oasis88 Privacy Policy

1. Data Controller

oasis88, operating the platform at oasis88.club, is the data controller responsible for the personal information processed under this Privacy Policy. References to "oasis88", "we", "us", or "our" in this Policy refer to the oasis88 licensed operating entity and its Platform. If you have any questions regarding how oasis88 handles your personal data, please contact the oasis88 Data Protection team via the contact details in Section 15.

2. Information We Collect

oasis88 collects personal data that is necessary to provide the Platform's services, comply with regulatory obligations, and protect the security and integrity of accounts. The categories of personal information collected include:

2.1 Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify you are aged 21 or over);
• Identity document type, number, and copies (MyKad, passport, or driver's licence) submitted during KYC verification;
• Selfie or live photograph where required for enhanced identity verification.

2.2 Contact Data

• Email address registered to your oasis88 account;
• Malaysian mobile telephone number registered for two-factor authentication and account communications;
• Residential address as submitted during KYC or account registration.

2.3 Financial Data

• Payment method details including Touch n Go eWallet reference, Boost account identifier, bank account number, card details (last four digits and card type only – full card numbers are not stored by oasis88), and cryptocurrency wallet addresses;
• Transaction history including deposit amounts, withdrawal amounts, dates, and processing status;
• Account wallet balance and bonus balance at any given time.

2.4 Gaming Data

• Betting history across sportsbook, live casino, and slots;
• Game session durations, stake amounts, win/loss outcomes;
• Mix Parlay and EPL Betting ticket details;
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status).

2.5 Technical Data

• IP address and geolocation data at the time of login and transactions;
• Device type, operating system, and browser type;
• Session identifiers, cookies, and access timestamps;
• Platform usage analytics and navigation behaviour.

3. How We Collect Your Data

oasis88 collects personal data through the following channels:

• Direct submission: information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technical collection: data collected automatically when you access the Platform, including IP address, device identifiers, cookies, and session logs;
• Third-party verification services: identity and address verification data returned by KYC service providers when processing your documentation;
• Payment processors: transaction confirmation and fraud screening data from payment service providers processing your RM deposits and withdrawals.

4. Legal Basis for Processing

oasis88 processes your personal data on the following legal grounds:

• Contractual necessity: processing required to create and manage your oasis88 account, process transactions, and deliver the gaming services you have requested;
• Legal obligation: processing required to comply with KYC/AML regulatory requirements under oasis88's international gaming licence, including identity verification, transaction monitoring, and regulatory reporting;
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where these interests are not overridden by your privacy rights;
• Consent: processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw marketing consent at any time through your account settings.

5. How We Use Your Personal Data

oasis88 uses the personal data collected for the following purposes:

• To create, verify, and manage your oasis88 account;
• To process deposits and withdrawals in Malaysian Ringgit and verify payment ownership;
• To verify your identity and age (21+) as required by our gaming licence;
• To detect and prevent fraud, money laundering, and unauthorised account access;
• To operate responsible gaming tools including deposit limits, self-exclusion, and problem gambling detection protocols;
• To provide 24/7 customer support and resolve account disputes;
• To communicate with you about account activity, security alerts, and mandatory service notices;
• To send promotional communications where you have provided consent;
• To improve the oasis88 Platform through aggregated usage analytics;
• To comply with reporting obligations to the relevant gaming licensing authority.

6. Sharing Your Personal Data

oasis88 does not sell your personal data to third parties for commercial purposes. Your data may be shared with the following categories of recipients strictly for the purposes outlined in Section 5:

• KYC and identity verification providers: third-party services that process identity documents and conduct age and address verification on oasis88's behalf;
• Payment processors: financial service providers including e-wallet operators (Touch n Go eWallet, Boost), Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), and card networks (Visa, Mastercard) necessary to process transactions;
• Gaming software providers: certified game studios whose live dealer and slot software is integrated into the oasis88 Platform, to the extent necessary for game delivery;
• Regulatory and law enforcement authorities: gaming licensing authority regulators, financial intelligence units, and law enforcement agencies where disclosure is required by law or for the investigation of fraud or AML matters;
• Professional advisers: auditors, lawyers, and compliance consultants engaged by oasis88 under confidentiality obligations.

