1. Home
  2. Privacy Policy
OP09 Malaysia Official Privacy Document

Privacy Policy OP09 — Our Commitment to Protecting the Personal Data of Malaysian Members

At OP09, your privacy is not merely a legal obligation — it is a moral responsibility we embrace wholeheartedly. This Privacy Policy document sets out transparently how we collect, use, store, and protect the personal data of all our platform members. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and uphold the highest data security standards in the industry.

Register Now Log In
Policy Updates
Effective date: 1 January 2026
256-bit SSL Encryption
PDPA 2010 Compliance
Specific to Malaysian Players
10 Key Sections
Updated: 1 January 2026 | Language: Bahasa Melayu | Jurisdiction: Malaysia (PDPA 2010) | [email protected]

OP09's Six Core Data Protection Principles

Op09's commitment to protecting the privacy of every Malaysian member who uses our platform

Banking-Grade 256-Bit SSL Encryption

All data transmitted between your device and OP09's servers is protected using 256-bit SSL encryption — the same technology used by major Malaysian banking institutions such as Maybank and CIMB. This means your personal and financial information cannot be intercepted or read by any third party while in transit.

Full PDPA 2010 Malaysia Compliance

OP09 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the collection and processing of personal data in the country. We collect only what is genuinely necessary, use it solely for the stated purposes, and give members full rights to access and correct their data.

No Sale of Data to Third Parties

OP09 has never and will never sell, rent, or disclose members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — we act solely as a trusted custodian, using it only to enable you to enjoy the OP09 platform safely and seamlessly.

Secure & Limited Data Retention

Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and round-the-clock security monitoring. Only OP09 personnel who require access for operational purposes are authorised to view member data, and every instance of access is logged for internal security audit purposes.

Full Member Control Over Personal Data

Every OP09 member has the full right to access, review, correct, and request the deletion of their personal data. You may contact our privacy team at any time via [email protected] to submit any data-related request, and we commit to responding within 14 business days.

Marketing Communications Control

You have full control over marketing communications from OP09. Unsubscribe from promotional emails at any time via the "unsubscribe" link in any email, or through the notification settings in your OP09 account. Important operational communications relating to your account (such as transaction confirmations) cannot be unsubscribed from for security reasons.

Op09 Full Privacy Policy

A comprehensive document outlining the privacy and data protection practices of the OP09 Malaysia platform

Contents
Privacy enquiries:
[email protected]
1

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") is published by OP09 ("Platform", "We", "Us") and applies to all personal information collected from users and members ("You", "Member") who access or use the OP09 platform via the op09.my website, the OP09 mobile app, and all associated services.

OP09 committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data that is strictly necessary to deliver our services, and we use it in a transparent, responsible manner that meets your expectations as a savvy online casino player in Malaysia.

Important Note: By registering for or using the OP09 platform, you agree to the data collection and usage practices described in this Privacy Policy. If you disagree with any part of this policy, please contact us at [email protected] before continuing to use the platform.

2

Personal Data We Collect

OP09 collects several categories of personal data to enable the platform to operate safely and effectively. Below is a complete list of the data types we collect and the reasons for collecting them:

A. Data You Provide Directly:

  • Registration Information: Full name (as per MyKad), email address, Malaysian phone number, date of birth, and the password you choose when registering your OP09 account.
  • Identity Verification Documents (KYC): Copies of your identity card (MyKad), passport, driving licence, recent bank statements, or proof of address — required when verifying your identity and ensuring anti-money laundering (AML) compliance.
  • Financial Information: Details of the payment methods used — eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow information, or FPX details (Maybank2u, CIMB Clicks). OP09 does not store full credit/debit card details.
  • Communications: Records of correspondence between you and the OP09 support team, including live chat logs, emails, and complaint reports.

