Our Data Commitments at a Glance
Encrypted Storage
All personal data held by oyen88 is stored on servers protected by 256-bit AES encryption. Access is restricted to authorised personnel only, with full audit logging.
No Data Selling
oyen88 does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely for service delivery and regulatory compliance.
Your Rights Respected
You may request access to, correction of, or deletion of your personal data at any time. oyen88 will respond to all verified data requests within 30 days.
Minimal Collection Principle
oyen88 collects only the personal data that is genuinely necessary for account operation, payment processing, and legal compliance. We do not collect data beyond what is required.
1. Introduction
oyen88 ("We", "Us", "Our", "the Platform") operates https://oyen88.app and all associated sub-domains, mobile interfaces, and services (collectively, "the Services"). This Privacy Policy ("Policy") describes how oyen88 collects, processes, stores, and protects the personal data of individuals ("You", "User", "Player") who register for or use the Services.
This Policy applies to all users of oyen88, including registered account holders, visitors who browse the platform without registering, and individuals who contact our support team. By using any part of the Services, you acknowledge that you have read and understood this Policy and consent to the data practices it describes.
This Policy should be read alongside the oyen88 Terms & Conditions, which govern your use of the platform and are incorporated by reference.
2. Data Controller
For the purposes of applicable data protection law, oyen88 is the data controller responsible for your personal data. As data controller, oyen88 determines the purposes for which your personal data is processed and the means by which that processing is carried out.
Where oyen88 engages third-party service providers (such as payment processors, identity verification services, or game content providers) to process personal data on our behalf, those parties act as data processors under instruction from oyen88 and are contractually bound to process your data only in accordance with this Policy and applicable law.
3. Data We Collect
oyen88 may collect the following categories of personal data:
- Identity Data: Full legal name, date of birth, national identification card (IC) number or passport number, nationality, and profile photograph where provided for KYC verification.
- Contact Data: Email address, Malaysian mobile number, and residential address.
- Financial Data: Deposit and withdrawal transaction records, payment method details (e-wallet identifiers, bank account information submitted for withdrawals), and transaction amounts in MYR.
- Account Data: Username, encrypted password hash, account registration date, account status, betting history, game session records, bonus redemption history, and communication preferences.
- Technical Data: IP address, device type and operating system, browser type and version, session timestamps, and approximate geolocation derived from IP.
- Usage Data: Pages visited within oyen88, betting and gaming patterns, search queries within the platform, and referral source data.
- Communication Data: Records of support tickets, live chat transcripts, email correspondence, and feedback submitted to oyen88.
4. How We Collect Data
oyen88 collects personal data through the following means:
- Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
- Automated collection: Technical and usage data collected automatically when you access or interact with the platform, including via cookies and similar technologies (see Section 11).
- Third-party sources: Identity verification agencies, payment processors, fraud prevention services, and publicly available sources where permitted by law and necessary for compliance purposes.
5. How We Use Your Data
oyen88 uses personal data for the following purposes:
- To create, maintain, and administer your oyen88 account and provide access to all Services.
- To process deposits, withdrawals, and verify your identity in accordance with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
- To detect and prevent fraud, money laundering, collusion, account sharing, bonus abuse, and other forms of prohibited conduct.
- To deliver customer support and respond to queries, complaints, and data requests.
- To send transactional communications — including account confirmations, deposit receipts, withdrawal notifications, and security alerts.
- To send promotional communications (where you have opted in or where permitted by applicable law), including bonus offers, tournament announcements, and platform updates. You may opt out at any time.
- To analyse platform usage patterns and improve the functionality, performance, and content of oyen88.
- To comply with applicable legal and regulatory obligations, including responding to lawful requests from authorities.
- To enforce the oyen88 Terms & Conditions and protect the rights of oyen88 and other users.
6. Legal Basis for Processing
oyen88 processes your personal data on the following legal bases:
- Contract performance: Processing necessary to deliver the Services you have requested, including account operation, betting, and payment processing.
- Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations.
- Legitimate interests: Processing conducted for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your rights.
- Consent: Where processing is based on consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
7. Data Sharing & Disclosure
oyen88 does not sell your personal data. We may share your data with the following categories of recipients in limited circumstances:
- Payment service providers: To process deposits and withdrawals (e.g., Touch n Go, Boost, Maybank, CIMB, and other banking partners). These providers receive only the data necessary to execute a specific transaction.
- Identity verification providers: To complete KYC checks as required by our compliance obligations.
- Game content providers: Limited technical identifiers (not full personal data) may be shared with licensed game studios to facilitate gameplay and progressive jackpot systems.
