OYO88 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how it is stored and used, and what rights you have as a Malaysian player.
A plain-English summary of our core data commitments. The full legal detail follows in the sections below.
OYO88 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments, and comply with regulatory obligations. We do not collect data speculatively or for purposes unrelated to your gaming experience.
All data transmitted between your device and OYO88's servers is protected by 256-bit SSL/TLS encryption — the same standard used by leading Malaysian banks including Maybank, CIMB, and Public Bank. Your data is never transmitted unencrypted.
OYO88 does not sell, rent, or trade your personal data to third-party marketing companies under any circumstances. Any sharing of data with third parties is limited to what is operationally necessary — such as payment processors and KYC verification providers — and is governed by strict data processing agreements.
You have the right to access, correct, or request deletion of your personal data at any time. You may also object to certain forms of data processing or request that your data be ported to another service. We honour all such requests in accordance with applicable law.
We do not retain your personal data indefinitely. Retention periods are determined by legal, regulatory, and operational requirements. Account data is retained for a minimum of five (5) years following account closure to comply with anti-money laundering regulations — after which it is securely deleted or anonymised.
In the unlikely event of a data security breach that may affect your personal data, OYO88 will notify affected players promptly and take all necessary remedial action. We maintain a dedicated incident response process to minimise exposure and recovery time in any such event.
This Privacy Policy ("Policy") describes how OYO88 ("OYO88", "we", "us", "the Operator", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "you") who access or use the OYO88 online gaming platform available at https://oyo88.lat and any associated mobile or web-based interfaces.
OYO88 recognises that privacy is a fundamental right and is committed to handling personal data responsibly, transparently, and in full compliance with applicable data protection legislation. This Policy sets out our practices in clear terms so that every player — whether in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia — understands exactly how their information is managed.
By accessing the Platform, creating an Account, or continuing to use OYO88's services after the effective date of this Policy, you acknowledge that you have read, understood, and consented to the practices described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.
For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial information, and device identifiers. |
| "Data Controller" | OYO88, the entity that determines the purposes and means by which personal data is processed. |
| "Data Processor" | A third party engaged by OYO88 to process personal data on OYO88's behalf, subject to a binding data processing agreement. |
| "Processing" | Any operation performed on personal data — including collection, storage, use, disclosure, transfer, and deletion. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose. |
| "Sensitive Data" | A subset of personal data that warrants heightened protection — including identification document numbers, financial account details, and health-related information (where relevant to responsible gambling assessments). |
| "Account" | A registered player account on the OYO88 Platform, uniquely linked to a verified player identity. |
| "KYC" | Know Your Customer — the identity and age verification process required before full Platform access and withdrawal privileges are granted. |
| "Cookies" | Small text files stored on your device by your web browser when you visit the Platform, used for authentication, session management, and analytics. |
OYO88 collects the following categories of personal data, depending on your interaction with the Platform:
OYO88 collects personal data through the following channels:
OYO88 processes personal data only for the purposes listed below. We do not repurpose data collected for one purpose to serve a materially different purpose without obtaining fresh consent where required.
| Purpose | Description |
|---|---|
| Account Creation & Management | Registering and maintaining your player account, authenticating logins, and managing account settings and preferences. |
| Identity Verification (KYC) | Confirming that you are aged 21 or above, that you are who you claim to be, and that your account is not being used for fraudulent or illegal purposes. |
| Payment Processing | Processing deposits and withdrawals via your chosen Malaysian payment channel (DuitNow, FPX, e-wallets, bank transfer, or cryptocurrency). |
| Regulatory Compliance | Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable regulatory obligations. |
| Fraud Prevention & Security | Detecting and preventing fraudulent activity, account takeover, collusion, and misuse of the Platform. |
| Responsible Gambling | Monitoring gaming behaviour to identify signs of problem gambling and administering player-requested responsible gambling tools such as deposit limits and self-exclusion. |
| Customer Support | Responding to support queries, resolving disputes, and maintaining records of communications for quality and training purposes. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience. |
| Marketing Communications | Sending promotional offers, bonus updates, and relevant news — only where you have explicitly opted in. You may withdraw consent at any time. |
OYO88 relies on the following legal grounds to process your personal data lawfully:
OYO88 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances:
We share personal data with carefully selected service providers who assist us in delivering the Platform's services. All such providers are bound by data processing agreements requiring them to process your data solely on OYO88's instructions and to maintain appropriate security standards. These providers include:
OYO88 may disclose personal data to relevant authorities where required by law, court order, regulatory direction, or lawful government request. Such disclosures will be limited to what is strictly required and, where legally permissible, we will notify you of any such disclosure.
