Ocean 13 Privacy Policy – Data Protection for Malaysian Members

1 Introduction & Scope of Privacy Policy

Ocean 13 ("we", "platform", or "Ocean 13") is an online betting platform operating in Malaysia, offering a wide range of gaming options including Malaysia Super League and EPL football, live baccarat, virtual sports, MPL Malaysia e-sports, online slots, and more. We take privacy seriously and are committed to protecting the personal information of every member who trusts us.

This Privacy Policy applies to all personal information collected through:

• Ocean 13's official website at ocean13.my and all associated subdomains.
• The Ocean 13 mobile app, available for download.
• Your interactions with our customer support team via Live Chat, email, or WhatsApp.
• Account registration, deposits, withdrawals and all financial transactions on the Ocean 13 platform.
• Your participation in promotions, contests, and loyalty programmes such as Ocean 13 VIP Rewards.

This Privacy Policy is to be read together with Ocean 13 Terms & Conditions. In the event of any conflict between the two documents regarding data protection, this Privacy Policy shall prevail.

2 Personal Information We Collect

Ocean 13 collects various categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of what we collect and why:

2.1 Information You Provide Directly

• Identity Information: Full name (as per MyKad or passport), MyKad or passport number, date of birth, and gender.
• Contact Information: An active Malaysian mobile number, email address, and residential address in Malaysia.
• Account Information: Your chosen username, password (stored in encrypted form), security questions and answers.
• Financial Information: Bank account details (Bank Simpanan Nasional, Maybank, CIMB, Public Bank, RHB, and others), and digital wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) for payment and withdrawal purposes.
• Verification Documents: A copy of your MyKad, bank statement, or other documents requested during the KYC (Know Your Customer) process.

2.2 Automatically Collected Information

• Device & Technical Data: IP address, browser type, operating system, device model, unique device identifier.
• Usage Data: Pages visited, session duration, click actions, games played, bets placed, and transaction history.
• Location Data: Country/city-level geolocation data for security and legal compliance purposes.
• Cookie Data: Session cookies, preference cookies, and analytics cookies (see Section 6 for more details).

2.3 Information From Third-Party Sources

In certain circumstances, Ocean 13 may receive your information from trusted third-party sources, including:

• Third-party identity verification service providers used for the KYC process.
• Payment service providers such as FPX, DuitNow and digital wallets for transaction verification.
• Fraud prevention agencies and online security protection platforms.

3 How We Use Your Information

Ocean 13 uses the personal information collected for legitimate and transparent purposes. Below is a detailed explanation of how your data is used:

3.1 Account Management & Services

Your personal information is used to process account registration, verify your identity through KYC, process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, manage withdrawals to your registered bank account or digital wallet, and provide effective customer support whenever you need assistance.

3.2 Security & Fraud Prevention

Technical data and usage information are used to detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised access to member accounts. Ocean 13 operates automated monitoring systems running 24/7 to identify any suspicious activity on our platform.

3.3 Legal Compliance

As a platform operating in Malaysia, Ocean 13 has a legal obligation to:

• Verifying the age and identity of all members (minimum 18 years old).
• To comply with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• Complying with court orders or requests from lawful authorities.
• Maintaining financial transaction records for the period prescribed by law.

3.4 Service Improvement & Marketing

With your consent, Ocean 13 uses your data to personalise your gaming experience, send relevant bonus offers such as Welcome Bonuses and VIP Rewards, analyse platform usage patterns for continuous improvement, and keep you informed about new games, seasonal promotions and special events such as EPL football campaigns or MPL Malaysia esports leagues.

4 Data Sharing & Disclosure

Ocean 13 does not sell your personal information to any third party. However, in certain limited circumstances, we may share your data with the following parties:

4.1 Third-Party Service Providers

Ocean 13 works with trusted third-party service providers to operate our platform, including:

• Payment Provider: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay – to securely process your deposits and withdrawals.
• Identity Verification Provider: Third-party KYC services to verify your identity documents in accordance with Malaysian legal requirements.
• IT & Security Service Providers: Cloud hosting companies, cybersecurity providers and fraud detection software vendors.
• Marketing Service Provider: Analytics and marketing email platforms that help us deliver relevant communications to you (with your consent only).

All third-party providers are bound by strict data protection agreements and are only permitted to use your data for purposes specified by Ocean 13.

