Oyen33 Privacy Policy – Malaysian Player Data Protection

Oyen33 ("we", "Platform", "oyen33") is the data controller for all information collected through the oyen33.biz platform and its related services. This Privacy Policy sets out in detail how we collect, use, store, and protect the personal information of oyen33 players and users in Malaysia.

For oyen33, protecting player privacy and data security is not merely a legal obligation — it is a core value embedded in every aspect of how we operate. The trust that Malaysian players place in oyen33 when they register and use our services is a responsibility we take seriously. Without that trust, oyen33 means nothing.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applies to all players accessing oyen33 from any location in Malaysia. Any terms not defined in this document carry the same meaning as used in the Terms & Conditions oyen33.

Oyen33 collects personal data from players through several means — directly when you register or use the platform, automatically via tracking technologies, and in some cases from legitimate third parties. We only collect data that is strictly necessary for the purposes stated in this Privacy Policy.

Oyen33 does not collect sensitive data such as health information, political views, religious beliefs, or players' racial backgrounds unless specifically required by law for certain compliance purposes.

Oyen33 uses the personal data collected for the following legitimate and stated purposes. We will not use your data for any purpose other than those listed below without first obtaining your consent.

• Account Management: To create, verify, and manage your oyen33 account, including the login process, OTP verification, and password recovery.
• Payment Processing: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods, and to maintain accurate transaction records in MYR.
• Service Provision: To provide access to slots, blackjack, Live Casino, jackpot games, Malaysia Super League Sports Betting, cricket, and all other oyen33 services.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multi-accounting, and any conduct that violates oyen33's Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns and identify players who may need responsible gaming support, and to enforce limits set by players themselves.
• Legal Compliance: To fulfil applicable legal and regulatory obligations in Malaysia, including KYC (Know Your Customer) requirements and reporting obligations to the relevant authorities.
• Customer Support: To respond to enquiries, resolve complaints, and provide technical support to oyen33 players in Bahasa Melayu.
• Marketing Communications (with consent): To send promotions, bonus offers, and the latest oyen33 updates to players who have consented to receiving such communications.

Oyen33 does not sell, rent, or commercialise players' personal data to any third party. However, in the course of operating the platform, oyen33 may need to share certain data with selected third parties in limited, controlled situations as outlined below:

• Payment Service Providers: The transaction information required is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and the FPX gateway solely for the purpose of processing your payment. These providers are bound by strict confidentiality agreements.
• Game Providers: Minimal gaming data required is shared with licensed game software providers such as Pragmatic Play, NetEnt, and Microgaming solely for the purpose of game delivery and maintenance. These providers do not receive your financial data or full identity details.
• Malaysian Authorities: oyen33 will disclose player data to the relevant Malaysian authorities when required by law or a valid court order, or where there is an investigation into unlawful activity.
• Technical Service Providers: Providers that support oyen33's technical operations — such as cloud hosting, cybersecurity, and analytics — may access data within the scope of their functions. All such providers are subject to strict data processing agreements.

Oyen33 stores players' personal data on secure servers protected by multiple layers of technical and organisational safeguards. Player data security is a responsibility we take very seriously, and we continually invest in the latest security technologies to ensure your information remains protected at all times.

• 256-bit SSL Encryption: All data communications between your browser and oyen33's servers are protected with 256-bit SSL encryption, which is practically unbreakable.
• Stored Data Encryption: Sensitive data stored in oyen33's databases, including passwords and payment information, is encrypted using industry-standard algorithms. Your password is not stored in plain text — it is stored as a hash that cannot be decrypted.
• Strict Access Controls: Access to players' personal data within oyen33's internal systems is restricted to staff with a legitimate operational need only. All access is logged and audited on a regular basis.
• Regular Security Audits: oyen33 undergoes independent security audits on a regular basis to identify and address any vulnerabilities in our systems before they can be exploited.
• Two-Factor Authentication: oyen33 supports two-factor authentication (2FA) via SMS OTP to add an extra layer of protection to your account beyond just a password.

