1. Home
  2. Privacy Policy
Official Documents

Privacy Policy oyo99 – Malaysian Personal Data Protection

Oyo99 takes every aspect of your personal data protection seriously. This Privacy Policy clearly outlines what we collect, how we use it, and your rights as a member of our platform in Malaysia.

Last updated: January 2026
Register Now Terms & Conditions
oyo99's Privacy Commitment at a Glance
256-bit SSL encryption. All your personal data and financial transactions are protected with industry-standard encryption at all times.
Compliant with Malaysia's PDPA 2010. oyo99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
No Sale of Data to Third Parties. oyo99 does not sell, rent or share your personal data with third parties for marketing purposes.
Right to Access & Correction. You have the right to access, correct, or request the deletion of your personal data at any time.
Privacy Controls in Your Hands. You can manage your communication preferences and cookies through your oyo99 account settings.
24/7 Privacy Support. For any privacy-related enquiries, the oyo99 team is available via live chat or email at support@oyo99.best.
0
SSL Encryption
0
Member Data Protected
0
Security Monitoring
0
Data Protection Records

How oyo99 Protects Your Personal Data

Six layers of data protection that oyo99 has put in place to keep your information secure at all times.

End-to-End Data Encryption
All data transmitted between your browser and oyo99's servers is protected with 256-bit SSL encryption — the same encryption standard used by leading Malaysian financial institutions and banks. This means sensitive information such as your account details, MYR transaction data, and identification numbers cannot be intercepted or read by third parties.
Full PDPA 2010 Malaysia Compliance
oyo99 is fully compliant with Malaysia's Personal Data Protection Act 2010. This means we only collect data that is necessary for specified purposes, retain it only for as long as required, and give you full rights to access, correct, or request the deletion of your data. We do not collect data that is excessive or irrelevant to our services.
Secure & Controlled Data Storage
oyo99 members' personal data is stored on servers protected by strict access controls. Only authorised personnel with a legitimate business need are permitted to access member data. All access is automatically logged and monitored by our information security team. Data backups are performed on a regular basis to ensure service continuity.
No Sale of Data to Third Parties
oyo99 has never sold, rented, or shared our members' personal data with any third party for marketing or commercial purposes, and we never will. Your data is only shared with parties required to process your transactions — such as payment processors Touch 'n Go, DuitNow, GrabPay, or FPX — and only to the extent necessary for that purpose.
Threat Detection & Fraud Prevention
oyo99 operates a 24/7 security monitoring system that detects and blocks unauthorised access attempts, cyberattacks, and fraudulent activity in real time. Our anomaly detection system will automatically alert you and the security team whenever suspicious activity is detected on your account, providing an additional layer of protection that operates around the clock.
Full Privacy Control in Your Hands
oyo99 believes you should have full control over your own personal data. Through your oyo99 account settings, you can manage your marketing communication preferences, control cookie settings, request a copy of your data, request corrections to inaccurate information, or initiate a full data deletion process. All requests are processed within 30 business days.
Table of Contents
1
Introduction & Scope of Privacy Policy

This Privacy Policy describes how oyo99 ("we", "the platform", or "oyo99") collects, uses, stores, and protects your personal data when you use our online Sports Betting and casino platform at oyo99.best. It applies to all registered members, users browsing our website, and any individual who interacts with oyo99 services.

Oyo99 is committed to protecting the privacy and personal data security of every member. We operate in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia, and we take this responsibility very seriously. This policy is written in Bahasa Melayu to ensure ease of understanding for our members across Malaysia.

Important Note
By registering an oyo99 account or continuing to use our platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use and contact us to close your account.

This Privacy Policy should be read together with Terms & Conditions oyo99 which forms the entire agreement between you and our platform. In the event of any conflict between these documents in the context of data protection, this Privacy Policy shall prevail.