B. Automatically Collected Data:

  • Technical Data: IP address, browser type and version, device type (Samsung, iPhone, Huawei, etc.), operating system, screen resolution, and time zone.
  • Usage Data: Pages visited, games played, time spent on the platform, clicks and navigation actions, and betting and transaction history.
  • Cookie Data: Session cookies, preference cookies, and analytics markers that help us understand how you use the OP09 platform. More details are provided in Section 6.
3

How We Use Your Data

OP09 uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without first obtaining your explicit consent:

  • Account Management: Creating, managing, and maintaining your OP09 account. This includes identity verification, login processing, and account settings management.
  • Financial Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via supported Malaysian payment methods. Your financial data is used solely to facilitate secure transactions.
  • Security & Fraud Prevention: Identifying and preventing fraud, money laundering, multi-account usage, bonus abuse, and other illegal activities involving the platform.
  • Legal Compliance: Fulfilling legal obligations under PDPA 2010, KYC/AML requirements, and any lawful requests from the relevant Malaysian authorities.
  • Platform Improvements: Analysing usage patterns to enhance the user experience, optimise platform performance, and develop new features better suited to the needs of Malaysian players.
  • Customer Support: Providing effective technical assistance and customer support — including resolving complaints, responding to enquiries, and processing account-related requests.
  • Service Communications: Sending important account-related notifications such as transaction confirmations, security alerts, and significant policy updates.
  • Marketing (with Consent): Sending promotional information, bonus offers, and the latest OP09 platform updates — only to members who have given consent to receive marketing communications. You may withdraw this consent at any time.

Data Minimisation Principle: op09 collects only the data that is strictly necessary to fulfil the purposes stated above. We do not collect data in excess of what is needed, and we regularly review our data collection practices to ensure they remain relevant and necessary.

4

Data Sharing & Disclosure

OP09 does not sell, rent, or disclose your personal data to third parties for their marketing or commercial purposes. However, there are limited situations where we may need to share your data with certain parties:

  • Technical Service Provider: Companies that assist us in operating the OP09 platform — such as server infrastructure providers, payment gateway providers, and security software providers. All such providers are bound by strict confidentiality agreements and may only process your data in accordance with OP09's instructions.
  • Payment Solution Providers: Payment processors that facilitate deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks) — only the details required to process each transaction are shared.
  • Malaysian Authority: When required by law, court order, or a lawful request from a Malaysian law enforcement agency such as the police, Bank Negara Malaysia, or the Securities Commission.
  • Third-Party Identity Verification: KYC (Know Your Customer) service providers who assist us in verifying member identities for AML compliance purposes — only the information necessary for verification is shared.
  • Business Transfers: In exceptional circumstances such as a company merger or acquisition, data may be transferred to a successor entity — with prior notice given to members and equivalent privacy protections ensured.

Our commitment: In all of the data-sharing instances described above, OP09 ensures that all receiving parties adhere to data security standards equivalent to our own. We do not permit data sharing for any purposes beyond those stated above without your explicit consent.

5

OP09 Data Security Measures

OP09 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

  • Data-in-Transit Encryption: All communications between your device and OP09's servers are secured using TLS 1.3 protocol with AES-256 encryption — the highest encryption standard currently available.
  • Stored Data Encryption: Sensitive data stored in OP09's databases is encrypted using techniques separate from transit encryption, ensuring multi-layered protection.
  • Strict Access Controls: The principle of "least privilege" is strictly observed — only OP09 staff who require access to perform specific duties are permitted to view member data. All access is logged and regularly audited.
  • Two-Factor Authentication (2FA): 2FA is available and strongly encouraged for all OP09 member accounts. Additionally, all internal administrative access to OP09 systems requires 2FA as a mandatory measure.
  • Continuous Security Monitoring: An intrusion detection system (IDS) monitors the OP09 platform 24 hours a day to detect and respond to any security threats in real time.
  • Regular Security Testing: OP09 conducts regular penetration testing and security audits carried out by independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.
  • Incident Response Plan: OP09 has a clearly defined data security incident response procedure. In the event of a data breach affecting members, we will notify the affected members and the relevant authorities within the timeframes stipulated by the PDPA 2010.

Your Responsibilities: While OP09 takes comprehensive security measures, the security of your account also depends on your own actions. Use a strong, unique password, enable 2FA, never share your login credentials, and log out of your account when you are done — especially when using a public or shared device.

