Privacy Policy OJA89 – Malaysia Member Data Protection

OJA89 is an online Sports Betting and casino platform operating for the Malaysian market. We understand that your trust in us depends largely on how we handle the personal information you share with us. This Privacy Policy is written to explain clearly and honestly how OJA89 manages your data.

By registering as an OJA89 member, making a deposit, placing a bet, or simply browsing our platform, you agree to the collection and use of your personal information as described in this document. If you do not agree with any part of this policy, please contact the OJA89 support team before continuing to use the platform.

This OJA89 Privacy Policy covers all services we provide through the oja89.best website, including Sports Betting, live casino games, online slots, e-sports, Virtual Sports, live matches, and all other features available on our platform.

OJA89 collects various types of information from members depending on how they use the platform. Below is a detailed breakdown of what we collect and why.

OJA89 does not directly collect credit or debit card numbers. All payments are processed through authorised third-party payment providers, including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX via Maybank2u and CIMB Clicks. OJA89 only receives confirmation that a payment has been successfully completed — not your full card or account details.

Every piece of data we collect from you as an OJA89 member is used for a specific, legitimate purpose. We do not use your data for anything unrelated to the services you use.

• Account Management: Your identity and contact data is used to create and manage your OJA89 account, including processing logins, OTP verification, and profile updates.
• Transaction Processing: Relevant payment information is used to process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX, as well as withdrawals to your Malaysian bank account or eWallet.
• Identity Verification (KYC): Where required by legal compliance or to protect your account, OJA89 may request identity verification using your identification card number or other supporting documents.
• Fraud Detection and Security: Technical data such as IP addresses and device information is used to detect suspicious activity, unauthorised login attempts, and fraud patterns that could compromise your account.
• Personalise Your Experience: Usage data such as football betting history, preferred casino games, and active hours is used to personalise recommendations and surface more relevant content for you on OJA89.
• Responsible Gaming Compliance: OJA89 uses your gameplay pattern data to monitor signs of unhealthy gambling behaviour and may proactively reach out to you if any concerning indicators are detected.
• Service Communications: We send important notifications regarding your account, transaction confirmations, security alerts, and relevant terms updates to your registered email or phone number.
• Legal Compliance: Member data may be required to fulfil anti-money laundering (AML) compliance obligations and other legal requirements applicable to OJA89's operations.

OJA89 does not sell, lease, or trade members' personal data to any third party for their own marketing purposes. This is a principle we will not compromise on. However, there are limited situations where we need to share data with certain parties in order to deliver our services.

• Payment Providers: OJA89 shares the necessary information with authorised payment providers — including DuitNow, Touch 'n Go eWallet, GrabPay, and FPX providers — to process your deposits and withdrawals. These providers are subject to their own privacy policies and security standards.
• Game Providers: To operate live casino and slots games, the necessary game session information is shared with providers such as Evolution, Pragmatic Play, Microgaming, and NetEnt. This does not include your full identity data.
• Legal Authority: OJA89 will disclose member data to the relevant authorities where required by Malaysian law, a valid court order, or as part of a recognised financial crime investigation.
• Technical Service Providers: Technical infrastructure providers — such as cloud computing services and fraud detection systems — may process certain data as part of the services they provide to OJA89. They act as data processors under OJA89's direction and are subject to strict data protection agreements.

OJA89 invests seriously in security infrastructure to protect members' personal data from unauthorised access, use, disclosure, modification, or destruction. The following are the key security measures we have in place.

• 256-bit SSL Encryption: All communication between your browser or app and OJA89's servers is encrypted using TLS/SSL protocol with 256-bit keys. This means that even if someone were to intercept your network traffic, the data transmitted cannot be read.
• Data-at-Rest Encryption: Sensitive data stored in OJA89's databases — including personal information and financial details — is stored in encrypted form using industry-standard encryption algorithms.
• Internal Access Controls: Access to member data within OJA89's internal systems is restricted to staff who require it to perform their duties, based on the principle of least privilege.
• Continuous Security Monitoring: OJA89's systems are monitored 24/7 to detect any unauthorised access attempts, traffic anomalies, or signs of a cyberattack. Our security team responds promptly to any alerts.
• Regular Security Audits: OJA89 conducts regular security audits and penetration testing by independent parties to identify and address any vulnerabilities before they can be exploited.

