Official Document — Personal Data Protection

Privacy Policy ofa168
Data Security Malaysia users

Ofa168 takes the privacy and security of every member's personal information seriously. This policy transparently explains how we collect, use, store, and protect your data throughout your use of the platform.

Updated: 1 January 2026
Commitment Privacy ofa168

Six core principles underpinning the protection of your personal data on our platform

256-bit SSL Encryption

All data transmitted between your device and ofa168 servers is protected by industry-standard 256-bit SSL encryption. This means your information cannot be intercepted or read by any third party while in transit.

No Sale of Data to Third Parties

Ofa168 does not sell, rent, or trade your personal information to any third party for marketing purposes without your explicit consent. Your data belongs to you and we respect that fully.

Full User Control

You have the full right to access, correct, download, or request deletion of your personal data at any time through your account panel or by contacting our support team, available 24/7.

Secure Data Storage

Your personal data is stored on servers protected by enterprise-grade firewalls, strict access controls, and 24-hour monitoring. Only authorized personnel may access member personal data for legitimate operational purposes.

Malaysia PDPA Compliance

Ofa168 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection and usage processes adhere to local legal requirements to ensure your rights are fully protected.

Data Breach Notification

In the unlikely event of a data breach, ofa168 is committed to notifying affected members within 72 hours and taking immediate remedial action to protect your interests.

01 Personal Information We Collect

When you register and use the ofa168 platform, we collect various types of personal information to enable us to provide a safe, seamless, and responsible service. This information is collected transparently and solely for legitimate purposes.

Information You Provide Directly

  • Identity information — full name as stated in your identification document (MyKad or passport), date of birth, and identification number.
  • Contact information — a valid Malaysian phone number, active email address, and mailing address where applicable.
  • Financial information — bank account number, bank name, account holder name, and eWallet details (Touch 'n Go, GrabPay, Boost) for deposit and withdrawal processing.
  • KYC verification documents — a copy of your MyKad (front and back), a selfie for identity verification, and additional supporting documents if required for high-value withdrawals.
  • Communication with support — records of live chat conversations, emails, and any information you share when interacting with the ofa168 support team.

Automatically Collected Information

When you browse or use the ofa168 platform, our system automatically records certain technical information for security and service improvement purposes:

  • Your IP address, web browser type, and device operating system.
  • Login session information including date, time, and session duration.
  • Pages visited, buttons clicked, and navigation patterns within the platform.
  • Device technical data such as phone model, screen resolution, and app version.
  • Country-level location data based on IP address for geographic eligibility verification purposes.
All data collection is based on the consent you provide during registration or as required by applicable law. You may withdraw your consent at any time, though this may affect our ability to provide certain services.

02 How We Use Your Information

Ofa168 uses collected personal information solely for lawful, transparent purposes directly related to platform operations and the user experience. We do not use your data beyond the scope stated in this policy.

Purpose of Use Types of Data Used Legal Basis
Identity verification & KYC Name, IC/Passport, selfie Legal requirement
Deposit & withdrawal processing Bank / eWallet details Contract execution
Account communication & support Email, phone number Legitimate interest
Fraud detection & security IP, session data, login patterns Legitimate interest
Marketing & promotions Email, phone number User consent
Platform improvement Navigation data, technical data Legitimate interest
Legal compliance All related categories Legal obligations
For marketing communications, you may unsubscribe at any time by clicking the "unsubscribe" link in our emails or through the notification settings in your ofa168 account. Requests will be processed within 5 business days.

03 Sharing Information with Others

Ofa168 does not sell your personal data. However, in the course of platform operations, there are limited situations where we need to share certain information with approved parties:

Trusted Service Providers

Ofa168 works with authorised third-party service providers to carry out specific functions such as payment processing, KYC identity verification, platform analytics, and technical infrastructure support. All partners are bound by strict confidentiality agreements and may only process your data under ofa168's instructions.

Authorities & Legal Requirements

Ofa168 may be required to disclose your personal information to relevant authorities if mandated by law, court order, or in the context of financial crime investigations including money laundering. Such disclosures are made in full compliance with proper legal procedures.

Business Transfer

If ofa168 is involved in any merger, acquisition, or asset transfer, user data may be transferred as part of that transaction. Users will be notified in advance and the receiving entity will adhere to the same or stricter privacy policy.

All third-party service providers working with ofa168 have been assessed and approved against strict data security standards. We only partner with providers who comply with internationally recognised data protection standards.

04 Cookies & Tracking Technologies

Ofa168 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions properly, and help us understand how users interact with our platform.

Types of Cookies Used

  • Essential Cookies — required for core platform functions such as login sessions, security, and navigation. These cookies cannot be disabled.
  • Performance Cookies — collects anonymised data on how pages are used to help us improve our services. Does not personally identify users.
  • Functional Cookies — stores user preferences such as language, display settings, and login information for your convenience.
  • Analytics Cookies — used via analytics tools to understand usage trends and improve platform content. Data is collected in aggregate and without personal identification.

Managing Cookie Preferences

You can manage or disable non-essential cookies through your web browser settings. However, please note that disabling certain cookies may affect platform functionality and your user experience. Disabling essential cookies may prevent you from logging in or using key platform features.

