Privacy Policy os898 – Our Commitment to Personal Data Protection for Malaysian Players

Os898 ("we", "os898.net", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy describes os898's practices and procedures regarding the collection, use, disclosure, and protection of personal information you provide to us when using the os898 Sports Betting and online casino platform.

This policy applies to all users of the os898 platform, covering the os898.net website, mobile applications (where available), and all services provided by os898 — including Malaysia Super League and EPL football betting, BWF badminton, MPL MY e-sports, Live Casino, online slots, and any other services we offer.

Os898 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) – the primary legislation governing personal data protection in Malaysia. We take this responsibility seriously, as your trust in os898 is our most valued asset.

Os898 collects your personal data through several means. The following are the categories of data we collect:

Data You Provide Directly

• Registration information: Full name, valid Malaysian phone number, active email address, date of birth, and preferred username.
• Identity verification (KYC) information: A copy of your MyKad or valid Malaysian identity document, a selfie for facial verification (if required), and proof of address such as a Malaysian utility bill or bank statement.
• Financial information: Payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), recipient account name for withdrawals, and transaction records. We do not store credit or debit card numbers directly on our servers.
• Support communications: Any information you provide when contacting the os898 support team via live chat, email, or WhatsApp.

Automatically Collected Data

• Device data: IP address, web browser type, device operating system, device model, and unique device identifier.
• Usage data: Pages visited, session duration, matches and games of interest, betting history, and platform usage patterns.
• Location data: Approximate location based on IP address for the purpose of verifying permitted geographical regions.
• Cookie data: Information collected through cookies and similar tracking technologies – explained in further detail in Section 6.

Summary of Data Types & Collection Purposes

Os898 uses collected personal data solely for the following legitimate and stated purposes:

Platform Operations Purpose

• Creating and managing your os898 account, including identity verification and registration processing.
• Processing deposits in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as processing your withdrawal requests.
• Displaying your accurate betting history, account balance, and transaction records.
• Providing effective and responsive customer support in Bahasa Melayu.
• Sending important account-related notifications such as deposit confirmations, withdrawal processing updates, and security alerts.

Security & Compliance Purposes

• Verifying member identities to prevent fraud, money laundering, and unauthorised access.
• Monitoring account activity to identify suspicious patterns or the use of multiple accounts.
• Fulfilling reporting obligations to the relevant Malaysian authorities when required by law.
• Maintaining financial records in accordance with applicable accounting and tax requirements.

Product Improvement Purposes

• Analysing platform usage patterns to improve the interface, navigation, and overall user experience.
• Understanding the sports and games most popular among Malaysian players – including Malaysia Super League football, EPL, BWF badminton, MPL MY esports, and slots – to ensure relevant content delivery.
• Testing new features and measuring their effectiveness prior to full launch.

Marketing Purposes (With Your Consent)

• Sending information about os898 promotions, bonuses, and special offers via email, SMS, or push notifications — only where you have given consent to receive marketing communications.
• Sending game or betting recommendations that may interest you based on your preferences.

Os898 does not sell, rent, or trade members' personal data to third parties. However, there are limited situations in which we may need to share your data with certain parties:

Selected Service Providers

Os898 works with selected third-party service providers to handle the technical aspects of our platform's operations. This includes payment processors handling transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX; cloud service providers that securely store our data; and analytics service providers. All of these service providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by os898.

Legal Requirements

Os898 may be required to disclose your personal data to relevant Malaysian authorities when:

• Required by court order or valid legal process.
• Required to comply with legal obligations under Malaysian law.
• Required to protect public safety interests or prevent criminal activity.
• Required to defend os898's legitimate interests in legal proceedings.