In the event of a merger, acquisition, restructuring, or sale of OYO88's business or assets, personal data held by OYO88 may be transferred to the successor entity. You will be notified of any such transfer and your data will continue to be protected in accordance with this Policy.
OYO88 uses cookies and similar tracking technologies to operate the Platform securely and efficiently. Cookies are small data files stored on your device by your web browser when you visit the Platform.
| Cookie Type | Purpose | Basis |
|---|---|---|
| Essential Cookies | Required for Platform functionality — including login session management, security token validation, and fraud prevention. Cannot be disabled without impairing Platform usability. | Contractual necessity |
| Functional Cookies | Remember your preferences — such as display settings and communication language — to personalise your Platform experience across sessions. | Legitimate interests |
| Analytics Cookies | Collect aggregated, anonymised data about how players navigate and use the Platform, helping us identify performance issues and improvement opportunities. | Consent |
| Security Cookies | Support fraud detection and account security by tracking device fingerprints and login anomalies. | Legitimate interests |
You may control non-essential cookies through your browser settings. Disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Detailed cookie management instructions are available in your browser's help documentation.
OYO88 implements a multi-layered security architecture to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
OYO88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | Duration of account plus 5 years following account closure, to meet AML record-keeping requirements. |
| KYC & Identity Documents | 5 years from the date of verification or account closure, whichever is later. |
| Transaction & Financial Records | 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations. |
| Gaming & Betting History | 5 years from the date of each gaming session, retained for dispute resolution and regulatory compliance purposes. |
| Support Communications | 3 years from the date of the communication, or until the matter is resolved, whichever is later. |
| Marketing Preferences | Until you withdraw consent or close your account, plus 1 year for proof-of-consent record-keeping. |
| Analytics & Technical Logs | Up to 13 months from collection, after which logs are anonymised or deleted. |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to you.
As a data subject, you have the following rights with respect to your personal data held by OYO88. To exercise any of these rights, please contact our support team via live chat or at the email address provided in Section 15.
You may request a copy of the personal data OYO88 holds about you, along with information about how it is used. We will respond within 30 days of receiving a valid request.
If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account information directly from your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where no overriding legitimate interest or legal obligation exists to retain it.
You may object to processing based on legitimate interests, including marketing. Where you object to marketing, we will cease processing your data for that purpose immediately upon receipt of your request.
Where technically feasible, you may request your personal data in a structured, machine-readable format suitable for transfer to another service provider.
You may request that we restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of data while a correction is being verified.
OYO88 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes date-of-birth collection and mandatory KYC age verification to enforce this requirement.
If OYO88 discovers or is notified that personal data has been collected from a person under the age of 21, we will take the following action immediately:
OYO88 may store or process your personal data on servers located outside of Malaysia — for example, in data centre facilities used by our cloud infrastructure providers. Where such transfers occur, OYO88 ensures that adequate safeguards are in place to protect your data to a standard equivalent to Malaysian data protection requirements.
Such safeguards include contractual data transfer agreements with the receiving entities, technical security measures equivalent to those described in Section 9, and assessments of the data protection framework applicable in the destination jurisdiction. OYO88 will not transfer your personal data to any jurisdiction that does not provide adequate legal and technical protections for data subjects.
OYO88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.
Material changes to this Policy — particularly those that affect your rights or significantly expand the scope of data processing — will be communicated to registered players by email to their registered address and/or through a prominent notification on the Platform at the time of login.
Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. If you object to any changes, you should discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions. The most current version of this Policy will always be accessible at https://oyo88.lat/privacy-policy.
If you have questions, concerns, or requests relating to this Privacy Policy or the way OYO88 processes your personal data, please contact us through one of the following channels:
OYO88 Privacy & Data Enquiries
Available: 24 hours / 7 days via Live Chat on the Platform
Email: [email protected]
Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
Primary Timezone: Malaysia Time (MYT, UTC+8)
Response Time: Within 5 business days for all written enquiries
If you are unsatisfied with OYO88's response to a data-related complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. OYO88 will cooperate fully with any such regulatory investigation.
For responsible gambling-related data requests — such as requesting the deletion of self-exclusion records or accessing your betting history — please specify "Responsible Gambling Data Request" in your communication so that your enquiry is routed to the appropriate team. Our Responsible Gambling page provides further detail on available player tools and how to use them.
Now that you understand how your data is protected, explore more of the Platform — or review our other policies for a complete picture.
Explore our full game library, live sports betting markets, and current promotions.
Go to HomepageReview the full rules governing your OYO88 account, bonuses, and betting activity.
Read T&CDiscover our player protection tools — deposit limits, self-exclusion, and more.
Learn More