oyen88 Privacy Policy

1. Who We Are

oyen88 ("we", "us", "our", "the Platform") operates the online casino and sportsbook accessible at oyen88.win. For the purposes of this Privacy Policy, oyen88 is the data controller responsible for the personal data of registered members and visitors to our platform.

oyen88 serves players across Malaysia, including in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond. Our platform provides live casino games, slot games, Toto 4D number games, and sports betting services, all denominated in Malaysian Ringgit (MYR).

This Privacy Policy applies to all personal data collected via oyen88.win, our support communications, and any related services. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

oyen88 collects the following categories of personal data from members and platform visitors:

oyen88 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) except where specifically required to fulfil responsible gaming obligations, such as processing a self-exclusion request supported by a medical certificate.

3. How We Collect Your Data

oyen88 collects personal data through the following means:

• Direct provision: Data you submit when registering an oyen88 account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access oyen88.win, including via cookies, server logs, and session tracking technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from risk management partners; payment data relayed by your bank, Touch n Go eWallet, Boost, or other payment processor when you initiate a transaction.

4. Purpose of Processing

oyen88 processes your personal data for the following purposes:

• Account management: Creating and maintaining your oyen88 member account, processing login authentication, and managing account settings;
• Service delivery: Enabling you to place bets, access game products, and participate in promotions on the oyen88 platform;
• Payment processing: Processing deposits and withdrawals in MYR via your chosen local payment method, including Touch n Go eWallet, Maybank, CIMB, Public Bank, and others;
• Identity verification (KYC): Verifying your identity and age (21+) as required to comply with applicable gaming authority requirements and anti-money laundering regulations;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators; administering self-exclusion, deposit limits, and other responsible gaming tools;
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and money laundering;
• Legal compliance: Complying with our obligations under applicable international gaming authority regulations, anti-money laundering requirements, and data protection laws;
• Customer support: Responding to support enquiries, complaints, and account queries;
• Marketing: Sending promotional communications to members who have opted in to receive them (see Section 12);
• Platform improvement: Analysing aggregated and anonymised usage data to improve the oyen88 platform, game offering, and user experience.

5. Legal Basis for Processing

oyen88 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our contract with you, including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with applicable laws, including KYC identity verification, age verification, anti-money laundering obligations, and regulatory reporting;
• Legitimate interests: Processing necessary for oyen88's legitimate interests, including fraud detection, platform security, abuse prevention, and responsible gaming monitoring — where these interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications, where you have actively opted in to receive promotional emails or SMS messages from oyen88.

6. Data Sharing & Disclosure

oyen88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following circumstances:

• Service providers: Third-party providers who process data on our behalf under data processing agreements, including: KYC and identity verification providers; payment processors and banking partners (Maybank, CIMB, Touch n Go, Boost, etc.); fraud screening and risk management providers; IT infrastructure and hosting providers; customer support platform providers;
• Game providers: Game software providers (such as Pragmatic Play, PG Soft, Spadegaming, and others) receive anonymised session data necessary to deliver game services and audit RNG integrity. These providers do not receive your personally identifiable information beyond what is necessary for their technical function;
• Regulatory and law enforcement authorities: oyen88 may disclose your personal data to gaming regulators, financial intelligence units, law enforcement agencies, or other competent authorities where required to do so by law, court order, or regulatory direction;
• Business transfers: In the event of a merger, acquisition, or sale of oyen88's business or assets, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations;
• With your consent: In any other circumstances where you have given your explicit prior consent to a specific disclosure.

7. International Data Transfers

oyen88 operates internationally and some of our service providers are located outside of Malaysia. Where personal data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, oyen88 implements appropriate safeguards to ensure that your data remains protected, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Binding data processing agreements with recipient organisations;
• Data transfer to organisations that have committed to equivalent data protection standards through internationally recognised certification frameworks.

By registering an oyen88 account and using our services, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia where applicable data protection laws may differ from those in Malaysia.

