Official Documents

Op09 Privacy Policy — Our Commitment to Protecting Your Data

Effective Date: 1 January 2026  |  Version 2.0

Op09 takes seriously our responsibility to protect the privacy and personal data security of every user who trusts our platform. This Privacy Policy clearly explains how we collect, use, store, and protect your information when you use op09's services in Malaysia. By registering an account or using any op09 service, you are considered to have read, understood, and agreed to all terms set out in this Privacy Policy. We encourage you to read this document carefully so you fully understand your rights as an op09 user in Malaysia.

This Privacy Policy applies to all users accessing the op09 platform via the website, mobile app, or any other digital channel we operate. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account. op09 reserves the right to update this Privacy Policy from time to time, and registered users will be notified when material changes occur.

SSL-Encrypted Data Password-Protected Account Your Data Is Never Sold Secure KYC Verification Malaysian Data Storage Full Cookie Control Malaysia PDPA Compliance Mobile Account Protection SSL-Encrypted Data Password-Protected Account Your Data Is Never Sold Secure KYC Verification Malaysian Data Storage Full Cookie Control Malaysia PDPA Compliance Mobile Account Protection

1. Information Collected by op09

Account Information

When you register an account on the op09 platform, we collect basic personal information including your full name, Malaysian identity card or passport number, date of birth, email address, and an active mobile number. This information is required to verify your identity, confirm that you meet the age eligibility requirement (18 and above), and to comply with Malaysian legal requirements applicable to digital entertainment platform operators. You may also be asked to provide additional supporting documents during the Know Your Customer (KYC) process once your account reaches certain thresholds or before a withdrawal is processed. All information collected is stored securely and accessed only by authorised personnel.

Device & Browser Information

When you access the op09 platform, our systems automatically record technical information such as your IP address, device type, operating system, browser version, screen resolution, and device time zone. This information is used to detect suspicious activity, prevent unauthorised access, and deliver an optimised experience across the range of devices popular in Malaysia, including Android and iOS smartphones. Device data is not used to identify you personally, but may be combined with account information when required for security purposes. op09 retains these access logs for the period defined by our internal data retention policy, after which they are securely deleted.

Payment Information (MYR)

To process financial transactions in MYR, op09 collects information related to your payment method, such as the account holder's name, partially masked account number, bank name, and the phone number linked to digital wallets such as Touch 'n Go eWallet or GrabPay. We do not store full credit or debit card numbers — all sensitive payment data is processed through PCI-DSS certified third-party payment providers and is not stored directly on op09's servers. Every transaction is logged for legal compliance, fraud detection, and customer support purposes.

Usage Data & Behaviour

Op09 collects data on how you interact with our platform, including gameplay records, bets placed, session duration, pages visited, features used, and account settings preferences. This behavioural data helps us better understand the needs of Malaysian users, improve platform design, personalise game recommendations, and identify early signs of problem gambling for Responsible Gaming purposes. This information is also used to generate aggregated analytics reports that do not expose any individual user's identity.

2. How Do We Use Your Data?

Information collected by op09 is used solely for legitimate purposes directly related to providing quality digital entertainment services to Malaysian users. The primary purposes for data use include: managing and maintaining user accounts; processing deposits and withdrawals in MYR; verifying identity and complying with Malaysian legal requirements; sending service communications such as transaction notifications, password resets, and policy updates; and detecting and preventing fraud or platform abuse.

Beyond core operational needs, op09 also uses your data for the following purposes in a responsible manner. First, to personalise your experience by recommending games, live sports events, or promotions relevant to your usage history. Second, to conduct platform performance analytics to maintain technical stability and improve service speed. Third, to meet reporting obligations to Malaysian authorities where required by applicable law. Fourth, for Responsible Gaming purposes, where usage patterns are analysed to identify users who may need support or usage limits.

Op09 will not use your data for third-party marketing without your explicit consent, and we do not sell, rent, or trade users' personal information to any external entity for commercial purposes. Any use of data beyond the scope described above requires fresh consent from you, or must be specifically authorised under applicable Malaysian law at the relevant time.

3. Cookies & Tracking Technologies

The op09 platform uses cookies and similar tracking technologies to enhance functionality, security, and the overall user experience. Cookies are small text files stored on your device when you visit our platform; they help our systems recognise you on return visits so you don't have to log in every time. We use several categories of cookies, each serving a distinct function within the op09 platform ecosystem.

Essential Cookies (Required)

These cookies are required for core platform functions such as secure login, session verification, and form security. They cannot be disabled as the platform will not function properly without them. No personally identifiable information is stored through these cookies.

Analytics Cookies

We use analytics cookies to understand how users interact with the platform, which pages are visited most frequently, and where users drop off during a session. This data is collected in aggregate and used solely to improve the design and performance of the op09 platform.

