Privacy Policy
Opaltogel is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, why we collect it, how it is used and protected, and what rights you hold over your personal data.
Six Things We Want You to Know Upfront
All personal data transmitted to and from the Opaltogel platform is protected by 256-bit SSL encryption — the same standard used by global financial institutions. Data at rest is also stored in encrypted form.
Opaltogel does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data is used solely to operate and improve the platform and to comply with legal obligations.
You have the right to access, correct, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within the timeframes set out in this Policy.
Identity documents submitted for KYC verification are processed exclusively through our secure in-platform portal. Documents are reviewed by authorised compliance staff only and are never shared with third parties beyond what is required by law.
Opaltogel uses cookies to maintain session security, remember preferences, and analyse platform performance. We do not use cookies to serve third-party advertising. Cookie settings can be managed through your browser.
If you have opted into marketing communications, you may withdraw consent at any time by contacting our support team. Transactional messages related to your account activity (deposits, withdrawals, security alerts) cannot be disabled.
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How Data is Collected
- 5. Purposes of Processing
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Data Security
- 10. Cookies & Tracking
- 11. Your Data Rights
- 12. Minors & Age Verification
- 13. International Transfers
- 14. Amendments
- 15. Contact Us
Introduction
Opaltogel ("we", "us", "the Company", "the Platform") operates the online casino and sports betting platform accessible at opaltogel.cam. We take the privacy of our players seriously. This Privacy Policy ("Policy") describes how Opaltogel collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who access or use our platform.
This Policy applies to all personal data processed in connection with your use of the Opaltogel platform, including during account registration, KYC verification, payment processing, gameplay, customer support interactions, and marketing communications.
By registering an account or otherwise using the Opaltogel platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.
This Policy is published in English. In the event of any conflict between translated versions (if any) and this English version, the English version shall take precedence.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Opaltogel — the entity that determines the purposes and means by which personal data is processed. |
| "Data Processor" | A third party that processes personal data on behalf of Opaltogel under a data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a stated purpose. |
| "KYC" | Know Your Customer — the identity verification process requiring submission of identity and address documents before withdrawals are processed. |
| "Cookie" | A small text file placed on a user's device by a web server to store session information or preferences. |
Data We Collect
Opaltogel collects personal data across several categories depending on how you interact with the platform:
When you create an account, we collect your full name, date of birth, email address, mobile phone number, and chosen username and password. This data is required to establish and maintain your account.
To comply with our anti-money-laundering and responsible gambling obligations, we collect copies of your government-issued photo identity document (Malaysian IC/MyKad, Passport, or Driver's License), proof of current address (utility bill, bank statement, or official correspondence dated within 3 months), and in certain cases a selfie photograph. These documents are processed solely for verification purposes.
We collect transaction data associated with deposits and withdrawals, including payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, or cryptocurrency wallet references), transaction amounts in MYR, transaction timestamps, and confirmation references. Full financial account credentials (e.g., bank account passwords) are never stored by Opaltogel.
We collect data about how you use the platform, including games played, betting history, session durations, pages visited, search queries within the platform, and feature interactions. This data is used to personalise your experience and to identify unusual or potentially harmful patterns of use.
When you access the platform, we automatically collect your IP address, browser type and version, device type and operating system, device identifiers, time zone, and referring URL. This data is used for security, fraud detection, and platform optimisation purposes.
When you contact our support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments. This data is used to resolve disputes, train support staff, and improve service quality.
How Data is Collected
Personal data is collected through the following means:
- Directly from you — when you register an account, complete KYC, make a deposit, contact support, or otherwise voluntarily provide information;
- Automatically — via cookies, web beacons, server logs, and device fingerprinting technology as you navigate and interact with the platform;
- From payment providers — transaction confirmation data passed back from payment gateways including FPX, DuitNow, and e-wallet providers upon completion of a transaction;
- From third-party verification services — identity verification data may be cross-referenced against third-party fraud prevention and sanctions-screening databases as part of our compliance obligations;
- From publicly available sources — where necessary for fraud prevention or due diligence, we may access publicly available records.
Purposes of Processing
Opaltogel processes personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | To create, maintain, and manage your player account, including authentication and account security. |
| Payment Processing | To process deposits and withdrawals in MYR via your chosen payment method, and to maintain transaction records. |
| KYC & Compliance | To verify your identity and age, comply with anti-money-laundering obligations, and screen against sanctions databases. |
| Fraud & Security | To detect, investigate, and prevent fraudulent activity, account takeovers, and other prohibited conduct. |
| Responsible Gambling | To monitor gameplay patterns and identify indicators of problem gambling in order to deliver appropriate interventions and support tools. |
| Customer Support | To handle support enquiries, resolve disputes, and communicate account-related information. |
| Platform Improvement | To analyse usage data and improve platform performance, game selection, and user experience. |
| Marketing | To send promotional communications to players who have consented to receive them. You may withdraw consent at any time. |
| Legal Obligations | To comply with applicable laws, regulations, court orders, and requests from competent authorities. |
Legal Basis for Processing
Opaltogel processes personal data on one or more of the following legal bases, depending on the purpose of processing:
- Contractual necessity: Processing is required to perform the contract between Opaltogel and the Player — including account creation, transaction processing, and platform access;
- Legal obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money-laundering rules, KYC mandates, and responsible gambling obligations;
- Legitimate interests: Processing is carried out in pursuit of Opaltogel's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by the Player's rights and freedoms;
- Consent: For marketing communications and certain optional data processing activities, Opaltogel relies on your freely given and withdrawable consent.
