1. Introduction
oyen333 ("we", "us", "our") operates the online gaming platform accessible at oyen333.win. We are committed to protecting the privacy and personal data of all individuals who interact with the oyen333 platform, including registered members, prospective members, and general visitors.
This Privacy Policy ("Policy") is intended to provide clear, transparent information about the personal data oyen333 collects, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you as a data subject. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.
By creating an oyen333 account, using any of our services, or accessing our platform, you confirm that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not use the oyen333 platform and should contact our support team to request account closure.
2. Personal Data We Collect
oyen333 collects the following categories of personal data from members and platform users:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number | Provided by you at registration or during KYC verification |
| Contact Data | Email address, Malaysian phone number, residential address | Provided by you at registration |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost), transaction records | Provided by you when making deposits or withdrawals |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Collected automatically when you access the platform |
| Usage Data | Games played, bets placed, wager amounts, session duration, bonus activity | Generated automatically through your use of oyen333 |
| Communications Data | Live chat transcripts, support email exchanges, feedback submissions | Provided by you when you contact oyen333 |
| Verification Data | Copies of identity documents, selfies, proof of address documents | Provided by you during KYC or enhanced due diligence checks |
We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, unless explicitly required for regulatory compliance and with your prior consent.
3. How We Use Your Personal Data
oyen333 processes your personal data for the following purposes:
- Account creation and management — to set up and maintain your oyen333 account, verify your identity, and provide access to platform features.
- Service delivery — to process your bets, manage your gaming sessions, credit deposits, process withdrawal requests, and apply bonuses and promotions.
- Legal and regulatory compliance — to satisfy Know Your Customer (KYC) obligations, Anti-Money Laundering (AML) requirements, and reporting obligations under applicable licensing frameworks.
- Security and fraud prevention — to detect and prevent unauthorised account access, fraudulent transactions, multi-accounting, and other prohibited conduct.
- Customer support — to respond to your enquiries, resolve disputes, and maintain records of support interactions.
- Platform improvement — to analyse usage data in aggregate form to understand how the oyen333 platform is being used and to guide product development.
- Marketing communications — to send you promotional emails and notifications about oyen333 bonuses and new features, where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
- Responsible gaming — to monitor for indicators of problem gambling behaviour and to apply responsible gaming controls, including self-exclusion requests.
4. Legal Basis for Processing
oyen333 processes your personal data on the following legal grounds as applicable:
- Contractual necessity — processing required to fulfil our obligations to you under the oyen333 Terms & Conditions (e.g., account creation, payment processing, game delivery).
- Legal obligation — processing required to comply with KYC, AML, and licensing obligations imposed on oyen333 by applicable regulatory frameworks.
- Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
- Consent — where we rely on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting our support team or using the unsubscribe function in any marketing email.
5. Sharing Your Personal Data
oyen333 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:
- Payment processors — Malaysian e-wallet providers (Touch 'n Go, Boost) and bank FPX processors (Maybank, CIMB, Public Bank) to process deposits and withdrawals.
- Game providers — licensed third-party game studios whose titles appear in the oyen333 lobby, to the extent necessary to deliver gameplay.
- Identity verification providers — third-party KYC and AML compliance service providers where enhanced identity verification is required.
- Regulatory and licensing authorities — where disclosure is required by applicable gaming licensing conditions or by law.
- Law enforcement and government bodies — where disclosure is required by a court order, subpoena, or other lawful authority.
- IT infrastructure providers — cloud hosting and security service providers who process data on our behalf under binding data processing agreements.
All third-party processors engaged by oyen333 are required by contract to process your personal data only as instructed by oyen333, to maintain appropriate security measures, and to comply with applicable data protection law.
6. Cookies & Tracking Technologies
oyen333 uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse site usage. The following types of cookies are in use:
- Strictly necessary cookies — essential for the platform to function, including session management and security tokens. These cannot be disabled.