2
Personal Data We Collect

Oyo99 collects your personal data through several channels — during account registration, through your use of the platform, via financial transactions, and through your interactions with our support team. Below are the categories of data we collect:

Data Category Sample Information Purpose of Collection
Identity Data Full name, national identification number, date of birth, photograph Identity verification (KYC), fraud prevention
Contact Data Phone number, email address, residential address Account communications, security notices, customer support
Financial Data Payment methods (Touch 'n Go, DuitNow, FPX, etc.), MYR transaction history Processing deposits & withdrawals, anti-money laundering compliance
Betting Activity Data Betting history, preferred markets, win & loss records Account management, responsible gambling, service improvement
Technical Data IP address, device type, browser, cookie data, access logs Platform security, fraud detection, UX improvement
Communication Data Live chat recordings, support email content Complaint resolution, staff training, audit records

Oyo99 no collect data that is not necessary for the operation of our platform. We do not collect information such as religion, political views, biometric data (except where explicitly consented to for verification purposes), or health data.

CHILDREN'S DATA
oyo99 does not knowingly collect personal data from individuals under the age of 21. Account registration requires age verification, and we take reasonable steps to ensure our platform is not accessed by minors below the stipulated age limit.
3
How oyo99 Uses Your Personal Data

Oyo99 uses collected personal data only for legitimate purposes, clearly stated at the time of collection or permitted under Malaysia's PDPA 2010. The following are the primary purposes for which we use our members' personal data:

  • Account Management: Creating and maintaining your oyo99 account, verifying your identity, and processing account-related requests such as password resets.
  • Transaction Processing: Processes deposits via Touch 'n Go, DuitNow, GrabPay, FPX and other Malaysian payment methods, and manages the withdrawal of your winnings in MYR.
  • Service Provision: Enables you to access all features on the oyo99 platform, including Sports Betting (Malaysia Super League, EPL, BWF badminton, cricket), Live Casino, slots and poker.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate accounts, and any misuse of the platform.
  • Legal Compliance: To fulfil our legal obligations under the PDPA 2010, the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, and other applicable Malaysian legislation.
  • Responsible Gambling: Monitoring betting patterns to identify members who may need responsible gambling support, and managing deposit limits set by members themselves.
  • Service Communications: Sending important notices related to your account, including transaction confirmations, security alerts, and changes to our Terms or Privacy Policy.
  • Platform Improvements: Analysing aggregated and anonymised usage data to improve the user experience, introduce new features, and resolve technical issues.
  • Marketing (with consent only): Sending information about oyo99 bonuses, promotions, and the latest offers if you have consented to receive marketing communications. You may withdraw this consent at any time.

Oyo99 will not use your personal data for any purpose not listed above without first obtaining your renewed consent.

4
Sharing Data with Third Parties

Oyo99 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, to deliver our services effectively, we may share your personal data with the following categories of third parties, and only to the extent strictly necessary:

  • Payment Processors: Touch 'n Go, DuitNow, GrabPay, Maybank2u (FPX), CIMB Clicks, Boost, and ShopeePay to process your deposit and withdrawal transactions in RM.
  • Game Providers: Live casino, slots, and other game software providers required to deliver the gaming experience to our members. These providers are bound by strict confidentiality agreements.
  • Authorities: Malaysian government agencies, law enforcement bodies, or judicial authorities where required by law or court order.
  • Auditors & Legal Advisors: Independent audit firms and legal counsel bound by their professional confidentiality obligations, for compliance audit and legal advisory purposes.
  • Technology Providers: Cloud service and IT infrastructure providers that host or process data on behalf of oyo99, subject to data processing agreements compliant with PDPA 2010.
Cross-Border Data Transfers
In some cases, your data may be processed or stored on servers located outside Malaysia (for example, by international casino software providers). When this occurs, oyo99 ensures that such transfers are protected by contractual safeguards equivalent to the standards of Malaysia's PDPA 2010.
5
Cookies & Tracking Technologies

Oyo99 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

  • Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to the website's operation.
  • Performance Cookies: Collects information on how you use the oyo99 platform — which pages are visited most frequently and how long you spend in each section — to help us improve the overall user experience. This data is collected in aggregate and anonymised form.
  • Functional Cookies: Saves your preferences such as display language, preferred odds format and other display settings, so you don't have to reconfigure them each time you log in to oyo99.
  • Marketing Cookies (With Consent): Used to show you more relevant ads about oyo99 offers and promotions. These cookies are only activated if you provide your consent.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the oyo99 platform and prevent you from logging in or using certain features.

