This page sets out the legal basis on which ong321 operates accounts, processes transactions, and handles content for users in Malaysia. Access to our platform and any services connected to it depends on local law and is available only where local law permits.
Account Terms
DuitNow & FPX Context
User Rights
Jurisdiction-Dependent Access
POLICY POSTURE
How ong321 Approaches Legal Obligations
Our legal position is straightforward: we apply the terms set out here to every account registered on ong321, and those terms are governed by the rules of the jurisdiction in which the account is permitted to operate. If there is ever a conflict between a general platform term and a jurisdiction-specific rule, the jurisdiction-specific rule takes precedence for accounts in that region. We do not make blanket claims about licence status or cross-border legal clearance — eligibility is assessed at the point of account creation, and the current status of your account access is visible after you log in. Transactions processed through DuitNow, FPX, or GrabPay are subject to the individual terms of those payment rails in addition to our own wallet policy. We keep a record of the version of these terms that was active when your account was created, and any material change to the policy is communicated through your registered contact details before it takes effect. Where a section of this policy conflicts with applicable law in your region, that section is read as amended to the minimum extent needed to comply — the rest of the policy stays in force.
DuitNow
Transactions via DuitNow are covered by both our wallet policy and DuitNow's own transfer terms.
FPX
FPX online banking payments are subject to the FPX network's own operating rules alongside our account terms.
GrabPay
GrabPay wallet flows follow GrabPay's service conditions in addition to the terms stated here.
SCOPE BOUNDARIES
What Falls Inside and Outside This Policy
Not every action on the platform sits under the same legal framework. This section draws a clear line so you know exactly where each policy applies — and where a separate set of rules governs what you do.
Account Access
Creating, suspending or closing an account falls fully within this policy. The steps shown on the account page govern how access is granted or restricted, and ong321 reserves the right to act on those steps without prior notice where required by law.
Transactions
Wallet movements — including DuitNow transfers, FPX payments and GrabPay top-ups — are governed jointly by this policy and the operating rules of each payment rail. A dispute about a transaction amount is handled first through the account support path.
Site Content
Game titles, descriptions and any odds or prize information shown in the lobby are covered by our content terms. RTP figures appear only where the game studio — such as PG Soft or Habanero — chooses to publish them; we do not add or alter those figures.
Third-Party Services
Services operated by third parties — payment processors, game studios, identity verification providers — are governed by their own terms. Our policy does not extend to those services, and we do not accept liability for actions taken by a third party under their own rules.
YOUR ACCOUNT RIGHTS
Practical Actions Available Under This Policy
You hold several concrete rights in relation to your ong321 account and the data we hold about it. These rights are not conditional on a specific account tier — they apply from the moment an account is created. Reviewing your transaction history is available any time through the account dashboard after login; the record covers all wallet movements, including DuitNow and FPX entries. If any detail in your account profile is incorrect — a name spelling, contact address or registered email — you can submit a correction request through the support channel and we will action it within the timeframe shown in your case reference. Questions about how your data is held, what is retained and for how long, or how to request its removal where local law permits, are handled through the legal contact path listed in the Support section of this page. We keep the process direct: one contact path, a case reference issued on receipt, and a response aligned to the timeframe stated at the time of your request.
Review Records
Your full transaction log is accessible from the account dashboard. Every wallet entry — including FPX and DuitNow movements — appears there with a timestamp and reference number.
Correct Account Details
Submit a correction through the support channel if any profile detail is wrong. We action corrections after identity confirmation, and the updated record is visible in your account once the change is processed.
Raise a Policy Question
Any question about how this policy applies to your account can be submitted via the legal contact path. A case reference is issued on receipt so you can track the response.
Request Account Support
Where local law gives you the right to request data removal or restriction, submit that request through the legal channel. We confirm receipt and state the applicable response timeframe in the acknowledgement.
LEGAL CONTACT PATHS
Reach Us on Policy Matters
Policy questions, correction requests and data inquiries each have a direct contact path. Use the channel that matches your query type — this keeps response times accurate and case references traceable.
Live Chat
The live chat window on the account page handles general policy questions and can escalate to the legal team when needed. Start there for the quickest case reference.
Email — Legal
For written policy requests, data queries or correction submissions, use the legal email address shown on the Contact page after login. Include your account ID so we can match the request to the correct record.
Account Dashboard
The current status of an open policy case — including the response timeframe — is shown in your account dashboard after login. Check there before re-submitting a request.
HOW WE HANDLE THIS
Data Handling, Cookies and Account Security
The way we manage account data and site cookies is set out here so you have a factual reference point, not a vague assurance. Cookie preferences can be adjusted through the browser settings on any device — the choice you make is stored against your session. Account security relies on the verification steps shown at login; we do not publicly describe the exact mechanism, but the steps are visible each time you access the account. Data retention periods are stated in the full policy document linked from the account dashboard after login.
Data Handling
Account data is held for the period stated in the retention schedule accessible from your dashboard. We do not share personal data with third parties outside the scope defined in this policy.
Cookies
Cookies are used to maintain session state and record preferences. You can review and adjust cookie settings through your browser at any time; functional cookies required for login cannot be disabled without affecting account access.
Account Security
The verification steps shown at login govern how account access is confirmed. If you suspect unauthorised access, use the live chat channel immediately — the team can place a hold on the account while the case is reviewed.
Policy Updates
Material changes to this policy are communicated to your registered contact before they take effect. The version active at the time your account was created is on record and available on request through the legal email channel.
POLICY FAQ
Common Questions About This Legal Policy
These are the questions we see most often about how this policy works in practice — covering user rights, data handling, account access and how to get a response.
Does this legal policy apply to my account if I am in Malaysia?
Yes, this policy applies to all accounts registered on ong321. Access and the full scope of services depend on local law and are available where local law permits. Your account dashboard shows the current access status after login.
How do I find out what data ong321 holds on my account?
Submit a data inquiry through the legal email channel shown on the Contact page after login. Include your account ID in the request. A case reference is issued on receipt, and the response timeframe is stated in the acknowledgement.
Can I request that my account data be removed?
Where local law gives you that right, you can submit a removal request through the legal email channel. We confirm receipt, state the applicable timeframe, and process the request in line with our retention schedule and any legal obligations that require us to keep certain records.
What happens if a detail in my account profile is wrong?
Submit a correction request through live chat or the legal email channel. After identity confirmation, the detail is updated and the corrected record becomes visible in your account dashboard. We do not charge for profile corrections.
Do DuitNow and FPX transactions fall under this policy?
Wallet movements via DuitNow and FPX are covered jointly by this policy and the operating rules of each payment rail. A dispute about a specific transaction is handled first through account support — start with live chat and reference the transaction ID from your dashboard.
How will I know if this policy changes?
Material changes are communicated to your registered contact details before they take effect. The version of the policy active when your account was created stays on record. You can request a copy of that version through the legal email channel at any time.