8. Data Retention

oyen88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Where data is no longer required, oyen88 securely deletes or anonymises it in accordance with our data disposal procedures. Anonymised aggregated data may be retained indefinitely for analytical purposes.

9. Security Measures

oyen88 implements technical and organisational security measures appropriate to the risk presented by the processing of your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and oyen88's servers;
• Encrypted storage of passwords using salted cryptographic hashing — oyen88 cannot retrieve your password, only reset it;
• Access controls: Personal data is accessible only to oyen88 personnel and authorised service providers who require it to perform their designated functions;
• Multi-factor authentication for administrative access to systems containing personal data;
• SMS OTP verification for member logins from unrecognised devices;
• Regular security audits and vulnerability assessments of oyen88's platform infrastructure;
• Incident response procedures for detecting, containing, and notifying relevant parties in the event of a data security incident.

Notwithstanding the security measures above, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your oyen88 login credentials and for ensuring the security of the device from which you access oyen88.

10. Cookies & Tracking Technologies

oyen88 uses cookies and similar tracking technologies on oyen88.win to deliver and improve our services. Cookies are small text files stored on your device when you visit our platform.

oyen88 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including login session management, security token storage, and payment flow continuity. These cannot be disabled without impairing your ability to use oyen88;
• Functional cookies: Remember your preferences, such as language settings, display preferences, and previously entered information, to improve your experience on oyen88;
• Analytics cookies: Collect anonymised data about how visitors use oyen88.win — which pages are visited most, where users navigate from, and how long sessions last — to help oyen88 improve the platform;
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns, where you have provided consent to marketing communications.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of oyen88.win. Your consent to non-essential cookies is requested on your first visit to oyen88.win and can be updated at any time through your browser settings.

11. Your Data Protection Rights

Subject to applicable data protection laws, you have the following rights in relation to your personal data held by oyen88:

• Right of access: Request a copy of the personal data oyen88 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to oyen88's legal retention obligations (note: data subject to AML or regulatory retention requirements cannot be deleted before the applicable retention period expires);
• Right to restriction: Request that oyen88 restrict the processing of your data in certain circumstances;
• Right to data portability: Request that oyen88 provide your personal data in a structured, commonly used, machine-readable format;
• Right to object: Object to processing based on oyen88's legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact oyen88 at [email protected]. oyen88 will respond to verified data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and oyen88 will notify you accordingly.

12. Marketing Communications

12.1 oyen88 may send promotional communications to members who have opted in to receive marketing messages, including information about new games, promotions, reload bonuses, and special events. Marketing communications are sent via email and/or SMS to your registered contact details.

12.2 You may opt in to marketing communications during registration or at any time through your oyen88 account settings. Opting in to marketing communications is entirely voluntary and not a condition of holding an oyen88 account or accessing any gaming service.

12.3 You may opt out of marketing communications at any time by: (a) clicking the "unsubscribe" link in any marketing email; (b) replying STOP to any marketing SMS; or (c) updating your communication preferences in your oyen88 account settings. Opt-out requests are processed within 10 business days. Please note that you may still receive transactional and service-related communications (such as deposit confirmations and withdrawal notifications) regardless of your marketing preference.

12.4 oyen88 does not share your contact details with third-party marketers or data brokers for their own marketing purposes.

13. Children's Privacy

oyen88 is strictly an adult platform. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is required during account registration, and oyen88 reserves the right to request supporting documentation at any time.

If oyen88 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has provided personal data to oyen88, please contact us immediately at [email protected].

14. Amendments to This Policy

oyen88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, oyen88 will update the "Last updated" date at the top of this page and, where practicable, notify registered members via their registered email address or an in-platform notification.

Your continued use of oyen88 following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how oyen88 protects your personal data.

15. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or wish to raise a privacy-related complaint, please contact oyen88's data privacy team through the following channels:

oyen88 aims to acknowledge all privacy-related communications within 48 hours and to provide a substantive response within 30 days. For complex requests, we will notify you if additional time is required.