage patterns, and ensure the security of your session. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects anonymous information about how you use the platform to help us improve speed, responsiveness, and the overall experience.
  • Functional Cookies: Remembers your preferences such as language, display settings, and login information for your convenience.
  • Analytics Cookies: Helps us understand which pages are most visited and how users navigate the platform, for improvement purposes.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the full functionality of the ocmy platform. More information on managing cookies is available in your browser's documentation.

08 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by ocmy. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days and may be subject to a reasonable processing fee.

Right to Rectification

If any of your personal data is inaccurate or out of date, you have the right to request a correction. Updates can be made directly through your account settings or by contacting our support team.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. However, we may need to retain certain data to comply with legal obligations such as AML requirements.

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time. Upon receiving your objection, we will immediately cease processing for that purpose.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider, where applicable under the PDPA.

To exercise any of the above rights, please contact the ocmy support team via live chat or email. We will process your request promptly and reach out to verify your identity before making any changes to your data.

09 Data Retention Period

Ocmy does not retain your personal data longer than is necessary for the purpose for which it was collected, or as required by Malaysian law. Below are our general data retention guidelines:

  • Active account data: Retained for the duration your account is active plus 7 years after account closure for audit and AML requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial legislation requirements.
  • KYC Documents: Retained for 5 years after the business relationship ends or as required by the relevant authorities.
  • Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
  • Anonymised analytics data: May be retained for a longer period as it cannot be identified as belonging to any individual.

Once the retention period has ended, your data will be securely deleted using methods that comply with international security standards, ensuring it cannot be recovered by any party.

10 Changes to This Privacy Policy

Ocmy reserves the right to update or modify this privacy policy at any time to reflect changes in our practices, technology, legal requirements, or other relevant reasons.

When we make significant changes to this policy, we will notify you via:

  • Prominent notification on the ocmy.fun homepage.
  • Emailed to your registered email address at least 7 days before the changes take effect.
  • In-account notification when you next login.

Your continued use of the ocmy platform after a privacy policy update takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account and request data deletion in accordance with the procedure outlined in Section 8.

11 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this privacy policy or how we handle your personal data, please contact the ocmy data protection team through the following channels:

  • Live Chat: Available 24/7 directly from the ocmy platform — the fastest way to get an immediate response.
  • Privacy Email: [email protected] — for formal complaints and requests related to personal data.
  • Support Email: [email protected] — for general enquiries related to your account and services.

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex complaints requiring thorough investigation, we will provide an update within 14 business days.

If you are not satisfied with our response, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for PDPA compliance in Malaysia.

Regulatory Authority: The Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Communications and Digital Malaysia is responsible for ensuring PDPA 2010 compliance by all entities processing personal data in Malaysia.
Why Your Data Secure ocmy?

We invest in best-in-class security infrastructure so you can play with peace of mind, without worrying about your privacy.

🔐
256-Bit SSL Encryption

All data transmitted between you and the ocmy platform is protected with 256-bit SSL encryption, the same standard used by Malaysia's leading banks.

🛡️
Malaysia PDPA Compliance

Our operations fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA), giving you robust legal protection.

🚫
No Data Selling

Ocmy never sells, rents, or shares your personal data with third-party advertisers or data brokers. Your data remains entirely yours.

👁️
Full Control in Your Hands

Through your ocmy account settings, you can manage your privacy preferences, control marketing notifications, and request access to or deletion of your data at any time.

🔍
Regular Security Audits

The ocmy security system undergoes independent audits on a regular basis to identify and address any vulnerabilities before they pose a threat to user data.

Rapid Data Breach Response

In the event of any security incident affecting your data, we are committed to notifying you within 72 hours in accordance with international best practices.

Play with With Full Confidence at ocmy

With a transparent privacy policy and industry-standard security measures, ocmy ensures your online casino experience is always safe, private, and enjoyable.

By registering, you agree to the Terms and Conditions and Privacy Policy ocmy.

Bahasa Melayu