7. Cookies & Tracking Technologies

oasis88 uses cookies and similar tracking technologies on the Platform to enable essential functionality, maintain session security, and collect aggregated usage analytics. The categories of cookies used include:

• Strictly necessary cookies: essential for Platform operation, including session management, login persistence, and security token validation. These cannot be disabled without breaking Platform functionality;
• Analytical cookies: collect aggregated, anonymised data about how players navigate the Platform, used to improve user experience and identify technical issues;
• Preference cookies: remember your language, display, and notification preferences across sessions.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the oasis88 Platform.

8. Data Retention

oasis88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. Specific retention guidelines include:

• Account and KYC records: retained for a minimum of five (5) years following account closure, as required by AML regulatory standards applicable to the oasis88 gaming licence;
• Transaction records: retained for a minimum of five (5) years for regulatory reporting and dispute resolution purposes;
• Communications and support records: retained for three (3) years following the last interaction;
• Marketing consent records: retained until consent is withdrawn, plus one (1) year as evidence of the consent status.

Where retention beyond these periods is required by specific regulatory direction or ongoing legal proceedings, oasis88 will retain data until the obligation is discharged.

9. Data Security

oasis88 implements technical and organisational security measures appropriate to the risk posed by the processing of your personal data. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and oasis88 servers;
• Bcrypt hashing for stored passwords – oasis88 cannot retrieve your password in plaintext;
• Access controls limiting employee access to personal data on a need-to-know basis;
• IP anomaly detection and account lockout mechanisms to prevent unauthorised access;
• Regular security assessments and penetration testing by independent third parties;
• Incident response procedures for the detection, containment, and reporting of data breaches.

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. You should take steps to protect your own account credentials and report any suspected unauthorised access to oasis88 support immediately.

10. Your Rights

Subject to applicable data protection law and the conditions of oasis88's regulatory obligations, you have the following rights in relation to your personal data held by oasis88:

• Right of access: to request a copy of the personal data oasis88 holds about you;
• Right of rectification: to request correction of inaccurate or incomplete personal data;
• Right of erasure: to request deletion of your personal data, subject to oasis88's legal retention obligations;
• Right to restrict processing: to request that oasis88 limits its use of your data in certain circumstances;
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: to withdraw marketing consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact oasis88 Data Protection via the contact details in Section 15. oasis88 will respond to verified requests within thirty (30) calendar days.

11. Children's Privacy

The oasis88 Platform is strictly for persons aged 21 years and above. 21+ oasis88 does not knowingly collect personal data from persons under the age of 21. Any account found to belong to a person under the minimum age will be immediately suspended, personal data securely deleted to the extent not required for regulatory purposes, and the matter reported to the relevant licensing authority. Parents or guardians who believe a minor has registered with oasis88 should contact support immediately.

12. Third-Party Links

The oasis88 Platform does not contain links to third-party websites for commercial purposes. Where references to third-party services are made (for example, payment processor names), those references do not constitute endorsements and oasis88 is not responsible for the privacy practices of those services. This Privacy Policy applies solely to the oasis88 Platform at oasis88.club.

13. International Data Transfers

As an internationally licensed gaming platform, oasis88 may transfer personal data to service providers located outside of Malaysia. Where such transfers occur, oasis88 ensures that appropriate safeguards are in place, including contractual data transfer mechanisms equivalent to those required under applicable data protection law, to ensure your data receives a standard of protection consistent with this Privacy Policy.

14. Changes to This Privacy Policy

oasis88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email to the address on file or via a prominent notice on the Platform prior to the change taking effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the oasis88 Platform following notification of a change constitutes acceptance of the revised Privacy Policy.

15. Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns regarding the handling of your personal data by oasis88, please contact the Data Protection team:

Email: [email protected]

oasis88 Data Protection correspondence is handled within thirty (30) calendar days. For general account support, oasis88 customer service is available 24/7 via live chat on the Platform.