Malaysian Personal Data Protection

Ofa168 Privacy Policy – Our Commitment to Protecting Your Personal Data

At ofa168, your privacy is more than a legal obligation — it is a moral responsibility we take to heart. This document clearly explains how we collect, use, store, and protect our members' personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 Malaysia PDPA 2010 256-bit SSL

Ofa168's Six Data Protection Principles

How we keep your personal information secure and under control at all times

Data Minimisation

Ofa168 only collects data that is strictly necessary to provide services to you. No data is collected in excess or without a clear and legitimate purpose.

Minimisation Principle
Military-Grade Encryption

All personal data and financial transactions are encrypted using 256-bit SSL technology. Your information is protected both in transit and at rest on our servers.

Technical Security
No Third-Party Data Sales

Ofa168 has never sold, rented, or commercially shared members' personal data with any third party for marketing purposes, and never will — without your consent.

Not Sold
You're in Full Control

You have the right to access, correct, or request the deletion of your personal data at any time. Your rights are guaranteed under Malaysia's PDPA 2010.

User Rights
Limited Data Retention

Your personal data is retained only for as long as necessary for the stated purpose, or as required by applicable Malaysian law.

Controlled Retention
Full Transparency

Ofa168 is committed to keeping you informed of any changes to how we handle your data. Notices will be sent via email or in-platform notifications.

Transparent & Clear
This Privacy Policy effective 1 January 2026 and supersedes all previous versions.
1

Introduction and Scope of This Privacy Policy

This Privacy Policy is published by ofa168, a Sports Betting and online casino platform operating in Malaysia and serving Malaysian members. We treat the protection of your privacy as a responsibility we take seriously.

This document explains in detail what personal data we collect from you when you register, make deposits or withdrawals, play slots, Live Casino games, place bets on Malaysia Super League or EPL football matches, BWF badminton, and when you use any other services provided by ofa168.

This Policy applies to all ofa168 services accessible via our website at ofa168.biz and through the ofa168 mobile app for iOS and Android. By continuing to use our platform, you consent to ofa168 processing your personal data in accordance with the terms set out here.

Legal Basis: This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. ofa168 operates as a responsible data processor under the Act.

2

Types of Personal Data We Collect

ofa168 collects various types of information from you depending on how you interact with our platform. We only collect what is strictly necessary to provide, improve, and safeguard our services to you.

Data Category Sample Information Collected During Required?
Identity Data Full name, date of birth, MyKad number Registration / KYC Mandatory
Contact Data Email, Malaysian phone number, address Registration Mandatory
Financial Data RM deposit/withdrawal records, payment methods Transactions Mandatory
Usage Data Betting activity logs, games played Platform usage Automatic
Technical Data IP address, device type, web browser Every visit Automatic
Marketing Data Communication preferences, promotional responses Promotional interactions Optional

The financial data we collect covers only transaction records in MYR through Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX. We do not store your credit card numbers or full bank account details in our systems.

3

How ofa168 Uses Your Data

The personal data we collect is used solely for legitimate purposes, each of which is clearly stated. ofa168 will not use your data for any purpose beyond those listed below without first obtaining your additional consent.

  • Account Management: Creating and managing your ofa168 account, processing registration, and completing the required identity verification (KYC).
  • Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and managing your winnings withdrawals in MYR.
  • Customer Service: Handling enquiries, resolving complaints, and providing technical support via live chat, email, or Telegram.
  • Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any activity that violates ofa168's Terms & Conditions.
  • Service Improvement: Analysing usage patterns to improve the user experience and expand odds coverage for football, badminton, and other sports.
  • Marketing Communications: Sending information about promotions, bonuses, and new offers — subject to the communication preferences you have set.
  • Legal Compliance: To fulfil legal obligations under the Malaysia PDPA 2010 and applicable financial reporting requirements.
4

Data Sharing with Third Parties

ofa168 does not sell, rent, or commercially share your personal data with any third party for their own marketing purposes. However, there are specific situations where we need to share certain information with trusted parties for platform operational purposes.

  • Payment Providers: Service providers such as Touch 'n Go, GrabPay, DuitNow, and Malaysian banks (FPX) require minimum transaction information to securely process your deposits and withdrawals.
  • Technology Providers: Companies providing cloud computing, cybersecurity and system maintenance services to ofa168 — all bound by strict confidentiality agreements.
  • Game Providers: Slot, Live Casino, and poker game providers partnering with ofa168 may receive session data necessary to maintain game integrity.
  • Authorities: Data may be shared with Malaysian authorities such as the PDRM, SPRM, or financial regulatory agencies when required by law or court order.