- Functional cookies — remember your preferences such as language settings and login state to personalise your oyen333 experience.
- Analytics cookies — collect anonymous, aggregated data about how visitors navigate the oyen333 platform, used to improve site structure and content.
- Marketing cookies — used to track the effectiveness of oyen333 promotional campaigns (internal only — we do not share tracking data with external advertising networks).
You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the oyen333 platform, though some features may be limited. Strictly necessary cookies cannot be disabled as they are required for the platform to function securely.
7. Data Retention
oyen333 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law or licensing obligations. The general retention periods applied by oyen333 are as follows:
- Account and identity data — retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping obligations.
- Transaction and financial records — retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulatory frameworks.
- Communications data — support transcripts and correspondence retained for 3 years following account closure.
- Technical and usage data — retained in anonymised or aggregated form for platform analytics purposes indefinitely; identifiable usage data deleted within 2 years of account closure.
Where we no longer have a lawful basis to retain your personal data, it is securely deleted or irreversibly anonymised.
8. Data Security
oyen333 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the oyen333 platform.
- One-way cryptographic hashing for all stored passwords — oyen333 employees cannot view your password in plain text.
- Role-based access controls limiting internal access to personal data to those staff members with a specific operational need.
- Regular security audits and penetration testing by third-party cybersecurity specialists.
- Two-factor authentication (2FA) available for all member accounts.
- Automated monitoring systems to detect and block suspicious login activity, brute-force attempts, and unusual transaction patterns.
Despite these measures, no internet-based system can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, oyen333 will notify you and any applicable regulatory authority in accordance with applicable breach notification obligations.
9. Your Rights
Subject to applicable law, you hold the following rights in respect of your personal data held by oyen333:
- Right of access — you may request a copy of all personal data oyen333 holds about you.
- Right to rectification — you may request correction of inaccurate or incomplete personal data.
- Right to erasure — you may request deletion of your personal data where we no longer have a lawful basis to retain it, subject to our legal record-keeping obligations.
- Right to restrict processing — you may request that we limit how we process your data in certain circumstances.
- Right to data portability — you may request a machine-readable export of personal data you have provided to oyen333.
- Right to object — you may object to processing based on legitimate interests or direct marketing purposes at any time.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please contact the oyen333 support team. We will respond to all verified requests within 30 days. We may need to verify your identity before fulfilling a request to protect against fraudulent data access claims.
10. Children & Minors
The oyen333 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will immediately suspend the account, delete all associated personal data (subject to any legal obligation to retain records of underage access), and report the incident to relevant authorities where required.
If you are a parent or guardian and believe that a minor has registered with oyen333, please contact our support team immediately at [email protected] (plain text — not a clickable link).
11. Changes to This Policy
oyen333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be communicated to registered members via email notification and/or a prominent notice on the oyen333 platform at least 14 days before the changes take effect.
Your continued use of the oyen333 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed of how oyen333 handles your personal data.
12. Contact & Data Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or oyen333's handling of your personal data, please contact our Data Protection team via our 24/7 live chat support or by email at:
We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve substantive requests within 30 days.
Our Privacy Commitments at a Glance
Never Sold
Your personal data is never sold, rented, or traded to external parties for commercial or marketing purposes under any circumstances.
256-bit Encrypted
All data between your device and oyen333 servers is encrypted in transit using 256-bit SSL — the same standard used by major Malaysian banks.
You're in Control
Access, correct, export, or delete your personal data at any time by contacting the oyen333 support team. All requests are handled within 30 days.
Minimal Sharing
Data is shared only with vetted payment processors, licensed game providers, and regulatory authorities — never more than strictly necessary.
Hashed Passwords
oyen333 never stores plain-text passwords. One-way cryptographic hashing means even our own team cannot retrieve your password.
Clear Retention Limits
We keep your data only as long as legally required — typically 5 years for financial records. After that, data is securely deleted or anonymised.