Protecting your personal data is os898's highest priority. We implement a range of technical and organisational security measures to keep your data safe:

Technical Security Measures

• 256-bit SSL Encryption: All data transmitted between your browser and os898's servers is encrypted using 256-bit SSL — the same industry-leading standard used by Maybank2u and CIMB Clicks.
• Stored data encryption: Sensitive personal data such as identity information is stored in encrypted format within os898's database.
• Two-factor authentication (2FA): An additional security layer is available for all os898 accounts to prevent unauthorised access.
• 24/7 Monitoring: The os898 security team monitors our infrastructure around the clock to detect and respond to any security threats.
• Regular penetration testing: We conduct regular security assessments and penetration testing by independent security experts to identify and address vulnerabilities.

Organisational Security Measures

• Access to member personal data is restricted to os898 staff who require it solely to carry out their job responsibilities.
• All os898 staff who handle personal data are required to sign confidentiality agreements and undergo regular data protection training.
• A clear data security incident response procedure is established and tested on a regular basis.

The os898 platform uses cookies and similar tracking technologies to enhance your user experience and optimise platform performance. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use

Managing Cookies

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the core functionality of the os898 platform, including your ability to log in and access your account. Analytics and functional cookies can be turned off without impacting the platform's core features.

As an os898 member whose personal data we process, you have the following rights under Malaysia's Personal Data Protection Act 2010:

• Right to Access: You have the right to request and obtain a copy of the personal data we hold about you. This request can be submitted by email to support@os898.net.
• Right to Rectification: If you find that the personal data os898 holds about you is inaccurate, incomplete, or outdated, you have the right to request a correction promptly. You can update basic information directly through your os898 account settings.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes. You may unsubscribe via the link in our marketing emails or by contacting the os898 support team.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data from os898's systems. This right is subject to the record retention requirements set by Malaysian law and any applicable contractual obligations.
• Right to Restriction of Processing: You may request os898 to restrict the processing of your personal data in certain situations, such as when you are disputing the accuracy of that data.

To exercise any of the above rights, please contact the os898 Privacy Officer by email at support@os898.net with the subject line "PDPA Rights Request". We will respond to your request within 21 business days. We may require identity verification before processing any request to ensure the security of your data.

The os898 platform is strictly for individuals aged 18 and above. os898 does not knowingly collect or process personal data from individuals under the age of 18.

The os898 registration process requires age and identity verification. Should os898 discover that we have inadvertently collected data from an underage individual, we will promptly close the account in question and delete all associated data from our systems.

Parents or guardians who believe their minor child has registered an os898 account should contact us immediately at support@os898.net so that prompt action can be taken.

Your personal data may be processed and stored on servers located outside Malaysia as part of the global cloud infrastructure used by os898. However, os898 ensures that any such data transfers are carried out with adequate safeguards equivalent to the standards set by Malaysia's PDPA.

The safeguards we apply to protect your data during cross-border transfers include the use of standard data transfer agreements that bind our service providers to high data protection standards, as well as encryption of data in transit using the latest security protocols.

Os898 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active with os898 and for up to 7 years after account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's tax and accounting legal requirements.
• KYC and identity verification records: Retained for 5 years after account closure in accordance with anti-money laundering (AML) requirements.
• Support communication logs: Retained for 3 years for quality control and dispute resolution purposes.
• Analytics cookie data: Retained for a maximum of 2 years.

When personal data is no longer needed and there is no legal requirement to retain it, os898 will delete or anonymise that data in a secure and irreversible manner.

Os898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or technological developments. When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this page.
• Sending notifications to the email address registered to your os898 account.
• Displaying a clear notice within the os898 platform the next time you log in.

We encourage you to review this Privacy Policy periodically, especially whenever you make a deposit into your os898 account. Your continued use of the os898 platform after the effective date of any amendments constitutes your acceptance of the updated policy.

For any questions, concerns, or complaints about how os898 handles your personal data, please contact our os898 Privacy Officer at:

• Email: support@os898.net (with the subject line "Privacy Enquiry")
• Live Chat: Available 24/7 in Bahasa Melayu via the os898 platform
• WhatsApp: Contact our Bahasa Malaysia-speaking support team

Os898 is committed to responding to all privacy enquiries within 3 business days and resolving data protection complaints within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, the regulatory body overseeing PDPA compliance in Malaysia.