Oasis88 Privacy Policy – Personal Data Protection for Malaysian Players

oasis88 collects two main categories of information from its members: information you provide directly, and information we collect automatically as you use the platform.

Information You Provide Directly

Automatically Collected Information

Oasis88 uses members' personal data solely for legitimate, disclosed purposes. The following are the primary purposes for which your data is used on the platform oasis88:

• Account Management — To create, verify, and manage your oasis88 account, including the login process, two-factor authentication, and account recovery.
• Service Provision — To enable you to access all oasis88 platform features, including Sports Betting, live casino games, deposits and withdrawals.
• KYC & AML Compliance — To fulfil legal obligations relating to identity verification (Know Your Customer) and anti-money laundering (AML) prevention as required by the relevant authorities.
• Payment Processing — To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawal of winnings to your account, securely and accurately.
• Fraud Detection & Security — To monitor suspicious activity, detect fraud attempts, protect the integrity of the platform and ensure the safety of all oasis88 members.
• Customer Support — To enable oasis88's support team to assist you efficiently with enquiries, complaints, and technical issues using relevant account records and transaction history.
• Service Communications — To send important notifications relating to your account, security, policy updates and promotional information (subject to your consent for marketing communications).
• Platform Improvements — To analyse usage patterns on an aggregated and anonymised basis for the purpose of improving the overall design, performance and user experience of the oasis88 platform.

oasis88 does not sell, rent, or trade members' personal data to any party. However, in the course of operating the platform, we may need to share certain data with a limited set of third-party categories as follows:

• Payment Service Providers — Licensed payment gateways that process transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX receive only the data necessary to process your payment. All these providers are bound by strict confidentiality agreements and comply with international payment security standards.
• Live Casino Providers — Live Casino studio providers offering Baccarat, Blackjack, Roulette and other table games on oasis88 receive the session data necessary to operate the games. These providers are internationally licensed companies bound by strict data protection agreements.
• Analytics Services — oasis88 uses analytics services that receive only aggregated, anonymised data to help us understand platform usage patterns. No personally identifiable information is shared for this purpose.
• Legal Authorities — oasis88 may be required to disclose members' personal data to competent authorities — including the police, courts or regulatory bodies — where legally compelled to do so by subpoena, court order or other legal obligation.
• Professional Advisors — Lawyers, accountants or auditors bound by strict professional confidentiality obligations may access data solely as required for legal, financial or audit advisory purposes.

oasis88 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration or destruction. The key security measures we have in place are:

• 256-bit SSL Encryption — All data in transit is protected by TLS 1.3 protocol and AES-256 encryption — the same standard used by Malaysian banking institutions including Maybank and CIMB.
• Encryption of Stored Data — Sensitive data including identity information and payment details is encrypted at rest on oasis88's servers, not only during transmission.
• Strict Access Controls — Access to member data is restricted to oasis88 staff with a legitimate business need only, with the principle of least privilege access strictly enforced.
• Two-Factor Authentication — oasis88's internal systems containing member data require multi-factor authentication for access, reducing the risk of unauthorised access even in the event of a compromised password.
• 24/7 Security Monitoring — The oasis88 security team continuously monitors servers and systems using advanced intrusion detection tools to identify and respond to threats in real time.
• Regular Penetration Testing — oasis88 conducts regular security testing and vulnerability assessments carried out by independent cybersecurity firms to identify and address potential weaknesses before they can be exploited.
• Secure Data Backup — Member data is backed up regularly to secure locations to ensure swift data recovery in the event of an unexpected incident.

Despite all these security measures, no system can be guaranteed 100% safe from every threat. In the event of a data breach affecting members' personal information, oasis88 will notify affected members and the Malaysian Personal Data Protection Commissioner within the timeframe required by law.

Platform oasis88 uses cookies and similar tracking technologies to enhance the user experience, enable certain features and understand how members interact with our platform. The following are the types of cookies we use:

• Essential Cookies (Session) — These cookies are essential for the oasis88 platform to function correctly. They store your login status, secure session tokens and basic preferences. They cannot be disabled as they are critical to the platform's security and core functionality.
• Analytics Cookies — Used to collect statistical information on how members use the oasis88 platform — pages visited, time spent, and actions taken. This data helps us improve the platform. Information is collected in aggregate form and does not identify individuals.
• Functional Cookies — Allows the oasis88 platform to remember your preferences such as language, display settings and other personal configurations, improving convenience during your gaming sessions.
• Security Cookies — Helps oasis88 detect and prevent fraudulent activity by identifying unusual access patterns or suspicious login attempts from new devices or locations.