6
oyo99's Data Security Measures

Oyo99 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or accidental destruction. The key security measures we employ include:

  • 256-bit SSL Encryption for all communications between your device and oyo99's servers.
  • Two-Factor Authentication (2FA) available to all member accounts as an additional security layer.
  • Role-based access control (RBAC) which ensures oyo99 staff can only access the data they need to perform their job responsibilities.
  • Regular security audits by independent third parties to identify and address any system vulnerabilities.
  • 24/7 real-time threat monitoring with an automated intrusion detection system.
  • Regular data backups at separate locations to ensure rapid recovery in the event of an incident.
SECURITY INCIDENT REPORT
In the event of a data breach that may affect your rights or freedoms, oyo99 will notify you and the relevant authorities within the timeframe required by applicable law. The notice will detail the nature of the breach, the data affected, the steps taken, and how to contact us for further assistance.

While oyo99 takes all reasonable steps to protect your data, no data storage or transmission system can be guaranteed 100% secure. You also play an important role in your account's security — do not share your password, use a strong and unique password, and enable 2FA if you have not already done so.

7
Data Retention & Deletion

Oyo99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our data retention policy is as follows:

  • Active Account Data: Retained for as long as your account is active and for a minimum of 7 years after account closure for legal compliance and financial record purposes.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legislation and accounting requirements.
  • Communication Records: Live chat recordings and support emails are retained for 2 years for training and complaint resolution purposes.
  • Technical Log Data: Access logs and technical data are retained for 90 days for security and troubleshooting purposes.
  • Marketing Data: Retained until you withdraw consent to receive marketing communications.

Once the retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you. The deletion process follows recognised industry standards to ensure data cannot be recovered.

8
Your Rights as a Data Subject under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by oyo99:

Right to Access
You have the right to request a copy of the personal data oyo99 holds about you. Requests are processed within 21 business days.
Right to Rectification
You may request a correction to any personal data in your oyo99 account that is inaccurate, incomplete, or out of date.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed, subject to any legal obligations binding on us.
Right to Restrict Processing
You may request that oyo99 restrict the processing of your data under certain circumstances — for example, while the accuracy of your data is being disputed.
Right to Object to Marketing
You may withdraw your marketing consent at any time via the "unsubscribe" link in oyo99 promotional emails or through your account settings.
Data Portability Rights
You may request your personal data in a structured format for transfer to another platform, where it is technically feasible.

To exercise any of the rights above, please contact oyo99's Data Privacy Officer by email at support@oyo99.best with the subject line "Personal Data Rights Request". oyo99 will process your request within the timeframe stipulated by PDPA 2010 and will not charge a fee for reasonable requests. We may need to verify your identity before processing any personal data-related request.

9
Third-Party Links & Services

The oyo99 platform may contain references to or integrations with third-party services required for platform functionality — such as payment processors Touch 'n Go, DuitNow, GrabPay, FPX, and casino gaming software providers. These third-party services have their own privacy policies that are separate from oyo99.

Oyo99 is not responsible for the privacy practices or content of any third-party services. We encourage you to read the privacy policy of any payment processor you use before completing a transaction. That said, we only work with third parties whose security and privacy standards we consider adequate.