While oyen33 takes all reasonable steps to protect your data, no security system is 100% impenetrable. We encourage players to take their own precautions, such as using strong passwords and never sharing login credentials with anyone.

Oyen33 uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and deliver more relevant services to Malaysian players. This section explains the types of cookies we use and how you can manage them.

• Essential Cookies (Required): These cookies are essential for the basic operation of the oyen33 platform — including login, session security, and language preferences. Without them, certain platform features will not function correctly. These cookies cannot be disabled.
• Performance Cookies (Analytics): These cookies help oyen33 understand how players use the platform — which pages are visited most, how long players stay, and where technical issues tend to occur. This information is used to continuously improve the oyen33 platform.
• Functional Cookies: These cookies save your preferences such as display language, favourite game layout, and display settings so you do not have to reconfigure them each time you log in to oyen33.
• Managing Cookies: You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect your experience on the oyen33 platform.

Oyen33 takes additional security measures to protect players' financial and payment data. As all oyen33 transactions are conducted in Malaysian Ringgit (MYR) using local Malaysian payment methods, we work closely with licensed and regulated payment service providers in Malaysia.

When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks, the payment is processed directly through the secure, certified payment gateway of the respective provider. oyen33 does not store your PIN, password, or eWallet or banking login credentials — this information is handled exclusively by the relevant payment provider within their own secure environment.

• oyen33 does not store credit or debit card numbers in our systems — our primary payment methods are local Malaysian eWallets and FPX.
• All transaction records are stored with encryption and are accessible only to authorised staff for customer support or legal compliance purposes.
• Any suspicious transaction activity will be automatically flagged by oyen33's systems and reviewed by our security team.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and oyen33's policies, you have several rights regarding your personal data that you may exercise at any time. Below are those rights and how to use them:

Oyen33 is an online entertainment platform strictly restricted to individuals aged 18 and above. We do not knowingly collect, store, or process the personal data of individuals under the age of 18.

During registration, players are required to confirm that they are aged 18 or above. Additional age verification may be carried out through identity document checks. Should oyen33 discover that personal data of a minor has been inadvertently collected, we will promptly delete that data and close the account without compensation. If you believe your child has registered an oyen33 account without authorisation, please contact us immediately at support@oyen33.biz.

In the course of operating the oyen33 platform, certain personal data may be processed or stored outside Malaysia — for example, by cloud service providers or international game providers. When this occurs, oyen33 ensures that a level of data protection equivalent to Malaysia's PDPA is maintained through appropriate contractual agreements with the receiving parties.

Oyen33 will not transfer players' personal data outside Malaysia without first ensuring that adequate protection mechanisms are in place, whether through data processing agreements, standard contractual clauses, or confirmation that the recipient country has equivalent data protection laws.

Oyen33 retains players' personal data for as long as the account remains active and for a specified period after account closure in accordance with applicable legal and operational requirements. The following is a general guide to oyen33's data retention periods:

• Active Account Data: Retained for as long as your oyen33 account remains active and for the required period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's accounting and tax legal requirements.
• KYC Compliance Records: Retained for a minimum of 5 years after account closure in accordance with applicable compliance requirements.
• Security Logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Support Communication Records: Retained for 2 years to allow follow-up on recurring enquiries and complaints.

Once the required retention period has elapsed, data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

Oyen33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in platform operations. Any amendments will be published on this page with a revised "Last Updated" date.

For material amendments, oyen33 will endeavour to notify players via in-platform notifications or email with at least 14 days' notice before the changes take effect. Continued use of the oyen33 platform after the Privacy Policy has been updated will be considered your acceptance of the revised terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding oyen33's Privacy Policy or how we handle your personal data, please do not hesitate to reach out. Our team is available in Bahasa Malaysia and ready to assist you:

• Live Chat: The fastest option — click the live chat icon within the oyen33 platform, available 24/7.
• Email: support@oyen33.biz — for privacy enquiries, please use the subject line "Privacy Policy Enquiry".
• Response Time: oyen33 is committed to responding to all privacy enquiries within 48 business hours and resolving privacy rights requests within 21 business days.