Privacy & Data Security • PDPA 2010

Privacy Policy oyo88 — Your Personal Data Protection

At oyo88, your privacy is not merely a legal obligation — it is a responsibility we take seriously. This document clearly explains how we collect, use, store, and protect your personal information at all times.

Updated: 1 January 2026 Malaysia PDPA Compliance

oyo88's Commitment: We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). All your data is processed lawfully, fairly, and transparently — no more than what is necessary to provide you with the best service.

01 Introduction & Scope of This Policy

Oyo88 ("we", "Platform", or "oyo88") is an online casino and gaming platform operator running under a valid license. This Privacy Policy explains how we handle the personal data of all users who access our website at oyo88.fun, using the oyo88 mobile app or interacting with any of the services we offer.

This policy applies to all registered members, website visitors, and anyone who interacts with the oyo88 platform in any capacity. By using our platform, you acknowledge that you have read and understood this policy.

We believe transparency is the foundation of trust. That is why we wrote this policy in plain, easy-to-understand language — free of convoluted legal jargon — so you know exactly what happens with your information.

02 Types of Personal Data We Collect

Oyo88 collects your personal data through several means — directly when you register or conduct transactions, and automatically as you use our platform.

Data you provide directly:

  • Full name as stated in official identification documents.
  • National identification number (MyKad) or passport.
  • Email address and mobile phone number.
  • Date of birth (for age verification).
  • Bank account or e-wallet information for deposit and withdrawal purposes.
  • KYC documents such as copies of MyKad and bank statements.

Data collected automatically:

  • IP address and general geographic location.
  • Device type, operating system, and web browser version.
  • Game activity logs including wagering, wins, and play duration.
  • Deposit and withdrawal transaction records.
  • Cookie data and similar tracking technologies.
Data Category Example Information Primary Purpose
Identity Name, MyKad, date of birth Account verification & KYC
Connect Email, phone number Communication & Security
Finance Bank accounts, e-wallets Deposit & Withdrawal
Technical IP, device, browser Security & Fraud Prevention
Games Betting logs, transactions Compliance & Audit

03 How We Use Your Personal Data

We only use your data for legitimate and necessary purposes in operating the oyo88 platform. The following are the primary purposes of data use:

  • Registration & Account Verification — ensures every member is a real individual aged 18 and above.
  • Transaction processing — processes deposits, withdrawals, and all financial transactions securely and accurately.
  • Legal compliance — meets KYC (Know Your Customer), AML (Anti-Money Laundering), and regulatory authority requirements.
  • Platform security — detects and prevents fraud, account misuse, and illegal activity.
  • Service improvement — analyses usage patterns to improve the user experience and platform functionality.
  • Marketing communications — sends relevant promotional offers and bonus information (only with your consent).
  • Customer support — helps resolve complaints, inquiries, and technical issues efficiently.
  • Responsible gaming — monitors gaming patterns to identify signs of addiction and offer timely assistance.

Note: oyo88 will not use your data for any other purpose without obtaining your consent first. You may withdraw marketing consent at any time through your account settings.

04 Information Sharing & Disclosure

Oyo88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in certain limited situations, we may share your information with the following parties:

  • Payment providers — banks, payment gateways, and e-wallet operators that process your transactions. They are bound by strict confidentiality agreements.
  • Technology service providers — companies that provide our platform's hosting infrastructure, cybersecurity, and analytics services.
  • Regulatory authority — when required by Malaysian law, court order, or official authority investigation.
  • Identity verification partners — third-party services that verify KYC documents securely and in a controlled manner.

All third parties working with oyo88 are required to meet data protection standards equal to or exceeding our own. We do not allow them to use your data for any purpose other than what we direct.

Important: If oyo88 undergoes a merger, acquisition, or asset sale, your personal data may be transferred to the new entity. You will be notified in advance via your registered email before any data transfer takes place and before the new privacy policy comes into effect.

05 Data Security & Protection Measures

Oyo88 invests seriously in industry-grade cybersecurity infrastructure to keep your data safe at all times. We employ a multi-layered approach encompassing technical, procedural, and physical safeguards.

  • 256-bit SSL/TLS encryption protects all data in transit between your device and our servers.
  • Sensitive data such as banking information is stored in encrypted format using AES-256 algorithms.
  • Role-based access control (RBAC) ensures that only authorized personnel can access sensitive data.
  • Internal and external security audits are conducted periodically by accredited independent firms.
  • Intrusion detection systems (IDS) and advanced firewalls protect our infrastructure around the clock.
  • Two-factor authentication (2FA) is available and encouraged for all member accounts.
  • Tested incident response procedures are in place to act swiftly in the event of any security breach.

However, no system can guarantee 100% absolute security. You are also responsible for keeping your account password safe and not sharing your login credentials with anyone. If you suspect any suspicious activity on your account, contact us immediately via live chat.

06 Cookies, Tracking Technologies & Analytics

Oyo88 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

  • Essential cookies — required for core platform functions such as session login and security. Cannot be disabled.
  • Performance cookies — collects information on how you use the platform to help us improve speed and responsiveness.
  • Functional cookies — remembers your preferences such as language, display settings, and geographic location.
  • Analytics cookies — helps us understand aggregate, anonymised usage patterns for platform improvement purposes.

