Privacy Policy
oyes88 Online Gaming Platform

Introduction

This Privacy Policy ("Policy") is issued by oyes88 ("we", "us", "our", "the Platform") and governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "Player", "User") who access or use the oyes88 online gaming platform at https://oyes88.cam and any associated mobile applications or services.

oyes88 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. This Policy has been prepared with reference to best practices under applicable data protection frameworks and the requirements of our international gaming licence, which mandates robust player data governance standards.

By registering an account with oyes88, making a deposit, or otherwise accessing our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not use our services.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, oyes88.
• "Data Processor" means a third party that processes Personal Data on behalf of oyes88 under a data processing agreement.
• "KYC Data" means identity verification documentation submitted by Players in fulfilment of Know Your Customer obligations, including government-issued identification, proof of address, and payment method ownership evidence.
• "Cookies" means small text files placed on your device by our platform to store session information, preferences, and analytics data.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including financial account information, identity document data, and any information relating to a Player's gambling behaviour for responsible gambling purposes.

Data Controller

oyes88 acts as the Data Controller in respect of Personal Data collected from Players and platform visitors. As Data Controller, oyes88 determines the purposes for which Personal Data is collected and the manner in which it is processed.

For all data-related enquiries, correction requests, deletion requests, or complaints, Players may contact our Data Protection team via the contact details provided in Clause 16 of this Policy.

Data We Collect

oyes88 collects the following categories of Personal Data, depending on your interaction with the platform:

4.1 Registration Data

• Full legal name;
• Date of birth (for age verification — minimum 21 years);
• Email address and mobile phone number;
• Country of residence and mailing address;
• Username and encrypted account password.

4.2 KYC & Verification Data

• Government-issued photo identification (MyKad, passport, or driving licence);
• Proof of address documentation (utility bills, bank statements, or official correspondence dated within 3 months);
• Payment method ownership evidence (bank statement excerpt, e-wallet screenshot, or equivalent);
• Selfie or liveness verification image where required by our compliance programme.

4.3 Financial Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (bank account last digits, e-wallet registered number — we do not store full payment card numbers);
• Account balance history and wagering activity records.

4.4 Technical & Usage Data

• IP address and geolocation data;
• Device type, operating system, and browser information;
• Session duration, pages visited, and navigation patterns;
• Login timestamps and access logs.

4.5 Communications Data

• Records of live chat, email, and support ticket exchanges with our customer service team;
• Survey responses, feedback submissions, and promotional opt-in preferences.

How We Collect Data

oyes88 collects Personal Data through the following channels:

5.1 Directly From You

The majority of Personal Data we hold is provided directly by you when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or participate in promotions. We only collect what you voluntarily submit through these interactions.

5.2 Automatically During Platform Use

When you access oyes88, our systems automatically collect certain technical data — including your IP address, device identifiers, and session activity — through server logs, cookies, and analytics tools. This data collection is a standard and necessary part of operating a secure, functional gaming platform.

5.3 From Third-Party Service Providers

We may receive supplementary data from third-party KYC verification services, payment processors (including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, and GrabPay), fraud detection providers, and geolocation services engaged to support platform operations. All third-party providers are contractually bound to process data only as instructed by oyes88.

5.4 From Public Sources

In limited circumstances, oyes88 may verify information against publicly available sources — such as official government sanction lists or court records — as part of our AML and compliance due diligence obligations.

Purposes of Data Processing

oyes88 processes your Personal Data for the following specific and legitimate purposes:

1. Account Management: To create, maintain, and administer your oyes88 account, including authentication and account security;
2. Age & Identity Verification: To confirm that you meet the minimum age requirement of 21 years and that your identity matches the account registration details;
3. Payment Processing: To facilitate deposits, withdrawals, and associated financial transactions through your chosen payment method;
4. AML & Fraud Prevention: To monitor transactions for suspicious activity, comply with anti-money-laundering obligations, and protect the integrity of our platform;
5. Responsible Gambling: To operate responsible gambling tools — including deposit limits, session timers, and self-exclusion — and to identify at-risk players requiring intervention;
6. Customer Support: To investigate, respond to, and resolve enquiries, complaints, and disputes raised through our support channels;
7. Platform Security: To detect, prevent, and remediate fraud, unauthorised access, bot activity, and other security threats;
8. Legal Compliance: To fulfil our obligations under our international gaming licence, applicable data protection frameworks, and any binding regulatory or court directives;
9. Service Improvement: To analyse aggregated usage patterns and improve the functionality, performance, and content of the oyes88 platform;
10. Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time.

Legal Basis for Processing

oyes88 processes Personal Data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the agreement created when you register and use oyes88 — including account management, payment processing, and game delivery;
• Legal Obligation: Processing necessary to comply with applicable laws, regulatory requirements, licensing conditions, and court or authority orders — including KYC, AML, and record-keeping obligations;
• Legitimate Interests: Processing that serves oyes88's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and service quality improvement;
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

oyes88 does not sell your Personal Data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

8.1 Payment Service Providers

We share transaction-related data with payment processors necessary to complete your deposits and withdrawals, including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network service providers. These providers receive only the minimum data required to execute the transaction.

8.2 KYC & Compliance Providers

We engage third-party identity verification services to assist with KYC, age verification, and AML screening. These providers process your identity documentation securely under data processing agreements with oyes88.

