OLX168 Privacy Policy
OLX168 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have as a player on our platform.
How OLX168 Handles Your Data
What We Collect
We collect registration details, identity documents for KYC, transaction records, device and usage data, and customer communications — only what is necessary to operate your account safely.
How We Use It
Your data is used to verify identity, process MYR transactions via Touch 'n Go eWallet, DuitNow, FPX, and other payment methods, prevent fraud, deliver support, and comply with regulatory obligations.
Who We Share With
We share your data only with payment processors, identity verification partners, fraud prevention services, and regulatory bodies — never with third-party marketing firms or data brokers.
How We Protect It
256-bit SSL encryption on all data in transit. Access controls, encrypted storage, and regular security audits protect your personal information at every layer of our infrastructure.
Your Rights
You have the right to access, correct, delete, or restrict processing of your personal data. You may also withdraw consent for marketing communications at any time via account settings.
Retention Periods
Account data is retained for as long as your account remains active, plus any period required by applicable law or regulation. Transaction records are typically retained for a minimum of five years.
Rights Available to OLX168 Players
As a player on the OLX168 platform, you are entitled to the following rights with respect to your personal data. To exercise any right, contact us at [email protected].
Right of Access
Request a copy of all personal data OLX168 holds about you. We will respond within 30 calendar days.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your account profile.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations and fraud prevention requirements.
Right to Restrict Processing
Request that OLX168 limit how your data is processed while a dispute or correction request is pending.
Right to Data Portability
Request your data in a structured, machine-readable format where technically feasible and legally appropriate.
Right to Object
Object to the processing of your data for direct marketing purposes at any time via account settings or by contacting support.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe your data rights have been infringed, you may lodge a complaint with the relevant supervisory authority in your jurisdiction.
1. Introduction
OLX168 ("OLX168", "we", "us", "our") operates the online gaming platform accessible at https://olx168.lat. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, account applicants, and website visitors (collectively referred to as "you" or "the User").
This Privacy Policy ("Policy") sets out how OLX168 collects, uses, stores, shares, and protects your personal data when you access or use the Platform and its associated services. It also explains the rights you have in relation to your personal data and how to exercise those rights.
By registering an account with OLX168, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Platform.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail in respect of the contractual relationship between you and OLX168.
Age Requirement: The OLX168 Platform is strictly for persons aged 21 years and above. OLX168 does not knowingly collect personal data from individuals under the age of 21. If you become aware that a minor has provided personal data to OLX168, please contact us immediately at [email protected].
2. Definitions
The following terms used throughout this Privacy Policy carry the meanings set out below:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either on its own or in combination with other information.
- "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, OLX168.
- "Data Processor" means any third party that processes personal data on behalf of OLX168 in accordance with OLX168's instructions.
- "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
- "KYC" means Know Your Customer — identity and age verification procedures conducted by OLX168 prior to processing withdrawals.
- "Platform" means the OLX168 website, gaming interface, account dashboard, mobile-optimised interfaces, and all associated digital services.
3. Data Controller
OLX168 acts as the Data Controller with respect to all personal data collected through the Platform. As Data Controller, OLX168 determines the purposes for which your data is collected and the manner in which it is processed.
For all privacy-related queries, data subject requests, or concerns, you may contact our designated data privacy point of contact using the details set out in Section 17 of this Policy.
4. Personal Data We Collect
OLX168 collects personal data from you in the following ways and categories:
4.1 Data Provided Directly by You
- Registration Data: Full legal name, date of birth, email address, mobile telephone number, and preferred username provided during account registration;
- Identity Verification Data (KYC): Copy of government-issued photo ID (Malaysian MyKad or passport), and proof of registered payment method, submitted during KYC verification;
- Financial Data: Payment method details (e-wallet account identifiers, FPX bank account details, cryptocurrency wallet addresses) provided when making deposits or requesting withdrawals. Full payment card numbers, if applicable, are not stored by OLX168 — card processing is handled by PCI-DSS-compliant payment processors;
- Communication Data: Records of communications with our customer support team via live chat, email, and Telegram, including any attachments or supporting documents shared by you.
4.2 Data Collected Automatically
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers;
- Usage Data: Pages visited, games played, bet values, session duration, login timestamps, clickstream data, and feature interactions within the Platform;
- Transaction Data: Records of all deposits, withdrawals, bonus activations, wagers placed, and game outcomes associated with your account;
- Cookies and Tracking Technologies: See Section 11 for full details on cookies and similar technologies used by OLX168.
4.3 Data Received from Third Parties
- Identity verification results and fraud risk signals from third-party KYC and anti-money laundering (AML) screening service providers;
- Payment authorisation and transaction status data from payment processing partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and USDT TRC20 processors;
- Device reputation and fraud intelligence data from cybersecurity service providers.
