What We Collect and Why It Matters
We collect personal data in three main ways: account registration (name, email, phone number), payment activity when you fund your account via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX, and session data from your device when you browse or play. Payment reference numbers and
-
1
transaction timestamps are stored to verify your deposits and process withdrawals accurately — we do not store your full e-wallet credentials. Session data, including device type, browser version, and approximate location, helps us detect unusual login attempts on your account. We retain this data only as
-
2
long as your account remains active or as required under applicable Malaysian law. Once you close your account, we begin a structured deletion process for data that is no longer legally required to be kept. Access to your stored data is restricted to staff whose role
-
3
requires it, and all internal access is logged. Any third-party payment processor we work with — including those handling Touch 'n Go eWallet and GrabPay transactions — is bound by a data-processing agreement that limits how they may use your information. This policy applies to your
-
4
account on ofa168 and is governed by Malaysian applicable law. Where local law restricts certain data practices, those restrictions take precedence.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.