Privacy Policy

Introduction

This Privacy Policy ("Policy") issued by OYO288 ("Platform", "we", "us", "our") and applies to all personal data collected from users ("you", "User "Member") who access or use the OYO288 website at https://oyo288.lat, including all associated services, products, games, and features available therein.

OYO288 operates as an online casino and sports betting platform serving members primarily in Malaysia. We understand that your personal data is important to you, and we are committed to handling it responsibly, transparently, and in accordance with applicable data protection principles.

By registering for an Account or using the OYO288 platform in any capacity, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the platform.

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, OYO288 is the Data Controller in respect of all personal data collected from Members.
• "Data Processor" — a third party that processes personal data on behalf of OYO288, under documented instructions and subject to contractual data protection obligations.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a defined purpose.
• "KYC" — Know Your Customer procedures conducted to verify identity, age, and source of funds, as required by anti-money-laundering and responsible gambling obligations.
• "Cookies" — small text files stored on your device by a website, used to maintain session state, preferences, and analytical data.

Data Controller

OYO288 is the Data Controller in respect of all personal data collected through the platform at https://oyo288.lat. As Data Controller, OYO288 is responsible for determining the purposes for which your personal data is processed and the means by which that processing is carried out.

If you have any questions or concerns regarding the processing of your personal data, or wish to exercise any of your data subject rights as set out in Section 11 of this Policy, you may contact OYO288's support team using the contact details provided in Section 15 below.

Personal Data We Collect

OYO288 collects different categories of personal data depending on the nature of your interaction with the platform. The categories we may collect include:

4.1 Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth
• National identification number (MyKad number or passport number for Malaysian members)
• A copy of your identity document where submitted for KYC verification

4.2 Contact Data

• Email address registered to your Account
• Mobile telephone number
• Residential address, including postcode, city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru), and country

4.3 Financial Data

• Bank account details where provided for withdrawal processing (e.g., Maybank, CIMB, Public Bank, Hong Leong Bank account numbers)
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay) used for transactions
• Cryptocurrency wallet addresses where applicable (BTC, USDT)
• Transaction history, including deposit amounts, withdrawal requests, and account balance records

4.4 Account & Gameplay Data

• Account username and hashed password credentials
• Game history, betting records, wagering activity, and bonus utilisation
• Session logs, login timestamps, and account activity records
• Responsible gambling tool settings (deposit limits, self-exclusion status, cooling-off periods)

4.5 Technical & Device Data

• IP address and approximate geolocation data derived from IP
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform performance logs and error reports

4.6 Communications Data

• Records of communications between you and OYO288 support, including live chat transcripts and email correspondence
• Responses to surveys or feedback requests, where voluntarily submitted

How We Collect Your Data

OYO288 collects personal data through the following channels:

OYO288 does not purchase personal data from third-party data brokers or marketing databases. All personal data is collected directly from you or generated through your use of the platform.

How We Use Your Data

OYO288 processes your personal data only for the specific, documented purposes listed below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing an alternative legal basis.

6.1 Account Management

To create, maintain, and administer your OYO288 Account; to verify your identity at registration and ongoing basis through KYC procedures; to authenticate your sessions; and to communicate account-related notifications to you (e.g., password reset confirmations, deposit and withdrawal receipts).

6.2 Transaction Processing

To process deposits made via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels; to process withdrawal requests to your nominated payment method; and to maintain complete and accurate financial records in relation to all transactions on your Account.

6.3 Legal & Regulatory Compliance

To fulfil OYO288's obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and responsible gambling regulations; to verify that all members meet the minimum age requirement of 21 years; and to respond to lawful requests from regulatory authorities or law enforcement agencies.

6.4 Platform Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity multi-accounting, bonus abuse, money laundering, and other conduct that violates OYO288's Terms and Conditions or applicable law; to monitor gameplay patterns for integrity purposes; and to protect the legitimate interests of all OYO288 members.

6.5 Responsible Gambling

To administer responsible gambling tools including deposit limits, loss limits, cooling-off periods, and self-exclusion arrangements; to monitor gameplay for signs of problem gambling behaviour; and to communicate responsible gambling resources to members where appropriate.

6.6 Platform Improvement

To analyse anonymised and aggregated usage data for the purposes of improving platform performance, user experience, game selection, and customer support quality. Where individual-level data is used for this purpose, it will be pseudonymised to the extent technically practicable.

6.7 Marketing Communications

Where you have provided explicit consent, to send you promotional communications regarding new games, bonuses, and offers available on OYO288. You may withdraw consent for marketing communications at any time by contacting support or using the unsubscribe mechanism provided in any marketing email.

