Privacy Policy

This Privacy Policy ("Policy") describes how Ovodewa ("we", "us", "our", "the Platform") collects, processes, stores, discloses, and protects the personal data of individuals ("you", "your", "the Player", "the User") who access or use the website located at https://ovodewa.cam and all associated services, features, and functions.

Ovodewa is an English-language online casino and sports betting platform operating primarily in the Malaysian market. This Policy is drafted in English, which shall be the governing language for all purposes of interpretation and dispute.

By registering an account, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not consent to this Policy, you must not use the Ovodewa platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

The following defined terms are used throughout this Privacy Policy:

Ovodewa collects the following categories of personal data:

Ovodewa collects personal data through the following mechanisms:

• Direct provision by you: When you register an account, complete KYC verification, contact our support team, participate in promotions, or update your account profile, you provide personal data directly to us.
• Automated collection: When you access the platform, our servers automatically collect technical data including your IP address, device identifiers, browser information, and session data. This collection is necessary for the secure and functional operation of the platform.
• Payment processors: When you make a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (covering Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect), or cryptocurrency channels, transaction confirmation data is passed to Ovodewa by the relevant payment processor.
• Cookies and tracking technologies: We use first-party cookies to maintain session integrity and personalise your experience. Full details are set out in the Cookies section of this Policy.
• Identity verification partners: Where KYC verification is conducted via a third-party verification service, the outcome of that verification — together with relevant document metadata — is shared with Ovodewa for compliance purposes.

Ovodewa processes your personal data for the following specific purposes:

• Account creation and management: To register, authenticate, and maintain your Ovodewa player account, including processing changes to account details and preferences.
• Identity and age verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with KYC and AML obligations. This is a mandatory process and access to full platform features is conditional upon its completion.
• Payment processing: To process deposits and withdrawals via your selected payment method, including cross-referencing payment account ownership with your registered identity.
• Platform delivery and improvement: To deliver casino games, sports betting markets (including Liga Super Malaysia, EPL, UFC, and other events), live casino services, and all other platform features. Usage data is analysed in aggregate to improve platform functionality and user experience.
• Customer support: To respond to support queries, resolve disputes, and maintain communication records for quality assurance and regulatory compliance purposes.
• Fraud and security monitoring: To detect and prevent unauthorised access, fraudulent transactions, money laundering, bonus abuse, and other activities that may harm the integrity of the platform or its players.
• Responsible gambling monitoring: To monitor gaming behaviour for indicators of problematic gambling, apply player-set limits, enforce self-exclusions, and proactively reach out where patterns of concern are identified.
• Legal and regulatory compliance: To fulfil our obligations under applicable international online gaming regulations, anti-money laundering standards, and any legal processes to which Ovodewa is subject.
• Marketing communications: Where you have opted in to receive promotional communications, we may send you information about bonuses, new game releases, and seasonal promotions. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting support.

Ovodewa processes your personal data one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and Ovodewa — primarily account registration, payment processing, and platform delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and responses to lawful regulatory requests.
• Legitimate interests: Processing conducted for the purpose of fraud prevention, platform security, responsible gambling monitoring, and business analytics — where these interests are not overridden by your individual privacy rights.
• Consent: Processing for optional activities, including marketing communications and the use of non-essential cookies, where you have provided clear and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Ovodewa does not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: We share transaction data with payment gateway providers — including those processing Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency channels — solely for the purpose of executing your requested transactions.
• Identity verification providers: Where we engage third-party KYC/AML verification partners, we share the minimum necessary identity and document data required to complete verification. These providers operate under contractual data processing agreements and are prohibited from using your data for any other purpose.
• Game software providers: Where casino games are delivered via licensed third-party software providers, limited technical session data may be processed by those providers to operate the game engine. Personal identity and financial data are not shared with game providers.
• Legal and regulatory authorities: We may disclose personal data where required by law, court order, regulatory demand, or in response to a lawful request from a competent authority. We will, where legally permitted, notify you of any such disclosure.
• Business succession: In the event of a merger, acquisition, or transfer of all or part of Ovodewa's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

In the course of providing our services, your personal data may be processed on servers or by service providers located outside of Malaysia. Where such international transfers occur, Ovodewa ensures that adequate safeguards are in place to protect your data to a standard consistent with this Policy, including the use of contractual data protection clauses with all international data processors.

If you have concerns about international data transfers in relation to your personal data, please contact us using the details in the Contact section of this Policy.

Ovodewa retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Personal data is retained for the duration of your active account relationship with Ovodewa.
• Post-closure retention: Following account closure (whether voluntary or by Ovodewa), we retain identity and financial transaction records for a minimum period of five (5) years to comply with anti-money laundering regulations and to facilitate the resolution of any post-closure disputes.
• KYC documents: Identity and age verification documents are retained for the period required by applicable regulatory standards, which is typically five (5) years from the date of collection or account closure, whichever is later.
• Communication records: Support chat transcripts and email correspondence are retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing data: Where you have consented to marketing communications, associated data is retained until you withdraw consent, at which point it is deleted from active marketing lists within30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data deletion procedures.

Ovodewa uses cookies and similar tracking technologies on the platform. The following cookie types are used:

• Essential cookies: Strictly necessary for the operation of the platform. These cookies maintain your session state, authenticate your login, and enable core security functions. They cannot be disabled without materially impairing platform functionality.
• Preference cookies: Used to remember your settings and preferences, such as language selection and display options, to improve your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the platform — such as which game categories are most visited and how players navigate between sections. This data informs platform improvements and does not identify you personally.

Ovodewa does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies on the platform.

Ovodewa implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including identity document copies, financial records, and payment method details;
• Two-factor authentication (2FA) available to all registered players and mandatory for all internal administrative access;
• Role-based access controls, ensuring that internal staff can only access personal data that is necessary for their specific role and function;
• Real-time security monitoring and intrusion detection systems to identify and respond to potential threats;
• Regular security audits and penetration testing conducted by qualified security professionals;
• Staff privacy and security training to ensure all personnel handling personal data do so in compliance with this Policy and applicable standards.

In the event of a personal data breach that poses a risk to your rights and freedoms, Ovodewa will notify affected individuals in a timely manner and take all reasonable steps to contain and remediate the breach.

Subject to applicable law, you hold the following rights in relation to your personal data held by Ovodewa:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
• Right of Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. Account contact details can be updated directly through your account settings; identity corrections require submission of supporting documentation.
• Right of Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overiding legal obligation requires its retention. Note that mandatory regulatory retention requirements (see Section 9) may limit the scope of deletion requests.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, subject to our demonstrating compelling legitimate grounds that override your interests.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without penalty.

To exercise any of these rights, please contact our data privacy team using the details in Section 15. We may require verification of your identity before processing data rights requests. All requests are responded to within 30 days; where a request is complex or numerous, this period may be extended by a further 30 days with notice to you.

The Ovodewa platform is strictly an adults-only service. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and additional KYC checks are conducted to confirm that players meet the minimum age requirement.

If we discover or are notified that we have inadvertently collected personal data from a minor, we will promptly close the associated account, delete the personal data, and take appropriate steps to prevent future incidents.

Ovodewa may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where material changes are made, we will notify registered players via the email address associated with their account or via a prominent notice on the platform prior to the changes taking effect.

The updated Policy will take effect from the date shown in the "Last Updated" notice at the top of this page. We encourage you to review this Policy periodically to remain informed about how we protect your data. Your continued use of the platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Ovodewa, please contact us through the following channels:

• Data Privacy Enquiries (Email): [email protected] — please include "Privacy Policy" or "Data Request" in the subject line. Responses within 4 hours for general queries; data rights requests fulfilled within 30 days.
• Live Chat: Available24 hours a day, 7 days a week via the Ovodewa platform. Suitable for immediate queries and initial guidance on data rights requests.
• Serving players across: Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all of Malaysia.

When submitting a data rights request, please provide your registered account username, the email address associated with your account, and a clear description of your request. We may additional identity verification before actioning any request.