Privacy Policy – omcy8 Data Protection Statement

1 Introduction

This Privacy Policy ("Policy") describes the data processing practices of omcy8 ("omcy8", "we", "us", "our") in connection with the online casino and sports betting platform operated at https://omcy8.cam ("Platform") and all associated services.

omcy8 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality. This Policy applies to all individuals who access the Platform, register an Account, or interact with omcy8's services — including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

This Policy should be read in conjunction with omcy8's Terms & Conditions, which govern the overall use of the Platform and form a binding agreement between you and omcy8.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, address, email address, phone number, payment details, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or destruction.
• "Data Subject" — the individual to whom Personal Data relates; in the context of this Policy, primarily the registered Player.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. omcy8 acts as the Data Controller for all player data collected through the Platform.
• "Third Party" — any entity other than omcy8 and the Data Subject, including payment processors, game studios, KYC verification providers, and analytics services.
• "Cookies" — small text files stored on a user's device by a web browser, used to recognise returning visitors and track session activity.
• "KYC" — Know Your Customer; the identity and age verification process required under omcy8's anti-money-laundering (AML) obligations.

3 Data Controller

omcy8 operates as the Data Controller for Personal Data collected through the Platform. omcy8 operates under an international licensing framework applicable to online gaming operators. Registered office: international jurisdiction.

For all data protection enquiries, including requests to exercise your rights under this Policy, please contact us using the details set out in Section 16 (Contact Us) of this Policy.

4 Personal Data We Collect

omcy8 collects only the data that is necessary to provide the Services, comply with legal and regulatory obligations, and improve the Platform experience. The categories of Personal Data we collect are as follows:

5 How We Collect Personal Data

omcy8 collects Personal Data through the following channels:

5.1 Directly from You

When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your Account settings, you provide Personal Data directly to omcy8.

5.2 Automatically

When you access the Platform, our systems automatically collect Technical Data and Usage Data through server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you are a registered Player or a guest visitor.

5.3 From Third Parties

omcy8 may receive Personal Data from third parties in the following circumstances:

• KYC and identity verification service providers who cross-reference the identity information you submit;
• Payment processors who confirm the status and details of deposit and withdrawal transactions;
• Fraud prevention and AML screening services that provide risk assessments based on publicly available or shared data;
• Analytics providers who aggregate and report on anonymised usage patterns across the Platform.

6 Purpose of Processing & Legal Basis

omcy8 processes Personal Data only for specified, explicit, and legitimate purposes. The table below sets out our primary processing activities, the purpose of each, and the legal basis on which we rely:

7 Data Sharing & Disclosure

omcy8 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers to support platform operations, including payment processors (handling MYR transactions via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, DuitNow, and FPX), KYC verification providers, fraud prevention services, game content providers, customer support tools, and cloud infrastructure providers. These parties process data only on our instructions and under contractual confidentiality obligations.

7.2 Regulatory and Law Enforcement Authorities

omcy8 may disclose Personal Data to competent regulatory, governmental, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive. We will notify affected Players of such disclosures where legally permissible.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of omcy8's business assets, Player Personal Data may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified in advance where reasonably practicable, and the receiving entity will be required to honour the terms of this Policy.

7.4 Consent-Based Sharing

With your explicit consent, omcy8 may share your Personal Data with additional third parties for purposes not described in this Policy. You may withdraw such consent at any time by contacting us.

8 International Data Transfers

omcy8 operates under an international licensing framework and works with service providers located in various countries. As a result, your Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, omcy8 implements appropriate safeguards to ensure that your data is afforded a comparable level of protection, including contractual data protection clauses with receiving parties and assessment of the recipient country's data protection standards.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside your country of residence as described in this clause.

9 Data Retention

omcy8 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the Account relationship and for a minimum of five (5) years after Account closure, to satisfy AML and gaming licence compliance requirements.
• Financial transaction records: Retained for a minimum of five (5) to seven (7) years in accordance with international financial record-keeping standards.
• KYC documentation: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer support records: Retained for up to three (3) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing data: Retained until you withdraw consent or for a period of two (2) years of inactivity, whichever is earlier.
• Technical and usage logs: Typically retained for twelve (12) to twenty-four (24) months for security, analytics, and platform improvement purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with omcy8's data disposal procedures.

10 Cookies & Tracking Technologies

10.1 What Cookies We Use

omcy8 uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as language selection, currency display (MYR), and login status. These improve your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, session duration, and device type — to help us improve performance and content.
• Marketing Cookies: Used to track the effectiveness of promotional campaigns and to personalise bonus offers where you have consented to marketing communications.

10.2 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Your continued use of the Platform after being presented with our cookie notice constitutes acceptance of our use of strictly necessary cookies.

11 Your Data Rights

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your Personal Data held by omcy8:

To exercise any of these rights, please contact omcy8 using the details in Section 16. We will respond to all verified requests within thirty (30) days. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, with prior notification.

12 Children's Privacy

The omcy8 Platform is strictly intended for individuals aged 21 years and above. omcy8 does not knowingly collect Personal Data from persons under the age of 21. If we become aware that Personal Data has been collected from an individual under 21, we will immediately suspend the relevant Account and take steps to securely delete the data. If you believe that a person under 21 has submitted Personal Data to the Platform, please contact us immediately at the details provided in Section 16.

13 Security Measures

omcy8 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the Platform;
• Encrypted storage of sensitive Personal Data and financial records at rest;
• Access controls limiting staff access to Personal Data on a strict need-to-know basis;
• Regular security audits and penetration testing of Platform infrastructure;
• Segregated player fund accounts ensuring your deposited MYR balance is held separately from omcy8's operational funds;
• Two-factor authentication available to Players for additional Account security.

While omcy8 takes all reasonable steps to protect your data, no data transmission over the internet is completely secure. You acknowledge that any transmission of Personal Data to the Platform is at your own risk, and you are responsible for maintaining the security of your Account credentials.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, omcy8 will notify affected individuals without undue delay and in accordance with applicable notification obligations.

14 Third-Party Links & Services

The omcy8 Platform may, in limited circumstances, contain references to third-party services such as game studios or payment providers. omcy8 is not responsible for the privacy practices, data processing activities, or content of any third-party services. We encourage you to review the privacy policies of any third-party service you choose to interact with. This Policy applies solely to data processed by omcy8 through the Platform.

15 Policy Amendments

omcy8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. Material changes will be communicated to registered Players via email notification or a prominent notice on the Platform at least seven (7) days prior to the changes taking effect, except where immediate implementation is required by law or regulatory obligation.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. We recommend that you review this Policy periodically. The "Last Reviewed" date at the top of this page will indicate when the most recent update was made.

16 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how omcy8 handles your Personal Data, please contact our Data Protection team. All privacy-related enquiries are handled in English, Bahasa Melayu, and Mandarin, available 24 hours a day, 7 days a week.

omcy8 aims to acknowledge all formal data rights requests within two (2) business days and to provide a substantive response or decision within thirty (30) days. Where a request requires an extended review period, we will notify you of the reason and the expected timeline.