Who this policy covers, and when it starts
This ocwin Privacy Policy applies to anyone who opens the site, installs the app, registers an account or plays with real money. It starts at the first page load, not at the moment you log in. Browsing without an account still creates limited technical records, such as the pages requested, the browser used and the rough region your connection comes from.
Registration is limited to players aged 18 and above, so age confirmation is treated as part of the same data process described below. If you hold an ocwin account and someone in your household also plays, each person needs a separate login and a separate set of contact details.
What ocwin records from the first visit onward
Everything below is tied to a function you actually use: a deposit, a withdrawal, a game launch or a support chat. ocwin does not collect fields that no team needs.
| Record type | What it holds | When it is captured |
|---|---|---|
| Account identity | Full name, date of birth, National ID Card number | At registration |
| Contact details | Mobile number and residential address | At registration |
| Payment references | Touch ’n Go eWallet reference, DuitNow ID, FPX bank name, amount | On each deposit and withdrawal |
| Device data | App version, operating system, screen size, language setting | On install and every session |
| Play history | Titles opened, bets placed, session length, bonus progress | During play |
Passwords are stored as one-way hashes. The ocwin support team can see that a login exists, but nobody on the team can read your password back to you.
Why each field is there
Each item in the table has a job. Remove it and something on the account stops working.
- Identity fields confirm you are 18 or older and keep a withdrawal matched to the right person.
- A mobile number and address let ocwin reach you about a delayed deposit or a verification request.
- Payment references settle deposits in about 1 minute and release approved withdrawals in about 43 minutes.
- Device and session data stop one login from running on two phones in different states at once.
- Play history calculates the 1.1% daily cashback and tracks wagering against bonus terms at 18 times.
- Verification documents, meaning a National ID Card, Passport or Driving Licence, are checked before your first withdrawal; the review takes about 2 hours.
Payments: what ocwin sees, what stays with you
ocwin never asks for an e-wallet PIN, an online banking password or a photograph of a bank card. Touch ’n Go eWallet, DuitNow, FPX Online Banking and bank transfer all run through licensed gateways that return a reference number instead of your credentials, so the sensitive part of the transaction never reaches our servers.
What we do keep is the amount, the method and the gateway reference. That trio is enough to trace a deposit that has not landed, and it is what a support agent reads back to you when you ask about a pending RM50 withdrawal, the account minimum. The first deposit bonus, the 21% reload offer and the RM80 referral credit are all tracked against the same payment record, so a missing credit can be checked quickly.
How long records stay on file
| Record | Retention approach |
|---|---|
| Account profile | Held while the account is open, then removed after a confirmed closure |
| Deposit and withdrawal records | Held for the period Malaysian financial rules require |
| Verification documents | Held while the account is active and through the review window after it |
| Support chat transcripts | Held so a case can be reopened and checked |
| Play history | Held while the account is active and used to settle disputes |
When the retention period for a record ends, it is deleted or reduced to a figure that can no longer be linked back to you. Records tied to an open dispute or a legal request stay until that matter closes.
Your rights over your ocwin account data
You do not need a special form. The privacy team can be reached through the same 24/7 Live Chat channel that handles deposits, and every request is logged with a case number you can quote later.
- Access: ask for a copy of the profile, play history and payment records ocwin holds on you.
- Correction: a misspelt name, an old address or an expired ID can be updated once verification is redone.
- Deletion: close the account and ask for personal data to be removed, subject to records we must keep.
- Restriction: ask us to stop using your details for promotion or bonus messages.
- Complaint: raise the issue with the privacy team first; if the answer is unclear, escalate it through the help centre.
Identity is confirmed before any request is actioned, so a stranger cannot pull a player's file. Requests that would break a legal or licensing duty are explained rather than silently refused.
Security controls behind the ocwin platform
Traffic between your device and ocwin is encrypted with SSL. Passwords are hashed rather than stored, staff access to player files is limited to the team handling your case, and verification documents sit behind tighter permissions than ordinary account details. Sessions expire, and every device that signs in is listed so you can remove one you no longer use.
If a breach ever affected player records, affected accounts would be notified through the contact details on file, with a short explanation of what was exposed and what to change. Keeping your mobile number current is the practical part you control.
Age checks and underage accounts
ocwin is an 18+ product. Age is confirmed at registration and can be re-checked at withdrawal, which is why a date of birth cannot be edited freely after verification. If an account is found to belong to someone under 18, it is closed and the balance is handled under the Terms & Conditions. Parents who spot a shared device logged in should contact support so the session can be ended.
Reaching the ocwin privacy team
Privacy requests, correction queries and questions about this policy all go through 24/7 Live Chat, open from the site on desktop or inside the ocwin app. Agents can confirm what is on file, start a correction and hand a deletion request to the privacy team. Written answers and policy detail also sit in the help centre, which covers login trouble, verification and withdrawal timing in plain language.
This policy is reviewed when payment rails, game providers or verification rules change. The version published on this page is the one that applies to your account.