Oma55 Privacy Policy – Personal Data Protection & Player Privacy in Malaysia

This Privacy Policy is issued by oma55 ("we", "the platform" or "oma55") and applies to all users, visitors, and registered members of the oma55 platform in Malaysia. This document transparently explains how oma55 manages your personal data from the moment you first visit our website through to every interaction you make as an active member.

By registering an oma55 account or continuing to use our platform, you agree to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the oma55 platform.

This Privacy Policy should be read in conjunction with Terms & Conditions and Responsible Gaming Policy oma55, all of which together form a comprehensive protection framework for every member of our platform across Malaysia — from Perlis to Sabah, from Johor Bahru to Kuching.

Oma55 collects your personal data through several channels — during account registration, during financial transactions, through your use of the platform, and via your communications with our support team. The following are the categories of data we collect:

Personal Identification Data:

• Full name as it appears on your official identification document
• An active Malaysian mobile phone number
• A valid and active email address
• Date of birth (for age verification — must be 21 or above)
• National ID or passport number (collected only when KYC verification is required)

Financial & Transaction Data:

• E-wallet account details — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow
• FPX account details — Maybank2u, CIMB Clicks
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Betting history and in-platform gaming activity

Technical & Usage Data:

• The IP address of the device used to access oma55
• Browser type and device operating system
• Login session data, including date, time and access location
• Cookie data and device identifiers
• Navigation history within the oma55 platform

Oma55 uses collected personal data solely for legitimate and specific purposes. Every use of your data is directly tied to delivering the oma55 platform's services to you as a member in Malaysia:

Oma55 does not use your personal data for any third-party marketing purposes. Should oma55 wish to use your data for a new purpose not stated in this policy, we will obtain your explicit consent before doing so.

Oma55 takes a highly cautious and limited approach when it comes to sharing members' personal data. Our commitment is clear: oma55 does not sell members' personal information to any third party for commercial purposes.

In certain limited circumstances, oma55 may need to share your data with the following parties, but only to the extent necessary for the stated purposes:

• Payment Processors: E-wallet and online banking providers that process your MYR transactions — such as Touch 'n Go eWallet, GrabPay, DuitNow and FPX — receive only the minimum data required to complete those transactions.
• Relevant Authorities: oma55 complies with all statutory reporting requirements in Malaysia. Data may be disclosed to the relevant authorities where required by court order or applicable law.
• Independent Auditors & Certifiers: Independent audit bodies that verify game fairness and RTP may access aggregated statistical data that cannot be used to identify any individual.
• Technology Service Providers: Companies providing oma55's technical infrastructure (servers, cybersecurity, analytics) may process data on behalf of oma55, subject to strict confidentiality agreements.

All third parties with whom oma55 shares data are required to comply with security and privacy standards that are equivalent to or exceed oma55's own standards. No transfer of members' personal data to overseas parties occurs without adequate protections in place.

Oma55 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit oma55, helping the platform recognise you on subsequent visits.

The types of cookies used by oma55 are as follows:

• Session Cookies: Temporary cookies required for core platform functionality — including keeping you logged in during an active session. These cookies are deleted automatically when you close your browser.
• Preference Cookies: Saves your preferences such as interface language and game settings for a more convenient experience on oma55.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access, and security threats that could compromise your account.
• Analytical Cookies: Helps oma55 understand how users interact with the platform in order to improve the gaming experience. Analytics data is collected in aggregate form and does not identify individuals personally.

You can manage your cookie settings through your browser preferences. Please note, however, that disabling certain cookies may affect the functionality of the oma55 platform and diminish your overall gaming experience.

Protecting your personal data is a responsibility oma55 takes extremely seriously. Our platform applies multiple layers of technical and organisational safeguards to keep your data secure at all times:

• Data Encryption in Transit: All data transmitted between your device and oma55's servers is encrypted using 256-bit TLS/SSL, preventing any unauthorised party from intercepting or reading that information.
• Stored Data Encryption: Sensitive data such as payment information and passwords are stored in encrypted form using the latest hashing algorithms. Even oma55 staff cannot read your password in its original form.
• Layered Access Controls: Access to members' personal data is restricted to oma55 staff with a legitimate operational need. All access is automatically logged and monitored.
• Continuous Security Monitoring: oma55's monitoring system operates 24 hours a day, 7 days a week to detect any unusual activity or unauthorised attempts to access member data.
• Regular Penetration Testing: oma55 conducts regular security assessments by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.
• Incident Response Procedures: oma55 has a comprehensive security incident response procedure in place. In the event of any data breach affecting members, we will notify all relevant parties within 72 hours of the incident being detected.

While oma55 implements all reasonable and up-to-date security measures, no system can guarantee absolute security one hundred percent of the time. We therefore also encourage members to take personal security precautions, such as using strong passwords, not sharing login credentials, and ensuring their devices are always secure and up to date.

Oma55 retains members' personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following are general guidelines on data retention periods:

• Active Account Data: Personal data of members with an active oma55 account is retained for as long as that account remains active and in use.
• Data Following Account Closure: Upon closure of an oma55 account, core data is retained for a minimum period of 7 years to comply with legal compliance requirements and financial audit obligations in Malaysia.
• Financial Transaction Data: Transaction records in MYR — deposits, withdrawals and betting history — are retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• Technical Log Data: Technical system logs are retained for 12 months for security and technical troubleshooting purposes.
• Support Communication Data: Communication records with the oma55 support team are retained for 3 years for reference and dispute resolution purposes.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

As an oma55 member, you have the following rights regarding your personal data held by the platform. oma55 respects and facilitates the exercise of each of these rights:

To exercise any of the above rights, please contact the oma55 privacy team at [email protected] by stating the right you wish to exercise along with your oma55 account details. We will verify your identity before processing any request to ensure your privacy is fully protected.

The oma55 platform is fully optimised for mobile use on Android and iOS. When you access oma55 via a mobile browser, some additional privacy considerations apply:

• Device Permissions: oma55 does not require access to your camera, microphone, contacts or GPS location. Any permission prompts that appear come from standard browser behaviour and may be declined without affecting oma55's functionality.
• Public Wi-Fi Networks: We strongly recommend avoiding access to your oma55 account over unsecured public Wi-Fi networks. For optimal security when playing slots, live casino, or making RM transactions on the platform, use your personal mobile data connection or a trusted VPN.
• Push Notifications: oma55 may send push notifications relating to transactions, winnings and promotions via your mobile browser. You can manage your notification preferences through your device settings at any time.
• Automatic Log-Out: For added security, oma55 sessions on mobile devices will automatically log out after a set period of inactivity. This protects your account should your phone be lost or stolen.

Many oma55 Malaysia players enjoy accessing the platform on their mobile phones — whether commuting on the LRT, during a lunch break at the office, or while watching a Malaysia Super League match or badminton at home. oma55 ensures that this mobile experience is just as secure and protected as the desktop experience.

Oma55 will update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform improvements. When material changes are made, oma55 is committed to:

• Displaying a clear notice on the oma55 Privacy Policy page showing the new effective date
• Notifying all members via their registered email address or platform notification at least 14 days before any changes take effect
• Retaining previous versions of the Privacy Policy and making them available to members who need to refer to them

Continued use of the oma55 platform after the effective date of any Privacy Policy update will be considered your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your oma55 account.

For any enquiries, complaints, or requests relating to this Privacy Policy, please contact the oma55 privacy team:

This Privacy Policy takes effect from 1 January 2026 and supersedes all previous versions. For related documents, please refer to Terms & Conditions, Responsible Gaming and Frequently Asked Questions oma55.