Data Sharing & Disclosure
Opaltogel does not sell or rent personal data to third parties. We may share personal data with third parties only in the following limited circumstances:
Transaction data is shared with payment processors and financial institutions (including FPX operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and linked Malaysian banks including Maybank, CIMB, Public Bank, Hong Leong, and RHB) to the extent necessary to process deposits and withdrawals.
KYC data may be processed by authorised third-party identity verification and fraud-screening service providers acting as data processors under contractual obligations that include data protection requirements equivalent to those applied by Opaltogel.
Limited technical data (such as session tokens and bet amounts) may be shared with third-party game providers in order to deliver gameplay functionality. These providers do not receive personally identifiable information beyond what is technically necessary.
Personal data may be disclosed to competent authorities, regulators, or law enforcement agencies where required by applicable law, court order, or in response to a lawful request. Opaltogel will, where legally permissible, notify affected Players of such disclosures.
In the event of a merger, acquisition, asset sale, or restructuring involving Opaltogel, personal data may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations. Players will be notified of any such transfer where required by applicable law.
All third-party service providers engaged by Opaltogel are required to process personal data only on Opaltogel's instructions and in accordance with data protection standards consistent with this Policy.
Data Retention
Opaltogel retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention principles apply:
- Account data is retained for the duration of the active account relationship and for a minimum period following account closure as required by applicable anti-money-laundering and gaming regulations (typically five to seven years);
- KYC documentation is retained for a minimum of five years following the end of the business relationship, or longer if required by the applicable licensing framework;
- Transaction records are retained for a minimum of five years for audit and regulatory compliance purposes;
- Support communications are retained for a minimum of three years for dispute resolution and service quality purposes;
- Marketing consent records are retained for as long as consent remains active and for a reasonable period thereafter as evidence of compliance.
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Data Security
Opaltogel implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and the Opaltogel platform;
- Encryption of sensitive data at rest, including KYC documentation and financial records;
- Role-based access controls ensuring that personal data is accessible only to authorised staff on a need-to-know basis;
- Multi-factor authentication for administrative system access;
- Regular penetration testing and vulnerability assessments conducted by independent security specialists;
- Incident response procedures enabling prompt detection, containment, and notification of data breaches where required.
While Opaltogel applies rigorous security measures, no system can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own login credentials and for notifying us immediately if they suspect unauthorised access to their account.
Cookies & Tracking Technologies
Opaltogel uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the platform. The following categories of cookies are used:
| Cookie Type | Purpose | Persistence |
|---|---|---|
| Essential / Session | Required to maintain your login session and enable core platform functionality. Cannot be disabled without impairing platform use. | Session duration |
| Security | Used for fraud detection, device fingerprinting, and identifying suspicious login attempts. | Up to 12 months |
| Preference | Stores your platform preferences such as language, display settings, and game history. | Up to 12 months |
| Analytics | Collects anonymised usage data to help us understand how Players interact with the platform and identify areas for improvement. | Up to 24 months |
You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Opaltogel platform. Opaltogel does not use cookies to deliver third-party advertising.
Your Data Rights
Subject to applicable law, you have the following rights with respect to your personal data held by Opaltogel. To exercise any of these rights, please contact our support team using the details set out in Section 15.
You may request a copy of the personal data Opaltogel holds about you. We will provide this within 30 days of a verified request.
You may request correction of inaccurate or incomplete personal data. Account details can be updated via your profile settings or by contacting support.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
You may object to processing carried out on the basis of legitimate interests, including profiling. You may withdraw consent for marketing communications at any time.
Certain data rights may be limited where Opaltogel has overriding legal obligations — for example, KYC and transaction records that must be retained under applicable anti-money-laundering regulations. We will explain any such limitations when responding to your request.
Minors & Age Verification
The Opaltogel platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data of individuals under the age of 21. Age verification is conducted as part of the KYC process for all players.
If Opaltogel becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be closed immediately, all data associated with that account will be deleted or anonymised, and any balance will be reviewed in accordance with applicable procedures.
If you are aware of a minor accessing Opaltogel, please notify our support team immediately. We take underage gambling extremely seriously and co-operate fully with any investigation into such cases.
International Data Transfers
As an internationally operated platform, Opaltogel may transfer personal data to countries or territories outside Malaysia for the purposes set out in this Policy — for example, where payment processing partners, game software providers, or fraud-screening services operate infrastructure outside Malaysia.
Where personal data is transferred internationally, Opaltogel takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual data protection clauses with receiving parties that impose obligations consistent with internationally recognised data protection standards.
Amendments to This Policy
Opaltogel reserves the right to update or modify this Privacy Policy at any time. Where changes are material, we will notify you via the email address registered on your account and/or by posting a prominent notice on the platform before the amendments take effect.
Your continued use of the Opaltogel platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. The most current version of this Policy is always available at opaltogel.cam/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to your personal data, please contact our Data Protection team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days.
Email: [email protected] — plain text only, not a clickable link
Live Chat: Available 24/7 via the platform
Please include "Privacy Request" in the subject line of your email and provide sufficient detail to allow us to identify your account and process your request efficiently. We may need to verify your identity before actioning certain data rights requests.
Play with Confidence — Your Data is in Safe Hands
Opaltogel processes your personal data responsibly, transparently, and securely. We never sell your information, we encrypt everything that matters, and we give you full control over your own data. Focus on the game — we'll handle the rest. For players aged 21 and above only.
256-bit SSL encrypted · Data never sold · 21+ only