1 Introduction
oma55 ("oma55", "we", "us" or "our") operates the website located at https://oma55.click and all associated pages, services and features (collectively, the "Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure and protection of personal information ("Personal Data") provided by or collected from individuals ("you", "your" or "User") who visit or interact with the Platform.
By accessing the Platform or creating an oma55 account, you acknowledge that you have read and understood this Policy and consent to the processing of your Personal Data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
This Policy is to be read alongside the oma55 Terms and Conditions and Responsible Gambling Policy, both of which are incorporated by reference. In the event of any conflict between documents, these specific policy terms govern data privacy matters.
Malaysian users: oma55 serves players aged 21 and above only. Personal Data submitted during account registration or verification is processed for the purposes described in this Policy. We do not knowingly collect or retain data from persons under the age of 21.
2 Definitions
For the purposes of this Policy, the following terms have the meanings set out below:
- "Account" means a registered user profile on the Platform.
- "Controller" means the entity that determines the purposes and means of processing Personal Data, which for this Platform is oma55.
- "Cookies" means small text files stored on your device by the Platform to facilitate navigation, preferences and analytics.
- "KYC" means Know Your Customer identity verification, as described in the oma55 Terms and Conditions.
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer and deletion.
- "Third Party" means any person or entity other than you and oma55.
- "User" means any individual who accesses or uses the Platform.
3 Information We Collect
Depending on how you interact with the Platform, oma55 may collect the following categories of Personal Data:
3.1 Identity and Contact Information
- Full legal name as it appears on your identity document.
- Date of birth and age confirmation data.
- Email address and, where provided, phone number.
- Residential address including city, postcode and country.
3.2 Identity Verification Documents
- Copies of government-issued identification such as Malaysian MyKad, driving licence or passport.
- Proof of address documents such as utility bills or bank statements.
- Selfie photographs or video verification images submitted during KYC review.
3.3 Financial and Payment Information
- Details of payment instruments used for deposits and withdrawals, including e-wallet account references (e.g., Touch 'n Go eWallet, GrabPay, Boost), bank account identifiers (e.g., Maybank, CIMB, Public Bank, Hong Leong) and cryptocurrency wallet addresses where applicable.
- Transaction history including deposit amounts, withdrawal amounts, dates and payment method used.
- Account balance and gaming activity records required for regulatory and fraud-prevention purposes.
3.4 Technical and Device Data
- IP address and approximate geolocation data derived from network connection.
- Browser type, version and operating system.
- Device identifiers and screen resolution data.
- Pages visited, session duration, click patterns and referral source.
3.5 Communications Data
- Content of messages sent to oma55 support via email or live chat, including any attachments you choose to provide.
- Records of support interactions maintained for quality assurance and complaint resolution purposes.
3.6 Responsible Gambling Data
- Records of deposit limits, session limits, loss limits, cooling-off periods and self-exclusion requests made by or on behalf of the User.
4 How We Collect Information
oma55 collects Personal Data through the following means:
4.1 Information You Provide Directly
When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support or participate in a promotion, you provide Personal Data directly to us. All information submitted during registration should be accurate and current.
4.2 Automatically Collected Data
When you access the Platform, our systems automatically record technical data including your IP address, device type, browser settings, session timestamps and interaction patterns. This data is collected using standard server logging technology and, where applicable, Cookies described in Clause 10.
4.3 Third-Party Sources
oma55 may receive supplementary identity or fraud-risk information from licensed identity verification service providers and payment processors engaged to support KYC and transaction screening. We do not purchase Personal Data from data brokers for marketing purposes.
5 How We Use Your Information
oma55 processes Personal Data for the specific purposes described in the table below.
| Purpose | Description |
|---|---|
| Account administration | Creating, maintaining and securing your oma55 Account, including password resets and account recovery. |
| Identity verification (KYC) | Confirming your identity and age before processing withdrawals or where triggered by account review thresholds. |
| Payment processing | Facilitating deposits and withdrawals through supported Malaysian payment methods and cryptocurrency networks. |
| Fraud and security prevention | Detecting and investigating suspicious account activity, duplicate registrations, bot behaviour and financial crime indicators. |
| Responsible gambling compliance | Recording and enforcing deposit limits, self-exclusions and other player protection measures requested by the User or required by applicable standards. |
| Customer support | Responding to enquiries, resolving disputes and maintaining records of communication for quality review. |
| Platform improvement | Analysing aggregate usage patterns to improve navigation, page performance and content relevance. |
| Legal and regulatory obligations | Complying with applicable record-keeping, anti-money laundering screening and data disclosure obligations. |
oma55 does not use Personal Data to make fully automated decisions that produce significant legal effects without any human review. Automated screening tools used in fraud detection are subject to human oversight before any Account action is taken.
6 Legal Basis for Processing
Where data protection law requires a legal basis for processing Personal Data, oma55 relies on one or more of the following:
- Contractual necessity: Processing required to create and administer your Account, process payments and provide the Platform services you have requested.
- Legal obligation: Processing required to comply with applicable laws including anti-money laundering requirements, identity verification obligations and financial record-keeping standards.
- Legitimate interests: Processing carried out in furtherance of oma55's legitimate interests in preventing fraud, maintaining Platform security, improving service quality and communicating relevant account information to Users, where those interests are not overridden by your privacy rights.
- Consent: Where we seek to send you optional communications or use non-essential Cookies, we will request your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
7 Data Sharing and Disclosure
oma55 does not sell, rent or trade your Personal Data to any third party for marketing purposes. We may share Personal Data only in the following limited circumstances:
7.1 Service Providers
We engage carefully selected third-party processors to provide services including payment processing, identity verification, fraud screening, customer support infrastructure and platform analytics. These processors are permitted to use Personal Data only for the specific purpose for which they are engaged and under appropriate contractual data protection obligations.