6

Cookies & Tracking Technologies

Platform OP09 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining your login session, remembering language preferences, and ensuring transaction security. These cookies cannot be disabled without affecting basic platform functionality.
  • Performance Cookies: Collects information on how you use the OP09 platform — pages visited, time spent, and errors encountered. This data is used in aggregate and anonymised form to improve platform performance.
  • Functional Cookies: Allowing the platform to remember your preferences such as your chosen language, display settings, and game configurations to deliver a more personalised experience.
  • Analytics Cookies: We use analytics tools to understand platform usage patterns on an aggregate basis. This data helps us make better decisions about platform improvements and new features to develop.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the op09 platform. For more information on how to manage cookies in your browser, please refer to the help section of your web browser.

7

Your Privacy Rights as an OP09 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by OP09:

  • Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 21 days of receiving your request.
  • Right to Rectification: If you find that personal data held by OP09 is inaccurate or out of date, you have the right to request an immediate correction. Please update your profile via your account settings or contact our support team.
  • Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this right has its limits — we may need to retain certain data for legal compliance and dispute resolution purposes for a prescribed period.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your data in certain circumstances — for example, when you dispute the accuracy of your data or object to processing based on legitimate interests.
  • Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. Once you raise an objection, we will immediately cease processing your data for that purpose.
  • Right to Withdraw Consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights listed above, please contact our privacy team OP09 via email at [email protected] with the subject line "Privacy Rights Request" and details of your request. We will acknowledge receipt within 2 business days and provide a full response within 14 business days.

8

Data Retention & Deletion

OP09 retains your personal data for as long as your account remains active or as long as is necessary to provide services to you. Upon account closure, data retention periods are as follows:

  • Financial & Transaction Data: Retained for a minimum of 7 years following account closure, in accordance with Malaysia's financial regulatory requirements and AML compliance obligations.
  • Support Communication Records: Retained for 3 years following the last transaction for reference purposes and in the event of any potential disputes.
  • Access & Security Log Data: Retained for 2 years for security investigation and fraud prevention purposes.
  • Personal Profile Data: Deleted within 90 days of account closure, unless a legal obligation requires it to be retained for a longer period.

Upon the expiry of the designated retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process employs methods approved by industry standards to ensure the data cannot be recovered.

9

Children's Privacy

Platform OP09 is intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. The OP09 registration process requires age verification, and we employ technical verification methods to prevent registration by minors.

If OP09 discovers that personal data belonging to an individual under the age of 18 has been collected without appropriate consent, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an OP09 account, please notify us immediately at [email protected] so that prompt action can be taken.

10

Privacy Policy Amendments & Contact Us

OP09 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, changes in Malaysian law, or changes in the technology we use. When material amendments are made:

  • We will notify you by email to your registered address at least 14 days before any amendments take effect.
  • An in-platform notification on op09 will be displayed to inform you of any policy updates.
  • The "Last Updated" date at the top of this document will be updated to reflect the date of the most recent amendment.
  • Continued use of the OP09 platform after the effective date of any amendments constitutes acceptance of the revised policy.

Contact the OP09 Privacy Team: For any enquiries, concerns, or requests relating to this Privacy Policy, please contact us by email at [email protected] with the subject line "Privacy Policy Enquiry". We are committed to responding within 14 business days. The OP09 support team is fluent in Bahasa Melayu and available to assist you 24 hours a day, 7 days a week.

OP09 Data Practices Summary

A quick-reference table to help you understand how OP09 handles the various types of data belonging to Malaysian members

Data Type Purpose of Collection Retention Period Shared with Status
Registration Information
Name, email, phone number		 Account management, identity verification Throughout the active account period + 90 days Internal only Protected
KYC Documents
MyKad, bank statements		 AML compliance & age verification 7 years (statutory) KYC providers (limited) Encrypted
Payment Information
eWallet, FPX, DuitNow		 Processing RM deposits & withdrawals 7 years (statutory) Payment gateway (limited) 256-bit SSL
Gaming History
Betting history, winnings		 Audits & dispute resolution 3 years after account closure Internal only Confidential
Technical Data
IP address, browser, device		 Security & fraud prevention 2 years Cybersecurity (limited) Protected
Support Logs
Chat, email & complaints		 Customer support & complaint resolution 3 years Internal only Confidential
Marketing Data
Communication preferences		 Promotions & offers (with consent) Until consent is withdrawn Not shared With Consent

This table is intended as a summary guide only. Please refer to the full sections of the Privacy Policy above for complete and accurate information. In the event of any discrepancy, the full text shall prevail.