4.2 Legal Requirements

Ocean 13 may disclose your personal information to government authorities, law enforcement, or regulatory bodies when:

• Required to do so by Malaysian law or a valid court order.
• Required to investigate fraudulent activity, money laundering, or national security threats.
• Required to protect the rights, property or safety of Ocean 13, its members or the public.

5 Personal Data Security

The security of your personal information is our top priority Ocean 13. We invest in the latest security technologies and procedures to keep your data protected at all times:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and Ocean 13's servers is encrypted using 256-bit SSL/TLS protocols, the highest industry standard.
• Secure Server Hosting: Ocean 13 member data is stored in reputable data centres with strict physical and digital access controls, 24/7 monitoring, and a comprehensive disaster recovery plan.
• Two-Factor Authentication (2FA): Ocean 13 offers and encourages the use of 2FA for all member accounts as an added layer of protection against unauthorised access.
• Regular Security Audits: Ocean 13's security systems are regularly audited by independent cybersecurity experts to identify and address any potential vulnerabilities.
• Staff Training: All Ocean 13 staff who handle personal data undergo rigorous data protection training and are bound by legally enforceable confidentiality agreements.
• Internal Access Controls: Access to member personal data within Ocean 13 operates on a minimum privilege basis — only staff who require access to perform their duties are permitted.

6 Cookies & Tracking Technologies

Ocean 13 uses cookies and similar tracking technologies to enhance your experience on our platform. Here is an overview of the types of cookies we use:

6.1 Types of Cookies

• Essential/Session Cookies: These cookies are essential for the core functionality of the Ocean 13 platform — such as keeping you logged in, saving your betting cart, and securing your transactions. They cannot be disabled without affecting platform functionality.
• Preference Cookies: These cookies allow Ocean 13 to remember your preferences — such as interface language, odds display format and game preferences — for a more personalised experience.
• Analytics Cookies: We use analytics tools to understand how members use the Ocean 13 platform — which pages are most popular, how long sessions last and where users encounter issues — all of which help us improve our services.
• Marketing Cookies: With your consent, these cookies help Ocean 13 show you relevant ads and promotions based on your betting interests, whether football, baccarat, or e-sports.

6.2 Cookie Controls

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Ocean 13 platform. For step-by-step instructions on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to your browser's help section.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information held by Ocean 13:

To exercise any of the rights above, please contact Ocean 13's Data Protection Officer (DPO) by email at privacy@ocean13.my or support@ocean13.my. We will process your request within 14 business days from the date of receipt, in line with Malaysia's PDPA requirements. For complex cases, this period may be extended by up to 30 days with notice to you.

8 Data Retention & Storage

Ocean 13 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law.

• Active Account Records: Retained for the duration your Ocean 13 account remains active and for an additional period following account closure to meet legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with the requirements of the Malaysian Companies Act and AMLATFPUAA.
• KYC & Identity Verification Data: Retained for a minimum of 6 years after account closure or the end of the business relationship, in accordance with Malaysia's anti-money laundering legal requirements.
• Support Communication Logs: Retained for 3 years for quality control purposes and as a reference in the event of a dispute.
• Marketing Data (with consent): Retained until you withdraw your consent or close your Ocean 13 account.

Once the retention period expires, Ocean 13 will securely delete or destroy your personal data using industry-recognised methods, ensuring it cannot be recovered or accessed by any party.

9 Children's Privacy

Ocean 13 is a betting platform intended strictly for individuals aged 18 and above. We do not knowingly collect, process or store any personal information from individuals under the age of 18.

All new account applicants are required to confirm that they are 18 years of age or older at the time of registration. Our rigorous KYC process, including MyKad verification, helps ensure that only adults can register for and use Ocean 13 services.

10 Amendments to the Privacy Policy

Ocean 13 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service improvements. When material changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notices via registered email or in-platform notifications to all active Ocean 13 members.
• For significant amendments, we may request your renewed consent before you continue using our services.

Your continued use of the Ocean 13 platform following any amendments to this Privacy Policy constitutes your acceptance of the updated version. We encourage you to review this page periodically to stay informed on how Ocean 13 protects your personal information.

11 Contact Us – Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Ocean 13 handles your personal information, please contact our Data Protection Officer (DPO) through the following channels:

If you are not satisfied with Ocean 13's response to your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia under the Ministry of Digital. Further information is available on the Department's official website.