This Privacy Policy explains how ofa168 collects, uses, stores, and protects your personal data when you use the ofa168 Platform. We are committed to handling your information responsibly and in accordance with applicable data protection laws.
Identity, contact, financial, technical, and usage data — only what is necessary to operate the ofa168 Platform and comply with regulatory obligations.
ofa168 shares data only with trusted service providers, payment processors, regulatory bodies, and fraud prevention services — never sold to third-party marketers.
256-bit SSL encryption, access controls, and regular security audits protect your ofa168 personal and financial data at rest and in transit.
You have the right to access, correct, and request deletion of your ofa168 personal data, subject to applicable legal and regulatory retention requirements.
ofa168 ("we," "us," "our") is the operator of the online casino and sports betting platform accessible at ofa168.co (the "Platform"). ofa168 is the data controller in respect of personal data collected from users of the Platform.
This Privacy Policy applies to all personal data processed by ofa168 in connection with your registration, use of, and interaction with the Platform, including its website, mobile application, live chat, email correspondence, and any other ofa168 communication channels. This Policy should be read in conjunction with the ofa168 Terms and Conditions.
For the purposes of this Policy, "personal data" means any information that identifies or can be used to identify you as an individual, either directly or indirectly, including your name, email address, mobile number, financial details, and device identifiers.
ofa168 collects and processes the following categories of personal data:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, MyKad or passport number, photograph (for KYC) |
| Contact Data | Email address, Malaysian mobile number, residential address |
| Financial Data | Bank account details, e-wallet identifiers (Touch n Go, Boost), transaction history, deposit and withdrawal records in MYR |
| Technical Data | IP address, browser type and version, device identifiers, operating system, session tokens |
| Usage Data | Login timestamps, pages visited, games played, bet history, session duration, feature usage patterns |
| Communications Data | Records of live chat conversations, emails, and support tickets submitted to ofa168 |
| Profile Data | Username, account preferences, VIP tier status, responsible gaming settings, self-exclusion status |
ofa168 does not collect any special categories of sensitive personal data (such as health, biometric, or political data) except where strictly required by applicable anti-money laundering regulations in connection with source-of-funds verification.
The majority of data ofa168 processes is provided directly by you during:
When you access the ofa168 Platform, we automatically collect certain technical and usage data through cookies, web beacons, and similar tracking technologies. This includes your IP address, device identifiers, browser information, pages accessed, and game session data. For more detail, see Section 8 (Cookies and Tracking Technologies).
ofa168 may receive personal data about you from third parties in limited circumstances, including: identity verification service providers engaged for KYC purposes; payment processing partners processing your MYR transactions; fraud detection and anti-money laundering screening services; and analytics providers.
ofa168 processes your personal data only where there is a lawful basis to do so. The primary purposes for which ofa168 processes personal data, and the corresponding legal bases, are set out below:
Note on Age Verification: ofa168 is legally and contractually required to verify that all players are aged 21 or above before permitting gambling activity. This processing is mandatory. Accounts that cannot be verified as meeting the age requirement will be suspended.
ofa168 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:
ofa168 engages trusted third-party service providers who process personal data on our behalf under binding data processing agreements. These include: identity verification and KYC providers; payment gateway and e-wallet operators (including processors for Touch n Go eWallet and Boost transactions); cloud hosting and infrastructure providers; customer support platform operators; and fraud prevention and cybersecurity service providers. All service providers are required to implement appropriate security measures and may only use your data for the specific purposes for which they are engaged.
ofa168 may disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. In such circumstances, ofa168 will disclose only the minimum data necessary to comply with the legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of ofa168's business, your personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained. ofa168 will notify you of any such transfer and its implications for your personal data processing.
ofa168 will share your personal data with any other third party only where you have provided your explicit prior consent for that specific sharing.
ofa168 may transfer personal data to service providers or infrastructure partners located outside Malaysia. Where such transfers occur, ofa168 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that impose data protection obligations equivalent to those applicable under ofa168's licensing jurisdiction.
If you have questions about the specific safeguards applicable to any international transfer of your personal data, please contact ofa168 at [email protected].
ofa168 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. In particular:
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with ofa168's data destruction procedures.
The ofa168 Platform uses cookies and similar tracking technologies to operate core Platform functions, remember your preferences, and analyse how players use the site. The following categories of cookies are used:
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the ofa168 Platform, but may affect certain convenience features.
ofa168 will send you promotional communications — including information about bonuses, new game releases, VIP programme updates, and platform news — only where you have opted in to receive such communications during registration or subsequently through your Account Settings.
You may withdraw your marketing consent at any time by: (a) updating your communication preferences in your ofa168 Account Settings; or (b) clicking the unsubscribe link in any marketing email from ofa168; or (c) contacting ofa168 support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect transactional communications necessary for account operation (such as deposit confirmations, withdrawal notifications, and security alerts).
ofa168 implements a layered security architecture to protect your personal and financial data. Key measures include:
Despite these measures, no data transmission over the internet or storage system can be guaranteed as completely secure. If you become aware of any security vulnerability or suspect unauthorised access to your ofa168 Account, please contact [email protected] immediately.
Your Role in Security: Enabling two-factor authentication (2FA) on your ofa168 Account significantly reduces the risk of unauthorised access. ofa168 strongly recommends all Malaysian players activate 2FA from their Account Security Settings.
Subject to applicable law and ofa168's legal and regulatory obligations, you have the following rights in respect of your personal data:
To exercise any of these rights, submit a written request to [email protected]. ofa168 will respond within 30 days of receipt. We may require identity verification before processing your request. Certain rights may be limited where compliance would prejudice ofa168's legal obligations or the rights of third parties.
The ofa168 Platform is strictly intended for adults aged 21 and above. ofa168 does not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to mandatory KYC age verification. If ofa168 becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately closed, all data will be deleted, and any deposited funds will be returned to the source payment method.
If you believe that a minor may have created an ofa168 Account, please contact [email protected] immediately.
The ofa168 Platform may contain links to third-party websites or services in limited contexts. ofa168 is not responsible for the privacy practices or content of those third-party sites. This Privacy Policy applies exclusively to data processed by ofa168 in connection with the ofa168 Platform. We encourage you to review the privacy policies of any third-party sites you visit.
ofa168 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material, ofa168 will provide reasonable advance notice by posting a notification on the Platform or sending an email to your registered address. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Your continued use of the ofa168 Platform following the effective date of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an amended Policy, you should discontinue use of the Platform and close your Account.
The current version of this Privacy Policy is always available at ofa168.co/privacy-policy.
If you have any questions, concerns, or complaints regarding this Privacy Policy or ofa168's data processing practices, please contact ofa168's privacy team:
ofa168 is committed to resolving privacy complaints promptly and fairly. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Play at ofa168 with confidence — your personal and financial data is protected by industry-standard encryption, strict access controls, and a genuine commitment to data privacy for Malaysian players.
21+ only · Your data is never sold · ofa168 operates under international gaming authority licensing