Malaysian Payment Processors
All payment processors partnered with oyo99 — including Touch 'n Go, DuitNow, GrabPay, Maybank2u, CIMB Clicks, Boost, and ShopeePay — are licensed entities operating in Malaysia and are subject to Bank Negara Malaysia regulations. This provides an additional layer of protection for your financial transactions.
10
Changes to This Privacy Policy

Oyo99 may update this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other operational reasons. We will notify you of any material changes through:

  • A prominent notice on the oyo99 homepage and/or within the platform prior to any changes taking effect.
  • An email will be sent to your registered email address at least 7 days before any material changes take effect.
  • Updates the "Last Updated" date at the top of this page.

Your continued use of the oyo99 platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated version. We encourage you to review this page periodically to stay informed about how we protect your data. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the rights set out in Section 8.

11
Contact oyo99's Data Privacy Officer

If you have any questions, concerns, or complaints about how oyo99 handles your personal data, or if you wish to exercise any of your rights under the PDPA 2010, please contact our Data Privacy Officer through the following channels:

  • Privacy Email: support@oyo99.best (please include the subject line: "Privacy Policy Enquiry" or "Data Rights Request")
  • Live Chat: Available 24/7 via the oyo99 platform — select the "Privacy & Data" category when starting a chat session.

Oyo99 aims to address all privacy enquiries within 5 business days, and formal data rights requests within 21 business days as required by PDPA 2010. If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.

We appreciate the trust you place in oyo99 as your preferred online Sports Betting and casino platform in Malaysia. Protecting your privacy is not merely a legal obligation — it is a commitment we uphold wholeheartedly.

FAQ – oyo99 Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at oyo99.

oyo99 retains the data necessary to manage your account and provide our services. This includes identity information (name, identification card number, date of birth), contact information (email, phone number), financial transaction history in RM, betting activity records, and technical data such as IP address and device type. We do not retain data that is unnecessary and adhere to the data minimisation principle under the PDPA 2010. To obtain a full copy of the data we hold, you may contact us at support@oyo99.best.

oyo99 does not sell or rent your personal data to third parties. We only share the data necessary with parties that help us deliver our services — such as Malaysian payment processors (Touch 'n Go, DuitNow, GrabPay, FPX Maybank2u, CIMB Clicks, Boost, ShopeePay) and gaming software providers bound by confidentiality agreements. We may also disclose data to Malaysian authorities when required by law.

You may request the deletion of your personal data by emailing support@oyo99.best with the subject line "Data Deletion Request". oyo99 will process your request within 21 business days. Please note that certain data may need to be retained to meet legal requirements — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian anti-money laundering legislation. All other data not subject to such legal retention obligations will be fully deleted or anonymised.

When you close your oyo99 account, we will stop actively using your data to provide services. However, certain data must be retained for a specified period in accordance with Malaysian legal requirements — in particular, financial and transaction records (minimum 7 years). Data not subject to legal obligations will be deleted in accordance with our data retention policy as set out in Section 7 of this Privacy Policy. You will receive written confirmation once the account closure and deletion of relevant data has been completed.

All financial transactions on oyo99 — whether via Touch 'n Go, DuitNow, GrabPay, FPX or other Malaysian payment methods — are protected with 256-bit SSL encryption. Your payment details are transmitted directly to licensed payment processors and are not permanently stored on oyo99 servers. Our systems are also equipped with automated fraud detection that monitors every transaction for suspicious activity. oyo99 will never ask for your card details or payment password via email or live chat.

Yes, you can stop receiving marketing emails from oyo99 at any time. The easiest way is to click the "Unsubscribe" link found at the bottom of any marketing email we send. You can also update your communication preferences through your oyo99 account settings or contact us directly at support@oyo99.best. Please note that we may still send important account-related emails such as transaction confirmations and security notices — these are essential service communications, not marketing.

Your Privacy is Protected. Join oyo99 with Confidence.

Oyo99 protects your personal data with 256-bit SSL encryption and is fully compliant with Malaysia's PDPA 2010. Register for free today and enjoy a safe, secure Sports Betting experience.

Register Now — Free Log In
256-bit SSL PDPA 2010 Compliant No Data Sales 24/7 Privacy Support
Bahasa Melayu