Important Note: This Privacy Policy applies to all users of the OhTogel platform at ohtogel.bio, including web and mobile app users. By using our services, you agree to the terms stated herein. Please read carefully before registering.
1Introduction
OhTogel ("we", "Platform" or "ohtogel.bio") is fully committed to protecting the privacy and security of every user's personal information. This Privacy Policy is formulated in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and the highest international privacy standards.
As an online entertainment platform providing games slots, live casino, sports betting and various other entertainment options, we require certain personal data from you to deliver a seamless, secure, and responsible service. We do not collect more data than necessary, and we never sell your information to any third party for marketing purposes without your explicit consent.
This policy describes what data we collect, why we need it, how it is used, who it is shared with, and what your rights are as a user. If you have any concerns, our privacy team is ready to assist through the available support channels.
2Data We Collect
We collect your personal data through several different means, depending on how you interact with the OhTogel platform:
a) Data you provide directly:
- Full name as stated on your identification document (MyKad or passport).
- Date of birth for age eligibility verification (18 years and above).
- Active email address and Malaysian mobile number.
- Account password (stored in an unreadable hashed format).
- Bank account or e-wallet details for processing deposits and withdrawals.
- Identity document copies for KYC processing when required.
b) Data collected automatically:
- IP address and geographic location information (city/state level).
- Device type, operating system, and web browser version in use.
- Platform activity logs including the date, time, and type of games played.
- Session data including time spent on the platform and page navigation.
- Network information such as ISP and internet connection type.
c) Data from third parties:
- Identity verification from a licensed KYC service provider.
- Transaction information from integrated payment gateways (FPX, DuitNow, TNG eWallet).
- AML verification data from financial compliance service providers.
| Data Type |
Source |
Primary Purpose |
Retention Period |
| Personal Information |
Registration |
Identity verification |
Throughout the active account period |
| Financial Data |
Transactions |
Payment processing |
7 years (statutory requirement) |
| Activity Log |
Automated system |
Security & Audit |
12 months |
| Device Data |
Browser/App |
Fraud detection |
6 months |
| Session Cookies |
Web platform |
User experience |
30 days |
3How We Use Your Data
Every piece of data we collect has a clear and legitimate purpose. ohtogel only uses your personal data for the following purposes:
- Service provision: To create and manage your account, process deposits and withdrawals, and provide access to all games available on the platform.
- Identity verification and compliance: To fulfil KYC requirements, ensure you meet the minimum age requirement, and comply with Malaysia's anti-money laundering (AML) laws.
- Account security: To detect and prevent unauthorised access, identity fraud, system manipulation, and any activity that violates our terms of use.
- Service communications: To send important notifications regarding your account, security updates, transaction confirmations, and customer support responses.
- Platform improvement: To analyse aggregated usage patterns in order to improve the performance, stability, and user experience of the ohtogel platform.
- Legal compliance: To fulfil reporting obligations to the relevant authorities as required by applicable Malaysian law.
- Customer support: To address enquiries, complaints, and assistance requests more promptly and effectively based on your account history.
- Promotional communications (with consent): To inform you about promotions, bonuses, and exclusive offers — only if you have given consent to receive such communications.
We never use your data for purposes unrelated to the provision of our services without first obtaining your explicit consent.
4Data Sharing & Disclosure
OhTogel do not sell your personal data to any third party for marketing purposes. However, there are specific situations where we need to share your information with approved parties:
- Payment providers: Integrated payment gateways (FPX, DuitNow QR, TNG eWallet, Boost, GrabPay) receive only the minimum transaction information required to process your deposits and withdrawals.
- KYC service providers: Licensed and approved identity verification companies for document verification and AML screening purposes.
- Game providers: Gaming software companies that supply content to our platform may receive non-personally identifiable account identifiers for technical purposes.
- Legal authority: We will disclose required information to Malaysian authorities when mandated by a court order, legal process, or legitimate regulatory compliance requirement.
- Cloud services and infrastructure: Cloud service providers used to host our platform are bound by strict confidentiality agreements and are not permitted to use your data for their own purposes.
All third parties we work with are bound by data protection agreements that require them to handle your information in accordance with security standards equal to or higher than our own.
5Data Security
We implement multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:
- Data encryption in transit: All communications between your device and ohtogel servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
- Data encryption at rest: Sensitive data stored in our databases is encrypted using the widely adopted AES-256 algorithm.