Data Minimisation: OLX168 is committed to collecting only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where expressly required for identity verification purposes under applicable KYC/AML obligations.
5. How We Use Your Personal Data
OLX168 processes your personal data for the following purposes:
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and administering your OLX168 player account | Contract performance |
| Identity Verification (KYC) | Verifying your identity and age (21+) as required before processing withdrawals | Legal obligation |
| Payment Processing | Processing MYR deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, 7-Eleven Cliqq, and USDT TRC20 | Contract performance |
| Fraud Prevention & AML | Detecting, investigating, and preventing fraud, money laundering, and other financial crimes | Legal obligation / Legitimate interest |
| Customer Support | Responding to queries, resolving disputes, and providing assistance via live chat, email, and Telegram | Contract performance |
| Responsible Gambling | Monitoring gaming activity to identify problem gambling patterns and administering self-exclusion, deposit limits, and session controls | Legal obligation / Legitimate interest |
| Platform Improvement | Analysing usage data to enhance Platform performance, user experience, and feature development | Legitimate interest |
| Marketing Communications | Sending promotional emails, SMS, and in-platform notifications about bonuses, promotions, and new features (opt-out available) | Consent |
| Legal & Regulatory Compliance | Complying with applicable laws, regulations, and requests from competent authorities | Legal obligation |
6. Legal Basis for Processing
OLX168 processes your personal data only where a valid legal basis exists. As summarised in the table in Section 5, the principal legal bases upon which OLX168 relies are:
- Contract Performance: Processing that is necessary to perform our contractual obligations to you as a registered player, including account administration, payment processing, and support services;
- Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and regulatory reporting duties;
- Legitimate Interest: Processing for purposes that are in OLX168's legitimate business interests and do not override your fundamental privacy rights — such as fraud prevention, platform security, and usage analytics;
- Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7. Disclosure and Sharing of Personal Data
OLX168 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may disclose your personal data to the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal obligations:
7.1 Payment Service Providers
Payment processors facilitating MYR transactions on the Platform, including but not limited to operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banking institutions (Maybank, CIMB, Public Bank, Hong Leong Bank), 7-Eleven Cliqq, and USDT TRC20 cryptocurrency processors. These providers receive only the data necessary to authorise and record the relevant transaction.
7.2 Identity Verification and KYC Providers
Third-party identity verification and AML screening services engaged by OLX168 to fulfil its KYC obligations. These providers process government-issued ID documents and conduct database screening checks. All such providers are contractually bound to process data solely for the purpose of fulfilling OLX168's verification requirements.
7.3 Technology and Infrastructure Partners
Cloud hosting providers, cybersecurity vendors, and software service providers who support the operation of the Platform. These parties process personal data as Data Processors under OLX168's instruction and are prohibited from using your data for their own purposes.
7.4 Regulatory and Law Enforcement Authorities
OLX168 may disclose personal data to government agencies, regulators, law enforcement authorities, and courts where required to do so by applicable law, legal process, or regulatory requirement. OLX168 will provide only the minimum data required to satisfy the relevant legal obligation.
7.5 Business Restructuring
In the event of a merger, acquisition, asset sale, or other business restructuring involving OLX168, personal data held on the Platform may be transferred to the successor entity, subject to the same privacy protections set out in this Policy.
8. International Data Transfers
Some of OLX168's third-party service providers and infrastructure partners may be located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, OLX168 will implement appropriate safeguards — such as standard contractual clauses or binding corporate rules — to ensure that your data remains protected to a standard consistent with this Policy.
By using the OLX168 Platform, you acknowledge that your personal data may be processed in jurisdictions other than Malaysia, subject to the safeguards described above.
9. Data Retention
OLX168 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations.
- Account Data: Retained for the duration of your account's active status, plus a period of up to five (5) years following account closure, in accordance with applicable anti-money laundering and financial record-keeping requirements;
- Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, or longer where required by applicable law;
- KYC Documents: Retained for a minimum of five (5) years following account closure, as required by AML regulations;
- Customer Support Records: Retained for up to three (3) years from the date of the final interaction, for the purpose of dispute resolution and quality assurance;
- Marketing Consent Records: Retained for the duration of your consent and for up to two (2) years following withdrawal, to demonstrate compliance with consent requirements.
Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with OLX168's data disposal procedures.
10. Security Measures
OLX168 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and the OLX168 Platform is encrypted using 256-bit SSL/TLS protocols;
- Encrypted Storage: Sensitive personal data at rest, including KYC documents and financial records, is stored in encrypted form;
- Access Controls: Access to personal data is restricted to authorised OLX168 personnel and service providers on a strict need-to-know basis, enforced through role-based access controls;
- Two-Factor Authentication: Players may enable 2FA on their OLX168 account to provide an additional layer of protection against unauthorised access;
- Security Monitoring: OLX168's infrastructure is subject to continuous security monitoring, intrusion detection, and regular vulnerability assessments;
- Incident Response: OLX168 maintains a data breach response procedure. In the event of a security incident that poses a risk to your personal data, OLX168 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.