All third parties who receive data from ofa168 are bound by strict data protection agreements. They may only use that data for the specified purposes and are prohibited from transferring or disclosing it to any other party without ofa168's consent.

5

Ofa168 Data Security Measures

We continually invest in the latest security technologies and procedures to ensure your personal data remains protected at all times. ofa168 employs a multi-layered approach to data protection, covering technical, physical, and organisational safeguards.

  • 256-bit SSL Encryption: All communications between your browser and ofa168's servers are encrypted using the highest industry security standards.
  • Secure Servers: Data is stored in ISO 27001-certified data centres with strict physical access controls and 24-hour monitoring.
  • Internal Access Controls: Only authorised ofa168 staff with a legitimate business need are permitted to access members' personal data.
  • Real-Time Monitoring: A sophisticated threat detection system monitors ofa168 around the clock for any suspicious activity or unauthorised access attempts.
  • Regular Backups: Data is regularly backed up to separate locations to ensure service continuity and disaster recovery.

What You Can Do: While ofa168 takes all reasonable steps to protect your data, security is a shared responsibility. Use a strong password, enable two-factor authentication (2FA), and never share your login credentials with anyone.

6

Your Rights Under Malaysia's PDPA

As an ofa168 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data we hold. We respect and facilitate the exercise of all these rights.

Right of Access

You may request a copy of your personal data held by us at any time. Requests will be processed within 14 working days.

Right to Rectification

If any of your information is inaccurate or out of date, you have the right to request an immediate correction through your account settings or by contacting customer support.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations in Malaysia.

Right to Object

You may object to the processing of your data for direct marketing purposes. Requests will be actioned within 48 hours.

Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another platform should you wish.

Right to Restriction

In certain circumstances, you may request that ofa168 temporarily restrict the processing of your data while an investigation is ongoing.

To exercise any of the rights above, please contact our Data Protection Officer by email at privacy@ofa168.biz. We will respond within 14 business days of receiving the request.

7

Cookie Policy

Platform ofa168 uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions properly, and help us understand how users interact with our website.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the ofa168 platform.

8

Children's Data Protection

ofa168 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without proper age verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who become aware that their child has registered an ofa168 account are required to contact us immediately at privacy@ofa168.biz.

9

Amendments to This Privacy Policy

ofa168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, updated Malaysian legal requirements, or platform service enhancements.

When significant changes occur, we will notify you via your registered email or through a prominent notice on the ofa168 platform at least 14 days before those changes take effect. Your continued use of the ofa168 platform after such notice is considered your acceptance of the updated policy.

Recommendation: We encourage you to review this Privacy Policy regularly — at least once every three months — to stay informed of how ofa168 handles your personal data.

10

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how ofa168 handles your personal data, or if you wish to exercise any of your rights under Malaysia's PDPA, please contact our Data Protection Officer (DPO) through the following channels:

  • Privacy Email: privacy@ofa168.biz (Dedicated to privacy and personal data enquiries)
  • General Support Email: support@ofa168.biz (For general enquiries related to the ofa168 platform)
  • Live Chat: Available 24/7 on the ofa168 platform in both Bahasa Malaysia and English
  • Response Time: Privacy-related enquiries will be responded to within 14 working days from the date of receipt

If you are not satisfied with our response to your complaint, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP) for further investigation.

Frequently Asked Privacy Questions at ofa168

Quick answers to the privacy questions most frequently asked by our Malaysian members

Absolutely not. ofa168 has never sold, rented, or commercially shared your personal data with any third party for their own marketing purposes, and never will. We only share the minimum necessary information with service providers such as payment processors (Touch 'n Go, GrabPay, DuitNow, and FPX) to process your transactions, and all such parties are bound by strict confidentiality agreements.

ofa168 retains your personal data for as long as your account remains active, plus any additional period required by Malaysian law. Financial records are kept for a minimum of seven years in accordance with Malaysia's accounting and tax legal requirements. If you close your account, data no longer needed for legal purposes will be deleted within 90 days.

You may request a copy of your personal data by emailing privacy@ofa168.biz with the subject line "Data Access Request — [Your ofa168 Username]". Include your registered phone number for identity verification. We will process your request and deliver a data report within 14 business days. This service is free of charge for one request within any 12-month period.

Yes. All deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods are protected by 256-bit SSL encryption. ofa168 does not store your complete digital wallet or internet banking account details. Payments are processed directly by the respective providers, each of which maintains their own high security standards.

Your Privacy is Protected. Enjoy Playing at ofa168!

Your data is protected, your transactions are encrypted, your privacy is guaranteed. Register for free today and enjoy Malaysia's most trusted online Sports Betting and casino platform.

For users aged 18 and above. Data protected under Malaysia PDPA 2010.

Bahasa Melayu