oyen33 Privacy Policy

This Privacy Policy ("Policy") describes how oyen33 ("the Platform," "we," "us," or "our"), the operator of the online gaming platform at oyen33.asia, collects, uses, stores, shares, and protects the personal data of individuals ("Users," "Players," or "you") who access or register on the oyen33 platform. This Policy is incorporated into and forms part of oyen33's Terms and Conditions.

oyen33 takes the privacy and security of your personal data seriously. We are committed to handling your data responsibly, in compliance with applicable international data protection standards, and with the transparency you deserve as a registered user of our platform. This Policy was last reviewed and updated in June 2026.

oyen33 is the data controller in respect of the personal data collected through the oyen33 platform. As data controller, oyen33 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations. If you have questions about how oyen33 processes your personal data, you may contact us at the details provided in Section 14 of this Policy.

oyen33 collects personal data from you in the following categories:

a) Registration Data: When you create an oyen33 account, we collect your full name, date of birth, email address, mobile phone number, and residential address. This information is required to create and verify your account.

b) Identity Verification (KYC) Data: To comply with our Know Your Customer obligations and to verify that you meet the minimum age requirement of 21 years, oyen33 may request copies of government-issued identity documents (such as your Malaysian IC or passport) and proof of address. This data is processed securely and retained only as required by applicable regulatory standards.

c) Financial Data: oyen33 collects data relating to your deposit and withdrawal transactions, including payment method details (such as your Touch 'n Go eWallet account reference, DuitNow ID, FPX bank selection, or virtual currency wallet address), transaction amounts, and transaction timestamps. oyen33 does not store full payment card numbers on its servers.

d) Gaming Activity Data: We collect records of your gaming sessions, including games played, bet amounts, wins and losses, session duration, and bonus usage. This data is used for account management, responsible gaming monitoring, and dispute resolution purposes.

e) Technical Data: oyen33 automatically collects certain technical data when you access the platform, including your IP address, device type, operating system, browser type and version, and approximate geographic location (derived from IP). This data is used to maintain platform security, prevent fraud, and improve platform performance.

f) Communications Data: If you contact oyen33 customer support via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

oyen33 uses the personal data we collect for the following purposes:

• To create, verify, and manage your oyen33 player account;
• To process deposit and withdrawal transactions and verify payment method ownership;
• To conduct KYC identity verification and comply with anti-money laundering (AML) obligations;
• To operate the gaming platform and provide you with access to games, promotions, and account features;
• To monitor gaming activity for the purposes of responsible gaming compliance, including enforcing deposit limits, session limits, and self-exclusion protocols;
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities;
• To respond to your customer support enquiries and resolve disputes;
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, and account security alerts) — these are not optional and are required for account operation;
• To send you promotional communications, including bonus offers and platform updates, where you have opted in to receive such communications;
• To analyse platform usage patterns in aggregate form to improve the oyen33 user experience;
• To comply with applicable legal, regulatory, and audit requirements.

oyen33 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the oyen33 Terms and Conditions, including account management, transaction processing, and platform access;
• Legal Obligation: Processing required to comply with applicable KYC, AML, and regulatory reporting obligations;
• Legitimate Interests: Processing required for fraud prevention, platform security, dispute resolution, and improving our services, where these interests are not overridden by your data protection rights;
• Consent: Processing for optional purposes, such as sending promotional communications, where we have obtained your prior consent. You may withdraw this consent at any time by updating your account communication preferences.

oyen33 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of third parties in limited circumstances:

• Gaming Software Providers: Third-party game studios and live casino operators (e.g., Evolution Gaming, Pragmatic Play) may receive limited technical session data required to operate games within the oyen33 platform environment;
• Payment Processors: Payment service providers (including e-wallet operators and FPX banking partners) receive the data necessary to process your financial transactions;
• KYC / AML Service Providers: Third-party identity verification providers engaged by oyen33 to assist with KYC compliance receive identity document data solely for verification purposes;
• Regulatory and Law Enforcement Authorities: oyen33 may disclose personal data to competent regulatory, law enforcement, or judicial authorities where required by applicable law or where disclosure is necessary to protect the rights, property, or safety of oyen33, its users, or the public;
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by oyen33 may access personal data to the extent necessary for their professional engagements, subject to obligations of confidentiality.

oyen33 uses cookies and similar tracking technologies on the oyen33 platform for the following purposes:

• Essential Cookies: Required for basic platform functionality, including maintaining your login session state, remembering your language preferences, and enabling secure account access. These cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect anonymised, aggregated data about how users navigate and interact with the oyen33 platform. This data is used to identify usability issues and improve the player experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and bot traffic.

You may control the use of non-essential cookies through your browser settings. Note that disabling cookies may affect certain features of the oyen33 platform. Your continued use of the platform after being presented with this Policy constitutes acceptance of our use of essential cookies as described above.

oyen33 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. Specific retention periods are as follows:

• Account Data: Retained for the duration of your account registration and for a minimum of five (5) years following permanent account closure, in compliance with applicable AML record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory frameworks;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer Support Communications: Retained for three (3) years from the date of the relevant communication, or for the duration of any ongoing dispute;
• Technical / Log Data: Retained for up to twelve (12) months from the date of collection.

Upon expiry of the applicable retention period, oyen33 will securely delete or anonymise your personal data in accordance with industry-standard data destruction practices.

oyen33 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the oyen33 platform;
• Cryptographic hashing and salting of account passwords — oyen33 does not store plaintext passwords;
• Restricted access to personal data within the oyen33 organisation, limited to personnel with a legitimate operational need;
• Regular internal security audits and vulnerability assessments of platform infrastructure;
• Two-factor authentication availability for all registered player accounts.

Whilst oyen33 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your oyen33 account credentials and for notifying oyen33 promptly if you suspect any unauthorised access to your account.

Subject to applicable law and regulatory constraints, you have the following rights in relation to the personal data oyen33 holds about you:

• Right of Access: You may request a copy of the personal data oyen33 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by oyen33;
• Right to Erasure: In certain circumstances, you may request deletion of your personal data, subject to legal retention obligations;
• Right to Restrict Processing: You may request that oyen33 restrict the processing of your personal data in certain circumstances;
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that oyen33 provide your personal data in a structured, machine-readable format;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact oyen33 using the details in Section 14. oyen33 will respond to all verified data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days with notice to you.

oyen33 may transfer your personal data to third-party service providers located outside of Malaysia, including in jurisdictions where data protection laws may differ from those applicable in Malaysia. Where such transfers occur, oyen33 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require recipients to maintain standards equivalent to those described in this Policy.

The oyen33 platform is strictly restricted to persons aged 21 and above. oyen33 does not knowingly collect personal data from individuals under the age of 21. If oyen33 becomes aware that personal data has been collected from an individual under the minimum age, such data will be immediately deleted and the associated account closed. If you believe that a minor has registered on the oyen33 platform, please contact our support team immediately.

oyen33 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to the Policy, oyen33 will notify registered players by posting a notice on the platform and updating the "Last Updated" date at the top of this page. Your continued use of the oyen33 platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. It is your responsibility to review this Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data oyen33 holds about you, please contact us via:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within the oyen33 platform after logging in to your account

oyen33 will acknowledge all privacy-related enquiries within 48 hours and will endeavour to provide a substantive response within 30 days of receipt of a verified request.