Your Data Is Secure
All personal data is encrypted using 256-bit SSL and stored on hardened servers. We never sell or rent your information to third parties for their own marketing purposes.
Minimal Data Collection
We only collect the information we genuinely need to operate your account, process payments, and comply with regulatory obligations. No unnecessary data harvesting.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data at any time by contacting our support team. We will respond within a reasonable timeframe.
Transparent Cookie Use
We use cookies strictly for session management, fraud prevention, and platform analytics. We do not use cross-site tracking cookies or share cookie data with advertisers.
Payment Data Protected
Payment method details — including Maybank2u, Touch 'n Go eWallet, DuitNow, and FPX credentials — are handled via PCI-DSS compliant processors. We do not store raw card data.
Regulatory Compliance
Our data practices align with international data protection standards. KYC data is retained only for as long as required under applicable licensing and anti-money laundering obligations.
Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing & Legal Basis
- 6. How We Use Your Data
- 7. Data Sharing & Disclosure
- 8. Data Retention
- 9. Cookies & Tracking
- 10. Data Security
- 11. User Rights
- 12. Minors & Age Restriction
- 13. International Data Transfers
- 14. Amendments to This Policy
- 15. Contact Us
Last updated: 1 January 2026
1 Introduction
omi88 ("we", "us", "our", "the Operator", "the Platform") operates the online gaming and sports betting website accessible at omi88.cam ("the Website"). We are committed to protecting the personal data of all individuals ("you", "the User", "the Player") who interact with our Platform, whether as registered account holders or casual visitors.
This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, how long we retain it, and the rights you hold in relation to your personal information.
By registering an account, making a deposit, placing a wager, or otherwise using omi88's services, you acknowledge that you have read and understood this Policy in full and consent to the processing of your personal data as described herein. This Policy forms part of our overall legal framework alongside our Terms & Conditions and Responsible Gambling Policy.
This Policy is written in English and applies to all users of omi88.cam, with particular relevance to players located in Malaysia. References to regulatory obligations are to internationally recognised data protection standards applicable to the Operator's licensing jurisdiction.
2 Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
- "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, including name, email address, date of birth, financial account details, and device identifiers.
- "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, or deletion.
- "Data Controller" — the entity that determines the purposes and means of processing Personal Data. omi88 acts as Data Controller with respect to all User data collected via the Platform.
- "Data Processor" — any third-party service provider that processes Personal Data on behalf of omi88, subject to binding contractual data protection obligations.
- "KYC Data" — identity and age verification documents provided by Users in fulfilment of Know Your Customer obligations, including government-issued identification and proof of address.
- "Cookies" — small text files placed on a User's device by the Platform for the purposes of session management, analytics, and fraud prevention.
- "Sensitive Data" — a subset of Personal Data that requires heightened protection, including financial information, identity document details, and data relating to self-exclusion status.
3 Data We Collect
omi88 collects personal data across several categories. The specific data collected depends on the nature of your interaction with the Platform:
3.1 Registration & Account Data
When you create an omi88 account, we collect:
- Full legal name
- Date of birth (to verify eligibility — 21+ only)
- Email address and contact phone number
- Residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru)
- Preferred username and encrypted password
- Preferred currency (Malaysian Ringgit / MYR)
3.2 Identity Verification (KYC) Data
To comply with anti-money laundering and licensing obligations, we collect:
- Copies of government-issued identification (MyKad, passport, or other accepted documents)
- Proof of residential address (utility bill, bank statement, or equivalent)
- Selfie verification photographs where required for enhanced identity confirmation
3.3 Financial & Payment Data
To process deposits and withdrawals in MYR, we collect:
- Payment method identifiers (e-wallet account numbers, bank account numbers, or cryptocurrency wallet addresses)
- Transaction history, including deposit amounts, withdrawal requests, and dates
- FPX bank selection and related session tokens (processed by certified payment intermediaries)
3.4 Gaming Activity Data
- Betting and wagering history across all product verticals (casino, sports, esports)
- Game sessions, stake amounts, win/loss records, and bonus utilisation
- Responsible gambling tool activations (deposit limits, self-exclusion requests, session reminders)
3.5 Technical & Device Data
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Session timestamps, page views, and navigation paths
- Cookie identifiers and similar tracking technologies
3.6 Communications Data
- Content of support queries submitted via live chat or email
- Feedback, survey responses, and promotional engagement records
4 How We Collect Data
We collect personal data through the following channels:
| Collection Method | Examples |
|---|---|
| Directly from you | Registration forms, KYC document uploads, deposit/withdrawal requests, support enquiries, survey responses |
| Automatically during use | Browser cookies, server logs, IP address capture, device fingerprinting, session activity tracking |
| From payment processors | Transaction confirmations from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and crypto gateways |
| From identity verification providers | KYC outcome data from third-party verification service partners operating under binding data processing agreements |
| From fraud prevention services | Risk scoring data and device reputation signals from certified anti-fraud technology providers |
5 Data Processing & Legal Basis
omi88 processes personal data on one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual Necessity — processing required to fulfil the contract between omi88 and the User, including account maintenance, payment processing, and the delivery of gaming services.
