Privacy Policy – oasis66

1. Scope and Application

This Privacy Policy applies to all personal data processed by oasis66 in connection with the oasis66 platform, accessible at oasis66.co, including all casino games, sports betting services, payment processing functions, customer support interactions, promotional communications, and any related oasis66 services.

By creating an oasis66 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the oasis66 Platform.

This Policy should be read together with oasis66's Terms & Conditions, which govern the overall use of the Platform.

2. Data Controller

For the purposes of applicable data protection law, oasis66 is the data controller responsible for personal data processed through the oasis66 Platform. oasis66 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all privacy-related enquiries, you may contact oasis66 at: [email protected]

3. Personal Data We Collect

oasis66 may collect the following categories of personal data from registered members and Platform visitors:

4. How We Collect Your Data

oasis66 collects your personal data through the following means:

• Direct registration: Information you provide when creating your oasis66 account, completing KYC verification, or updating your account profile;
• Platform use: Data generated automatically as you use the oasis66 Platform, including gameplay data, betting records, and session logs;
• Payment processing: Financial data transmitted when you make a deposit or request a withdrawal, including data from eWallet providers such as Touch n Go and Boost, and USDT TRC20 wallet transactions;
• Customer support: Information you provide when contacting oasis66 via live chat, email, or other support channels;
• Cookies and tracking technologies: Data collected automatically via cookies and similar technologies as described in Section 9 of this Policy;
• Third-party verification providers: Identity and fraud verification data obtained from third-party KYC service providers where oasis66 engages such services.

5. Purposes and Legal Basis for Processing

oasis66 processes your personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for the performance of your contract with oasis66;
• Identity verification and KYC compliance — necessary for compliance with legal obligations applicable to oasis66's operations;
• Processing deposits, withdrawals, and transactions — necessary for the performance of your contract with oasis66;
• Fraud prevention and anti-money laundering monitoring — necessary for compliance with applicable legal and regulatory obligations and oasis66's legitimate interests in protecting the integrity of the Platform;
• Customer support and dispute resolution — necessary for the performance of your contract and oasis66's legitimate interests;
• Responsible gaming monitoring and intervention — necessary for compliance with responsible gaming obligations and oasis66's legitimate interest in player welfare;
• Platform security and technical integrity — oasis66's legitimate interests in maintaining a secure and functional Platform;
• Promotional communications — based on your consent, where you have opted in to receive marketing communications from oasis66. You may withdraw consent at any time.

6. Disclosure of Personal Data

oasis66 does not sell your personal data. oasis66 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: Banks, eWallet operators (Touch n Go, Boost, GrabPay), and USDT processing partners, solely for the purpose of processing your transactions;
• KYC and fraud prevention providers: Third-party identity verification and fraud screening services engaged by oasis66 to fulfil its compliance obligations;
• Game content providers: Licensed casino game studios and sports data providers where technically necessary to deliver the games and betting markets you access;
• IT and infrastructure providers: Cloud hosting and cybersecurity service providers that process data on oasis66's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where oasis66 is legally obliged to disclose data in response to a valid legal demand, court order, or regulatory requirement;
• Successors in business: In the event of a merger, acquisition, or sale of oasis66's business or assets, your data may be transferred to the successor entity, subject to the same privacy protections.

All third-party recipients are required to handle your personal data in accordance with applicable data protection law and oasis66's data processing standards.

7. International Data Transfers

In the course of providing the oasis66 Platform, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, oasis66 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. This may include data transfer agreements incorporating standard contractual clauses or transfers to jurisdictions recognised as providing an adequate level of data protection.

8. Data Retention

oasis66 retains your personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data: For the duration of your active account relationship with oasis66, plus a minimum of five (5) years following account closure, as required by anti-money laundering and record-keeping obligations;
• Transaction records: Minimum of five (5) years from the date of each transaction;
• Customer support records: Three (3) years from the date of the interaction;
• Responsible gaming records: Duration of any self-exclusion period plus three (3) years, to prevent circumvention of exclusion measures;
• Technical and usage data: Up to twelve (12) months from collection, unless required for longer for security or legal purposes.

Where retention is required to comply with a legal obligation or defend a legal claim, oasis66 may retain data beyond these periods as necessary.

9. Cookies and Tracking Technologies

The oasis66 Platform uses cookies and similar tracking technologies to ensure the correct functioning of the Platform, maintain your login session, and improve your experience. oasis66 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to operate. These cannot be disabled without impairing Platform functionality and do not require your consent;
• Functional cookies: Allow oasis66 to remember your preferences and personalise your Platform experience;
• Analytics cookies: Used to understand how members navigate the oasis66 Platform, helping us identify and fix issues and improve the user experience. Data collected is aggregated and anonymised where possible;
• Security cookies: Used to detect and prevent fraudulent access and bot activity on the Platform.

You may control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the oasis66 Platform.

10. Security Measures

oasis66 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and oasis66 servers;
• AES-256 encryption for sensitive data stored at rest;
• Strict role-based access controls limiting employee access to personal data;
• Comprehensive access logging and audit trails for all data access events;
• Penetration testing and vulnerability assessments conducted on a regular basis;
• Multi-factor authentication requirements for privileged system access;
• Data breach response procedures, including timely notification where required by law.

While oasis66 employs industry-standard security practices, no data transmission or storage system can be guaranteed to be 100% secure. You are encouraged to maintain strong, unique passwords for your oasis66 account and to report any suspected security incidents to [email protected] immediately.

11. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by oasis66:

• Right of access: You may request a copy of the personal data oasis66 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to oasis66's legal retention obligations;
• Right to restriction of processing: You may request that oasis66 restrict the processing of your data in certain circumstances;
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to oasis66;
• Right to object: You may object to processing based on oasis66's legitimate interests;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact oasis66 at [email protected]. oasis66 will respond to all valid data rights requests within thirty (30) days.

12. Children and Minors

The oasis66 Platform is strictly intended for individuals aged 21 years and above. oasis66 does not knowingly collect personal data from persons under the age of 21. If oasis66 becomes aware that personal data has been collected from a minor, that data will be promptly deleted and the associated account closed. If you believe that a minor has registered for an oasis66 account, please notify us immediately at [email protected].

13. Responsible Gaming and Data

oasis66 collects and processes responsible gaming data — including self-exclusion elections, deposit limits, and cooling-off periods — as part of its commitment to player protection. This data is used to enforce your chosen restrictions and to monitor for indicators of problem gambling behaviour.

Responsible gaming data is treated with the highest level of sensitivity and is not shared with third parties except where required by applicable responsible gaming regulation. Self-exclusion records are retained for the duration of any exclusion period plus three years to prevent circumvention.

If you wish to set limits on your oasis66 account or discuss responsible gaming options, please visit our Responsible Gaming page or contact support directly.

14. Changes to This Policy

oasis66 reserves the right to amend this Privacy Policy at any time. Where changes are material, oasis66 will notify you via the Platform or by email to your registered address prior to the changes taking effect. The "Last Updated" date at the top of this Policy will reflect the most recent revision. Your continued use of the oasis66 Platform following any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by oasis66, please contact us:

• Email: [email protected]
• Website: oasis66.co
• Response time: oasis66 aims to respond to all privacy enquiries within five (5) business days and all data rights requests within thirty (30) days.

This Privacy Policy was last reviewed and updated on 1 January 2026.