1. Organiser

The "Buy O'cera, Win Gold" Campaign ("Campaign") is organised by Xepa-Soul Pattinson (Malaysia) Sdn. Bhd. [Registration No.:196901000419(8504-M)]] ("Organiser" or "Xepa"). By participating, all participants are deemed to have read, understood, and agreed to be bound by these Terms & Conditions ("T&C").

2. Campaign Period

The Campaign runs from 9 March 2026, 12:00 a.m. to 17 May 2026, 11:59 p.m. ("Campaign Period"). Entries received outside the Campaign Period shall be automatically disqualified.

3. Eligibility

1. 3.1The Campaign is open to all Malaysian citizens and permanent residents aged 18 years and above as at the date of participation.
2. 3.2The following persons are not eligible to participate:
   1. Employees of the Organiser;
   2. Employees, representatives, agents, and advertising or promotion agencies involved in this Campaign; and
   3. Immediate family members (spouse, children, parents, siblings) of the above.

4. Participation Mechanics

1. 4.1To participate, participants must complete all the following steps:
   1. Purchase a minimum of RM68 worth of O’cera products in a single original receipt from any participating pharmacies during the Campaign Period;
   2. Snap a clear and legible photo of the original purchase receipt showing receipt number, date, outlet name/logo, O’cera product(s), and amount paid;
   3. Submit the entry by completing the online form at https://ocera-skincare.com/buy-and-win and uploading the receipt image; and
   4. Agree to these T&C and the Privacy Notice during submission.
2. 4.2Each receipt is entitled to one (1) entry only and may not be reused. Receipts cannot be combined.
3. 4.3Multiple entries are allowed, provided each entry is supported by a different valid receipt.
4. 4.4The Organiser reserves the right to reject any entry with unclear, incomplete, duplicated, altered, or suspicious receipts, including receipts indicating bulk or abnormal purchasing patterns.

5. Prizes

1. 5.1There are a total of fifty-five (55) winners, comprising:
   1. Grand Prizes: Five (5) winners, each receiving one (1) branded 1g 999.9 gold bar; and
   2. Weekly Prizes: Ten (10) weeks × five (5) winners per week, each receiving RM200 Touch ‘n Go eWallet Credit.
2. 5.2Prizes are non-transferable, non-exchangeable, and not redeemable for cash, in whole or in part.
3. 5.3The Organiser reserves the right to substitute any prize with another of similar value without prior notice.

6. Winner Selection

1. 6.1Weekly Winners will be selected via random draw from all valid entries received within the corresponding week.
2. 6.2Grand Prize Winners will be selected via random draw from all valid entries received throughout the Campaign Period on 20 May 2026.
3. 6.3The Organiser’s decision on all matters relating to winner selection shall be final and binding. No correspondence or appeal will be entertained.

7. Winner Announcement & Notification

1. 7.1Winners will be announced every Wednesday on the O’cera Official Facebook and Instagram pages.
2. 7.2Winners will be notified via email based on the details submitted.
3. 7.3If a selected winner cannot be contacted or fails to respond within seven (7) days from notification, the Organiser reserves the right to disqualify the winner and select an alternate winner.

8. Verification & Proof of Purchase

1. 8.1Winners must retain and produce the original purchase receipt for verification and prize redemption.
2. 8.2Failure to produce the original receipt or provide accurate personal details may result in forfeiture of the prize.

9. Prize Collection & Presentation

1. 9.1The Grand Prize presentation ceremony will be held on 19 June 2026 at a venue to be determined by the Organiser. All travel, accommodation, and incidental expenses incurred for prize collection shall be borne solely by the winner
2. 9.2If a Grand Prize winner is unable to attend the prize presentation ceremony on the stated date, the winner may appoint one (1) representative to collect the prize on their behalf, subject to the following conditions:
   1. The representative must be at least 18 years old;
   2. The winner must complete and submit an authorization form as prescribed by the Organiser, together with copies of the winner’s and representative’s identification documents; and
   3. The Organiser reserves the right to request additional verification documents.
3. 9.3Failure by the winner or authorised representative to attend the prize presentation or complete all required documentation may result in forfeiture of the prize, at the Organiser’s sole discretion.

10. Weekly Prize Fulfilment

Weekly prizes will be credited via Touch ‘n Go eWallet to the mobile number provided by the winner and are subject to Touch ‘n Go’s own terms and conditions. The Organiser shall not be responsible for any issues arising from incorrect details provided by the winner.

