Ok365 Privacy Policy — Malaysian User Data Protection

1. Introduction and ok365 Privacy Commitment

Ok365 ("Platform", "We") takes seriously our responsibility to protect the privacy and data security of all users on our digital entertainment platform. This Privacy Policy is drafted to comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

As a trusted digital entertainment platform in Malaysia, ok365 believes that user trust is our most valuable asset. We will never sell, rent, or disclose your personal data to any third party for marketing purposes without your explicit consent.

This Privacy Policy applies to all information we collect through the ok365 website, mobile app, email communications, customer support services, and all other touchpoints between you and the ok365 platform. By continuing to use ok365's services, you confirm your agreement to this policy.

2. Types of Personal Data We Collect

Ok365 collects several categories of information from users, depending on how you interact with our platform. The following is a full breakdown of the types of data we collect:

Ok365 only collects data that is strictly necessary to deliver quality services and comply with applicable legal requirements. We do not collect sensitive information such as biometric data, health information, or users' political views without a legitimate basis and explicit consent.

3. Purpose of Data Collection and Processing

Ok365 processes your personal data only for legitimate, clearly defined purposes directly related to delivering our platform services. The following are the primary purposes for which your data is processed:

• Account management: Create, verify, and manage your ok365 user account, including secure login and password recovery.
• Transaction processing: Process your deposits, withdrawals, and all financial activities on the ok365 platform quickly and securely.
• KYC and AML compliance: Fulfil legal obligations related to Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements set by the relevant authorities.
• Service delivery: Provide access to all games, promotions, and ok365 platform features you are eligible to use.
• Service communications: Send important notifications regarding your account, transactions, security updates, and policy changes.
• Marketing (with consent): Send promotional offers, bonuses, and relevant ok365 product information — only to users who have given explicit consent.
• Security and fraud prevention: Identify and prevent fraudulent activity, hacking, money laundering, and other security threats.
• Platform upgrades: Analyse aggregated usage patterns to improve user experience, platform performance, and the development of new ok365 features.
• Legal compliance: Comply with court orders, regulatory requests, or other legally binding obligations applicable to ok365.

Ok365 will not process your data for any purpose beyond those listed above without notifying you in advance and obtaining the necessary consent as required by applicable law.

4. Disclosure of Data to Third Parties

Ok365 does not sell, rent, or disclose users' personal data to third parties for commercial or marketing purposes without user consent. However, in certain limited situations, ok365 may share your personal data with the following parties:

• Payment service providers: Payment gateways, banks, e-wallets, and payment processors required to complete your financial transactions. All these providers are bound by strict data protection agreements with ok365.
• Technical service providers: Cloud infrastructure providers, hosting services, and technology vendors supporting ok365 platform operations — all bound by comprehensive data confidentiality agreements.
• Regulatory and law enforcement bodies: ok365 fully complies with any lawful requests from Malaysian authorities or international enforcement bodies with relevant jurisdiction.
• Gaming partners: Third-party game providers supplying game content on the ok365 platform may receive necessary game data — this is limited to technical information only and does not include personal financial details.
• Audit services: Independent auditors who verify ok365's compliance with fair gaming standards and data security requirements.

5. ok365 Data Security Measures

Ok365 continuously invests in the latest security technologies and procedures to keep your personal data safe at all times. The following are the protection layers we employ:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and ok365's servers are encrypted using the highest industry-grade encryption standards — equivalent to the level used by Malaysian banking institutions.
• Data encryption at rest: Data stored in the ok365 database is fully encrypted using AES-256, ensuring it remains unreadable even in the event of a physical breach.
• Two-factor authentication (2FA): ok365 supports and encourages the use of 2FA for all user accounts to add an extra layer of protection against unauthorized access.
• 24/7 security monitoring: The ok365 cybersecurity team continuously monitors platform activity to detect and respond to any security threats in real time.
• Data segregation: User funds and personal data are stored separately from ok365's operational systems to minimise risk.
• Regular penetration testing: ok365 conducts regular security testing by independent security experts to identify and close any system vulnerabilities before they can be exploited.
• Internal access controls: Access to user personal data is strictly limited to ok365 staff who genuinely require it to perform their duties, with all access logged and monitored.

