oribet Privacy Policy

1. Who We Are

oribet ("oribet", "we", "us", "our") operates the online betting and gaming platform accessible at oribet.co (the "Platform"). oribet is the data controller responsible for the personal data collected through the Platform. This Privacy Policy applies to all users of the Platform, including registered account holders and visitors who browse the Platform without registering.

By accessing the oribet Platform, creating an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns about how oribet handles your personal data, please contact us using the details set out in Section 12.

2. Personal Data We Collect

oribet collects personal data from you in the following ways: directly when you provide it to us during account registration or account use; automatically when you interact with the Platform; and occasionally from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Malaysian MyKad number or passport number) collected during account registration and KYC verification.
• Contact data: Email address and Malaysian mobile number provided at registration and used for account communications and OTP delivery.
• Financial data: Payment method details (e.g., bank account identifiers, e-wallet account references for Touch n Go eWallet, Boost, or DuitNow QR) provided when making deposits or requesting withdrawals. oribet does not store full payment card numbers.
• Account credentials: Your chosen username and hashed password. oribet never stores passwords in plaintext.
• Communications data: The content of any communications you send to oribet support via live chat, email, or other channels.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, device type and operating system, screen resolution, and referring URL.
• Usage data: Pages visited, features used, bet history, session duration, game results, and Platform navigation patterns.
• Cookie data: Data collected via cookies and similar tracking technologies as described in Section 5.
• Location data: Approximate geographic location derived from your IP address, used for access restriction compliance and fraud prevention.

2.3 Data from Third Parties

• Identity verification providers: Where oribet uses a third-party KYC service to verify your identity, that provider may share verification outcomes and associated identity data with oribet.
• Payment processors: Payment confirmation data and transaction references are shared with oribet by our payment processing partners to facilitate deposit and withdrawal processing.
• Fraud prevention services: oribet may receive risk signals from fraud prevention providers to protect the integrity of the Platform.

3. How oribet Uses Your Personal Data

oribet uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Identity, contact, credentials
Processing deposits and withdrawals in MYR	Financial, identity
KYC and age verification (21+ compliance)	Identity, date of birth
Anti-money laundering (AML) compliance	Identity, financial, usage
Fraud prevention and Platform security	Technical, usage, location
Responsible gaming monitoring	Usage, financial
Customer support	Identity, contact, communications
Personalisation of Platform experience	Usage, technical
Marketing and promotional communications (with consent)	Contact, usage
Legal and regulatory compliance	All categories as required

4. Legal Basis for Processing

oribet processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the oribet Terms & Conditions, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required for compliance with applicable laws and regulations, including AML obligations, KYC requirements, and age verification.
• Legitimate interests: Processing conducted in oribet's legitimate interests, including fraud prevention, Platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Where oribet relies on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting oribet support or updating your account preferences.

5. Cookies & Tracking Technologies

The oribet Platform uses cookies and similar tracking technologies to provide a functional and personalised experience. Cookies are small text files stored on your device that help the Platform remember your preferences and session state.

5.1 Types of Cookies Used by oribet

• Essential cookies: Required for the Platform to function correctly, including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to understand how users interact with the oribet Platform — which pages are visited most frequently, where users navigate from, and how long sessions last. This data is aggregated and anonymised.
• Functional cookies: Used to remember your preferences such as language settings, preferred game categories, and display options.
• Marketing cookies: Used with your consent to deliver relevant promotional content and to measure the effectiveness of oribet's marketing campaigns. You may opt out of marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the oribet Platform normally.

6. Data Sharing and Disclosure

oribet does not sell your personal data to third parties. We share your data only in the following circumstances:

• Service providers: oribet shares data with carefully selected third-party service providers who assist in operating the Platform, including payment processors (for MYR transactions via Maybank FPX, Touch n Go eWallet, Boost, CIMB, Public Bank, and DuitNow QR), identity verification providers, hosting and infrastructure providers, and customer support platforms. All service providers are contractually obligated to process data only as directed by oribet and to maintain appropriate security standards.
• Gaming software providers: oribet shares necessary session data with licensed game providers to enable gameplay. This is limited to session tokens and does not include your full personal profile.
• Regulatory and law enforcement authorities: oribet will disclose personal data to competent authorities where required to do so by applicable law, court order, or regulatory directive. This includes AML-related disclosures.
• Responsible gaming bodies: Where you have registered for self-exclusion, oribet may share the minimum data necessary with recognised responsible gaming registers to give effect to your self-exclusion request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Data Retention

oribet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, and to comply with our legal obligations. Specifically:

• Account data is retained for the duration of your registration with oribet and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction records are retained for a minimum of seven (7) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with oribet's data destruction procedures.

8. Data Security

oribet implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the oribet Platform — the same standard used by Malaysian banking applications including Maybank2u and CIMB Clicks.
• Hashed and salted password storage. oribet never stores passwords in retrievable plaintext form.
• Two-factor authentication (2FA) for all oribet account logins, with OTP delivery to your registered Malaysian mobile number.
• Access controls limiting internal access to personal data to authorised personnel on a strict need-to-know basis.
• Regular security audits and penetration testing of Platform infrastructure.
• Segregation of player funds from operational accounts.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. oribet cannot guarantee the absolute security of data transmitted over the internet. In the event of a data breach that is likely to result in a risk to your rights, oribet will notify you in accordance with applicable data protection law.

9. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by oribet:

• Right of access: You may request a copy of the personal data oribet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most account details directly from your oribet account settings dashboard.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to oribet's legal obligations to retain records.
• Right to restriction of processing: You may request that oribet restricts the processing of your personal data in certain circumstances.
• Right to data portability: You may request that oribet provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to oribet processing your personal data for direct marketing purposes at any time, with immediate effect.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact oribet support via live chat or using the support email address displayed in the footer of the Platform. oribet will respond to all valid requests within 30 calendar days. We may need to verify your identity before processing a request.

10. Children's Privacy

The oribet Platform is strictly intended for users who are 21 years of age or older. oribet does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the oribet Platform, please contact our support team immediately.

11. Changes to This Privacy Policy

oribet may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this page. Where changes are material, oribet will notify registered users via the email address associated with their account. Your continued use of the oribet Platform following any update constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way oribet handles your personal data, please contact the oribet data protection team via live chat on the Platform, available 24/7. The oribet support email address is displayed in the footer of every page on this Platform as plain text. Please do not send sensitive personal documents via unencrypted email — for KYC submissions, use the secure document upload facility within your oribet account.