You can manage cookies through your web browser settings. However, disabling essential cookies may prevent you from fully using, or using at all, certain features of the platform. oasis88. For the best experience, we recommend allowing essential cookies.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you as a data subject have legally protected rights regarding your personal data held by oasis88. Here is how to exercise those rights:

• Request Access — Submit a written request to the oasis88 Data Protection Officer (DPO) by email at privacy@oasis88.best. Include proof of your identity and a description of the data you wish to access. oasis88 will respond within 21 business days.
• Correcting Data — Basic information such as your phone number and email address can be updated directly through your oasis88 account settings. For corrections to more sensitive identity information, please contact our support team with the relevant supporting documents.
• Requesting Deletion — You may request the deletion of your personal data under certain circumstances — for example, when your account is closed and the mandatory retention period has expired. Requests will be assessed in accordance with applicable legal obligations, including anti-money laundering record-keeping requirements.
• Opting Out of Marketing Processing — To stop receiving marketing communications from oasis88, you may use the unsubscribe link in any marketing email or contact our support team. Requests will be processed within 10 business days.
• Filing a Complaint — If you believe that oasis88 has violated your privacy rights under PDPA 2010, you have the right to file a complaint with the Malaysian Personal Data Protection Commissioner.

All data rights requests should be submitted to the oasis88 Data Protection Officer (DPO) via email at privacy@oasis88.best or through our 24/7 customer support live chat. oasis88 will not charge a fee for reasonable data rights requests, unless the request is clearly excessive or repetitive.

oasis88 only retains members' personal data for as long as necessary to fulfil the original purpose of collection or to meet applicable legal obligations. Our data retention policy is as follows:

• Active Account Records — Personal data of members with an active oasis88 account is retained for the duration that the account remains active and continues until the account is closed.
• Financial Transaction Records — Deposit, withdrawal and financial transaction history is retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legislation and applicable financial reporting requirements.
• KYC & Identity Verification Records — Identity verification documents (MyKad, passport) and KYC records are retained for a minimum of 6 years after account closure, in accordance with regulatory compliance requirements.
• Support Communication Records — Live chat logs, support emails, and complaint records are retained for 2 years for service quality purposes and as reference in the event of a dispute.
• Analytics & System Log Data — Technical log data and platform analytics are retained for a maximum of 13 months before being permanently deleted or anonymised.

Once the retention period has ended, oasis88 will securely delete or anonymise the relevant personal data in accordance with established procedures. Fully anonymised data — where an individual can no longer be identified — is no longer subject to the PDPA and may be retained indefinitely for analytical purposes.

In the course of its operations, oasis88 may need to transfer members' personal data outside of Malaysia — for example, to cloud infrastructure providers, Live Casino providers or other technical service providers operating overseas. Such international data transfers are carried out only when:

• The recipient country or jurisdiction provides a level of data protection equivalent to or greater than that of Malaysia.
• Comprehensive data transfer agreements, including the relevant Standard Contractual Clauses, have been executed with the receiving parties.
• The transfer is necessary to perform the service contract between oasis88 and its members — for example, processing international payments or providing Live Casino services.

Oasis88 ensures that all international data transfers are carried out with appropriate safeguards and in full compliance with Malaysia's PDPA 2010 requirements regarding cross-border data transfers. You may contact oasis88's DPO to obtain a list of countries to which your data may be transferred, along with the relevant protection guarantees.

oasis88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or the addition of products and services to the platform. When we make material changes to this Privacy Policy:

• We will update the "Last Updated" date at the top of this page.
• For significant changes that affect how we use your data, we will send a notification via the oasis88 platform or to your registered phone number.
• In cases of highly material changes — such as changes to the purposes for which data is used or new third parties that will receive data — we will seek fresh consent from you where required by law.

You are encouraged to review this page periodically to ensure you remain informed about how oasis88 handles your personal data. Your continued use of the oasis88 platform after any changes to the Privacy Policy take effect constitutes your acceptance of the revised terms.

oasis88 has appointed a Data Protection Officer (DPO) who is responsible for ensuring compliance with PDPA 2010 and handling all privacy-related enquiries, requests, and complaints from members.

If you have any questions, concerns, or requests regarding this Privacy Policy or how oasis88 handles your personal data, please contact our Data Protection Officer through the following channels:

• DPO Email: privacy@oasis88.best — Dedicated to privacy inquiries and PDPA data rights requests. Response within 5 business days.
• General Support Email: support@oasis88.best — For general inquiries related to your account and services that may involve personal data.
• Live Chat 24/7: Through the live chat icon on the oasis88 platform — for urgent privacy inquiries that require a prompt response.

Your cooperation and trust are greatly valued by oasis88. We are committed to addressing all privacy enquiries seriously, transparently and within a reasonable timeframe. Your privacy is not merely a legal obligation for us — it is a core value we uphold in building long-term, trust-based relationships with every oasis88 member across Malaysia.