ocwins Privacy Policy

1. Introduction

ocwins ("we," "us," "our") operates the online gaming platform accessible at https://ocwins.org (the "Platform"). This Privacy Policy describes how ocwins collects, uses, stores, discloses, and protects the personal data of individuals who register for or use our Platform ("you," "your," "Player").

This Privacy Policy is incorporated into and forms part of the ocwins Terms & Conditions. By accessing the ocwins Platform or creating a Player Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

If you do not agree with this Privacy Policy, you must not use the ocwins Platform. Questions regarding this Policy should be directed to our Data Protection contact as described in Section 14.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the ocwins operator entity that operates the Platform under applicable international gaming authority regulations. As the data controller, ocwins determines the purposes and means of processing your personal data in accordance with this Privacy Policy.

You may contact our Data Protection contact at any time using the email address provided in Section 14 of this Policy to raise data protection queries, exercise your rights, or submit a complaint.

3. Personal Data We Collect

ocwins collects the following categories of personal data in connection with the operation of the Platform and the provision of gaming services:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (including document number and expiry date) collected as part of the KYC (Know Your Customer) verification process.
• Contact Data: Email address, mobile telephone number, and residential address. This data is used for account communications, verification, and support.
• Financial Data: Payment method details including bank account numbers, e-wallet identifiers (such as your Touch n Go eWallet or Boost account reference), and transaction history on the Platform. ocwins does not store full card numbers where card payments are used.
• Account Data: Username, account balance, transaction history, bonus activity, wagering history, VIP tier status, and account preferences.
• Technical Data: IP address, device identifiers, browser type and version, operating system, referring URLs, and session activity data collected automatically when you access the Platform.
• Communications Data: Records of your correspondence with the ocwins support team, including live chat transcripts, email exchanges, and support ticket histories.
• Responsible Gaming Data: Records of any self-imposed limits, cool-off periods, or self-exclusion requests associated with your Account.

4. How We Collect Personal Data

ocwins collects personal data through the following means:

• Direct Provision: When you complete the registration form, submit KYC documentation, make a deposit or withdrawal, contact our support team, or update your Account settings.
• Automated Collection: Through cookies, server logs, and tracking technologies when you access and navigate the Platform. See Section 9 for further detail on cookies.
• Third-Party Sources: From identity verification service providers and payment processors, as necessary to complete KYC obligations and process financial transactions securely.
• Regulatory Reporting: Information obtained from regulatory bodies or law enforcement agencies in connection with compliance obligations, fraud prevention, or anti-money laundering investigations.

5. Purpose and Legal Basis for Processing

ocwins processes personal data for the following purposes, each supported by a legal basis:

• Account Registration and Management (Contractual Necessity): Processing identity, contact, and financial data to create and maintain your Account and provide access to the Platform.
• Payment Processing (Contractual Necessity): Processing financial data to execute deposits, withdrawals, and bonus credits in accordance with your instructions.
• KYC and Age Verification (Legal Obligation): Processing identity documents to verify that you meet the 21+ eligibility requirement and comply with anti-money laundering regulations applicable to licensed gaming operators.
• Fraud Prevention and Security (Legitimate Interest): Processing technical and account data to detect, investigate, and prevent fraudulent activity, multiple account creation, and unauthorised access.
• Regulatory Compliance (Legal Obligation): Processing and retaining data as required by applicable gaming authority regulations, anti-money laundering legislation, and other legal obligations.
• Customer Support (Contractual Necessity / Legitimate Interest): Processing communications data to respond to queries, resolve disputes, and improve service quality.
• Responsible Gaming (Legal Obligation / Legitimate Interest): Processing responsible gaming data to implement self-exclusion, deposit limits, and other protective measures.
• Marketing Communications (Consent): Where you have opted in to receive promotional communications from ocwins, we may use your contact data to send you information about bonuses, promotions, and platform updates. You may withdraw consent at any time by updating your Account preferences or contacting support.