- Fraud prevention services: Anonymised or pseudonymised risk signals may be shared with fraud detection networks to protect all users on the platform.
- Regulatory and law enforcement authorities: Where oyen88 is under a legal obligation to disclose information, or where disclosure is necessary to protect oyen88's legal rights or the safety of users.
- Corporate successors: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.
8. International Transfers
Some third-party service providers engaged by oyen88 — including game content studios and certain payment infrastructure providers — may process personal data in jurisdictions outside Malaysia. Where such transfers occur, oyen88 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to process data to a standard at least equivalent to that described in this Policy.
By using the Services, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence, and you consent to such transfers where they are made in compliance with applicable data protection law.
9. Data Retention
oyen88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and compliance requirements:
- Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with applicable AML and financial record-keeping obligations.
- Transaction records: Retained for a minimum of seven (7) years as required by financial regulations.
- KYC documents: Retained for a minimum of five (5) years following the end of the customer relationship.
- Support communications: Retained for up to three (3) years from the date of the interaction.
- Marketing consent records: Retained until withdrawal of consent plus an additional period to demonstrate compliance.
Upon expiry of the applicable retention period, oyen88 will securely delete or anonymise personal data so that it can no longer be associated with any identifiable individual.
10. Security Measures
oyen88 implements technical and organisational security measures appropriate to the nature of the data processed and the risks involved. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and oyen88 servers.
- AES-256 encryption for personal data stored in our databases.
- Role-based access controls limiting data access to authorised personnel on a need-to-know basis.
- Multi-factor authentication for all administrative and operational system access.
- Regular penetration testing and security audits conducted by independent third parties.
- Comprehensive incident response procedures to address any data security breach in a timely manner.
Notwithstanding these measures, no electronic transmission or storage system is entirely free of risk. oyen88 cannot guarantee the absolute security of data in all circumstances and will not be liable for unauthorised access that occurs despite reasonable security precautions.
11. Cookies & Tracking Technologies
oyen88 uses cookies and similar technologies to enhance your experience on the platform. Cookies are small data files placed on your device when you access oyen88. We use the following types of cookies:
- Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication, security tokens, and login state management. These cannot be disabled without disrupting platform functionality.
- Functional Cookies: Remember your preferences (such as language, display settings, and last viewed sports markets) to improve your experience on return visits.
- Analytics Cookies: Collect anonymised data about how users navigate the platform to help oyen88 identify areas for improvement. This data does not identify you personally.
- Fraud Prevention Cookies: Used to identify and flag unusual or potentially fraudulent session behaviour to protect account security.
You may manage cookie preferences through your browser settings. Disabling cookies may affect certain platform features. oyen88 does not use third-party advertising or behavioural tracking cookies.
12. Your Rights
Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by oyen88:
- Right of Access: You may request a copy of the personal data oyen88 holds about you.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
- Right to Restriction: You may request that oyen88 restrict processing of your data in certain circumstances.
- Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to oyen88, where technically feasible.
- Right to Object: You may object to processing based on legitimate interests, and to the processing of your data for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact the oyen88 support team via live chat or the email address shown in the footer. oyen88 will respond to all verified requests within 30 calendar days.
13. Children & Minors
oyen88 strictly prohibits the use of its Services by individuals under 21 years of age. The platform does not knowingly collect or process the personal data of minors. If oyen88 becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account closed.
If you are a parent or guardian and believe that a minor has registered on oyen88, please contact our support team immediately so that the matter can be investigated and resolved without delay.
14. Third-Party Links
The oyen88 platform may contain references to third-party game studios, payment providers, or industry bodies. oyen88 is not responsible for the privacy practices of any third-party websites or services that you may access independently. This Policy applies exclusively to data processed by oyen88 in connection with the Services. We encourage you to review the privacy policies of any third-party services you use.
15. Policy Amendments
oyen88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, oyen88 will notify registered users by email or through a prominent notice on the platform prior to the changes taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.
Your continued use of oyen88 following notification of changes constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you must cease using the Services and may request account closure.
16. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oyen88, please contact our Data Privacy team through any of the following channels:
- Live Chat: Available 24/7 from any page on oyen88.app.
- Email: The support email address is displayed in the footer of this page. Please include "Privacy Request" in the subject line for prioritised routing.
- Written Request: Submitted through the oyen88 account support portal after logging in.
oyen88 is committed to resolving all privacy-related queries promptly and transparently. We aim to acknowledge all written privacy requests within 5 business days and provide a substantive response within 30 calendar days.