11. Liability & Indemnity

1. 11.1Participants participate at their own risk. The Organiser shall not be liable for any loss, damage, injury, or claim (including death) arising from participation in the Campaign or acceptance and use of any prize, except where liability cannot be excluded by law.
2. 11.2Participants agree to indemnify and hold harmless the Organiser from any claims arising from their participation in the Campaign.

12. Organiser’s Rights

The Organiser reserves the right, at its absolute discretion, to:

1. Disqualify any participant suspected of fraud, misconduct, or breach of these T&C;
2. Verify entries and participants at any time; and
3. Amend, suspend, cancel, or extend the Campaign or these T&C.

13. Publicity

By participating, winners consent to the use of their names, photographs, and likenesses for advertising, publicity, and promotional purposes without additional compensation.

14. Personal Data Protection

By participating, participants consent to the collection, use, processing, and disclosure of their personal data by the Organiser in accordance with the Personal Data Protection Act 2010 (PDPA) for purposes including Campaign administration, verification, prize fulfilment, marketing, and promotional activities.

15. General

1. 15.1Proof of submission of an entry shall not constitute proof of receipt by the Organiser. The Organiser shall not be responsible or liable for any late, lost, misdirected, incomplete, illegible, corrupted, or delayed submissions, or for any technical errors, failures, or malfunctions of any kind, including but not limited to network, hardware, software, or telecommunications failures.
2. 15.2In the event of any inconsistency, conflict, or discrepancy between these Terms & Conditions and any advertisements, promotional materials, or communications relating to the Campaign, these Terms & Conditions shall prevail.
3. 15.3The Organiser’s decisions in relation to the Campaign, including matters of eligibility, verification, winner selection, prize fulfilment, and interpretation of these Terms & Conditions, shall be final and binding.

This Privacy Notice explains how Xepa-Soul Pattinson (Malaysia) Sdn. Bhd. ("Xepa", "we", "our" or "us") collects, uses, processes, and discloses your personal data in connection with your participation in the "Buy O'cera, Win Gold" Campaign ("Campaign"), in accordance with the Personal Data Protection Act 2010 ("PDPA").

1. Personal Data Collected

When you participate in the Campaign, we may collect and process your personal data, including but not limited to:

• Full name
• Contact details (email address, mobile number)
• Identification information (e.g. NRIC number, where required for verification)
• Purchase information and receipt details
• Images or documents submitted for entry verification
• Any other information you voluntarily provide in connection with the Campaign

2. Purpose of Collection and Use

Your personal data will be collected and used for the following purposes:

• To administer, manage, and conduct the Campaign;
• To process and verify entries and determine eligibility;
• To contact participants and winners;
• To facilitate prize fulfilment, presentation, or delivery;
• For record keeping, audit, compliance, and internal reporting purposes;
• To prevent fraud, misuse, or abuse of the Campaign; and
• For marketing, promotional, and publicity purposes, including the use of winners' names, images, or likenesses.

3. Disclosure of Personal Data

Your personal data may be disclosed or shared with:

• Xepa's related or affiliated companies;
• Third-party service providers, agents, or vendors appointed to administer the Campaign (including contest agencies, IT service providers, logistics partners);
• Regulatory or governmental authorities where required by law; and
• Any other party strictly necessary for the purposes stated above.

Some of these parties may be located within or outside Malaysia. By participating, you consent to such transfer and processing, subject to reasonable safeguards.

4. Data Security and Retention

Xepa will take reasonable and appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

Your personal data will be retained only for as long as necessary to fulfil the purposes stated in this Privacy Notice or as required by applicable laws, after which it will be securely destroyed or anonymised.

5. Access, Correction, and Withdrawal of Consent

You have the right to:

• Request access to your personal data held by Xepa;
• Request correction of inaccurate or incomplete personal data; and
• Withdraw your consent for the processing of your personal data, subject to legal or contractual restrictions.

Please note that withdrawal of consent may result in your disqualification from the Campaign or inability to receive prizes.

Requests may be made by contacting us using the details below.

6. Consent

By submitting your entry and participating in the Campaign, you confirm that you have read and understood this Privacy Notice and consent to the collection, use, processing, and disclosure of your personal data as described herein.

7. Contact Details

If you have any questions or requests regarding this Privacy Notice or your personal data, please contact:

Xepa-Soul Pattinson (Malaysia) Sdn. Bhd.
Email: enq@xepasp.com