Your Privacy Rights at OP09

Eight data protection rights you hold as an OP09 Malaysia member under PDPA 2010

🔍
Data Access Rights

Request a copy of all personal data that OP09 holds about you. We will provide it within 21 days.

✏️
Right to Rectification

Correct any inaccurate information in your OP09 account via your profile settings or by contacting support.

🗑️
Right to Erasure

Request the deletion of your personal data under certain circumstances permitted by PDPA law.

⏸️
Right to Restriction

Request that op09 restrict the processing of your data in specific circumstances of your choosing.

🚫
Right to Object

Object to your data being used for direct marketing — we'll stop immediately, no questions asked.

🔄
Right to Data Portability

Request your data in a machine-readable format for transfer to another service provider.

↩️
Right to Withdraw Consent

Withdraw your consent to data processing at any time without affecting the core services of your account.

📬
Right to Lodge a Formal Complaint

Report any privacy concerns to op09 or directly to the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact us at [email protected] with the subject line "Privacy Rights Request"

Understanding op09's Privacy Policy — Why Data Protection Matters for Malaysian Players

When you register an account with any online casino platform, you are entrusting that platform with highly personal information — your full name, phone number, email address, and in many cases, payment details such as your Touch 'n Go eWallet or DuitNow account. At OP09, we understand the weight of that trust, and this Privacy Policy is our open account of how we uphold it with full responsibility.

Malaysia has comprehensive data protection legislation in the form of the Personal Data Protection Act 2010 (PDPA). This law sets the minimum standards for how companies handle the personal data of Malaysians. At OP09, we do not merely comply with the minimum requirements set out by the PDPA — we go further by adopting international online casino industry standards that, in many respects, exceed what the PDPA requires.

Why 256-bit SSL Encryption Matters to You

Many Malaysian players who regularly use online banking will already be familiar with the term "SSL" or the padlock icon in their browser's address bar. The same encryption that protects your Maybank2u or CIMB Clicks transactions is exactly what OP09 use to protect all communications between your device and our platform. This means that when you enter your password, make a deposit, or process a withdrawal to your GrabPay or Boost account, that information is encrypted and unreadable to anyone other than the relevant OP09 servers.

In a world where online fraud is increasingly prevalent in Malaysia — from investment scams to e-commerce fraud — digital security has never been more important. Players who enjoy slots, Live Casino, or crash games at OP09 can rest assured that every transaction they make is protected by the same encryption technology used by the country's largest financial institutions.

Your Data, Your Rights — op09's Core Principles

One of the most fundamental principles underpinning the Privacy Policy OP09 is the principle of "your data, your rights". This is not just a marketing phrase — it is an operational commitment we take seriously in every data management decision we make. A concrete example: if you decide to close your OP09 account today, your personal data (excluding financial records required to be retained for legal compliance) will be securely deleted within 90 days. You can rest assured that your information will not continue to be used for marketing purposes after you stop using our platform.

This stands in contrast to the practices of some online platforms that retain user data indefinitely and sell it to third-party advertisers. At OP09, we do not do this, and we never will. The data you provide to us is used solely to enable you to enjoy the platform safely — to process your MYR deposits and withdrawals, to verify your identity for legal compliance, and to deliver effective customer support. Nothing more.

Data Protection in the Context of Online Casino Gaming in Malaysia

Playing on an online casino platform requires a higher degree of trust than, say, purchasing goods on an e-commerce platform. This is because you are not only sharing basic personal information, but also sensitive financial data and your gameplay patterns. At OP09, we are mindful of this sensitivity and take additional measures to ensure more comprehensive protection.

For example, your game history records at OP09 — the slot you play, whether Burning Hot, Sugar Rush, Medusa, or Aviator, and the bet amounts you place — are stored confidentially and accessible only to you and support staff who require access to resolve complaints. This data is never shared with third parties, never used for marketing profiling, and never sold to third-party data analysts. This is not merely a policy — it is an operational practice we enforce internally.

In closing, the Privacy Policy OP09 this was written not as an intimidating legal document, but as an honest explanation for every Malaysian player who wants to understand exactly how their information is handled. Your trust is the foundation of the long-term relationship between you and OP09 — and protecting your privacy is the highest form of respect we can show for that trust. If you have any questions about this Privacy Policy, please don't hesitate to reach out to us at [email protected].

RM 588 Welcome Bonus Awaits

Play Safely with Full Privacy Protection at OP09

Your data is fully protected. Register for an op09 account today and enjoy an online casino experience that is safe, fair, and fully compliant with Malaysia's PDPA 2010 standards.

Register for Free Now Log In
256-bit SSL Encryption PDPA 2010 Compliance No Data Sales Fast Payments in MYR
Responsible Gaming — OP09's Ongoing Commitment

Privacy protection at OP09 covers the protection of your gambling data — your game history, bet amounts, and playing patterns are information we treat with the utmost confidentiality. This platform is for entertainment purposes only and is strictly for individuals aged 18 and above in Malaysia.

If you need help managing your play habits, self-control tools are available within your op09 account — all in line with our privacy principles, which ensure your information remains strictly confidential.

Read OP09's Responsible Gaming Policy
Important Note About This Privacy Policy

This OP09 Privacy Policy is to be read together with Terms & Conditions and Responsible Gaming Policy of ours — together, they form a comprehensive consumer protection framework on the op09 Malaysia platform.

By using the OP09 platform, you confirm that you have read, understood, and agreed to this Privacy Policy, which takes full effect from 1 January 2026.

Frequently Asked Questions About Data Privacy at OP09

Answers to the most frequently asked questions by Malaysian members regarding privacy protection on the op09 platform

Absolutely not. op09 does not sell, rent, or share members' personal data with any third-party advertisers or marketers. Your data is used solely for platform operational purposes — processing MYR transactions, account management, security, and customer support. The only third parties that may receive limited data are technical service providers who assist us in operating the platform (such as payment processors for Touch 'n Go eWallet, GrabPay, and other Malaysian payment methods) — and they are bound by strict confidentiality agreements that prohibit them from using your data for any other purpose. If you would like further details, please contact us at [email protected] and we will be happy to provide more information.

OP09 uses 256-bit SSL encryption to protect all payment information while in transit. For payment information that must be stored (such as eWallet account numbers for recurring withdrawals), that data is held in a database encrypted separately from the platform's core systems. We do not store complete authentication credentials for your payment methods — only the identifiers necessary to process transactions. For each new transaction, verification is handled through a secure payment gateway without OP09 storing your eWallet password or PIN. Our security systems are regularly audited by independent cybersecurity firms to ensure the highest protection standards are maintained.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA 2010. However, there are important limitations to this right that you should be aware of. We are unable to erase all data entirely, as certain categories must be retained in accordance with Malaysian law — for example, financial transaction records and KYC documents are required to be kept for a minimum of 7 years under Malaysia's financial and AML legislation. What we can delete includes personal profile information, marketing preferences, and data that is not required for legal compliance. To submit a data deletion request, please close your op09 account first, then send your request to [email protected] with the subject line "Data Deletion Request". We will respond within 14 business days with a detailed breakdown of what can and cannot be deleted, along with the reasons why.

OP09 has a comprehensive data breach incident response plan in place. Should a data breach occur that may affect members' personal data, we will take the following steps immediately: First, our security team will contain and investigate the incident. Second, members whose data may have been affected will be notified via their registered email address within 72 hours of the incident being discovered, in line with PDPA 2010 notification requirements. The information provided will cover the type of data potentially affected, the actions we have taken, and steps you can take to protect yourself. The relevant authorities in Malaysia will also be notified as required by law. We enforce round-the-clock security monitoring and conduct regular penetration testing to minimise the risk of a data breach occurring.

No. OP09 only uses cookies for purposes within our own platform — we do not use cross-site tracking cookies that follow your activity on other websites outside of OP09. The cookies we use serve three primary purposes: maintaining your login session (essential cookies), remembering your preferences such as your chosen language (functional cookies), and analysing how you use the OP09 platform for improvement purposes — this analytics data is collected in aggregate and anonymised form. You can view and manage the cookies used by OP09 through your browser settings. Disabling certain cookies may affect specific platform functions such as automatic login persistence, but will not affect the security of your account.
View All FAQs
Bahasa Melayu