You can manage and delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some oyo88 platform features.

07 Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which oyo88 fully respects:

01
Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

02
Right to Rectification

You can request the correction of any data that is inaccurate, outdated, or incomplete.

03
Right to Erasure

You can request the deletion of your data, subject to legal compliance requirements.

04
Right to Restrict Processing

You can request that we restrict how we process your data in certain situations.

05
Right to Object

You can object to the processing of your data for direct marketing purposes at any time.

06
Right to Data Portability

You have the right to receive your data in a structured, machine-readable format.

How to Exercise Your Rights: To submit any data rights request, contact the oyo88 support team via live chat or email. We will process your request within 30 business days in accordance with PDPA requirements.

08 Data Retention Period

Oyo88 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal and regulatory requirements.

  • Active account data — retained for the duration your account remains active on oyo88.
  • Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's financial law requirements.
  • KYC & Identity Verification Logs — retained for 5 years after account closure.
  • Customer support communication data — retained for 3 years for reference and audit purposes.
  • Analytics & cookie data — anonymised data retained for up to 24 months; identifiable data deleted earlier.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

09 Third-Party Links & Services

The oyo88 platform may contain links to third-party websites or services such as game providers, payment gateways, or social media platforms. oyo88's Privacy Policy does not apply to those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. oyo88 is not responsible for the privacy practices or content of any external websites.

Third-party game providers operating within the oyo88 platform are bound by data processing agreements that ensure they handle player data in accordance with the standards we set. They are not permitted to use oyo88 player data for their own independent marketing purposes.

10 Changes to This Privacy Policy

Oyo88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new service features we introduce.

  • Any material changes will be communicated to you via your registered email or a prominent notice on our website.
  • Notice will be given at least 14 days before changes take effect.
  • The latest version of the Privacy Policy is always available on this page, marked with the most recent update date.
  • Continued use of the oyo88 platform after changes take effect will be considered acceptance of the updated policy.

We encourage you to review this page regularly to stay informed about how we protect your information. Version history of the privacy policy is available upon request from our support team.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints about how oyo88 handles your personal data, we encourage you to reach out to us directly. Our Data Protection Officer (DPO) team is ready to assist.

  • Reach us via Live Chat at the bottom corner of the platform — response within minutes.
  • Email us at: [email protected]
  • All privacy-related complaints will be investigated and responded to within 14 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.

Remember: oyo88 will never ask for your password, PIN, or full credit card details via email or Live Chat. If you receive any such communication, report it to us immediately as it may be a fraud attempt.

The oyo88 Way Protect Your Data

Six layers of protection we apply every day to ensure your privacy and data security are always guaranteed.

256-bit SSL Encryption

Every bit of data transmitted between your device and oyo88's servers is protected with banking-grade SSL encryption. No third party can intercept or read your information in transit.

KYC Identity Verification

Our KYC process ensures every account belongs to a legitimate individual. This protects you from account misuse and keeps the oyo88 platform free from illegal activity.

Malaysia PDPA Compliance

Oyo88 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have full rights over your data and we respect every one of those rights without question.

No Data Sales

Your personal data has never been and will never be sold, rented, or traded to advertisers or data brokers. You are not a product at oyo88 — you are a member we genuinely care about.

Two-Factor Authentication

An additional security layer through two-factor authentication (2FA) is available for all accounts. Even if someone knows your password, they cannot login without verifying your device.

Regular Security Audits

Oyo88's systems undergo regular internal and external security audits by accredited independent firms. Any vulnerabilities found are addressed promptly to keep the platform consistently protected.

FAQ — Privacy & Data

Answers to the most frequently asked questions by oyo88 members regarding data protection and privacy.

oyo88 will only disclose your personal data to authorities when required by applicable Malaysian law, such as a valid court order, official criminal investigation, or directive from a regulatory authority. We do not voluntarily disclose data without a clear legal basis, and we will notify you of such requests where permitted to do so.

Yes, you may request deletion of your data by contacting the oyo88 support team. However, please note that certain data must be retained to meet legal requirements — for example, financial transaction records must be kept for 7 years under Malaysia's financial laws. Data not subject to mandatory retention requirements will be deleted within 30 business days of receiving your request.

oyo88 does not store your full credit or debit card numbers on our servers. All payment transactions are processed through accredited payment gateways that comply with PCI-DSS standards. FPX bank account details and e-wallet information such as TNG, GrabPay, and Boost are encrypted with AES-256 and are only used for processing transactions you initiate yourself.

When you close your oyo88 account, we will delete or anonymise your personal data that is not subject to mandatory retention requirements. Data that must be retained for legal reasons will be stored in a restricted state and will not be used for any marketing or operational purposes. The account closure process typically takes 7–14 business days.

Yes, you can unsubscribe from oyo88 promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email you receive, or by updating your communication preferences in your account settings. Unsubscribe requests will be processed within 5 business days. Please note that you will still receive important transactional emails such as deposit confirmations and account security notices.
Trusted Platform • Secure Data

Ready to Play with Safe & Secure?

At oyo88, you play with peace of mind knowing your data is fully protected. Register today and enjoy a safe, fair, and exciting online casino experience alongside thousands of Malaysian members.

PDPA 2010 Compliance 256-bit SSL Encryption No Data Sales
Bahasa Melayu