OJA89 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the OJA89 website. Below are the types of cookies we use.

• Essential Cookies (Required): These cookies are necessary for the core functions of the OJA89 platform, such as maintaining your login session, remembering your language preference, and ensuring session security. Without them, the platform cannot operate properly and they cannot be disabled.
• Performance & Analytics Cookies: We use analytics cookies to understand how members use the OJA89 platform — which pages are visited most, how long sessions last, and where users encounter difficulties. This data is used in aggregate form to improve the platform.
• Functional Cookies: These cookies allow OJA89 to remember your preferences — such as display language, text size, and game display settings — so you don't have to reconfigure them each time you log in.
• Session Cookies: A temporary cookie that is automatically deleted when you close your web browser. It is used to manage your current session on the OJA89 platform.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect how the OJA89 platform functions. For guidance on managing cookies in Chrome, Safari, or Firefox, refer to the help section of your respective browser.

As an OJA89 member and under Malaysia's Personal Data Protection Act 2010, you have several rights regarding the personal data we hold about you. OJA89 fully respects and supports these rights.

To exercise any of the rights above, please contact the OJA89 privacy team by email at support@oja89.best with the subject line "Privacy Rights Request", along with your account number and details of your request. We will respond within 14 business days.

The OJA89 platform is strictly for individuals aged 21 and above. OJA89 does not knowingly collect, process, or store any personal data from individuals below the stipulated age limit.

The OJA89 registration process requires age verification. If OJA89 discovers that personal data of an underage individual was inadvertently collected due to false information provided during registration, we will immediately delete the account and remove all associated data.

In the course of operating OJA89, your personal data may be processed or stored on servers located outside Malaysia — for example, by game providers such as Evolution or Pragmatic Play, which operate their live casino servers across various global locations.

When such data transfers occur, OJA89 ensures that protection equivalent to or greater than that provided under Malaysian law is applied to your data. This is achieved through data transfer agreements that comply with international standards and bind data recipients to strict protection requirements.

OJA89 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal requirements. Below is a general guide to data retention periods at OJA89.

• Active Account Data: For as long as your OJA89 account remains active, we retain all personal data necessary to deliver our services to you.
• Financial Transaction Data: Deposit and withdrawal transaction records are retained for a minimum of seven years from the date of the transaction, in line with Malaysian financial compliance and tax law requirements.
• Data After Account Closure: When you close your OJA89 account, core identity data and transaction records are retained for the period required by law (typically five to seven years), after which the data will be permanently deleted or anonymised.
• Communication Data: Correspondence records with the OJA89 support team are retained for two years for reference and dispute resolution purposes.
• Security Log Data: Technical logs used for fraud detection and security are retained for 90 days and then automatically deleted.

OJA89 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, evolving legal requirements, or changes to the services we offer. We are committed to keeping you informed of any significant changes.

• Any significant changes to this Privacy Policy will be communicated to you via your registered email or through an in-platform OJA89 notification at least 14 days before the changes take effect.
• Minor changes that do not materially affect your privacy rights may be enforced without prior notice; however, the update date at the top of this document will always reflect the latest version.
• Continued use of the OJA89 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
• The latest version of OJA89's Privacy Policy is always available on this page. You are encouraged to review it periodically.

If you have any questions, concerns, or requests regarding OJA89's Privacy Policy or how we handle your personal data, please do not hesitate to reach out. Our privacy team is here to help.

Email our OJA89 support team at support@oja89.best with the subject line "Privacy Enquiry" so it can be directed promptly to the relevant officer. We aim to respond to all privacy-related enquiries within 48 business hours.

For formal requests relating to privacy rights — such as data access, correction, or deletion — please include your OJA89 account number, full name, and specific details of your request to help us process it more quickly and accurately.