By continuing to use the ofa168 platform, you agree to our use of essential cookies. For non-essential cookies, you may grant or withdraw consent through the privacy settings panel in your account.

05 Personal Data Security

Ofa168 consistently invests in the latest cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, modification, disclosure, or unintended destruction.

Technical Security Measures

  • 256-bit SSL/TLS encryption for all data transmitted between users and servers.
  • Encryption of sensitive data in the database using AES-256 standards.
  • Two-factor authentication (2FA) is available for all member accounts.
  • Continuous 24/7 security system monitoring with automated incident response.
  • Regular penetration testing conducted by independent security experts.
  • Role-based access control (RBAC) for ofa168 internal staff.
  • Regular data backups stored in a secure, separate location.

User Security Responsibilities

While ofa168 takes all reasonable steps to protect your data on our end, account security also depends on your own actions. You are advised to always use a strong and unique password, never share your login credentials, and enable 2FA for maximum protection.

ofa168 will never ask for your password or PIN via email, text message, or live chat. Any communication requesting such sensitive information should be treated as a fraudulent attempt. Please report it to our support team immediately.

06 Data Retention Period

Ofa168 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations. Our core principle is to store as little data as possible for as short a time as needed.

Data Category Storage Duration Reason
Active account data Throughout the active account period Service operations
Financial transaction records 7 years after transaction AML legal requirement
KYC Documents 5 years after account closure Legal obligations
Support communication logs 2 years Service improvement
Login & session data 90 days Security & forensics
Marketing data Until unsubscribed Based on consent

After the retention period ends, data will be securely deleted or permanently anonymized using procedures approved by the ofa168 security team.

07 Your Rights as a User

As an ofa168 user and a Malaysian citizen or resident, you have certain rights regarding your personal data protected under the Personal Data Protection Act 2010 (PDPA). ofa168 is committed to fully respecting and facilitating the exercise of these rights.

Right of AccessRequest a copy of all personal data we hold about you in a readable format.
Right to RectificationUpdate or correct any inaccurate or outdated personal data in our records.
Right to ErasureRequest deletion of your personal data, subject to legal requirements that may not permit immediate deletion.
Right to RestrictionRestrict the processing of your data in certain situations while awaiting resolution of an objection or investigation.
Right to PortabilityReceive your data in a structured, machine-readable format for transfer to another platform.
Right to ObjectObject to the processing of your data for direct marketing purposes at any time without needing to provide a reason.

To exercise any of the above rights, you may submit a request via ofa168 support live chat or by emailing our privacy address. We will process your request within 30 working days and may require identity verification before the request can be completed.

08 Children's Data Protection

The ofa168 platform is exclusively for users who are of age 18 years and above. ofa168 does not intentionally collect, store, or process any personal information from individuals under the age of 18.

If we find that personal information of an underage minor has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate steps to delete that information and close the relevant account. Any wins or balances associated with that account will also be handled in accordance with established procedures.

If you are a parent or guardian and believe your underage child has registered on ofa168, please contact our support team immediately. We will investigate and resolve the matter with the highest priority.

09 Links to Third-Party Websites

The ofa168 platform may contain links or references to third-party websites or services, including payment providers and gaming partners. This privacy policy applies solely to the ofa168 platform and does not cover the privacy practices of those third-party websites.

Ofa168 is not responsible for the content, privacy policies, or security practices of any third-party websites linked from our platform. We encourage you to read the privacy policy of each website you visit separately to understand how your data is handled there.

While ofa168 only works with assessed and trusted third-party partners, we do not have direct control over their privacy practices. Please exercise caution when providing your personal information outside the official ofa168 platform.

10 Amendments to This Privacy Policy

Ofa168 reserves the right to update, amend, or modify this Privacy Policy from time to time to reflect changes in law, technology, business operations, or user requirements. All amendments take effect immediately upon publication on this page.

The "Updated" date shown at the top of this page will always reflect the latest version of our privacy policy. For amendments considered material or significant, ofa168 will endeavour to notify members via their registered email or in-platform notification.

Your continued use of the ofa168 platform after any amendments are published will be deemed as your acceptance of the updated terms. If you do not agree with any amendments, you have the right to close your account by contacting our support team.

11 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ofa168 handles your personal data, our team is ready to assist you through the available channels.

  • Live Chat 24/7 — the fastest channel for urgent privacy enquiries. Available in Bahasa Melayu and English.
  • Privacy Email — send detailed enquiries to [email protected] with the subject "Privacy Enquiry" for a response within 2 business days.
  • Account Panel — use the privacy settings section in your account to manage cookies, marketing preferences, and data requests.
The ofa168 support team operates 24 hours a day, 7 days a week including public holidays. We are committed to responding to all privacy-related inquiries within the stipulated timeframe and with the highest level of transparency.

Your Data Is Safe — Start Your Gaming Experience

Ofa168 protects your privacy with cutting-edge encryption technology. Register today and enjoy a safe, trusted online entertainment platform with over 500,000 Malaysian members.

Register a Free Account Download App
Bahasa Melayu