Privacy Policy — Ombak126

1. Introduction

This Privacy Policy ("Policy") is issued by Ombak126 ("we", "us", "our", "the Company", "the Platform"), the operator of the online gaming and sports betting platform accessible at ombak126.cam. This Policy applies to all personal data collected through the Platform, including our website, mobile-optimised interface, and any associated services provided to registered players.

We are committed to handling your personal data with care, transparency, and in accordance with applicable data protection laws and principles. This Policy sets out, in plain and structured terms, the categories of personal information we collect from players — including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia — the purposes for which that data is processed, the legal bases we rely upon, and the rights you retain over your information at all times.

By registering an account on Ombak126 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not create an account or continue to use the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, financial details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Subject" means the natural person (i.e., the registered player or visitor) to whom the personal data relates.
• "Data Controller" means Ombak126, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of Ombak126 in accordance with the Company's instructions and applicable data protection obligations.
• "Cookies" means small text files stored on your device by the Platform to enhance functionality, analyse usage, and support security processes.
• "KYC" means Know Your Customer — the identity and age verification processes required for regulatory compliance and fraud prevention.
• "Player" or "User" means any individual who has registered and holds an active account on the Ombak126 platform.

3. Data We Collect

Ombak126 collects personal data from you through several channels. The categories of data we collect, and the circumstances in which they arise, are detailed below.

3.1 Data Provided Directly by You

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform, you provide us with:

• Full legal name and date of birth;
• Malaysian Identity Card (MyKad) number, passport number, or other government-issued identification details;
• Residential address (including postcode and state within Malaysia);
• Email address and contact telephone number;
• Payment method details — including your DuitNow account reference, Touch 'n Go eWallet number, Boost or GrabPay identifiers, FPX bank account details (Maybank, CIMB, Public Bank, Hong Leong), or cryptocurrency wallet addresses (BTC/USDT);
• Copies of identification and proof-of-address documents submitted for KYC purposes;
• Communications sent to us via live chat, email, or any other support channel.

3.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically by our systems, including:

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Login timestamps and session duration;
• Pages and game titles accessed, betting activity, deposit and withdrawal history;
• Referral source (i.e., how you arrived at the Platform);
• Cookies and similar tracking technologies (see Section 7).

3.3 Data from Third Parties

In limited circumstances, we may receive personal data about you from third parties, including:

• Payment service providers and financial institutions involved in processing your deposits or withdrawals (e.g., confirmation of transaction status from FPX or DuitNow networks);
• Identity verification service providers used to assist with KYC compliance;
• Fraud prevention and anti-money laundering screening agencies;
• Other platforms in the context of a player migration, where you have provided explicit consent for your tier history to be shared.

4. Legal Basis for Processing

Ombak126 processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

5. How We Use Your Data

Ombak126 uses the personal data we collect for the following specific purposes:

• Account Management: Creating, verifying, and maintaining your player account; processing login and authentication; enabling account security features.
• KYC & Age Verification: Verifying that you are at least 21 years of age and confirming your identity in compliance with regulatory requirements. This is a mandatory process for all registered players.
• Payment Processing: Facilitating deposits and withdrawals via your selected payment method — including DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT — and maintaining accurate transaction records.
• Regulatory Compliance: Fulfilling legal obligations under applicable anti-money laundering, counter-terrorism financing, and data protection legislation, including record-keeping and regulatory reporting where required.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring player behaviour for indicators of problem gambling; enforcing deposit limits, loss limits, and self-exclusion requests; ensuring compliance with our 21+ age policy.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance via live chat or email.
• Platform Improvement: Analysing usage data and player behaviour to improve platform performance, game selection, user experience, and feature development.
• Marketing Communications (with Consent): Sending you promotional information about bonuses, new games, and platform features — only where you have provided explicit consent to receive such communications. You may opt out at any time.

6. Data Sharing & Disclosure

Ombak126 does not sell your personal data. We do not share your information with third parties for their own marketing purposes. Your data is disclosed only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary payment and identity data with the payment processors, banks, and e-wallet operators that facilitate your transactions (e.g., DuitNow network operators, FPX-connected banks including Maybank, CIMB, Public Bank, and Hong Leong, and e-wallet providers). Such sharing is limited to information strictly required to process your transaction.
• KYC & Identity Verification Partners: We engage reputable third-party identity verification service providers to assist with document authentication. These providers operate as data processors and are bound by contractual data protection obligations.
• Fraud Prevention Agencies: We may share data with fraud prevention and credit-reference agencies where necessary to detect, prevent, and investigate financial crime or platform abuse.
• Game Software Providers: Technical game data (such as session identifiers and stake/payout records) may be shared with our licensed game providers for the purpose of game operation, dispute resolution, and RNG auditing. No unnecessary personal data is transmitted.
• Legal and Regulatory Authorities: We may disclose personal data to government agencies, law enforcement bodies, or regulatory authorities where we are required to do so by applicable law, court order, or regulatory instruction.
• Professional Advisers: In the course of legal proceedings, audits, or professional consultations, we may share data with lawyers, auditors, or insurers, subject to strict confidentiality obligations.

