Privacy Policy omi88 —
Your Data, Our Responsibility

Omi88 ("we", "Platform") is fully committed to protecting the privacy and data security of all registered members and visitors to our platform. This Privacy Policy is formulated in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised security standards.

This policy explains in detail how we collect information from you when you register an account, make a deposit, play games, contact our support team, or simply browse the omi88 website. We want you to understand every aspect of this data management clearly and without ambiguity.

The scope of this Privacy Policy covers all services offered through the omi88 platform, including the main website, mobile app, online games, VIP program, promotions, customer support and all our official communication channels. Any new services launched in the future will automatically be subject to this policy unless otherwise stated.

We collect various categories of information to ensure the omi88 platform operates safely, efficiently and in compliance with legal requirements. The information we collect is divided into three main categories:

A. Information You Provide Directly

• Full name as stated on official identification documents.
• Identity card number or passport number (for the KYC process).
• Active email address for account communications.
• Mobile phone number for verification and notifications.
• Date of birth for the purpose of verifying the 18+ age requirement.
• Bank account details for withdrawal processing.
• Residential address for compliance records.

B. Information Collected Automatically

• IP address and general geographic location (city/state level).
• Device type, operating system and web browser version.
• Game session records including login time, games played and session duration.
• Transaction data including all deposits, withdrawals, and wagering.
• Platform activity logs for security and fraud detection purposes.

C. Information from Third Parties

• Identity verification data from licensed and accredited KYC service providers.
• Payment verification information from licensed payment processors.
• Self-exclusion list screening data from relevant regulatory bodies.

The types of data we collect are as follows, categorised accordingly:

Every piece of data we collect has a specific and legitimate purpose. We do not collect data beyond what is genuinely required to operate the platform properly and securely. Below is a full breakdown of how omi88 uses your data:

For marketing and promotional communications, we will only send you notifications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via your account settings with no penalty or impact on core services.

Omi88 does not share, sell or transfer your personal data to third parties for marketing purposes. However, there are specific situations where data sharing is necessary to ensure the platform operates securely and in compliance with the law:

• Trusted Service Providers — Companies that assist us with payment processing, KYC verification, IT infrastructure and customer support. All such providers are bound by strict confidentiality agreements and may only use data for the specified purposes.
• Regulatory Authority — When required by law or court order, we may need to share information with law enforcement agencies, regulatory bodies or relevant government authorities.
• Fraud Prevention — In cases involving fraud, money laundering or security threats, we reserve the right to share necessary information with authorised bodies for follow-up action.
• Business Transfer — In the event of a company merger, acquisition or asset sale, user data may be transferred as part of that process. You will be notified before any such transfer takes place.

Your data security is the absolute top priority for omi88. We continuously invest in the latest security infrastructure to ensure your personal information stays protected from cyber threats, unauthorised access and data breaches.

The technical security measures we employ include:

• 256-bit SSL/TLS encryption for all data communications between the server and user devices.
• Passwords are stored using a one-way, irreversible hashing algorithm.
• Two-factor authentication (2FA) available for all user accounts.
• Enterprise-grade firewall and intrusion detection systems (IDS/IPS) active around the clock.
• Automated vulnerability scanning and periodic penetration testing by independent security experts.
• Strict internal access controls — only authorised staff may access user data.
• Encrypted data backups stored across geographically separate locations.

Data Retention Period: Your personal data will be retained for as long as your account remains active. After account closure, financial and transaction records are kept for a minimum of 7 years in accordance with Malaysian legal requirements. Data that is no longer needed will be securely deleted or anonymised.

The omi88 platform uses cookies and similar tracking technologies to ensure a smooth and secure user experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as secure login, session management and security. These cookies cannot be disabled as they are essential to your account security.
• Functional Cookies — Stores your preferences such as language, display settings and login information for ease of use. These cookies allow us to personalise the platform experience for you.
• Analytics Cookies — Helps us understand how users interact with the platform for improvement purposes. Data collected is non-personally identifiable and analysed in aggregate only.
• Security Cookies — Used to identify suspicious activity, prevent fraud and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect platform functionality and security. Continued use of the omi88 platform after receiving a cookie notice is considered your consent to the use of cookies as described above.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by omi88. We are committed to fulfilling all valid requests within a reasonable timeframe:

To submit any requests regarding your personal data rights, please contact the omi88 Data Protection Officer (DPO) team via 24/7 live chat or our FAQ We will process your request within 14 business days.

The omi88 platform is exclusively for users aged 18 and above. We do not knowingly collect, store or process personal data of individuals under the age of 18.

We use a range of measures to prevent minors from accessing our platform, including:

• Mandatory age verification during new account registration.
• A KYC process requiring official identification documents to verify user age.
• Continuous monitoring to identify and remove accounts that do not meet age requirements.

If we become aware that we have inadvertently collected personal data from someone under the age of 18, we will take immediate action to delete that information and close the account in question. Parents or guardians who suspect their child has registered on our platform are encouraged to contact us immediately.

Omi88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the technologies we use. We are committed to notifying you of any significant changes.

How we notify you of changes:

• Email notifications to all registered members at least 14 days before changes take effect, except for urgent changes made on security grounds.
• Clear notice on the platform's home page during the notice period.
• The "Updated" date at the top of this page will be revised to reflect the latest version.
• Users will be asked to acknowledge acceptance of the updated terms upon their next login for material changes.

Continued use of the omi88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, the omi88 Data Protection Officer (DPO) team is ready to assist you.

We also encourage you to visit the Responsible Gaming and Terms and Conditions for a more comprehensive understanding of how we operate and protect your interests.