Privacy Policy OYO777 – Malaysian Member Data Protection

This Privacy Policy applies to all personal information collected by oyo777 through the website at https://oyo777.best, the oyo777 mobile application (where available), and all your interactions with our platform and customer support team. It covers data you provide directly during registration, data generated through your use of the platform, and data we receive from legitimate third-party sources.

OYO777 acts as the data controller for all personal information collected from Malaysian members using our platform. As data controller, oyo777 is responsible for ensuring that all personal data processing is carried out lawfully, fairly, and transparently in accordance with applicable standards and legislation.

OYO777 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data categories collected:

OYO777 only collects data that is strictly necessary for the purposes outlined in this policy. We adhere to the principle of data minimisation — collecting no more than what is needed to deliver oyo777's services effectively and securely.

OYO777 uses the personal data we collect solely for legitimate purposes that are necessary to operate the platform properly. The following are the specific purposes for which your data is used:

• Account management — creating and maintaining your oyo777 account, including identity verification and compliance with industry-standard KYC (Know Your Customer) procedures.
• Processing financial transactions — processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u and CIMB Clicks, as well as withdrawals of your winnings to your registered payment method.
• Provision of gaming services — gives you access to all oyo777 games, including slots, live casino, virtual sports, e-sports, lottery, jackpot, and roulette, all through a single integrated platform.
• Legal compliance — fulfils legal obligations relating to anti-money laundering (AML), gambling regulation compliance, and reporting requirements to relevant authorities.
• Fraud prevention — identifying and preventing fraudulent activity, bot usage, or any activity that violates oyo777's Terms & Conditions.
• Customer support — enabling the oyo777 support team to assist you effectively, resolve disputes, and continuously improve service quality.
• Service communications — sends important notifications related to your account, lottery results, virtual Sports Betting outcomes, changes to terms, and relevant security information.
• Marketing communications — sending information about oyo777 promotions, new bonuses, and special offers — only if you have given your explicit consent to receive such communications.
• Platform Improvements — analyses usage patterns in aggregate (anonymised) to improve the user experience, introduce new features, and optimise oyo777 platform performance.

OYO777 processes your personal data on the following bases recognised under international data protection standards:

• Contractual fulfilment — processing that is necessary to perform the service agreement between you and oyo777, including account management, transaction processing, and providing access to games.
• Legal obligations — processing required to comply with applicable laws and regulations, including AML requirements, identity verification, and reporting to relevant authorities.
• Legitimate interest — processing for the purposes of platform security, fraud prevention, service improvement, and the protection of oyo777's legitimate interests and those of other members, where such interests do not override your rights and freedoms.
• Consent — for marketing communications and any processing not covered by the bases above, oyo777 will obtain your explicit consent. You have the right to withdraw this consent at any time.

If you would like to know the specific legal basis used for any particular data processing activity, you may contact the oyo777 privacy team by email at support@oyo777.best for further clarification.

OYO777 does not sell or rent members' personal data to any party. However, there are limited situations in which oyo777 may need to share your data with the following parties:

• Payment service providers — e-wallet and banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and Malaysian banks that process your financial transactions. Such sharing is limited strictly to the information required to process those transactions.
• Third-party game providers — gaming software providers that supply slots, Live Casino, and other games on the oyo777 platform may receive limited technical data necessary for the games to function correctly. All such providers are bound by strict confidentiality agreements.
• Legal authorities — oyo777 may disclose personal data to Malaysian authorities or law enforcement agencies where required by law, court order, or directive from a competent authority.
• Technical service providers — cloud infrastructure providers, cybersecurity services, and analytics platforms that help oyo777 operate the platform safely and efficiently. All such providers are bound by strict data processing agreements.
• Professional advisors — lawyers, accountants, or auditors who require access to certain data as part of their professional services, subject to their professional confidentiality obligations.

OYO777 implements multiple layers of technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption — all communications between your browser or app and oyo777's servers are encrypted using TLS protocol with 256-bit keys, making the data unreadable to any party that may attempt to intercept the communication.
• Encrypted database — all personal data stored in the oyo777 database, including financial information and identification data, is stored in encrypted format using industry-standard encryption algorithms.
• Role-based access control — only oyo777 staff with a legitimate business need are permitted to access specific member data, and all access is automatically logged for audit and monitoring purposes.
• Two-factor authentication (2FA) — all oyo777 admin accounts with access to member data are protected by mandatory 2FA. Members are also encouraged to enable 2FA on their own accounts for an added layer of security.
• Continuous threat monitoring — oyo777's security monitoring systems operate around the clock to detect any suspicious activity, intrusion attempts, or anomalies that may indicate a security breach.
• Regular penetration testing — oyo777 conducts regular security assessments, including penetration testing by independent security experts, to identify and patch any vulnerabilities before they can be exploited.
• Incident response plan — oyo777 has a tested security incident response procedure in place, including protocols to notify affected members in the event of a material data breach.