6. Disclosure of Personal Data

ocwins does not sell or rent your personal data to third parties. We may disclose your personal data to the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Including Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank, and other payment processors, to the extent necessary to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services used to fulfil our regulatory obligations.
• Technology Service Providers: Cloud infrastructure, platform hosting, and cybersecurity service providers who process data on our behalf under binding data processing agreements.
• Gaming Regulators and Law Enforcement: Regulatory authorities and law enforcement agencies where disclosure is required by law, court order, or regulatory direction.
• Fraud Prevention Agencies: Third-party services that help us identify and prevent fraudulent activity, including shared self-exclusion registries where applicable.

All third-party service providers who receive your personal data are contractually obligated to handle it in a manner consistent with this Privacy Policy and applicable data protection law.

7. International Data Transfers

As an online gaming platform serving players internationally, ocwins may transfer your personal data to servers and service providers located outside your country of residence. Where such transfers occur, ocwins ensures that appropriate safeguards are in place to protect your data, including contractual protections equivalent to applicable data protection standards.

By using the ocwins Platform, you consent to the transfer of your personal data to jurisdictions outside your own where it is necessary for the provision of our services.

8. Data Retention

ocwins retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Transaction Data: Retained for a minimum of five (5) years from the date of the last transaction or Account closure, as required by anti-money laundering regulations applicable to gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years following the conclusion of the business relationship.
• Responsible Gaming Records: Self-exclusion records are retained for the duration of the exclusion period plus five (5) years, to prevent re-registration in breach of self-exclusion commitments.
• Communications Data: Support and correspondence records are retained for a minimum of two (2) years from the date of last interaction.
• Marketing Consent Records: Retained for the duration of any marketing communication engagement and for a reasonable period thereafter to evidence consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9. Cookies and Tracking Technologies

ocwins uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function, including session management, login state preservation, and security features. These cookies cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect anonymised data about how players use the Platform, enabling us to identify areas for improvement and optimise the user experience.
• Functional Cookies: Store your preferences, such as language settings and game lobby layout configurations, to personalise your experience on subsequent visits.
• Analytics Cookies: Used to understand aggregate usage patterns, popular features, and player journey data, strictly for internal platform improvement purposes.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ocwins Platform. ocwins does not use cookies to serve third-party advertising.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights regarding your personal data held by ocwins:

• Right of Access: You may request a copy of the personal data ocwins holds about you, together with information about how it is being used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor corrections (such as contact details) may be made directly in your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ocwins's legal retention obligations.
• Right to Restriction: You may request that ocwins restrict the processing of your personal data in certain circumstances, such as during an accuracy dispute.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of the personal data you have provided to ocwins.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including any direct marketing processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our Data Protection contact as described in Section 14. ocwins will respond to valid requests within 30 days. We may request proof of identity before processing your request.

11. Children's Privacy

The ocwins Platform is strictly intended for individuals who are 21 years of age or older. ocwins does not knowingly collect personal data from individuals under the age of 21. If ocwins becomes aware that personal data has been submitted by an individual under the minimum age, that data will be deleted immediately and the associated Account will be permanently closed.

If you have reason to believe that a minor has registered an ocwins Account, please contact our support team immediately so that we can investigate and take appropriate action.

12. Security Measures

ocwins implements technical and organisational security measures commensurate with the sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive account and financial data at rest.
• Role-based access controls limiting access to personal data to authorised personnel who require it to perform their duties.
• Regular penetration testing and vulnerability assessments of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Incident response procedures for identifying, containing, and reporting personal data breaches in accordance with applicable legal obligations.

While ocwins employs robust security practices, no digital system is entirely immune to risk. Players are encouraged to use strong, unique passwords for their ocwins Account and to enable two-factor authentication from Account settings.

13. Amendments to this Privacy Policy

ocwins may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform functionality. When material changes are made, ocwins will notify registered players by email to the address associated with their Account at least seven (7) days before the amended Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the ocwins Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the exercise of your data protection rights, please contact the ocwins Data Protection contact through the following channel:

Email: [email protected]

ocwins will respond to all data protection enquiries within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

For general platform support and account-related queries, please use the 24/7 live chat function available on the ocwins Platform.