- Tiered access controls: Only staff with a legitimate business need are granted access to user data, and all access is comprehensively logged.
- Two-factor authentication (2FA): Our internal systems use 2FA for all staff access to the user database.
- Periodic vulnerability scanning: Our infrastructure undergoes regular penetration testing and security scanning by independent cybersecurity experts.
- Incident response plan: We have clear procedures in place to handle any data breaches, including user notification within the timeframe stipulated by the PDPA.
While we take all reasonable precautions, no security system is entirely immune to breaches. We encourage you to take shared responsibility in protecting your account by using a strong password and never sharing your login credentials with anyone.
6Cookies & Tracking Technology
The ohtogel platform uses cookies and similar technologies to enhance the user experience and ensure account security. Below are the types of cookies we use:
- Essential cookies (required): Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
- Performance cookies: Collects information about how you use the platform (pages visited, time spent) in a non-personally identifiable format, for technical improvement purposes.
- Functional cookies: Saves your preferences such as display language, interface settings, and game preferences for a more convenient experience.
- Security cookies: Used to detect suspicious activity, verify recognised devices, and protect your account from unauthorised access.
You can manage cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and security of your OhTogel account. We do not use third-party cookies for programmatic advertising purposes.
7Your Rights as a User
Under Malaysia's PDPA 2010 and OhTogel's privacy policy, you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you at any time.
- Right to correction: If any of your information is inaccurate or outdated, you have the right to request an immediate correction.
- Right to object to processing: You may opt out of having your data processed for direct marketing purposes at any time without affecting core services.
- Right to withdraw consent: For processing based on your consent (such as promotional communications), you may withdraw that consent at any time.
- Right to erasure (with limitations): You may request deletion of your personal data, subject to data retention obligations required by law, such as financial records that must be kept for seven years.
- Right to lodge a complaint: If you believe your privacy rights have been violated, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.
To exercise any of the above rights, please contact our privacy team through the ohtogel customer support channel. We will process your request within 14 working days from the date of receipt of the complete request.
8Data Retention & Deletion
OhTogel retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law:
- Active account data is retained for the duration your account remains active and in use.
- After account closure, basic personal data is retained for five (5) years for compliance purposes and as a record in the event of a dispute.
- Financial transaction records are retained for seven (7) years in accordance with Malaysian tax and financial legal requirements.
- Security logs and audit records are retained for twelve (12) months before being automatically deleted.
- Session cookie data and analytics tools are set to expire automatically within defined periods (7 to 90 days depending on cookie type).
Once the specified retention period expires, your data will be securely deleted using irreversible deletion methods. This deletion process is carried out automatically by our system with no action required on your part.
9Child Protection
OhTogel has a zero-tolerance policy towards the use of the platform by individuals under the age of 18. This platform is designed exclusively for adult users.
- We do not knowingly collect, process, or store any personal data from individuals under the age of 18.
- Our registration process requires age verification, and we reserve the right to request supporting documentation at any time.
- If we discover that a child's data has been collected inadvertently, we will immediately delete all related information and terminate the account.
- Parents or guardians concerned about minors accessing online gambling platforms are encouraged to use appropriate parental control software.
If you believe a minor has registered an account on our platform, please contact our support team immediately so that appropriate action can be taken.
10Privacy Policy Amendments
OhTogel reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements.
- Users will be notified of any material changes via their registered email or a prominent notice on the platform's main page.
- Notice will be given at least seven (7) days before changes take effect, except where urgent legal requirements apply.
- Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.
- If you disagree with any changes made, you have the right to discontinue use of the platform and request account closure.
The "Updated On" date at the top of this policy will always reflect the effective date of the latest changes. We encourage you to review this page periodically.
Current version: 3.1 | Effective Date: 1 January 2026
11Contact Our Privacy Team
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, the ohtogel privacy team is ready to assist:
- Privacy email: [email protected]
- Live Chat: Available 24/7 via the live chat icon at the bottom corner of the platform.
- Response time: Privacy requests are processed within 14 business days.
- Service language: Bahasa Melayu and English.
For formal complaints regarding data protection that cannot be resolved through our support channels, you may contact Department of Personal Data Protection Malaysia (JPDP) through the official Malaysian government portal.
We value every piece of feedback and are committed to addressing every privacy inquiry seriously and transparently.