- Legal Obligation — processing necessary to comply with applicable laws and licensing conditions, including KYC verification, anti-money laundering record-keeping, and age verification mandates.
- Legitimate Interests — processing carried out in pursuit of omi88's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gambling programme administration, provided that such interests are not overridden by the User's fundamental rights.
- Consent — processing undertaken on the basis of your freely given, specific, and informed consent, including the sending of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6 How We Use Your Data
Personal data collected by omi88 is used for the following purposes:
6.1 Account Management
To create, maintain, and operate your omi88 account; to verify your identity and age (21+ requirement); to process deposits and withdrawals in Malaysian Ringgit; and to provide customer support when you contact us.
6.2 Regulatory Compliance
To meet anti-money laundering (AML) obligations, including transaction monitoring and suspicious activity reporting; to fulfil licensing requirements; and to maintain records as required under applicable gaming regulations.
6.3 Fraud Prevention & Security
To detect and prevent fraudulent activity, collusion, bonus abuse, unauthorised account access, and the use of prohibited automated tools. This includes cross-referencing account data with device fingerprints and IP addresses.
6.4 Responsible Gambling
To administer player protection tools including deposit limits, self-exclusion, and session reminders; to identify patterns of play that may indicate potential gambling harm; and to fulfil obligations under our Responsible Gambling Policy.
6.5 Platform Improvement
To analyse aggregated usage data for the purposes of improving the Platform's performance, user experience, game library, and payment infrastructure. Such analysis is conducted on anonymised or pseudonymised data where feasible.
6.6 Marketing Communications
With your consent, to send you personalised promotional offers, bonus notifications, and news about new games or features. You may opt out of marketing communications at any time via your account settings or by contacting support.
7 Data Sharing & Disclosure
omi88 does not sell, trade, or rent personal data to third parties for their own commercial or marketing purposes. We may share personal data with the following categories of recipients, strictly as necessary and under appropriate contractual or legal safeguards:
- Payment Service Providers — DuitNow, FPX network members (Maybank, CIMB, Public Bank, Hong Leong Bank), Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency exchange processors, for the purpose of executing financial transactions.
- Identity Verification Partners — KYC service providers who verify the authenticity of identification documents submitted during the registration or withdrawal process.
- Fraud Detection Services — technology providers who assess transaction and device risk scores as part of our fraud prevention infrastructure.
- Game Studio Providers — licensed third-party game operators who may receive session identifiers necessary to deliver games via the omi88 Platform. These providers do not receive your full personal profile.
- Regulatory & Law Enforcement Authorities — where we are legally required to disclose data in response to a valid court order, regulatory direction, or law enforcement request.
- Professional Advisors — legal counsel, auditors, and compliance consultants acting under strict confidentiality obligations.
Important: All third parties with whom omi88 shares personal data are required to process that data solely for the specified purpose and in accordance with binding contractual data protection obligations. We conduct due diligence on all data processors before engagement.
8 Data Retention
omi88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, licensing, and regulatory obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC identity documents | 5 years from account closure or last transaction | Anti-money laundering regulations |
| Financial transaction records | 7 years | Regulatory / audit requirements |
| Gaming activity records | Duration of account + 3 years post-closure | Licensing obligation / responsible gambling |
| Support communications | 3 years from last interaction | Legitimate interests |
| Marketing consent records | Until consent is withdrawn + 2 years | Consent accountability |
| Technical / server logs | 90 days (rolling) | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained to comply with a legal hold or active regulatory investigation, retention may be extended accordingly.
9 Cookies & Tracking Technologies
omi88 uses cookies and similar technologies on the Platform for the following limited and specific purposes:
9.1 Essential Cookies
These are strictly necessary for the operation of the Platform. They enable session management, authentication, and security functions. The Platform cannot function correctly without these cookies, and they cannot be disabled.
9.2 Analytics Cookies
These cookies allow us to understand how Users interact with the Platform, which pages are visited most frequently, and where technical errors occur. Analytics data is aggregated and does not identify individual Users. You may opt out of analytics cookies via your browser settings.
