ocs8 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by ocs8.club ("ocs8", "we", "us") in connection with the operation of the ocs8 online gaming platform and all associated services. It applies to all registered players, prospective users who interact with the ocs8 website, and any individual whose personal data is processed by ocs8 in connection with the services described herein.

ocs8 is committed to handling personal data responsibly and in compliance with applicable data protection regulations, including obligations arising from the international gaming authority frameworks under which ocs8 operates its licensed gaming services. Malaysian players accessing ocs8.club are subject to this Policy in its entirety.

This Policy should be read alongside the ocs8 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall regulatory framework governing your use of the ocs8 platform.

ocs8 collects personal data through multiple channels during your interaction with the platform. The categories of data collected and the context of collection are described in the table below.

ocs8 does not intentionally collect special category personal data (such as health data, biometric data, or political opinions) unless this is strictly required to fulfil a legal obligation or to administer a responsible gaming self-exclusion request.

ocs8 uses the personal data described above for the following specific and documented purposes:

• Account Management: To create, maintain, verify, and administer your ocs8 player account, including processing your ocs8 login credentials and managing account security settings;
• Payment Processing: To process MYR deposits and withdrawals via your selected payment method (Touch 'n Go eWallet, Boost, FPX, Maybank2u, CIMB Clicks, Public Bank PBe), and to reconcile transaction records;
• Identity Verification (KYC): To verify your identity, age (21+), and payment method ownership in accordance with international gaming authority requirements and anti-money laundering obligations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct on the ocs8 platform;
• Customer Support: To respond to your support enquiries, resolve disputes, and maintain a record of communications for quality assurance;
• Responsible Gaming: To administer deposit limits, session reminders, self-exclusion requests, and reality checks at your request, and to monitor gaming activity patterns that may indicate problem gambling behaviour;
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the ocs8 platform, game selection, and overall user experience;
• Legal & Regulatory Compliance: To maintain records as required by applicable law, respond to lawful requests from regulatory and law enforcement authorities, and enforce the ocs8 Terms & Conditions.

ocs8 processes your personal data on the following legal bases, each applied to the specific processing activities described in this Policy:

• Contractual Necessity: Processing required to fulfil our obligations to you under the ocs8 Terms & Conditions — including account management, payment processing, and gameplay services;
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML regulatory requirements, age verification obligations, and gaming authority licensing conditions;
• Legitimate Interests: Processing for fraud prevention, platform security, and improving the ocs8 service, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ocs8 does not sell your personal data to third parties for their own marketing or commercial purposes. Your data may be shared in the following limited and documented circumstances only:

• Payment Service Providers: Transaction data is shared with payment processors (including Touch 'n Go eWallet, Boost, and FPX gateway providers) solely to the extent necessary to process your deposit or withdrawal;
• Game Suppliers: Limited technical data (such as player session identifiers) is shared with certified game providers (e.g. Pragmatic Play, PG Soft) to enable game launch, session management, and RNG certification audit trails;
• KYC & Identity Verification Services: Identity and document data is shared with accredited KYC verification service providers for the purpose of age and identity verification in compliance with our regulatory obligations;
• Regulatory & Law Enforcement Authorities: ocs8 will disclose personal data to gaming regulators, law enforcement agencies, or other competent authorities where required by law or where ocs8 has a good-faith belief that such disclosure is necessary to prevent financial crime or protect the safety of persons;
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity subject to equivalent data protection obligations.

All third parties with whom ocs8 shares personal data are required to process such data only for the specified purpose and in accordance with applicable data protection standards. ocs8 does not authorise any third party to use your data for their own independent commercial purposes.

The ocs8 platform uses cookies and similar technologies to operate platform functionality, maintain your login session, detect fraud, and analyse usage patterns. The categories of cookies used on ocs8.club are:

• Strictly Necessary Cookies: Required for the ocs8 platform to function — including session management, ocs8 login authentication tokens, and security features. These cannot be disabled;
• Functional Cookies: Remember your preferences (e.g. language settings, game lobby filters) to improve your experience. Stored for the duration of your session or up to 30 days;
• Analytical Cookies: Aggregate anonymised data on platform usage, page performance, and user journeys to help ocs8 improve its services. No personally identifiable data is included in analytical reporting;
• Security & Fraud Detection Cookies: Used to detect abnormal session behaviour, account takeover attempts, and bot activity on the ocs8 platform. These are essential for platform integrity and player account security.

You may control non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the ocs8 platform from functioning correctly, including the ocs8 login process.

ocs8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

• Account identity and KYC documents: retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations;
• Financial transaction records (deposits, withdrawals, bet history): retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications: retained for two (2) years from the date of the interaction;
• Gaming activity logs: retained for three (3) years for responsible gaming monitoring and dispute resolution purposes;
• Marketing preference data: retained until you withdraw consent or request deletion, whichever is earlier;
• Technical and device data (logs, IP addresses): retained for up to twelve (12) months for security and fraud analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless retention is required to comply with a legal obligation or to establish, exercise, or defend a legal claim.

As a data subject whose personal data is processed by ocs8, you have the following rights, subject to applicable exceptions and legal obligations:

• Access: You may request a copy of the personal data ocs8 holds about you;
• Rectification: You may request correction of inaccurate or incomplete personal data;
• Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Restriction: You may request that ocs8 restrict processing of your personal data in certain circumstances;
• Portability: You may request a structured, machine-readable copy of the personal data you provided to ocs8 for transfer to another service provider;
• Objection: You may object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of the above rights, submit a written request to [email protected]. ocs8 will respond within thirty (30) days of receipt of a valid request. Identity verification may be required before processing a data rights request.

ocs8 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ocs8 platform — including the ocs8 login process, game sessions, and payment pages;
• Encrypted storage of sensitive personal and financial data at rest using AES-256 encryption;
• Access controls ensuring that only authorised ocs8 personnel with a specific operational need can access personal data;
• Two-factor authentication (2FA) available to all players for ocs8 account access;
• Regular security audits, penetration testing, and vulnerability assessments of the ocs8 platform infrastructure;
• Documented incident response procedures including breach notification protocols.

While ocs8 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ocs8 login credentials. If you suspect unauthorised access to your account, contact ocs8 support immediately at [email protected].

If ocs8 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account permanently closed. Any deposits made by an underage player will be refunded to the originating payment method and all associated bets or winnings will be voided.

Parents and guardians who believe their child has created an ocs8 account should contact ocs8 support immediately at [email protected]. ocs8 will investigate and take appropriate action without delay.

ocs8 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered players by email to the address on file and will be published on this page with an updated "Last Updated" date.

Your continued use of the ocs8 platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should cease using the platform and may request account closure by contacting support.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ocs8, please contact us:

ocs8 takes all privacy enquiries seriously. Our support team is available 24/7 in English, and data protection enquiries are escalated to the appropriate internal team for handling.