Preference Cookies

These cookies store your preferences such as display language, display settings, and account configurations to make your experience more comfortable on every visit. You can delete these cookies at any time through your browser settings without affecting your account security.

Security Cookies

Security cookies are used to detect suspicious login activity, prevent CSRF attacks, and verify that active sessions are legitimate. These cookies have a short lifespan and are automatically discarded when your session ends.

You have full control over cookies through your web browser settings. Most modern browsers — including Chrome, Firefox, and Safari — let you view, delete, or block cookies individually or all at once. Bear in mind that disabling essential cookies may affect the functionality of the op09 platform and could prevent you from logging in or making transactions securely.

4. Data Storage & Security — Here's How We Keep Your Information Safe

Op09 implements robust technical and organisational security measures to protect users' personal data from unauthorised access, accidental disclosure, alteration, or destruction. All data transmitted between your device and op09's servers is encrypted using the latest version of the TLS (Transport Layer Security) protocol, ensuring that sensitive information such as login credentials and payment details cannot be intercepted by third parties in transit. Our servers are protected by next-generation firewalls, intrusion detection systems, and real-time threat monitoring running 24 hours a day, seven days a week.

Malaysian users' personal data is stored in secure data centres with strict physical access controls, including camera surveillance, biometric door access, and staff access logs. Access to the user database is restricted to personnel who require it to carry out their official duties, and all access is logged for internal audit purposes. User passwords are not stored in plain text — they are processed using strong cryptographic hashing algorithms before being stored.

Data retention periods vary depending on the type of information and the applicable Malaysian legal requirements. Financial transaction data is retained for the minimum period prescribed by Malaysian financial legislation for audit and compliance purposes. Active account data is kept for as long as the account remains active and for a reasonable period after closure. Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. While we take all reasonable precautions, no security system is entirely foolproof, and users are also responsible for keeping their own login credentials safe.

5. Who Else May See Your Data?

Op09 does not sell, rent, or disclose users' personal information to third parties for marketing or commercial purposes without your explicit consent. That said, there are limited situations where we need to share certain information with trusted external parties to keep the platform running smoothly and securely. All such data sharing is governed by strict confidentiality agreements, and those third parties are permitted to use the data only for the specific purposes defined.

Payment service providers working with op09 receive the transaction details necessary to process deposits and withdrawals in MYR. These providers comply with international financial security standards and are bound by Malaysia's data protection laws. Third-party analytics companies may receive anonymised, aggregated usage data to help us understand platform performance — this data contains no information that could personally identify you.

Op09 may be legally required to disclose user information to Malaysian government authorities, law enforcement bodies, or courts of competent jurisdiction upon receipt of a valid court order, warrant, or official directive. In such cases, we will disclose only the minimum information required and, to the extent permitted by law, will notify the affected user of the disclosure. We will not disclose user data in response to voluntary requests from any party without a firm legal basis.

Should op09 be involved in any business transaction such as a merger, acquisition, or asset transfer, user data may be transferred as part of those business assets. In such a situation, users will be notified in advance and a new Privacy Policy will be issued to explain how your data will be managed by the new entity.

6. Your Rights as a User & How to Contact Us

Right of Access

You have the right to request a copy of all personal information we hold about you at any time. op09 will process data access requests within 14 business days of receiving your application, and the information will be provided in a readable format. Requests can be submitted by email to our support team, including your account number and the required verification details.

Right to Rectification

If you find that the personal information we hold about you is inaccurate, outdated, or incomplete, you have the right to request an immediate correction. op09 will verify the correction request and make the necessary changes within seven business days. For certain types of information requiring document verification — such as your full name or date of birth — you may need to provide valid supporting documents before the correction can be processed.

Right to Erasure

You may request the deletion of your personal data from op09's systems when that data is no longer needed for the original purpose of collection, or when you withdraw your consent and there is no other legal basis for continued processing. However, this right is subject to our legal obligation to retain certain records — such as financial transaction data — for the period required under Malaysian law. Once the mandatory retention period has elapsed, all relevant data will be permanently deleted.

Privacy Policy Updates

Op09 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any material changes will be communicated to registered users via email or in-platform notification at least seven days before taking effect. We encourage you to review this page periodically to stay informed of the latest op09 privacy policy.

Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how op09 handles your personal data, please contact our support team by email at [email protected]. We are committed to responding to all privacy enquiries within three business days. For more complex complaints or data deletion requests, please clearly state the nature of your request and include the required account verification details so we can process it promptly and accurately.

Your Privacy, Our Priority

Op09 is committed to ensuring every Malaysian user feels safe and protected while using our platform. If you still have questions about how we manage your data, our support team is ready to help. Register now and enjoy a safe, fair, and responsible digital entertainment experience with op09.

Bahasa Melayu