oasis66 Privacy Policy

1 Introduction and Controller Identity

This Privacy Policy is issued by oasis66 ("oasis66", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at oasis66.club. oasis66 acts as the data controller in respect of personal data collected from members and visitors to the platform.

This Policy applies to all personal data collected through the oasis66 website, mobile browser experience, account registration process, customer support interactions, and any other service channels operated by oasis66. It does not apply to third-party websites or services that may be linked from within the platform.

We are committed to complying with applicable data protection legislation, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, in the collection and processing of personal data belonging to Malaysian residents and members.

2 Personal Data We Collect

oasis66 collects the following categories of personal data from members and platform users:

We do not knowingly collect sensitive personal data beyond what is required for identity verification and compliance with our gaming licence obligations. We do not collect biometric data.

3 How We Use Your Personal Data

oasis66 uses personal data for the following purposes:

• Account Management: To create, verify, maintain, and administer your oasis66 member account, including identity and age verification as required under our gaming licence.
• Transaction Processing: To process deposits, withdrawals, and bonus payments in Malaysian Ringgit (MYR) via FPX, Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment methods.
• Legal and Regulatory Compliance: To fulfil obligations under our international gaming licence, including anti-money laundering (AML) checks, Know Your Customer (KYC) verification, and responsible gaming obligations.
• Platform Security: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Service Improvement: To analyse usage patterns, identify technical issues, and improve the functionality and user experience of the oasis66 platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide account assistance via live chat and email.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to administer self-exclusion, deposit limits, and other player protection tools.

4 Legal Basis for Processing

oasis66 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the member agreement between you and oasis66, including account operation, payment processing, and dispute resolution.
• Legal Obligation: Processing required to comply with applicable laws and the obligations imposed by our international gaming licence, including AML and KYC requirements.
• Legitimate Interests: Processing carried out in pursuit of oasis66's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing of personal data for marketing communications and certain optional platform features, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Disclosure and Sharing of Personal Data

oasis66 does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients in limited circumstances:

• Payment Service Providers: Banks, e-wallet operators, and payment processors involved in the execution of your transactions (e.g., FPX network participants, Touch n Go eWallet, Boost).
• KYC and AML Verification Providers: Third-party identity verification and anti-money laundering screening services used to fulfil our regulatory obligations.
• Gaming Regulators and Licensing Authorities: Our gaming licence regulator and any relevant governmental authority where disclosure is required by law or licence condition.
• Technology Service Providers: Cloud hosting, platform infrastructure, analytics, and cybersecurity providers who process data on our behalf under contractual data processing agreements.
• Law Enforcement: Where required by a court order, law enforcement agency, or other competent authority under applicable law.

All third-party recipients are required to handle your personal data in accordance with applicable data protection laws and oasis66's contractual requirements.

6 Data Retention

6.1 oasis66 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our gaming licence obligations. Financial transaction records, KYC documentation, and gaming activity logs are typically retained for a minimum of five (5) years following account closure in accordance with standard AML record-keeping requirements.

6.2 Where personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, oasis66 will securely delete or anonymise that data.

6.3 Data held in backup systems may persist for a short additional period following deletion from primary systems due to technical backup cycles. Such data remains subject to this Policy.

7 Data Security

oasis66 implements technical and organisational security measures appropriate to the risk level of the data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the oasis66 platform.
• Encryption of sensitive data at rest within oasis66's database and storage systems.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Two-factor authentication options for member accounts to prevent unauthorised access.
• Regular security audits and penetration testing of platform infrastructure.
• Incident response procedures for the detection and management of personal data breaches.

Despite these measures, no method of electronic transmission or storage is completely secure. In the event of a data breach affecting your personal data, oasis66 will notify affected members and relevant authorities in accordance with applicable legal obligations.

8 Cookies and Tracking Technologies

8.1 The oasis66 platform uses cookies and similar tracking technologies to provide essential platform functionality, maintain your login session, remember your preferences, and analyse platform usage.

8.2 The following categories of cookies are used by oasis66:

• Essential Cookies: Required for the platform to function. These cannot be disabled without preventing core features from working.
• Functional Cookies: Remember your language and display preferences between sessions.
• Analytics Cookies: Collect anonymised data on how members use the platform to help us improve the service.
• Security Cookies: Support fraud detection, bot prevention, and session integrity mechanisms.

8.3 You may manage or disable non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the oasis66 platform.

9 Your Data Protection Rights

As a data subject, you have the following rights in respect of your personal data held by oasis66, subject to applicable law and any legal obligations that may limit or delay our ability to comply:

• Right of Access: You may request a copy of the personal data oasis66 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected and no legal retention obligation applies.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing.
• Right to Data Portability: Where technically feasible, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact the oasis66 Data Protection team via the contact details in Section 14. We will respond within 30 calendar days of receiving a valid request.

10 Children and Minors

11 Third-Party Links and Services

The oasis66 platform may contain links to third-party game providers, payment processors, or other service interfaces. This Privacy Policy applies only to oasis66's own data collection and processing activities. oasis66 is not responsible for the privacy practices of third-party providers and encourages members to review the privacy policies of any third-party services they interact with.

12 International Data Transfers

12.1 oasis66 may process your personal data in countries outside Malaysia, including countries where the oasis66 platform's infrastructure and technology service providers are located. Where such transfers occur, oasis66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Malaysian PDPA and applicable data protection law.

12.2 Such safeguards may include contractual clauses, data processing agreements, and adherence to internationally recognised data protection frameworks.

13 Amendments to This Privacy Policy

oasis66 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered members via email notification or a prominent notice on the oasis66 platform prior to the changes taking effect. The "Effective Date" at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the oasis66 platform following the effective date of any revision constitutes acceptance of the updated Policy.

14 Contact and Data Protection Enquiries

For all data protection enquiries, subject access requests, or privacy-related complaints, please contact the oasis66 Data Protection team: