Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which online456 ("Company", "we", "us", "our"), operating the platform at online456.cam, collects, uses, stores, discloses, and protects the personal data of users ("User", "Player", "you", "your") who access or use our online casino and sports betting services ("Services").

online456 is committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection legislation and the privacy framework under our international gaming licence. This Policy applies to all personal data collected through our website, mobile platform, customer support channels, and related services.

By registering an account on online456 or using our Services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree to this Policy, please do not use our Services.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

online456 collects personal data through several channels, including account registration, payment processing, platform usage, customer support interactions, and automated technical collection. The categories of data we collect include the following:

3.1 Registration & Account Data

• Full legal name as appearing on government-issued identification
• Date of birth (for mandatory age verification — 21+ policy)
• Email address and mobile telephone number
• Residential address (including postcode and city — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru)
• Username and encrypted account password
• Account preferences, language settings, and communication consent records

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of government-issued identity documents (MyKad, passport, driver's licence)
• Proof of residential address documentation (utility bills, bank statements, official correspondence)
• Proof of ownership of payment methods used (bank card images, e-wallet screenshots)
• Source of funds declarations where applicable
• Selfie or liveness check images submitted as part of the verification process

3.3 Financial & Transaction Data

• Transaction history including deposit amounts, withdrawal requests, and net gaming results
• Payment method references (FPX transaction reference numbers, DuitNow identifiers, e-wallet account names)
• Account balance history and bonus activity records
• Cryptocurrency wallet addresses used for deposit or withdrawal

3.4 Gaming Activity Data

• Game sessions, bet history, wagering patterns, and sports betting selections
• Bonus usage, wagering progress, and promotion participation records
• Session duration, login timestamps, and device session data

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Referring URL, pages visited, and navigation paths within the platform
• Cookie identifiers and session tokens

3.6 Customer Support Data

• Transcripts of live chat conversations with our support team
• Email correspondence submitted to our support address
• Complaint records and resolution outcomes

online456 processes your personal data for the following specific, documented purposes:

online456 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process deposits and withdrawals, and provide gaming services as described in our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws and our licensing obligations, including AML/KYC procedures, regulatory reporting, and responsible gambling requirements.
• Legitimate interests: Processing necessary for our legitimate business interests where these are not overridden by your fundamental rights — including fraud detection, platform security, and abuse prevention.
• Consent: Processing for activities not covered by the grounds above, such as sending promotional communications. You may withdraw consent at any time by updating your communication preferences in account settings or contacting support.

online456 does not sell or rent your personal data to any third party. We share personal data only with carefully selected partners and service providers that assist us in operating the platform, under strict contractual data protection obligations. Categories of recipients include:

• Payment processors and banking partners: Including FPX network participants, DuitNow processing partners, e-wallet providers (Touch 'n Go, Boost, GrabPay), and cryptocurrency exchange services — for the sole purpose of executing your payment transactions.
• Identity verification (KYC) providers: Specialist third-party services that assist in verifying identity documents and performing liveness checks as part of our regulatory compliance process.
• Game providers and technology suppliers: Licensed game content providers receive session tokens and game event data necessary to deliver the gaming experience. They do not receive full identity or financial records.
• Cloud infrastructure and hosting providers: Secure data centres and cloud service providers that host the online456 platform under contractual data processing agreements.
• Fraud prevention and cybersecurity services: Third-party tools used to monitor for suspicious activity, bot traffic, and attempted account compromises.
• Regulatory and law enforcement authorities: Where we are required by law, court order, or our licensing obligations to disclose data to competent authorities.

online456 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention principles apply:

• Active account data: Retained for the duration of your account's active status, plus a minimum of five (5) years following permanent account closure, to satisfy AML regulatory record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the relevant verification or transaction, in accordance with international AML standards applicable to our licensing jurisdiction.
• Transaction records: Retained for a minimum of five (5) years to comply with financial record-keeping obligations and to support any regulatory enquiry or dispute resolution.
• Customer support records: Retained for three (3) years from the date of the relevant interaction, or longer where the interaction is connected to an ongoing investigation or unresolved dispute.
• Marketing consent records: Retained for the duration of your active consent and for three (3) years thereafter as evidence of that consent.
• Technical and session data: Retained for up to 13 months for fraud prevention and security analytics purposes, then aggregated or deleted.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to an individual.

online456 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data in transit between your device and online456 servers is encrypted using industry-standard TLS, the same encryption backbone used by Malaysian financial institutions for FPX transactions.
• Encryption at rest: Sensitive data fields including KYC documents, identity information, and financial records are encrypted at rest using AES-256 encryption within our secured data environment.
• Access controls: Internal access to personal data is governed by role-based access controls and the principle of least privilege. Only personnel with a documented operational need may access identifiable personal data.
• Two-factor authentication (2FA): Available and recommended for all player accounts, and mandatory for internal staff access to systems containing personal data.
• Security audits: Regular internal and third-party security audits, penetration testing, and vulnerability assessments are conducted to identify and remediate potential weaknesses.
• Incident response: We maintain a documented data breach response procedure. In the event of a material breach affecting your personal data, we will notify affected users and relevant authorities in accordance with our obligations under applicable law.

online456 uses cookies and similar technologies (including local storage tokens and session identifiers) to ensure the platform functions correctly and securely. We do not use third-party advertising cookies or behavioural tracking networks.

You may manage or disable cookies through your browser settings. Please note that disabling essential cookies will prevent the online456 platform from functioning correctly and may prevent you from accessing your account.

Subject to applicable law and our regulatory obligations, you hold the following rights in relation to your personal data held by online456:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request, at no charge for standard requests.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Contact our support team or update your profile directly in account settings where applicable.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Please note that we may be unable to fulfil this request in full where retention is required to comply with legal or regulatory obligations (such as AML record-keeping).
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your data to storage only, pending resolution of a specific concern.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that your data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests (including direct marketing communications). Where an objection relates to direct marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email. We will verify your identity before processing any request. All requests are addressed within 30 calendar days.

online456 does not knowingly collect personal data from individuals under the age of 21. Our Services are strictly restricted to adults aged 21 and above. Age verification is a mandatory component of our account registration and KYC process.

If we discover that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation at registration or any other means — we will immediately close the relevant account, delete the associated data to the extent not legally required to be retained, and return any deposited funds.

As an internationally operated platform, online456 may transfer your personal data to service providers and infrastructure partners located in countries outside of Malaysia. Such transfers are conducted under appropriate contractual safeguards, including standard contractual clauses or other mechanisms that provide a materially equivalent level of protection to that available in your home jurisdiction.

Where personal data is processed by payment partners in connection with Malaysian banking infrastructure — including FPX network transactions, DuitNow transfers, and local e-wallet services — such processing is governed by the data handling policies of those respective regulated financial institutions and e-money operators.

By using our Services, you acknowledge that your data may be transferred and processed internationally as described in this section. We take all reasonable steps to ensure that any international transfer is conducted securely and in compliance with our obligations under applicable data protection law.

online456 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of our services. All revisions will be published on this page with an updated "Last Updated" date at the top.

Where changes are material — meaning they affect the nature of data collected, the purposes for which it is used, or the rights available to you — we will endeavour to provide advance notice via email or a prominent on-platform notification at least 14 days before the revised Policy takes effect.

Your continued use of the online456 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this page periodically to stay informed of how we protect your data.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Support team through the following channels:

We will acknowledge your request within 48 hours and respond in full within 30 calendar days. Complex requests may require additional time, in which case we will notify you of the extended timeline and reasons within the initial 30-day window.