Oyo88 Privacy Policy – Our Commitment to Protecting Malaysian Users' Data

1Introduction & Scope of Privacy Policy

Oyo88 is an online entertainment platform built for users in Malaysia. It offers sports betting (including Malaysia Super League and EPL football, badminton, cricket), Live Casino, roulette, lottery, slots and e-sports.

This Privacy Policy applies to:

• All users who register an account on oyo88.ws
• Visitors who browse the oyo88 website without registering an account
• Anyone who interacts with oyo88 through any communication channel
• Oyo88 mobile app users on iOS and Android

This document forms part of the agreement between you and oyo88, together with Terms & Conditions and Responsible Gaming Policy us.

2Types of Personal Data Collected

Oyo88 collects various types of data depending on how you interact with our platform. The table below summarises the categories of data we collect:

3How We Collect Data

Oyo88 collects your personal data through several means:

• Account Registration: When you register an oyo88 account, you provide us with information such as your name, phone number and email address directly.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), all transaction-related information is recorded securely.
• Platform Usage: The oyo88 system automatically records technical information such as your IP address, device type and usage patterns while you use the platform.
• Identity Verification (KYC): When identity verification is required, you may be asked to submit documents such as a copy of your MyKad or a bank statement.
• Communications: When you contact the oyo88 support team via live chat, email, or WhatsApp, those communications are recorded for quality and security purposes.
• Cookies & Tracking Technologies: The oyo88 website uses cookies and similar technologies to collect usage data and personalise your experience.

4Purpose of Data Use

Oyo88 only uses your personal data for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Account Management: To register, verify and manage your oyo88 account, including the required KYC (Know Your Customer) process.
• Transaction Processing: To process MYR deposits via e-wallet and FPX, manage your account balance and process your withdrawal of winnings.
• Service Provision: To give you full access to all games and betting options available on oyo88, including live casino, roulette, slots, Sports Betting and e-sports.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, bonus abuse, and other unlawful activities.
• Communications: To send important notifications related to your account, promotional information (subject to your preferences) and responses to your enquiries.
• Service Improvement: To analyse platform usage patterns in order to improve the user experience, introduce new features and fix technical bugs.
• Legal Compliance: To comply with applicable Malaysian legal requirements, including the PDPA 2010 and financial reporting obligations.

5Sharing Data with Third Parties

Oyo88 does not sell your personal data. We only share data in the following limited circumstances:

• Payment Service Providers: oyo88 shares the necessary transaction information with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX banks (Maybank, CIMB, and others) solely for the purpose of processing your financial transactions.
• Game Software Providers: Third-party game software providers who supply games for the oyo88 platform may receive the minimum technical data required for game operation.
• Technology Infrastructure Providers: Companies that provide oyo88 with server infrastructure, CDN and cybersecurity services may access technical data in the course of their work, subject to strict confidentiality agreements.
• Malaysian Authorities: oyo88 will disclose data when required by Malaysian law, court order, or directive from a competent enforcement agency.
• Business Transfers: In the event of a business transfer or merger, user data may be transferred as part of the company's assets, subject to notification being provided to users.

6Data Security Measures

Oyo88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and oyo88's servers is encrypted using TLS 1.3 protocol with 256-bit encryption.
• Internal Access Controls: User data is accessible only to authorised oyo88 staff and solely for legitimate purposes. All access is logged and monitored.
• 24/7 Monitoring: oyo88's security systems monitor platform activity around the clock to detect and respond to any security threats promptly.
• Data Backup: User data is regularly backed up to separate secure locations to prevent data loss due to technical failures.
• Regular Security Testing: oyo88 conducts regular penetration testing and security audits by independent third-party experts.
• Staff Training: All oyo88 staff who handle user data receive regular data protection training.

In the event of any data breach affecting user information, oyo88 is committed to notifying the affected users and relevant authorities within the timeframe required by Malaysian law.

7Cookie Policy

The oyo88 website and mobile app use cookies and similar tracking technologies. Cookies are small text files stored on your device to improve platform functionality and the overall user experience.

Types of cookies used by oyo88:

• Essential Cookies (Required): Required for core platform functions such as login, game sessions and security. Cannot be disabled.
• Performance Cookies: Collects anonymised information about how users interact with the platform to help us improve oyo88's performance and stability.
• Functional Cookies: Stores user preferences such as language, display settings and login information for your convenience.
• Analytics Cookies: To help oyo88 understand usage patterns and user behaviour in aggregate (not individually) for service improvement purposes.

You can manage or disable cookies (except essential cookies) through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the oyo88 platform.

8Data Retention Period

Oyo88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure to comply with Malaysia's legal financial record-keeping requirements.
• Financial Transaction Data: Records of all transactions in MYR are retained for a minimum of 7 years in line with Malaysia's tax and financial reporting legal requirements.
• Support Communication Data: Customer support conversation records are retained for 2 years for reference and service quality improvement purposes.
• Usage Data & Analytics: Anonymised data used for analytics may be retained for longer periods in a form that cannot identify any individual.
• Identity Verification Data (KYC): Copies of identity documents are retained for a minimum of 5 years after the end of the business relationship, in line with legal requirements.

9User Rights Under Malaysia's PDPA

As an oyo88 user in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

10Protection of Children's Data

The oyo88 platform is strictly for adult users aged 18 years and above. oyo88 does not knowingly collect, process or store any personal data from individuals under the age of 18.

If we determine that we have collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on oyo88 are urged to contact us immediately at privacy@oyo88.ws.

11Links to Third-Party Websites

The oyo88 platform may contain links to third-party websites or services in certain contexts. oyo88 is not responsible for the privacy practices of those third-party websites.

We encourage you to read the Privacy Policy of any third-party website you visit via links from the oyo88 platform. oyo88's Privacy Policy applies only to information collected on oyo88.ws and the official oyo88 mobile app.

12Contact Our Data Protection Officer

If you have any questions, concerns or requests regarding oyo88's Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO):

• DPO Email: privacy@oyo88.ws
• Support Email: support@oyo88.ws
• Live Chat: Available 24/7 via the oyo88 platform
• Response Time: Within 14 business days for all formal requests

You also have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital if you believe your privacy rights have been violated.