Official Policy

Ocmy Privacy Policy – Your Data Protection

Your privacy is our priority. Learn how ocmy collects, uses, and protects your personal information to the highest security standards.

This Privacy Policy is effective as of 1 July 2026. Please check this page periodically for the latest updates.

1. Introduction

Ocmy values the privacy of every member. This Privacy Policy clearly explains how we collect, store, use, and protect your personal information when you use our online casino platform at ocmy.win.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international security standards. By registering and using ocmy services, you agree to the terms of this Privacy Policy in full.

This policy applies to all information you provide to us through the ocmy website, mobile app, customer support, and any other official ocmy communication channels. If you do not agree with any part of this policy, please discontinue use of our platform.

2. Information We Collect

Ocmy only collects information that is genuinely necessary to provide you with a safe, seamless, and personalised service. The categories of information we collect are as follows:

Category Type of Information Purpose
Identity Data Full name, date of birth, identity card / passport number Identity verification (KYC) and regulatory compliance
Contact Data Email address, phone number, residential address Account communications, notifications, and customer support
Financial Data Bank account details, e-wallet information, transaction records Processing deposits, withdrawals, and fraud prevention
Technical Data IP address, device type, web browser, access logs Account security, fraud detection, and performance analytics
Gaming Data Betting history, preferred games, usage patterns Personalising your experience and responsible gambling compliance

We do not collect sensitive information such as medical data, religious beliefs, or political views unless specifically required for legal compliance purposes.

3. How We Use Your Information

Every piece of information we collect is used for a clear and legitimate purpose. ocmy will not use your data for any unrelated purpose without your prior consent. The primary purposes for data use are as follows:

  • Account management: Creating, verifying, and maintaining your account so it remains secure and fully functional.
  • Transaction processing: Processing deposits, withdrawals, and any financial transactions related to your account.
  • KYC verification: Meeting legal compliance requirements by verifying your identity before your first withdrawal is processed.
  • Platform security: Detecting and preventing unauthorised access, fraud, money laundering, or any other illegal activity.
  • Customer Support: Responding to inquiries, resolving complaints, and providing the technical assistance you need.
  • Personalise your experience: Recommending relevant games and promotions based on your usage patterns.
  • Responsible gambling compliance: Monitoring betting patterns to identify early signs of problem gambling and offering appropriate assistance.
  • Platform improvements: Analysing aggregated usage data to improve the platform's performance, usability, and content.

ocmy will not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

4. Information Sharing

Ocmy understands that your trust is our most valuable asset. We do not share your personal information arbitrarily. Your information will only be shared under the following limited circumstances:

  • Trusted service providers: We work with carefully selected third parties — such as payment processors, KYC service providers, and analytics platforms — who are bound by strict confidentiality agreements.
  • Legal requirements: When required by law, court order, or a competent authority, we will disclose only the minimum necessary information.
  • Fraud prevention: In cases where fraudulent activity is suspected, we may share relevant information with regulatory bodies or law enforcement agencies.
  • Business transfers: In the event of a merger, acquisition, or asset transfer, user information may be transferred as part of that process, subject to the same or stricter Privacy Policy.

All third parties receiving your data from ocmy are required to adhere to data protection standards equal to or higher than our own.

5. Cookies & Tracking Technologies

Ocmy uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled.
  • Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) for service improvement purposes.
  • Functional Cookies: Saving your preferences such as language, theme, and display settings for a more personalised experience.
  • Analytics Cookies: Helping us understand aggregated, anonymous usage patterns for internal statistical purposes.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality of the ocmy platform.

6. Data Security

The security of your information is a core commitment of ocmy. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

  • 256-bit SSL encryption: All data transmitted between your device and our servers is protected with industry-leading encryption.
  • Two-factor authentication (2FA): An additional security layer for account access that requires verification through your device.
  • 24/7 Monitoring: Automated monitoring systems operate around the clock to detect and respond to any security threats in real time.
  • Internal access controls: Only authorised personnel may access your personal data, and they are bound by strict confidentiality agreements.
  • Regular security audits: Our platform undergoes regular security testing and third-party audits to identify and address any vulnerabilities.
  • Segregated Data Storage: Financial data and personal data are stored separately with distinct layers of access controls.

While we implement comprehensive security measures, no system can be guaranteed 100% secure. Should any data breach occur that affects you, we will notify you within a reasonable timeframe.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

Right of AccessYou may request a copy of the personal data we hold about you at any time.

Right to RectificationIf your data is inaccurate or outdated, you have the right to request that we update it.

Right to ErasureYou may request the deletion of your personal data, subject to legal requirements that obligate us to retain it.

Right to ObjectYou may object to the processing of your data for direct marketing purposes at any time.

Right to Data PortabilityYou may request your data in a machine-readable format for transfer to another provider.

Right to RestrictionYou may request that we restrict the processing of your data under certain circumstances while an issue is being investigated.

To exercise any of the above rights, please contact our support team. We will respond within 30 calendar days from the date your request is received.

8. Data Retention Period

Ocmy does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

  • Active account data: Retained for the duration your account remains active, plus any additional period required by law.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial legislation and anti-money laundering requirements.
  • KYC Records: Retained for a minimum of 5 years after the termination of the business relationship, in line with compliance requirements.
  • Support communication logs: Retained for 2 years for reference and service improvement purposes.
  • Cookie and technical log data: Retained for a maximum of 13 months before being deleted or anonymised.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.

9. Child Protection Policy

The ocmy platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have unknowingly collected data from minors, we will immediately take the following steps:

  • Suspending and closing the relevant account immediately.
  • Deleting all personal data associated with that individual.
  • Settling any remaining balance or wins in the relevant account.

Parents or guardians who suspect their child has registered an account with ocmy are encouraged to contact our support team immediately.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer via:

We are committed to responding to all privacy-related inquiries within 3 working days. For more complex data rights requests, we will notify you within 30 days in accordance with PDPA requirements.

Your privacy is more than a legal obligation to us — it is a core value of ocmy, built on mutual trust with every one of our members.


Why Your Data Welcome Aboard

We invest in the latest security infrastructure so you can play with peace of mind.

Bank-Level Encryption

All data transmitted through the ocmy platform is secured with 256-bit SSL encryption — the same security technology used by leading financial institutions.

No Data Selling

Ocmy has never and will never sell your personal information to third parties for marketing purposes. Your data is used solely to improve your experience.

PDPA Compliance

All our data handling practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.

Full Account Control

You have full control over your data. Request access, correction, or deletion of your data at any time through our customer support.

Restricted Internal Access

Only authorised staff may access your data. All access is logged and regularly audited to prevent misuse.

Account Activity Notifications

Get instant alerts whenever a new login, password change, or other significant activity occurs on your account for maximum security.


Play Responsibly

Join ocmy & Enjoy
Best-in-Class Data Protection

Register your account today and experience an online casino platform that puts your security and privacy first at every step.

Bahasa Melayu