9.3 Fraud Prevention Cookies
Device fingerprinting and session integrity cookies are used to detect suspicious login patterns, account takeover attempts, and multi-account activity. These operate as part of our security infrastructure and are retained for the minimum period necessary.
9.4 What We Do Not Use
omi88 does not use cross-site tracking cookies, third-party advertising cookies, or cookies that share your browsing behaviour with advertising networks. We do not serve targeted advertisements on third-party websites based on your omi88 activity.
You can manage or delete cookies at any time through your browser settings. Note that disabling essential cookies may impair the functionality of the omi88 Platform, including the ability to log in or complete transactions.
10 Data Security
omi88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
- Encryption of sensitive data at rest within our database infrastructure.
- Strict access controls and role-based permissions for all staff with access to personal data.
- Regular third-party security audits and penetration testing conducted by independent cybersecurity firms.
- Two-factor authentication available for all registered accounts.
- Segregation of player funds in accounts separate from operational capital.
- Formal incident response procedures in the event of a confirmed data breach, including notification to affected Users where required.
Whilst omi88 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately if you suspect any unauthorised account activity.
11 User Rights
Subject to applicable data protection law and any overriding legal obligations (such as mandatory data retention requirements), you hold the following rights with respect to your personal data:
Right of Access
You may request a copy of the personal data we hold about you. We will respond within a reasonable timeframe and at no charge for standard requests.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You may also update certain account details directly via your profile settings.
Right to Erasure
You may request deletion of your personal data where we no longer have a lawful basis for its retention. Note that mandatory regulatory retention periods may prevent full immediate deletion.
Right to Restriction
You may request that we restrict the processing of your data in certain circumstances, such as where you contest its accuracy or have objected to processing pending verification of our legitimate grounds.
Right to Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to Object
You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds.
To exercise any of the above rights, please contact our support team via live chat or at the email address provided in Section 15 below. We may request additional verification before processing your request to confirm your identity.
12 Minors & Age Restriction
omi88 strictly prohibits the use of its Platform by any individual under the age of 21. We do not knowingly collect, store, or process personal data belonging to persons under 21 years of age.
Age verification is a mandatory step in the registration and withdrawal process. Where omi88 becomes aware, or has reasonable grounds to suspect, that personal data has been submitted by a minor, we will immediately suspend the relevant account, delete all associated personal data, and — where any funds have been deposited — handle the matter in accordance with our responsible gambling procedures and applicable regulatory guidance.
21+ Only: If you are a parent or guardian and believe a minor may have accessed the omi88 Platform, please contact our support team immediately. We take underage gambling extremely seriously and will act promptly on all such reports.
13 International Data Transfers
As an internationally operated platform, omi88 may transfer personal data to, and store personal data in, countries outside of Malaysia. Such transfers may include data processed by our game studio partners, cloud infrastructure providers, and KYC technology vendors located in various jurisdictions.
Where personal data is transferred internationally, omi88 ensures that appropriate safeguards are in place to protect the data in a manner consistent with the standards applicable under our licensing jurisdiction. These safeguards may include:
- Standard contractual clauses binding the recipient to equivalent data protection obligations.
- Transfers to jurisdictions recognised as providing an adequate level of data protection.
- Binding corporate rules where applicable within group company structures.
You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting us using the details in Section 15.
14 Amendments to This Policy
omi88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be published at omi88.cam/privacy-policy, with the "Last Updated" date revised accordingly.
Where amendments are material — for example, where we introduce a new purpose for processing your personal data or change the categories of third parties with whom data is shared — we will provide advance notice to registered Users via email or a prominent Platform notification before the changes come into effect.
Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revisions. If you do not agree with any amended terms, you may request closure of your account in accordance with the account termination procedures set out in our Terms & Conditions.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the omi88 Data Protection team through any of the following channels:
Live Chat
Available 24/7 on the omi88 Platform. The fastest channel for urgent data protection queries or self-exclusion requests.
Send data requests to:
[email protected]
(Plain text — not a clickable link)
Response Time
We aim to acknowledge all privacy-related requests within 2 business days and resolve them within 30 days of receipt, subject to verification requirements.
For matters relating to responsible gambling, self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page or contact our Player Protection team directly via live chat.
Your Privacy Matters to Us
omi88 is built on trust. If you have questions about how we handle your data, our support team is available 24/7. Players aged 21 and above are welcome to explore everything omi88 has to offer.
Play responsibly — 21+ only. For support resources, visit our Responsible Gambling page.