Okada, operating through the okada.best platform, is an online entertainment service provider committed to protecting the privacy of its members. We understand that when you entrust your personal data to us — whether during account registration, making a deposit via DuitNow or Touch 'n Go eWallet, or playing at a live baccarat table — you are placing a great deal of trust in us.
That trust is something we take seriously. This Privacy Policy is written in clear, straightforward language so that you, as a Malaysian player, can genuinely understand what happens to your data — not just skim through a lengthy document packed with legal jargon.
This policy applies to all personal data collected by Okada through:
- The okada.best website and all associated subdomains.
- The okada mobile app (where available).
- Email, live chat, and WhatsApp customer support communications.
- Any other interaction between you and the Okada platform.
Okada collects data in two main categories: data you provide directly, and data collected automatically when you use the platform.
Data You Provide Directly:
- Registration information: Full name, Malaysian phone number, email address, and date of birth. This information is required to create and verify your account.
- Identity verification information: A copy of your MyKad or other valid identity document — requested only when required for KYC (Know Your Customer) verification purposes prior to processing withdrawals that exceed a specified threshold.
- Financial transaction information: Deposit and withdrawal records including the method used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks), amounts, and timestamps. Okada does not directly store credit or debit card numbers — all transactions are processed through certified payment gateways.
- Customer support communications: Records of live chat conversations, emails, and support tickets for service quality and historical reference purposes.
Automatically Collected Data:
| Data Type | Example | Purpose |
|---|---|---|
| Technical Logs | IP address, browser type, OS | Security & fraud detection |
| Session Data | Login time, session duration, pages visited | Usage analytics & UX improvement |
| Game Data | Betting records, results, play duration | Transaction records & responsible gambling |
| Device Data | Device ID, screen resolution, phone model | Security verification & mobile optimisation |
| Cookies | Session token, language preference, login status | Core platform functionality & user preferences |
Okada uses collected personal data solely for legitimate and transparent purposes. We do not process your data for purposes unrelated to the services you use. The following are the primary purposes for data processing at Okada:
- Account management and identity verification: To create, maintain, and secure your account, and to ensure that only you can access it.
- Financial transaction processing: To accurately and securely process deposits via local payment methods (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX) and withdrawals to the payment account registered in your name.
- Game service delivery: To give you access to all games on the platform — live baccarat, jackpot slots, Malaysia Super League and EPL football odds, roulette, live casino — with an experience tailored to your preferences.
- Security and fraud prevention: To identify and prevent fraudulent activity, money laundering, multiple account usage, and other security threats that could harm the platform or other members.
- Customer support: To provide effective and consistent assistance whenever you contact the okada support team via live chat, email, or WhatsApp.
- Responsible gaming: To monitor gameplay patterns for the purpose of identifying potential problem gambling and offering appropriate assistance, as well as to enforce limits you have set for yourself.
- Marketing communications: To send promotional information, new bonus announcements, and platform updates — only to members who have opted in to receive them. You can opt out of marketing communications at any time through your account settings or by contacting us.
- Legal and regulatory compliance: To comply with applicable Malaysian legal requirements, including anti-money laundering laws (AMLA) and prescribed KYC obligations.
Okada does not use your personal data to make automated decisions that materially affect you without human involvement — such as automatic account rejection or closure based solely on a data profile — except in cases of clear fraud detected by our security systems, where a manual review is always conducted following any automated action.
Okada does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. This is our absolute commitment. However, in certain limited situations, Okada may need to share data with third parties as follows:
- Trusted service providers: Companies that assist Okada in delivering its services, such as payment gateway providers (for processing DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and FPX transactions), live casino game software providers, and cloud technology infrastructure providers. All such providers are subject to strict data protection agreements with Okada and are not permitted to use your data for any purpose beyond what has been specified.
- Law enforcement authorities: Okada may disclose personal data to the relevant authorities when required by a valid court order, lawful legal process, or anti-money laundering compliance obligations. In such situations, Okada will endeavour to notify you prior to disclosure, unless doing so is prohibited by law.
- Business transfers: In the event of a merger, acquisition, or sale of Okada's assets, members' personal data may be transferred as part of the business assets. We will notify members before any such transfer takes place and ensure that the receiving entity upholds privacy standards equivalent to or higher than our own.
In all legitimate data-sharing scenarios described above, Okada ensures that recipients are bound by adequate confidentiality and data protection obligations, and that only the minimum data necessary for the specific purpose is shared.
Okada invests heavily in security infrastructure to protect members' personal data. The technical and organisational security measures we employ include:
- Transit encryption: All communications between your browser and Okada's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate — meaning data in transit cannot be read even if intercepted.
- Static encryption: Sensitive data stored in Okada's databases — including personal information and transaction records — is encrypted using AES-256 standards. Passwords are never stored in plain text; they are stored as irreversible cryptographic hashes.
- Strict access controls: Only Okada staff with a legitimate business need (on a need-to-know basis) are granted access to members' personal data. All access is logged and monitored through an audit trail system.
- Continuous security monitoring: Okada's security monitoring system operates 24 hours a day, 7 days a week, to detect any unauthorised access attempts, suspicious activity, or anomalies in data usage patterns.
- Regular security testing: Okada conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
- Incident response procedure: Okada maintains a documented security incident response procedure, including a commitment to notify affected members within 72 hours of detecting a material data breach.
Security Reports
If you discover any security vulnerability or suspicious incident related to the okada platform, please report it to us immediately at support@okada.best with the subject line "Security Report". Okada takes all responsible security reports seriously.
Okada uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. The types of cookies used are as follows:
You can manage cookies through your browser settings at any time. Please note that disabling essential functional cookies will affect your ability to log in and use the okada platform fully. Marketing and analytics cookies are entirely optional — disabling them will not impact core platform functionality.
Okada uses first-party analytics tools to understand platform usage patterns. Analytics data is collected in aggregated, non-personally identifiable form — we look at overall usage trends, not individual records.
Okada does not retain your personal data any longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:
- Active account data: Retained for the duration your account is active and for 2 years after account closure, to allow for the resolution of any disputes or queries that may arise.
- Financial transaction records: Retained for 7 years from the transaction date, in accordance with Malaysian accounting and anti-money laundering legal requirements as set out under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
- Customer support communication logs: Retained for 3 years from the date of last interaction for historical reference and service quality purposes.
- Security and audit logs: Retained for 12 months for fraud detection and security purposes, after which the data is aggregated and anonymised.
- Game records: Retained for 5 years from the date of the gaming session, for the purposes of dispute resolution and responsible gambling.
Once data reaches the end of its defined retention period, it is permanently deleted or anonymised so that it can no longer be linked to any specific individual. This data deletion and disposal process is carried out automatically by Okada's systems according to a set schedule.
As an Okada member, you have the following rights regarding the personal data we hold about you. All data rights requests can be submitted to support@okada.best and will be processed within 48 working hours: