Privacy Policy oke25 — Your Personal Data Protection

1. Information We Collect

In the day-to-day operation of the oke25 platform, we collect several categories of personal information depending on how you interact with our services. This collection is carried out solely to enable us to deliver a better, safer, and more personalised experience to every member.

We categorise the information we collect into several main categories:

We do not collect sensitive information such as biometric data, political views, or religious beliefs unless specifically required by applicable law.

2. How We Collect Data

Oke25 collects your personal information through several transparent and lawful channels. Understanding these channels helps you stay informed about the data shared when using our platform.

• Account Registration: When you register, we request basic information such as your name, email address, phone number and date of birth.
• KYC Process: To verify your identity before your first withdrawal, we require a copy of a valid government-issued identification document.
• Financial Transactions: Every deposit and withdrawal leaves a transaction record that is retained for security and compliance purposes.
• Platform Usage: Your activity on the platform — such as games played, session duration, and navigation — is collected automatically.
• Support Communications: When you contact customer support, conversations may be recorded for training and service quality improvement purposes.
• Cookies & Similar Technologies: Your browser and mobile app automatically send certain technical information that we use to improve the user experience.

3. Purpose of Data Use

Every piece of data we collect has a clear and legitimate purpose. oke25 does not use your data for any purpose not stated in this privacy policy without first obtaining your consent.

The main purposes for which your data is used are as follows:

• Operating and managing your account and delivering the platform's services overall.
• Processing deposits, withdrawals and other financial transactions securely and accurately.
• Verifying your identity as part of our KYC procedures and Anti-Money Laundering (AML) compliance.
• Detecting, investigating and preventing fraudulent activity, multiple account usage and security breaches.
• Complying with applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.
• Sending account-related communications such as security notices, transaction confirmations and policy updates.
• Supporting responsible gaming programs, including identifying concerning gaming patterns.
• Enhancing platform performance, improving user experience and developing new features.

4. Information Sharing

Oke25 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share certain information with the following parties:

• Payment Service Providers: To process deposits and withdrawals, transaction information must be shared with the payment gateway providers we use.
• Game Providers: Game software providers may receive technical data necessary to deliver games to you.
• Identity Verification Services: Third-party KYC service providers that assist us in securely verifying member identities.
• Legal Authorities: We are required to disclose information lawfully requested by law enforcement authorities or regulatory bodies with jurisdiction.
• Analytics Services: De-identified usage data (not traceable to any specific individual) is shared with analytics platforms to help us understand usage patterns.

5. Data Security

Oke25 implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Data security is an absolute priority across all aspects of our operations.

Key security measures we use include:

• 256-bit SSL encryption for all communications between your device and oke25 servers.
• Passwords are stored using irreversible one-way hashing algorithms.
• Two-factor authentication (2FA) available for all member accounts.
• Real-time security threat monitoring, 24 hours a day, seven days a week.
• Periodic security penetration testing conducted by independent security experts.
• Strict internal access controls ensure that only authorised personnel can access sensitive member data.

6. Data Retention Period

Oke25 retains your personal data for as long as necessary to fulfil the original purpose for which it was collected, or for as long as required by applicable law — whichever is longer.

Generally, active account data is retained for as long as your account remains active. After an account is closed, we retain necessary records for a minimum period of five (5) to seven (7) years to satisfy legal requirements relating to financial records, fraud prevention and regulatory compliance. Once the prescribed retention period has expired, your data will be securely deleted or anonymised.

7. Your Rights as a Member

As an oke25 member and subject to Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. oke25 is committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data, subject to our legal obligations.
• Right to Restrict Processing: You may request that we restrict how we process your data under certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact the oke25 support team. We will process your request within a reasonable timeframe and no later than the deadline prescribed by law.

8. Cookies & Tracking Technologies

Oke25 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure account security. Cookies are small text files stored on your device by your browser when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helping us understand how members use the platform so we can continuously improve the user experience. Data collected is aggregated and not individually identifiable.
• Preference Cookies: Remembering your preferences such as language and display settings to provide a more personalised experience.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the oke25 platform.

9. Cross-Border Data Transfers

As part of oke25's global operations, your personal data may be transferred to and stored on servers located outside Malaysia. When this occurs, oke25 ensures that a level of protection equivalent to Malaysia's PDPA and applicable international data protection standards is fully upheld.

All cross-border data transfers are carried out under lawful protection mechanisms, including data processing agreements containing standard contractual clauses or other legally recognised mechanisms. We do not transfer your data to jurisdictions that lack an adequate data protection framework without applying appropriate additional safeguards.

10. Changes to the Privacy Policy

Oke25 reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

Any material changes to this privacy policy will be communicated to members via a prominent notice on the platform or by registered email at least thirty (30) days before the changes take effect. Continued use of the oke25 platform after the effective date of any changes constitutes your acceptance of the updated privacy policy.

We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.

11. Contact Us

If you have any questions, concerns or complaints regarding this privacy policy or how we handle your personal data, we encourage you to contact the oke25 team directly.

The oke25 support team operates 24 hours a day, seven days a week and is ready to assist you via live chat on the platform or the oke25 mobile app. All privacy-related enquiries will be handled promptly, in strict confidence and within the timeframes prescribed by law.