ob9my Privacy Policy

This Privacy Policy ("Policy") describes how ob9my ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Member") who access or use the ob9my website at ob9my.org and all associated services, including the live casino, sportsbook, slots, table games, poker room, and any other features made available on the Platform.

ob9my acts as the data controller in respect of personal data collected through the Platform. As data controller, ob9my determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with applicable data protection legislation.

This Policy should be read together with the ob9my Terms & Conditions, which govern your use of the Platform. Defined terms used in this Policy have the same meaning as in the ob9my Terms & Conditions unless otherwise stated.

ob9my uses the personal data we collect for the following purposes:

• Account Management: To create, verify, and manage your ob9my member account, including processing your registration, verifying your identity and age, and maintaining your account settings and preferences.
• Service Delivery: To provide you with access to all ob9my Platform features including live casino games, sportsbook betting, slots, poker, and table games, and to process all financial transactions associated with your account.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance via ob9my's 24/7 support channels.
• Legal & Regulatory Compliance: To fulfil ob9my's obligations under applicable anti-money laundering (AML) legislation, gaming licensing requirements, and other regulatory obligations, including the retention of transaction and identity records for prescribed periods.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, and other prohibited conduct on the ob9my Platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the functionality, performance, and content of the ob9my Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates where you have provided consent or where ob9my has a legitimate interest in doing so, subject to your right to opt out at any time.

ob9my does not sell your personal data to third parties. ob9my may share your personal data with third parties only in the following limited circumstances:

• Payment Service Providers: ob9my shares necessary transactional data with payment processors including Touch 'n Go, Boost, Maybank, CIMB, and Public Bank solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Services: ob9my may share identity document data with third-party KYC (Know Your Customer) and age verification service providers for the purpose of fulfilling regulatory compliance obligations.
• Game Content Providers: ob9my may share your member identifier (but not your full personal profile) with certified game studios to facilitate your access to their game content hosted within the ob9my Platform.
• Regulatory Authorities: ob9my will disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required to do so by law, court order, or pursuant to ob9my's AML obligations.
• Professional Advisers: ob9my may share personal data with its legal, financial, and audit advisers on a confidential basis where necessary for the conduct of those advisory services.

All third parties with whom ob9my shares personal data are required to handle that data in accordance with applicable data protection obligations and may only use it for the specific purpose for which it was shared.

ob9my implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ob9my's servers.
• Encryption of sensitive data fields at rest within ob9my's secure database infrastructure.
• Multi-factor authentication options for Member account access.
• Access controls limiting ob9my employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the ob9my Platform.
• Intrusion detection systems and real-time monitoring of Platform activity for anomalous behaviour.

Subject to applicable law and ob9my's regulatory obligations, you have the following rights in respect of your personal data held by ob9my:

• Right of Access: You may request a copy of the personal data ob9my holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your ob9my account.
• Right to Erasure: You may request deletion of your personal data where ob9my no longer has a legal basis to retain it. Note that certain data must be retained by ob9my for regulatory compliance purposes and cannot be deleted on request.
• Right to Restrict Processing: You may request that ob9my limits the processing of your personal data in certain circumstances, for example while a dispute regarding data accuracy is resolved.
• Right to Object: You may object to ob9my processing your personal data where we rely on legitimate interests as the legal basis, including in relation to direct marketing communications.
• Right to Withdraw Consent: Where ob9my processes your data on the basis of consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact ob9my support via live chat on the Platform or by email at [email protected]. ob9my will respond to all valid data rights requests within thirty (30) calendar days of receipt. ob9my may request proof of identity before processing a data rights request.

ob9my reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ob9my will notify registered Members via the email address associated with their account and/or display a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the ob9my Platform following notification of changes to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the amended terms, you must cease using the Platform and contact ob9my support to arrange account closure.