7.2 Legal and Regulatory Requirements
oma55 may disclose Personal Data to law enforcement agencies, regulatory authorities or courts where required by a lawful order, judicial warrant or applicable statutory obligation. We will, where legally permitted to do so, notify the relevant User of any such mandatory disclosure.
7.3 Business Transfers
In the event of a merger, acquisition or transfer of assets involving oma55, Personal Data held by us may form part of the transferred assets. Users will be notified of any material change to the Controller's identity via a Platform announcement or direct communication, and this Policy will be updated to reflect any new Controller.
7.4 Protection of Rights
We may disclose Personal Data where we reasonably believe disclosure is necessary to protect oma55's legal rights, investigate suspected fraud or enforce the oma55 Terms and Conditions.
oma55 will never ask you to share your password, one-time security codes or full payment card details via email or live chat. If you receive such a request from anyone claiming to represent oma55, treat it as fraudulent and contact support immediately using the details in Clause 16.
8 Data Retention
oma55 retains Personal Data only for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by applicable law or regulatory obligation. The following indicative periods apply:
- Account and KYC records: Retained for the duration of your active Account and for a minimum period of five years following Account closure, to support anti-money laundering compliance and dispute resolution.
- Transaction records: Retained for a minimum of five years from the date of the transaction in accordance with standard financial record-keeping expectations.
- Support communications: Retained for up to three years from the date of the interaction unless the subject matter requires longer retention for dispute or investigation purposes.
- Technical and device data: Retained in aggregated or anonymised form for platform analysis; individually identifiable technical logs are typically retained for up to twelve months.
- Responsible gambling records: Records of self-exclusion, deposit limits and cooling-off periods are retained indefinitely following Account closure to prevent re-registration by excluded individuals.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identified individual.
9 Data Security
oma55 implements reasonable technical and organisational security measures to protect Personal Data from unauthorised access, disclosure, alteration or destruction. These measures include, but are not limited to:
- Encrypted data transmission using HTTPS across all Platform pages.
- Access controls that limit Personal Data visibility to staff with a legitimate operational need.
- Regular review of access logs and system security configurations.
- Contractual data security obligations imposed on third-party processors.
No electronic transmission or storage system can guarantee absolute security. You remain responsible for maintaining the confidentiality of your Account credentials and for notifying oma55 promptly if you suspect any unauthorised access to your Account.
When submitting identity documents during KYC, only upload files through the official oma55 secure upload channel. Do not email sensitive documents unless oma55 support has provided you with an encrypted submission method. Cover any sensitive identity number digits where the verification process permits this.
11 Your Rights
Subject to applicable data protection law and any overriding legal obligations, you may exercise the following rights in respect of your Personal Data held by oma55. Requests should be submitted in writing to the contact address in Clause 16.
Right of Access
You may request confirmation of whether we hold your Personal Data and, if so, a copy of that data together with relevant processing information.
Right to Rectification
You may request correction of inaccurate or incomplete Personal Data. Account details can often be updated directly through Account settings.
Right to Erasure
You may request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to overriding legal retention obligations.
Right to Restrict Processing
You may ask us to restrict processing of your Personal Data in certain circumstances, such as while the accuracy of data is being verified.
Right to Data Portability
Where processing is based on consent or contract, you may request your Personal Data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate a compelling legitimate ground that overrides your rights.
We will respond to all valid rights requests within a reasonable period, typically within 30 calendar days of receipt of a complete request. We may need to verify your identity before processing a request. Where we decline a request, we will provide a written explanation.
12 Minors and Age Verification
The Platform is strictly intended for adults aged 21 and above. oma55 does not knowingly collect Personal Data from persons under the age of 21. Age verification is carried out as part of the account registration and KYC process.
If we become aware that an Account has been registered by or on behalf of a person under the age of 21, we will close that Account, void any associated activity and securely delete or anonymise the relevant Personal Data, except where retention is required by applicable law to report or document the incident.
If you believe a minor may have accessed the Platform using your Account or another person's credentials, please notify oma55 support immediately using the contact details in Clause 16.
13 International Data Transfers
In the course of delivering Platform services, Personal Data may be transferred to and processed in countries other than Malaysia. This may occur when engaging third-party service providers such as KYC verification platforms, payment processors or cloud hosting services operating in other jurisdictions.
Where Personal Data is transferred internationally, oma55 takes reasonable steps to ensure that the recipient organisation provides an adequate level of data protection consistent with the principles set out in this Policy, including through appropriate contractual safeguards where required.
14 Third-Party Links
The Platform may contain references to payment providers, sports organisations or other services relevant to Malaysian users. Any link to a third-party website, if present, is provided for informational context only. oma55 does not control third-party websites or their privacy practices and accepts no responsibility for their content or data handling. If you follow a link to an external site, you should review that site's privacy policy before submitting any personal information.
15 Amendments to This Policy
oma55 may update this Privacy Policy from time to time to reflect changes in our data processing practices, service developments or applicable legal requirements. The revised Policy will be published on this page with an updated "Last Updated" date at the top of the document.
Where changes are material, we will use reasonable endeavours to notify active Account holders via the Platform notification system or by email to the address registered on the Account. Your continued use of the Platform following publication of a revised Policy constitutes acceptance of the updated terms.
16 Contact Us
If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to raise a concern about how your Personal Data is handled by oma55, please contact us using the details below.
Support email: [email protected]
This email address is provided as plain text only. Please describe your request clearly and include your registered Account email address so we can verify your identity before processing the request. We target an initial response within 24 hours for urgent matters and within 30 calendar days for formal data subject rights requests.
Support is available 24 hours a day, 7 days a week. Do not send identity documents to this address without first receiving a secure upload link from the oma55 support team.