Privacy Policy

This Privacy Policy ("Policy") describes how OYO777 ("we", "us", "our", "the Company") collects, processes, stores, and protects personal data provided by or collected from registered players and visitors ("you", "your") of the OYO777 online gaming platform accessible at oyo777.click (the "Platform").

OYO777 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other states and territories of Malaysia. We are committed to handling the personal data of our Malaysian players with the highest standards of care, transparency, and security.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling policy. By registering an account with OYO777 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms have the meanings ascribed below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data collected in connection with use of the Platform.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — OYO777, which determines the purposes and means by which personal data is processed on the Platform.
• "Data Processor" — any third party engaged by OYO777 to process personal data on its behalf, including payment service providers, KYC verification partners, and cloud infrastructure providers.
• "Consent" — freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer; the identity and age verification process applied to player accounts as required by anti-money laundering compliance obligations.
• "Cookies" — small text files placed on a user's device by the Platform to enable session management, preference storage, and usage analytics.

OYO777 collects personal data through several channels, including direct submission by you during registration and account management, automatic collection during your use of the Platform, and from trusted third-party sources as part of our verification processes. The categories of data we collect include:

OYO777 does not knowingly collect sensitive personal data such as medical records, racial or ethnic origin, religious beliefs, or biometric data for identification purposes, except where expressly required by applicable law or regulatory obligation.

OYO777 processes personal data for the following purposes, each supported by a corresponding legal basis as described in Section 5:

• Account creation and management: Processing registration information to create and maintain your OYO777 player account, verify your identity and age (21+ requirement), and authenticate your login sessions.
• Payment processing: Facilitating deposits and withdrawals through Malaysian payment methods (DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, Boost, GrabPay, Public Bank) and cryptocurrency networks (USDT, BTC, ETH).
• Regulatory compliance: Fulfilling obligations under anti-money laundering (AML) legislation, conducting transaction monitoring, filing required reports to relevant authorities, and performing ongoing KYC due diligence.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, account takeover attempts, collusion, and other prohibited activities as defined in our Terms & Conditions.
• Responsible gambling: Monitoring gaming patterns to identify signs of problem gambling behaviour; enforcing self-exclusion and deposit limit settings activated by players; restricting access to players who have requested self-exclusion.
• Customer support: Responding to your enquiries, resolving disputes, and managing formal complaints submitted to our support team.
• Marketing and promotions: Sending promotional offers, bonus notifications, and event announcements where you have provided explicit consent to receive such communications.
• Platform improvement: Analysing aggregate usage data to improve Platform functionality, game offerings, user interface design, and overall player experience.
• Legal proceedings: Preserving and producing records in connection with any legal claim, dispute, or regulatory investigation involving OYO777 or its players.

OYO777 processes personal data on the following legal grounds:

• Contractual necessity: Processing that is necessary to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and record-keeping mandates.
• Legitimate interests: Processing conducted for OYO777's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and optional analytical cookies, which is carried out only where you have provided explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

OYO777 does not sell or rent personal data to any third party. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: Including DuitNow operators, FPX participating banks (Maybank, CIMB, Public Bank, RHB, Hong Leong Bank), e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), card networks (Visa, Mastercard), and cryptocurrency payment processors — to facilitate deposit and withdrawal transactions.
• KYC and identity verification partners: Third-party identity verification service providers engaged to confirm player identity and age, and to screen against sanctions and politically exposed person (PEP) lists.
• Cloud infrastructure and hosting providers: Organisations providing server, database, and storage infrastructure on which the Platform and player data are hosted, operating under strict data processing agreements.
• Customer support platforms: Live chat and ticketing system providers through which player support interactions are managed.
• Fraud prevention and security services: Specialist providers offering device fingerprinting, IP analysis, and behavioural analytics tools used to detect and prevent fraudulent activity.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, financial intelligence units, and courts where disclosure is required by law, court order, or regulatory obligation.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by OYO777, bound by professional confidentiality obligations.

OYO777 uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that allow the Platform to recognise your browser, maintain your session, and remember your preferences.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without rendering the Platform inoperable.
• Functional cookies: Enable the Platform to remember your preferences such as language selection, display settings, and notification preferences across sessions.
• Analytical cookies: Collect aggregated, anonymised data about how players use the Platform — including which pages are visited, how long sessions last, and which features are used most frequently — to help us improve Platform performance and design.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content within the Platform based on your gaming history and preferences.

You may control cookie settings through your browser's privacy configuration. Note that disabling certain categories of cookies may impair Platform functionality. OYO777 does not use cookies to track your activity outside of the Platform on third-party websites.

OYO777 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, audit, or reporting requirements. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction records: Deposit, withdrawal, and betting records are retained for a minimum of seven (7) years to comply with financial record-keeping requirements.
• KYC documents: Identity and verification documents are retained for a minimum of five (5) years after the end of the business relationship.
• Customer support records: Communication records are retained for a minimum of three (3) years after the resolution of the relevant matter.
• Marketing consent records: Records of consent and opt-out events are retained for three (3) years from the date of the most recent consent event.
• Technical and usage logs: Server access logs and session data are typically retained for ninety (90) days for security monitoring purposes, unless a longer period is required in connection with a fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

OYO777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• AES-256 encryption for personal data stored at rest on our servers;
• TLS 1.3 protocol for all data transmitted between your device and the Platform;
• Role-based access controls limiting internal access to personal data to staff with a documented need to access it;
• Multi-factor authentication requirements for all administrative access to systems holding personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 security monitoring and intrusion detection systems;
• Documented incident response procedures, including breach notification protocols.

Whilst OYO777 takes data security seriously, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials. We strongly recommend enabling two-factor authentication on your OYO777 account and using a unique, strong password not shared with any other service.

Subject to applicable law, you have the following rights in relation to your personal data held by OYO777:

• Right of Access: You may request a copy of the personal data OYO777 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Account information such as email address and phone number can be updated directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent on which processing was based. This right is subject to OYO777's legal retention obligations — for instance, AML record-keeping requirements may preclude immediate deletion of transaction records.
• Right to Restriction of Processing: You may request that OYO777 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you may request that OYO777 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with no requirement to provide justification. You may also object to processing based on legitimate interests, though OYO777 may continue processing where compelling legitimate grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please submit your request to our support team at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 21 business days. We may need to verify your identity before processing certain requests.

OYO777 operates globally and may transfer your personal data to third-party service providers located outside of Malaysia. Such transfers may include cloud infrastructure providers, payment processors, KYC verification partners, and customer support platform operators based in various jurisdictions.

When transferring personal data internationally, OYO777 takes steps to ensure that the recipient provides an adequate level of protection for your data, including through:

• Transfers to jurisdictions recognised as providing an adequate level of data protection;
• Use of contractual data protection clauses that bind recipients to protect data to a standard equivalent to that required under applicable Malaysian and international data protection law;
• Requiring recipients to implement appropriate technical and organisational security measures as a condition of engagement.

The OYO777 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If OYO777 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

OYO777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. The revised Policy will be published on this page with an updated effective date.

For material changes that significantly affect how we process your personal data or your rights in respect of that data, OYO777 will provide advance notice via email to your registered account address or through a prominent in-Platform notification, allowing you a reasonable opportunity to review the changes before they take effect.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by OYO777, please contact us through any of the following channels:

For matters relating to account closure and self-exclusion from a responsible gambling perspective, please visit our Responsible Gambling page. For general terms relating to your account, please refer to our Terms & Conditions.