Legal Basis for Processing

OYO288 processes personal data only where it has a valid legal basis for doing so. The primary legal bases on which we rely are as follows:

• Contract performance — processing necessary to fulfil the contractual relationship established when you register for an Account and agree to our Terms and Conditions, including account administration, transaction processing, and customer support.
• Legal obligation — processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and lawful regulatory requests.
• Legitimate interests — processing carried out in pursuit of OYO288's legitimate business interests, including fraud prevention, platform security, and analytics provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent — processing based on your freely given and specific consent, including the sending of optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Third-Party Data Sharing

OYO288 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share personal data with third parties only in the following limited circumstances:

• Service providers and data processors: Third-party vendors who provide services on OYO288's behalf, including payment processing providers, identity verification services, cloud hosting infrastructure providers, and customer support technology platforms. All such providers are bound by contractual data processing agreements that restrict their use of your data to the agreed service purposes only.
• Regulatory and law enforcement authorities: Where OYO288 is required by applicable law or a valid legal order to disclose personal data to a governmental body, regulatory authority, or law enforcement agency, we will comply with such requirements. Where legally permitted to do so, OYO288 will notify you of any such disclosure.
• Fraud prevention and integrity: Where necessary to prevent, detect, or investigate suspected fraud, money laundering, or other unlawful activity, OYO288 may share relevant personal data with third-party fraud prevention services or partner platforms.
• Business restructuring: In the event of a merger, acquisition, or sale of all or substantially all of OYO288's business assets, personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Policy that may result from it.

International Data Transfers

OYO288 operates on international infrastructure, and your personal data may be processed or stored in countries outside Malaysia, including in data centre facilities hosted in other jurisdictions. Where personal data is transferred outside Malaysia, OYO288 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries that maintain data protection standards equivalent to or exceding those applicable in Malaysia;
• Contractual safeguards with data processors that require them to apply appropriate technical and organisational measures to protect your personal data;
• Encryption of data in transit and at rest to reduce the risk associated with cross-border data flows.

If you have questions about the safeguards applied to specific international data transfers, you may contact OYO288 support using the details provided in Section 15.

Data Retention

OYO288 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

Upon expiry of the applicable retention period, OYO288 will securely delete or irreversibly anonymise your personal data in accordance with our data disposal procedures.

Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data OYO288 holds about you:

• Right of Access: You have the right to request a copy of the personal data OYO288 holds about you, together with information about how that data is processed. We will respond to access requests within 30 calendar days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many Account details directly within the Account interface.
• Right to Erasure: In certain circumstances, you have the right to request that OYO288 delete the personal data we hold about you. This right is subject to overiding legal obligations, including our obligation to retain transaction and KYC records for the periods specified in Section 10.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of data held or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on OYO288's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact OYO288 support using the details in Section 15. We may need to verify your identity before processing your request. We will not charge a fee for responding to rights requests except in cases of manifestly unfounded or excessive repeat requests.

Cookies & Similar Technologies

OYO288 uses cookies and similar client-side technologies (including local storage and session storage) to operate certain essential platform functions, maintain session security, and gather anonymised analytics data. The following cookie categories are in use on the platform:

12.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They include session authentication tokens, security cookies, and load-balancing identifiers. Essential cookies cannot be disabled without preventing core platform functionality, including logging in, maintaining your session, and processing transactions. No consent is required for essential cookies.

12.2 Analytics Cookies

OYO288 uses anonymised analytics data to understand how members navigate and use the platform, with the aim of improving performance and user experience. This data is aggregated and does not identify individual users. Analytics cookies are set only where you have provided consent, or where applicable law permits their use on a legitimate interests basis.

12.3 Preference Cookies

Preference cookies remember your platform settings between sessions, such as your preferred language and display preferences. These cookies improve the quality of your experience but are not essential to platform operation. You may disable preference cookies through your browser settings, though doing so may affect certain platform features.

Protection of Minors

OYO288 is an adult gambling platform strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at Account registration and as part of the ongoing KYC process.

If OYO288 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately close the associated Account, forfeit any balance in accordance with our Terms and Conditions, and securely delete all personal data associated with that Account as soon as our regulatory retention obligations permit.

If you are the parent or guardian of a minor and believe that your child may have created an OYO288 Account without your knowledge, please contact our support team immediately using the details provided in Section 15.

Updates to This Privacy Policy

OYO288 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the "Last Updated" date displayed at the top of this page and, where required by applicable law, notify you by email or through an in-platform notification.

You are encouraged to review this Policy periodically to stay informed about how OYO288 protects your personal data. Your continued use of the platform following any update constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you should discontinue use of the platform and may close your Account by contacting support.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by OYO288, please contact our support team through the following channels:

When submitting a data subject rights request, please provide your registered Account username and, where possible, the specific data category or processing activity your request relates to. OYO288 may need to verify your identity before processing your request in order to ensure that personal data is not disclosed to an unauthorised party.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available upon written request submitted to our support team.