Privacy Policy oma55 — Member Personal Data Protection

Oma55 understands that privacy matters deeply to every one of our members. This Privacy Policy explains in detail how oma55 — which operates an online casino and slot games platform in Malaysia — manages the personal information you share with us when using the platform's services.

This policy applies to all users who access the oma55 platform via the official website, mobile app, or any other official channels operated by oma55. We encourage you to read this policy in full so you fully understand your rights and how we handle your data.

By registering or using the oma55 platform, you agree to the data collection and processing practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team for further assistance.

Oma55 collects various categories of information depending on how you interact with our platform. We only collect data that is genuinely necessary to provide a safe, fair, and seamless experience for all members.

We do not collect sensitive information such as biometric data, medical records, or religious information unless specifically required by law or a regulatory authority.

Every piece of data we collect has a clear and legitimate purpose. oma55 does not use your personal information for any purpose outside the scope of services you have consented to. Below is the complete list of our data processing purposes:

• Account Management: Create, verify, and maintain your member account, including required KYC processes.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Platform Security: Detect and prevent fraud, money laundering, unauthorized access, and other suspicious activities.
• Customer Support: Answer inquiries, resolve complaints, and provide effective technical support to members.
• Service Improvement: Analyze usage patterns in aggregate to improve platform performance and user experience.
• Account-Related Communications: Send important notifications such as transaction confirmations, security alerts, and policy updates.
• Legal Compliance: Fulfill reporting obligations to relevant regulatory authorities and legal bodies.
• Consent-Based Marketing: Send promotional information and special offers only to members who have given explicit consent.

Member data security is oma55's top priority. All personal information we collect is stored in data centers protected by multiple layers of security, including storage-level encryption, role-based access control, and 24/7 monitoring.

The technical and organizational measures we implement to protect your data include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and oma55's servers is encrypted using the highest industry standards, the same as those used by major banks in Malaysia.
• Data-at-Rest Encryption: Sensitive data such as financial information and KYC documents is stored in encrypted form on our servers.
• Strict Access Control: Only oma55 staff with a legitimate job requirement are permitted to access member personal data, and every access is logged for audit purposes.
• Two-Factor Authentication (2FA): All oma55 internal systems are protected with 2FA to prevent unauthorized access.
• Secure Data Backup: Member data is regularly backed up to a separate, secure location to ensure service continuity.
• Regular Penetration Testing: oma55's security infrastructure undergoes regular penetration testing by independent security experts.

Oma55 retains your personal data for as long as necessary to fulfil the processing purpose or as required by law. Generally, financial transaction records are kept for 7 years for regulatory compliance purposes, while inactive account data will be reviewed after 3 years.

Oma55 does not sell, rent, or disclose members' personal information to any third party for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties to ensure smooth platform operations and legal compliance:

• Payment Service Providers: Required transaction information is shared with FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and other payment providers used to process your deposits and withdrawals.
• Game Software Providers: Minimum necessary gaming data is shared with game software providers to ensure a smooth and fair gaming experience.
• KYC Verification Services: Your identity documents are shared with trusted third-party identity verification service providers for regulatory compliance purposes.
• Legal Authorities: oma55 will disclose required information to regulatory authorities, law enforcement bodies, or courts when mandated by law or court order.
• Professional Advisors: In certain cases, information may be shared with our auditors, lawyers, or financial experts who are bound by strict confidentiality obligations.

All third parties we work with are bound by data protection agreements ensuring they handle your information to security standards equal to or exceeding those of oma55.

The oma55 platform uses cookies and similar tracking technologies to enhance user experience, analyze platform performance, and ensure the security of your login session. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collect aggregate data on how users interact with the platform to help us identify and resolve technical issues.
• Functional Cookies: Remember your preferences and settings such as language, theme, and game choices to deliver a more personalized experience.
• Analytics Cookies: Helps us understand platform usage patterns in aggregate and anonymously for continuous improvement purposes.

You can manage cookie settings through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the oma55 platform. For more information on managing cookies, please refer to your web browser's help documentation.

As an oma55 member, you have clear and enforceable rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). oma55 fully respects these rights:

The oma55 platform is strictly for individuals aged 18 and above only. We do not intentionally collect, store, or process any personal information from children or minors.

During the registration and KYC verification process, we verify each member's age through valid identity documents. If oma55 discovers that a minor's personal information has been collected unintentionally, we will take immediate steps to delete the relevant data and close the account involved.

Oma55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever a material amendment is made, we will notify members via in-platform notifications and their registered email at least 14 days before the changes take effect.

We encourage you to revisit this Privacy Policy page periodically to stay informed of the latest way we handle your data. The "Updated" date at the top of this page reflects the most recent version of this policy.

Continued use of the oma55 platform after the effective date of any amendment will be considered your acceptance of the changes made, unless you submit a written objection to us before that date.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the oma55 Data Protection Officer (DPO) team is ready to assist you through the following channels:

• 24/7 Live Chat: The fastest way to get immediate assistance. Click the chat icon at the corner of the platform.
• Email: [email protected] — we respond within 1–2 business days.
• FAQ: Visit the FAQ us for answers to the most frequently asked questions about privacy and account security.

For formal complaints related to data protection, you may also refer to Malaysia's Department of Personal Data Protection (JPDP), the regulatory body overseeing PDPA compliance in the country.