Privacy Policy

This Privacy Policy ("Policy") describes how omg67 ("omg67", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("Members", "Users", "you") who access or use the omg67 platform at https://omg67.cam (the "Platform") and all associated services.

This Policy forms part of the omg67 Terms and Conditions, which you accepted upon account registration. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

omg67 is committed to protecting your privacy and handling your personal information with transparency, integrity, and in compliance with applicable international data protection standards. We do not process your personal data beyond what is necessary for the legitimate purposes described in this Policy.

omg67 acts as the Data Controller in relation to all personal data collected from Members through the Platform. As the Data Controller, omg67 determines the purposes for which and the means by which your personal data is processed, and assumes responsibility for ensuring that such processing is conducted lawfully and transparently.

All data subject rights requests, privacy concerns, and enquiries relating to this Policy should be directed to the omg67 Data Protection contact as specified in Section 16 (Contact & Complaints) of this Policy.

omg67 collects the following categories of personal data in connection with the operation of the Platform and provision of the Services:

omg67 collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or submit responsible gambling limit requests, you directly provide personal data to us.
• Automated technical collection: When you browse or use the Platform, we automatically collect Technical Data including your IP address, device identifiers, and session activity logs through server logs, cookies, and similar tracking technologies.
• Payment service providers: When you make a deposit or withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, bank transfer, or cryptocurrency, financial transaction data is transmitted to us by the relevant payment processing partner to confirm transaction status.
• Identity verification partners: For KYC compliance, we may use authorised third-party identity verification service providers who process your identification documents and return a verification result to omg67.
• Fraud and security systems: Our platform security infrastructure automatically analyses Technical and Usage Data to detect patterns associated with fraudulent activity, multi-accounting, money laundering, and unauthorised access attempts.

omg67 processes your personal data only where we have a valid legal basis for doing so. The following table sets out the primary processing purposes, the corresponding legal basis, and the categories of data involved:

Where omg67 relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your rights and freedoms, taking into account the nature of the data processed, the reasonable expectations of members, and the safeguards in place.

omg67 does not sell, rent, or trade your personal data to third parties for their own commercial marketing purposes under any circumstances. We may disclose personal data to the following categories of recipients strictly for the purposes described in this Policy:

• Payment Service Providers: Licensed payment processing partners including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, direct bank transfers (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency networks. Data shared is limited to what is necessary to process and confirm your specific transaction.
• Identity Verification Services: Authorised KYC service providers engaged to verify member identity, age, and document authenticity in compliance with anti-money laundering obligations. These providers process your identification documents under data processing agreements with omg67.
• Cloud Infrastructure Providers: omg67 uses secure cloud hosting and infrastructure providers to operate the Platform. These providers act as Data Processors under contract and are not permitted to process member data for any purpose other than providing infrastructure services to omg67.
• Fraud Prevention and Security Partners: Third-party fraud detection and cybersecurity service providers that analyse Technical and Usage Data to identify patterns of fraudulent or suspicious activity. Data shared is anonymised or pseudonymised where technically feasible.
• Regulatory and Law Enforcement Authorities: omg67 may disclose personal data to regulatory bodies, law enforcement agencies, or judicial authorities where required to do so by applicable law, court order, or legitimate regulatory request. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Legal counsel, accountants, auditors, and insurers acting in a professional advisory capacity, subject to professional confidentiality obligations.

Given the international nature of omg67's operations and technology infrastructure, your personal data may be transferred to, stored in, and processed in countries outside Malaysia. Such transfers may include jurisdictions where omg67's licensing authority is located, server infrastructure is hosted, or service providers are established.

Where personal data is transferred internationally, omg67 implements appropriate safeguards to ensure that such transfers meet an adequate level of data protection, including the use of contractual data protection clauses with receiving parties, consistent with internationally recognised standards.