Your Responsibility: You are responsible for maintaining the security of your OLX168 account credentials. Use a strong, unique password and do not share it with anyone. OLX168 will never ask for your password via email, live chat, or Telegram.
11. Cookies and Similar Technologies
OLX168 uses cookies and similar tracking technologies (including web beacons and pixel tags) on the Platform to enhance user experience, maintain session security, and analyse Platform usage.
11.1 Types of Cookies Used
- Strictly Necessary Cookies: Essential to the operation of the Platform, including session management, authentication, and security features. These cannot be disabled without significantly impairing Platform functionality;
- Performance and Analytics Cookies: Collect anonymous data about how visitors use the Platform, including pages viewed, time spent, and errors encountered. This information is used to improve Platform performance;
- Functionality Cookies: Remember your preferences and settings (such as language and display preferences) to provide a more personalised experience;
- Marketing and Targeting Cookies: Used to deliver relevant promotional content and track the effectiveness of OLX168 marketing campaigns, subject to your consent.
11.2 Managing Cookies
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.
12. Protection of Minors
The OLX168 Platform is strictly intended for individuals aged 21 years and above. OLX168 does not knowingly collect, store, or process personal data of individuals under the age of 21. Age verification is conducted as part of OLX168's KYC process.
If OLX168 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to OLX168, please contact us at [email protected] without delay.
13. Your Data Rights in Detail
Subject to applicable law and regulatory constraints, you have the following rights in relation to your personal data held by OLX168:
- Right of Access (Subject Access Request): You may request confirmation of whether OLX168 processes personal data about you, and if so, a copy of that data along with supplementary information about how it is processed. OLX168 will respond to Subject Access Requests within 30 calendar days of receipt.
- Right to Rectification: If you believe any personal data held by OLX168 is inaccurate or incomplete, you may request correction. Where technically feasible, OLX168 will action rectification requests within 14 calendar days.
- Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other legal basis applies. This right is subject to OLX168's legal retention obligations under AML, KYC, and financial record-keeping regulations.
- Right to Restrict Processing: You may request that OLX168 limit the processing of your personal data in certain circumstances — for example, while a rectification request is pending or where you contest the legal basis for processing.
- Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to OLX168 demonstrating compelling grounds that override your rights.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
To exercise any of the above rights, please contact OLX168's support team as described in Section 17. We may be required to verify your identity before processing a data rights request. OLX168 will not charge a fee for exercising your rights, except where requests are manifestly unfounded or excessive.
14. Marketing Communications
With your consent, OLX168 may contact you by email, SMS, or in-platform notification regarding promotions, bonuses, new game releases, VIP programme updates, and other marketing communications relevant to your OLX168 account.
You may opt out of marketing communications at any time by:
- Updating your communication preferences in your OLX168 account settings;
- Clicking the "Unsubscribe" link included in any marketing email;
- Contacting our customer support team and requesting removal from marketing lists.
Please note that opting out of marketing communications will not affect transactional communications that are necessary for the administration of your account (such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts).
15. Third-Party Websites and Services
The OLX168 Platform does not contain links to external third-party websites for commercial or advertising purposes. However, in the course of payment processing or third-party service integrations, you may be temporarily redirected to the interfaces of payment providers such as Touch 'n Go eWallet, DuitNow, or FPX banking portals.
These third-party interfaces are governed by their own privacy policies, and OLX168 accepts no responsibility for the privacy practices of such providers. We recommend reviewing the privacy policy of any third-party service you interact with during the payment process.
16. Amendments to This Privacy Policy
OLX168 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or operational procedures. The effective date at the top of this document will be updated upon each revision.
Material changes to this Policy will be communicated to registered players via in-platform notification or registered email, with a minimum advance notice period of 7 days prior to the changes taking effect.
Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how OLX168 protects your personal data.
17. Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how OLX168 processes your personal data, please contact us using the details below:
OLX168 Privacy & Data Enquiries
Available 24 hours a day, 7 days a week via live chat and Telegram.
Email: [email protected]
Subject Line: Please include "Privacy Request" or "Data Subject Request" in the subject of your email to ensure prompt routing to the appropriate team.
Response Time: OLX168 will acknowledge data rights requests within 5 business days and provide a substantive response within 30 calendar days of receipt.
Where your concern relates to a potential data breach or urgent security matter, please mark your communication as "Urgent — Security" to ensure priority handling by our data security team.
We Are Here to Help — 24/7 in English
If you have questions about this Privacy Policy or want to exercise your data rights, our support team is available around the clock via live chat and Telegram. Malaysian players in Kuala Lumpur, Penang, Johor Bahru, and beyond are always welcome.