7. Cookies & Tracking Technologies

Ombak126 uses cookies and similar technologies — including web beacons, pixel tags, and local storage — to support the functioning, security, and performance of our Platform. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of certain areas of the Platform, including the login and payment processes.

8. Data Retention

Ombak126 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and KYC Data: Retained for the duration of your active account and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction to satisfy financial record-keeping obligations;
• Customer Support Communications: Retained for up to three (3) years from the date of the interaction, or longer where relevant to an ongoing dispute or legal proceeding;
• Marketing Consent Records: Retained for the duration of your consent and for a period of two (2) years following withdrawal of consent, as evidence of your prior authorisation;
• Technical and Log Data: Typically retained for six (6) to twelve (12) months for security and fraud monitoring purposes, unless required for longer in connection with an active investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

Ombak126 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your payment details, login credentials, and personal information cannot be intercepted in transit;
• Secure Data Storage: Personal data is stored on access-controlled servers with encryption at rest. Physical access to data infrastructure is restricted to authorised personnel only;
• Access Controls: Internal access to personal data is granted on a strict need-to-know basis. Staff who handle player data are subject to confidentiality obligations and undergo data protection training;
• Multi-Factor Authentication: Sensitive administrative systems require multi-factor authentication to prevent unauthorised internal access;
• Regular Security Audits: Our platform and payment infrastructure undergo periodic security assessments and penetration testing by qualified professionals;
• Incident Response: In the event of a data security incident that poses a risk to your rights, we will notify affected players and, where required by law, the relevant regulatory authority, without undue delay.

10. International Transfers

Given the global nature of online gaming infrastructure, it is possible that your personal data may be processed or stored on servers located outside of Malaysia. Where such international data transfers occur, Ombak126 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Such safeguards may include contractual data processing agreements with our service providers that incorporate appropriate data transfer mechanisms, or the use of service providers located in jurisdictions that maintain adequate data protection standards recognised under applicable law.

If you wish to obtain more information about the safeguards governing international transfers of your personal data, please contact us using the details provided in Section 15 of this Policy.

11. Your Rights

As a data subject, you hold the following rights in relation to your personal data held by Ombak126. You may exercise any of these rights by contacting our support team through the channels listed in Section 15.

We will respond to all legitimate data rights requests within a reasonable timeframe. We may need to verify your identity before fulfilling a request. In certain cases, we may decline a request where doing so is permitted or required by applicable law, and we will explain our reasons if this occurs.

12. Minors & Age Policy

Ombak126 operates strictly as an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21 years. This minimum age requirement is non-negotiable and is enforced through mandatory KYC verification for all registered accounts.

If we discover — at any stage — that a player's account was registered by an individual under the age of 21, we will immediately suspend the account, freeze all associated funds pending investigation, and permanently close the account. Any winnings accumulated by an underage player will be forfeited in full.

If you have reason to believe that a minor has registered an account on Ombak126, please contact our support team immediately using the details in Section 15.

13. Third-Party Services

The Ombak126 Platform may include integrations with or references to third-party services, such as payment gateways (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay), game software providers, and identity verification tools. Each of these third parties operates under their own privacy policies and data handling practices, over which Ombak126 has no direct control.

When you interact with third-party payment services in the course of a deposit or withdrawal on Ombak126, you will be subject to the privacy terms of the respective payment provider. We encourage you to review those policies independently.

Ombak126 is not responsible for the privacy practices of third-party services that are not operated by us. We exercise reasonable due diligence in selecting service providers that maintain appropriate data protection standards.

14. Policy Amendments

Ombak126 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The most current version of this Policy will always be accessible at ombak126.cam/privacy-policy.

Where a proposed amendment is material — meaning it significantly affects your rights or how we handle your data — we will provide advance notice to registered players via a prominent notice on the Platform or by email to the address associated with your account, with a minimum notice period of fourteen (14) days before the revised Policy takes effect, except where shorter notice is required for urgent legal or security reasons.

Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and request account closure prior to the effective date.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data Ombak126 holds about you, please contact our Data & Privacy team using any of the following channels:

• Live Chat: Available 24/7 via the in-platform support interface. This is the recommended channel for urgent data rights requests or security concerns.
• Email: [email protected] — please include "Privacy Request" in your subject line, along with your registered account username, to ensure prompt routing to the correct team.

We aim to acknowledge all data rights requests within 72 hours and to provide a substantive response within thirty (30) days. Complex or high-volume requests may require additional time, and we will communicate any such delays promptly.