While no security system can be guaranteed 100% foolproof, oyo777 is committed to consistently applying the best available technologies and practices to protect the data of our Malaysian members.

OYO777 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations. The following are general retention guidelines for different categories of data:

• Active account data — retained for the lifetime of your oyo777 account and updated as required.
• Financial transaction records — retained for a minimum of 7 years from the transaction date, in accordance with Malaysian anti-money laundering legislation and applicable tax reporting requirements.
• Customer support communication records — retained for 3 years after a support ticket is closed, for quality control and dispute resolution purposes.
• Technical log data — retained for 12 months for security, debugging, and system performance analysis purposes.
• Closed account data — after your oyo777 account is closed, personal data not required for legal compliance will be deleted or anonymised within 30 days. Financial data will be retained in accordance with the applicable statutory period.

As an oyo777 member, you have the following rights regarding your personal data. All of these rights can be exercised by contacting the oyo777 privacy team via email at support@oyo777.best:

To exercise any of the rights above, submit your request by email to support@oyo777.best with the subject line "Privacy Rights Request – [Right Type]" along with your oyo777 account number. All valid requests will be processed within 30 business days.

The oyo777 platform uses cookies and similar tracking technologies to enhance the user experience and analyse website usage. Cookies are small text files stored in your browser when you visit the oyo777 website.

OYO777 uses the following types of cookies:

• Essential Cookies — required for core oyo777 platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — saves your preferences such as language (Bahasa Melayu), Malaysian time zone, and display settings for a better experience on your next visit.
• Analytics Cookies — collects anonymous information about how visitors use the oyo777 platform to help us understand usage patterns and improve our services. This data is aggregated and cannot be used to identify you personally.
• Session Cookies — temporary cookies that are automatically deleted when you close your browser. They are used to maintain the continuity of your gaming session and transactions while you are active on the oyo777 platform.

You can manage and control cookies through your browser settings. However, disabling essential cookies may affect the functionality of the oyo777 platform and your login experience. For more information on managing cookies in your browser, refer to your browser's help documentation.

The oyo777 platform is restricted to individuals aged 18 and above only. OYO777 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

Steps oyo777 takes to protect children and minors:

• Age verification during new account registration
• Continuous monitoring to detect any platform use by underage individuals
• Strict enforcement of registration restrictions for individuals under 18 years of age
• Immediate account termination if there is evidence of use by a minor

If you believe that oyo777 may have inadvertently collected data from a minor, please contact us immediately at support@oyo777.best so that prompt action can be taken to delete that data.

In the course of operating the oyo777 platform, personal data of Malaysian members may need to be transferred to or accessed from servers located outside Malaysia — for example, the cloud infrastructure used by oyo777 may have data centres in multiple locations to ensure high reliability and performance.

OYO777 ensures that all international data transfers are carried out with adequate safeguards in place, including:

• Binding data processing agreements (Data Processing Agreements) with all third parties that receive oyo777 member data
• Assessment of the data protection standards in the recipient country prior to any transfer being made
• Use of standard contractual clauses recognised by international data protection bodies when transferring data to countries without equivalent data protection standards
• Full data encryption in transit for all cross-border transfers

If you would like more details about the specific mechanisms oyo777 uses to protect your data during international transfers, please contact us at support@oyo777.best.

OYO777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we operate the platform. Any amendments will take effect upon publication on this page.

When there are material changes to this policy, oyo777 will:

• Updating the "Last Updated" date at the top of this page
• Sending email notifications to all registered members with active accounts
• Displaying a pop-up notice at login for highly material changes to how data is collected or used

We encourage you to review this Privacy Policy periodically to stay informed about how oyo777 protects your information. Your continued use of the oyo777 platform after any changes are published will be deemed as your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how oyo777 handles your personal data, please contact us through the following channels:

• Privacy Email — support@oyo777.best with the subject line "Privacy Inquiry" — response within 2 business days
• Live Chat — available directly within the oyo777 platform, 24 hours a day, 7 days a week — for general enquiries
• WhatsApp — number available after logging in to your oyo777 account

All privacy-related complaints will be investigated and responded to within 30 business days. If you are not satisfied with oyo777's response to your privacy complaint, you have the right to refer the matter to the relevant data protection authority in Malaysia.