8.3 Technology & Infrastructure Partners

Our platform relies on cloud hosting, content delivery, and security service providers. These partners may process technical data (such as IP addresses and session logs) as a function of providing infrastructure services. All such providers are contractually bound to process data only as instructed.

8.4 Regulatory & Law Enforcement Authorities

oyes88 will disclose Personal Data to licensing authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, under AML reporting obligations or in response to a valid court order.

8.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data held by oyes88 may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.

Data Retention

oyes88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our legal, regulatory, and licensing obligations. The following general retention periods apply:

• Account Registration Data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements;
• KYC Documentation: Retained for a minimum of 5 years from the date of verification, or longer where required by the applicable licensing jurisdiction;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, consistent with financial compliance obligations;
• Customer Support Communications: Retained for a minimum of 2 years from the date of the interaction, or longer where a dispute remains unresolved;
• Technical & Session Logs: Retained for up to 12 months for security monitoring and fraud investigation purposes;
• Marketing Consent Records: Retained for as long as the consent is active, plus 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

Data Security

oyes88 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive data stored in our systems — including KYC documents and financial records — is encrypted using AES-256 or equivalent standards;
• Access Controls: Personal Data is accessible only to authorised personnel who require it to perform their job functions, governed by role-based access control policies;
• Two-Factor Authentication: Platform access for administrative accounts is protected by mandatory two-factor authentication;
• Intrusion Detection: Real-time monitoring systems detect and alert on anomalous access patterns and potential security incidents;
• Penetration Testing: Regular independent security assessments are conducted to identify and remediate vulnerabilities in our systems;
• Staff Training: All oyes88 personnel who handle Personal Data receive regular data protection and security awareness training.

Notwithstanding these measures, no digital system can guarantee absolute security. In the event of a security breach that materially affects your Personal Data, oyes88 will notify you promptly and take immediate remediation steps.

Cookies & Tracking Technologies

oyes88 uses cookies and similar tracking technologies to operate and improve our platform. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable core features such as secure login sessions, maintaining your account state during a gaming session, and load balancing across our infrastructure. These cookies cannot be disabled without impairing platform functionality.

11.2 Performance & Analytics Cookies

We use analytics tools to understand how players interact with oyes88 — which pages are visited most frequently, where users navigate from, and what features are used most. This data is aggregated and anonymised where possible, and is used solely to improve the platform experience.

11.3 Functional Cookies

Functional cookies store your preferences — such as your selected language, preferred currency display (MYR), and responsible gambling reminder settings — so that these are applied consistently across your sessions.

11.4 Marketing Cookies

With your consent, we may use cookies to deliver personalised promotional offers and to measure the effectiveness of our marketing campaigns. You may withdraw consent for marketing cookies at any time through your account settings or browser cookie controls.

Most browsers allow you to control and delete cookies through their settings. Please note that disabling certain cookies may affect the functionality of the oyes88 platform.

Your Rights

As a data subject, you have the following rights in respect of your Personal Data held by oyes88. To exercise any of these rights, please contact us using the details in Clause 16.

We will respond to all valid rights requests within 30 days. Some requests may be declined where fulfilling them would conflict with our legal obligations — for example, AML retention requirements. We will explain any such limitation clearly when responding to your request.

Third-Party Links

The oyes88 platform may contain references to third-party services — such as payment providers or game content suppliers — in the course of normal platform operation. Where these involve data transmission to third parties (for example, redirecting to a bank's FPX portal to complete a payment), we provide only the minimum data necessary for the transaction.

oyes88 is not responsible for the privacy practices of third-party websites or services that operate independently of our platform. We recommend reviewing the privacy policies of any third-party services you interact with directly, including your bank or e-wallet provider (Maybank, CIMB, Touch 'n Go eWallet, GrabPay, etc.).

Children's Privacy

oyes88 is strictly an adult platform. We do not knowingly collect or process Personal Data from individuals under the age of 21. Our registration process includes date-of-birth verification, and our KYC programme includes identity document checks to enforce the 21+ age requirement.

If oyes88 becomes aware that it has inadvertently collected Personal Data from an individual under 21 years of age, that data will be deleted immediately, the associated account will be suspended, and any deposits will be returned to the originating payment method after applicable compliance checks.

If you believe that a minor may have created an account on oyes88, please contact us immediately via the details in Clause 16.

Amendments to This Policy

oyes88 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made that significantly affect how we process your Personal Data, we will provide advance notice via a platform notification or email to your registered address prior to the changes taking effect.

The updated Policy will be published at https://oyes88.cam/privacy-policy with a revised "Last Updated" date. Your continued use of the platform following notification of changes constitutes acceptance of the revised Policy. We encourage you to review this page periodically to remain informed about how oyes88 protects your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact the oyes88 Data Protection team through the following channels:

• Live Chat: Available 24/7 via the on-site chat widget. Specify "Data Privacy Request" at the start of your message for prioritised routing.
• Email: [email protected] — for data rights requests, please include your registered account username and a description of your request. We aim to acknowledge all privacy-related emails within 1 business hour and resolve them within 30 calendar days.

For related legal documents, please refer to our Terms & Conditions. For information on responsible gambling tools and self-exclusion, visit our Responsible Gambling page. Frequently asked questions are answered on our FAQ page.