While ok365 takes all reasonable steps to protect your data, no security system in the world is 100% impenetrable. In the event of any data security incident affecting your information, ok365 will notify you within the timeframe required under Malaysia's PDPA.

6. Use of Cookies and Tracking Technologies

Ok365 uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and analyze usage patterns in aggregate. The following are the types of cookies we use:

• Essential cookies: These cookies are essential for the core functionality of the ok365 platform — including Login session authentication, security, and language preferences. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance cookies: Used to analyse how users interact with the ok365 platform — including the most visited pages, time spent, and navigation paths. All data is collected anonymously.
• Functional cookies: Save user preferences such as language, display theme, and other personal settings to make your ok365 platform experience more personalised and efficient.
• Analytics cookies: ok365 uses internal analytics tools to understand platform usage trends. This data is used solely to improve the quality of ok365's services.

You can control and manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality and user experience of the ok365 platform. For more information on managing cookies, please refer to your browser's documentation.

7. User Rights Regarding Personal Data

As an ok365 user residing in Malaysia, you have the following rights regarding your personal data under the PDPA 2010 and ok365's internal policies:

• Right to access: You have the right to request a copy of the personal data we hold about you. ok365 will provide the data in a readable format within 14 business days.
• Right to rectification: If your personal data is inaccurate or outdated, you may request ok365 to correct or update that information promptly.
• Right to erasure: In certain situations, you may request ok365 to delete your personal data — subject to any legal obligations binding ok365 to retain that data for a specified period.
• Right to restrict processing: You may request ok365 to restrict the processing of your personal data in certain situations, such as when you are disputing the accuracy of that data.
• Right to withdraw consent: For data processing based on your consent (such as receiving marketing emails), you may withdraw that consent at any time.
• Right to data portability: You may request ok365 to provide your personal data in a structured format that can be transferred to another service provider.

To exercise any of the above rights, please contact the ok365 data protection team via in-platform live chat or our support email. ok365 is committed to responding to every request within 14 business days in accordance with PDPA requirements.

8. Data Retention Period

Ok365 retains users' personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal and regulatory obligations. The following are ok365's data retention period guidelines:

• Active account data: Retained for the duration your ok365 account is active and for 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records and AML compliance.
• KYC documents: Retained for the period required by applicable law, typically a minimum of 5 years from the date of verification or account closure.
• Communication and support logs: Retained for 3 years for reference purposes and resolution of any disputes that may arise.
• Usage and analytics data: Aggregated anonymous data is retained indefinitely; associated personal data is anonymised after 12 months of inactivity.
• Marketing data: Retained until you withdraw your consent or request deletion, and removed within 30 days of such a request.

When personal data is no longer required, ok365 will securely delete or anonymise it in accordance with established data deletion procedures. Fully anonymised data is no longer considered personal data and is not subject to PDPA.

9. Links to Third-Party Platforms

The ok365 platform may contain links to third-party websites or applications, including social media sites, payment providers, or partner gaming platforms. Please note that this ok365 Privacy Policy applies solely to the ok365 platform.

Ok365 is not responsible for the privacy practices of any third-party websites or applications you access via links from our platform. We strongly recommend reading the privacy policy of each third-party platform before providing them with any of your personal information.

10. Changes to the Privacy Policy

Ok365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. When we make material changes to this Privacy Policy, we will:

• Updating the "Effective Date" at the top of this page.
• Notifying registered users via email or in-platform notifications on ok365 at least 7 days before changes take effect.
• For highly material changes, ok365 may require users to review and re-confirm their consent upon their next login.

Continued use of the ok365 platform after any Privacy Policy changes take effect will be considered your acceptance of those changes. If you do not agree with any changes, you have the right to close your ok365 account before they take effect.

11. Contact ok365 Data Protection Officer

If you have any questions, concerns, or complaints regarding how ok365 handles your personal data, or wish to exercise any of your privacy rights, please contact the ok365 Data Protection Officer (DPO) through the following channels:

• Live Chat 24/7: Via the live chat button within the ok365 platform — the fastest way to get an immediate response.
• Support Email: [email protected] — for written inquiries requiring documentation or a formatted response.
• Response Time: ok365 is committed to responding to all privacy inquiries within 3 business days, and resolving formal requests within 14 business days.

If you believe ok365 has not handled your privacy complaint satisfactorily, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA compliance in Malaysia.