Privacy Policy oja89 Data Protection

Welcome to the oja89 Privacy Policy page. This document is a written agreement between oja89 ("we", "our platform") and you as the user ("you", "member") that outlines how we handle your personal data responsibly and transparently.

Oja89 understands that trust is the cornerstone of our relationship with every user in Malaysia. Your personal data is more than just a number in a database — it is sensitive information that reflects your identity and your life. As such, we treat every detail you provide with the highest level of protection, equivalent to international banking standards.

This Privacy Policy is drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised best practices in the online gambling industry. By using the oja89 platform, you acknowledge that you have read, understood and agreed to the terms set out in this document.

Oja89 collects various types of personal data during the registration process, platform usage, and financial transactions. This data collection is necessary to ensure a smooth, secure user experience that meets regulatory requirements.

In addition to data you provide directly, oja89 also collects data automatically through cookies, web beacons, and trusted third-party analytics tools. This data helps us understand platform usage patterns and improve our services over time.

Every piece of data we collect is used for a clear, legitimate, and proportionate purpose. oja89 does not use your data for any purpose other than those stated below without first obtaining your explicit consent.

• Account Management: Creating, verifying, managing and securing your oja89 account throughout your membership.
• Transaction Processing: Processing all deposits, withdrawals and bonus payments accurately and securely through approved payment channels.
• Identity Verification (KYC): Meeting regulatory requirements related to customer identity verification to prevent money laundering and fraud.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access, account abuse and cybersecurity threats.
• Service Communications: Sending important notifications related to your account, security updates, transaction confirmations and promotional information you have agreed to receive.
• Platform Improvement: Analysing usage patterns to improve the performance, user interface and overall experience of the oja89 platform.
• Legal Compliance: Fulfilling legal and regulatory obligations applicable in the relevant jurisdiction.
• Responsible Gaming: Monitoring betting patterns to identify users who may require responsible gaming support.

Oja89 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our fundamental commitment to every user who trusts our platform.

However, in certain circumstances, oja89 may need to share your information with the following parties:

• Payment Service Providers: Payment processors and financial institutions that assist in processing your deposits and withdrawals securely.
• Identity Verification Service Providers: Verified KYC and anti-money laundering (AML) companies to verify user identities in compliance with regulatory requirements.
• Gaming Platform Providers: Casino and sports game providers required to deliver the gaming experience to you.
• Legal Authority: Law enforcement agencies, regulatory bodies, or courts where required by applicable law.
• Professional Advisors: Lawyers, accountants or auditors bound by strict professional confidentiality obligations.

In all data sharing instances, oja89 ensures that receiving parties maintain data protection measures comparable to our own standards, and that the data is used solely for the purposes specifically stated.

Oja89 uses enterprise-grade server infrastructure equipped with multiple layers of security to ensure your personal data is always protected against unauthorised access, modification, disclosure, or destruction.

The technical security measures we implement include:

• 256-bit SSL/TLS Encryption: All data transferred between your device and oja89's servers is encrypted using 256-bit SSL/TLS protocol — the same standard used by leading banks around the world.
• Data-at-Rest Encryption: Sensitive personal data stored in our databases is also encrypted using the unbreakable AES-256 algorithm.
• Two-Factor Authentication (2FA): A 2FA system via OTP is available for all user accounts to add an extra layer of protection to the login process.
• Strict Access Control: Only authorised oja89 staff who genuinely require access may view users' personal data, and all such access is logged and audited on a regular basis.
• Periodic Vulnerability Scanning: The oja89 platform undergoes regular penetration testing and vulnerability scanning by independent cybersecurity experts.
• 24/7 Monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operate around the clock to identify and neutralise cyber threats in real time.

Your personal data will be retained for as long as your account is active or as long as necessary to provide services to you. Following account closure, oja89 will retain your data for the minimum period required by law (typically 7 years for financial records) before permanent deletion is carried out.

The oja89 platform uses cookies and similar tracking technologies to enhance user experience, maintain login session security, and collect analytics data that helps us understand how users interact with the platform.

The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication, transaction security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting data on how users use the platform (e.g. most frequently visited pages, time spent in each section) to help us improve overall performance.
• Functional Cookies: Remembering your preferences and settings such as language preference and display settings to provide a more personalised experience.
• Marketing Cookies: Used to display promotional offers relevant to your interests and usage history on the platform. You may opt out of this type of cookie.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect the functionality of the platform and your overall user experience. Cookie storage duration depends on the type — session cookies are deleted when you close your browser, while persistent cookies are stored until their set expiry date.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and oja89's internal policies, you have the following rights regarding your personal data that we hold:

• Right of Access: You have the right to request and obtain a copy of the personal data we hold about you in a readable format.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate, incomplete, or outdated.
• Right to Restriction of Processing: Under certain circumstances, you have the right to request that we restrict how we process your data.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Erasure: Under circumstances prescribed by law, you may request the deletion of your personal data from our systems.

Oja89 reserves the right to verify your identity before processing any request related to your personal data, to ensure the security of your information and prevent disclosure to unauthorised parties.

The oja89 platform is exclusively for individuals who are of age 18 years and above. We do not intentionally collect, process, or store any personal data relating to individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge due to age misrepresentation, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child may have registered on the oji89 platform illegally are requested to contact us immediately through our official support channels.

Oja89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or technological developments that affect how we protect your data.

Each time an amendment is made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying clear notifications on the platform's home page for a reasonable period.
• Sending email notifications to registered users for significant and material changes.

Continued use of the oja89 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the oja89 data protection team is ready to assist you through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get an immediate response.
• Data Protection Email: [email protected] — please include "Privacy Inquiry" in your email subject line for faster handling.

Oja89 has a dedicated data protection officer appointed specifically to handle all user privacy matters. We are committed to providing a clear, fair, and comprehensive response to every enquiry within the stipulated timeframe.

For complaints that cannot be resolved internally, you have the right to refer the matter to Malaysia Personal Data Protection Commissioner as the regulatory body responsible for overseeing PDPA compliance in Malaysia.