By using the Platform, you acknowledge that your personal data may be transferred outside Malaysia as described above and consent to such transfers where necessary for the provision of the Services.

omg67 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The following general retention principles apply:

• Account Data: Retained for the duration of your active membership plus a minimum period of five (5) years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Transaction Records: Financial transaction records including deposit and withdrawal histories are retained for a minimum of seven (7) years from the date of each transaction in accordance with standard financial record-keeping requirements.
• KYC Verification Documents: Identity verification documents are retained for the period required by applicable AML legislation, typically five (5) years from the end of the business relationship.
• Customer Support Records: Support chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Preference Data: Opt-in and opt-out records are retained for as long as they remain relevant and for a reasonable period following any change in consent status, to demonstrate compliance with marketing consent obligations.
• Self-Exclusion Records: Records of responsible gambling self-exclusion requests are retained for the duration of the exclusion period plus five (5) years, to prevent re-registration by excluded individuals.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

omg67 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between member devices and omg67 servers.
• Encryption of personal data and financial records at rest within our database infrastructure.
• Two-factor authentication (2FA) available to all members and mandatory for privileged administrative access.
• Role-based access controls ensuring that member data is accessible only to authorised personnel with a legitimate operational need.
• Continuous real-time monitoring of platform access logs for anomalous patterns indicative of unauthorised access or data exfiltration attempts.
• Regular internal and third-party security audits, penetration testing, and vulnerability assessments of the Platform infrastructure.
• Secure data backup procedures with encrypted offsite storage to support business continuity and data recovery.
• Staff data protection training and confidentiality obligations for all personnel with access to member personal data.

omg67 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the Platform, maintain session state, detect fraud, and — where you have consented — deliver personalised content and analyse usage patterns.

The following categories of cookies are used on the omg67 Platform:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session authentication, security, and load balancing. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gambling limit settings, and display preferences across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how members use the Platform to help us improve performance, navigation, and content. These are only deployed with your consent.
• Security and Fraud Prevention Cookies: Support our fraud detection systems by identifying device characteristics associated with suspicious behaviour patterns.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect your ability to use some Platform features. Strictly necessary cookies cannot be disabled as they are required for the Platform to function.

Subject to applicable law and certain exceptions (including legal hold obligations and fraud investigation requirements), you hold the following rights with respect to your personal data processed by omg67:

1. Right of Access: You may request confirmation of whether omg67 processes personal data about you and, if so, receive a copy of that data along with supplementary information about the processing.
2. Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. You may update certain account details directly through your account settings; for other corrections, please contact support.
3. Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent is the legal basis), or you object to processing and there are no overriding legitimate grounds. This right is subject to our legal retention obligations.
4. Right to Restriction of Processing: You may request that omg67 restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing pending verification of our legitimate interests.
5. Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
6. Right to Object: You may object to processing of your personal data where omg67 relies on legitimate interests as the legal basis. You may also object to processing for direct marketing purposes at any time, without giving reasons.
7. Rights Related to Automated Decision-Making: Where omg67 makes decisions about you solely by automated means that produce significant effects (such as automated account suspension for fraud detection), you may request human review of that decision.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and your full registered name, account username, and a description of the right you wish to exercise. omg67 will respond within thirty (30) calendar days of receipt of a valid, complete request.

We may require identity verification before processing a data rights request to ensure that personal data is not disclosed to unauthorised persons.

omg67 may send you promotional and marketing communications about platform features, bonuses, seasonal offers, and VIP programme updates. Marketing communications are only sent to Members who have expressly opted in to receive them during registration or through their account communication preferences.

You may withdraw your consent to receive marketing communications at any time by: (a) clicking the unsubscribe link in any marketing email you receive; (b) updating your communication preferences in your account settings; or (c) contacting [email protected] with an opt-out request.

Withdrawal of marketing consent does not affect your receipt of transactional communications that are necessary for the operation of your account, including deposit confirmations, withdrawal notifications, account security alerts, and regulatory notices.

The omg67 Platform is strictly for adults aged 21 years and above. omg67 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If omg67 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the source payment method used for registration, subject to verification of the return destination.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on omg67, please contact us immediately at [email protected] so that we can take prompt remedial action.

omg67 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the features of the Platform. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Material changes to this Policy will be communicated to registered Members via email to the address associated with their account and/or through a notice displayed prominently on the Platform, with a minimum of fourteen (14) days' advance notice before the changes take effect, except where changes are required to comply with immediate legal or regulatory obligations.

Your continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with the revisions, you must cease using the Platform and initiate voluntary account closure before the effective date.

For all privacy-related enquiries, data rights requests, or concerns regarding omg67's handling of your personal data, please contact our Data Protection team through the following channels:

If you are not satisfied with omg67's response to a privacy complaint, you may escalate your concern to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances. Malaysian residents may refer to the guidance published by the Personal Data Protection Commissioner under the Personal Data Protection Act 2010 for information on the complaints process.