Ora78 Privacy Policy – Your Personal Data Protection

Welcome to the ora78 Privacy Policy. This document is a formal agreement between you as a platform user and ora78 as the responsible data controller. We understand how important privacy is in today's digital age, especially when it involves financial and personal information.

Ora78 operates as an online gaming platform offering live casino, video slots, fish shooting games, and sports betting to players in Malaysia. In providing these services, we necessarily collect certain personal information for legitimate and transparent purposes. We do not collect more data than required, and we never sell or rent your information to any third party for commercial purposes.

This policy is written in clear language for our players in Malaysia. By registering and using the ora78 platform, you agree to the terms set out in this document. If you do not agree with any part of this policy, we encourage you to discontinue use of the platform and contact us for further clarification before making any decision.

Ora78 collects various types of information depending on how you interact with our platform. Data collection falls into two main categories: information you provide directly, and information collected automatically while you use the platform.

Information You Provide Directly

• Identity Information: Full name as per identity card, identity card number (MyKad), date of birth, gender, and nationality.
• Contact Information: Mobile phone number, email address, and current residential address.
• Financial Information: Bank account number, bank name, and registered digital wallet details (Touch 'n Go eWallet, GrabPay) for deposit and withdrawal purposes.
• KYC Verification Documents: A copy of your MyKad, passport, or other official identity document requested during the Know Your Customer process.
• Account Information: Username, hashed password, and your account settings.

Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type, and screen resolution.
• Session Data: Login and logout times, session duration, games played, and wagering values.
• Transaction Data: Deposit history, withdrawals, claimed bonuses, and win records.
• Geolocation Data: Approximate location based on IP address for legal compliance purposes.
• Cookies and Tracking: Data collected through cookies, pixels, and similar tracking technologies — detailed further in Section 6.

Summary of Data Types Collected

The information we collect is used solely for legitimate purposes directly related to the provision of ora78 services. We do not use your data for unrelated purposes without first obtaining your consent.

• Service Provision: Registering and managing your account, processing deposits and withdrawals, and enabling access to all games and platform features.
• Identity Verification (KYC): Verifying your identity to comply with anti-money laundering (AML) and fraud prevention legal requirements.
• Platform Security: Identifying and investigating suspicious activity, preventing unauthorized access, and protecting your account from fraud.
• Customer Support: Handling your inquiries, complaints, and support requests faster and more accurately.
• Service Communications: Sending important notifications regarding your account, transactions, security updates, and policy changes.
• Targeted Marketing (with consent): Sending bonus offers, promotions, and relevant new game information based on your interests — only if you have consented to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and recommending appropriate self-control tools.
• Analytics & Improvement: Analyzing platform usage to improve the user experience, introduce new features, and optimize performance.
• Legal Compliance: Complying with legal obligations, regulatory directives, and applicable court orders.

Every personal data processing activity carried out by ora78 is based on at least one valid legal basis. The following are the bases we rely on:

• Contract Execution: Processing required to fulfil our contractual obligations to you — such as processing transactions, managing accounts, and providing access to games.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML requirements, financial reporting, and regulatory directives.
• Legitimate Interest: Processing for fraud prevention, platform security, internal analytics, and service improvement — where these interests do not override your privacy rights.
• Consent: For marketing communications and non-essential cookies, we only process your data based on explicit consent, which can be withdrawn at any time.

Ora78 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, there are limited situations where we need to share your information with specific parties:

Trusted Third-Party Service Providers

We work with carefully selected service providers to support platform operations, including:

• Payment Processors: To securely process deposit and withdrawal transactions.
• Game Providers: Game development companies integrated with the ora78 platform receive only the minimum game session data required.
• KYC Verification Services: Authorised third-party providers that assist us in verifying player identities.
• Computing & Hosting Services: Cloud infrastructure providers that store platform data with high-level encryption.
• Analytics Tools: Web analytics services that help us understand user behaviour — this data is anonymised as much as possible.

All third-party service providers are bound by strict data processing agreements and are only permitted to use your information for specified purposes.

Legally Mandated Disclosures

Ora78 may disclose your information to government authorities, law enforcement agencies, or regulatory bodies when required by law, court order, or in the context of investigations related to fraud, money laundering, or other financial crimes.

The ora78 platform uses cookies and similar tracking technologies to enhance the user experience, secure sessions, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session management, security, and navigation. These cookies cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting data on how you use the platform — pages visited, time spent, and errors encountered. This information is used to improve platform performance.
• Functional Cookies: Saving your preferences such as language, display settings, and regional location so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand aggregated, anonymized usage patterns for internal analytics and product improvement.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the ora78 platform. For detailed guidance on cookie settings in popular browsers such as Chrome, Firefox, Safari, and Edge, please refer to your browser's help section.

The security of your personal data is ora78's top priority. We implement robust technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

• 256-bit SSL Encryption: All data transmitted between your device and ora78 servers is protected with the highest-level Transport Layer Security (TLS) encryption.
• Stored Data Encryption: Sensitive information such as passwords and financial details is encrypted using industry-standard algorithms when stored in our database.
• Strict Access Control: Only authorized personnel may access player personal data, and every access is recorded in an audit log.
• 24/7 Monitoring: Continuous security monitoring systems detect any suspicious activity or anomalies in real time.
• Regular Security Testing: Independent penetration testing and security audits are conducted regularly to identify and address vulnerabilities.
• Two-Factor Authentication (2FA): An additional security layer is available on all member accounts to prevent unauthorized access.

As an ora78 player, you have certain rights regarding your personal data that we fully respect. The following are rights you may exercise:

• Right of Access: You have the right to obtain a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete information we hold.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — subject to legal obligations requiring us to retain specific records.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: You may withdraw consent for marketing communications or non-essential cookie use at any time without affecting your access to the platform.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To submit any request related to the above rights, please contact the ora78 support team via live chat or our support email. We will process your request within 14 business days.

Ora78 only retains your personal data for as long as necessary to fulfil the original purpose of collection or to comply with legal obligations. Once that period expires, data will be securely deleted or anonymised.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, the ora78 privacy team is ready to assist you.

• Live Chat: The fastest method — available 24/7 directly within the ora78 platform.
• Privacy Email: [email protected] — mark the email subject with "Privacy Enquiry" for a faster response. Typical response time: 2–4 hours.
• Formal Complaints: Submit full details of your privacy concern via email. All complaints will be investigated within 5 business days.

Ora78 takes every privacy enquiry seriously. We are committed to providing clear, accurate, and helpful responses within the stated timeframe. Your privacy rights are our responsibility.