Orisbet Privacy Policy

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data processed by Orisbet in connection with the online casino, sportsbook, payment facilities, support services, promotional activities, and related digital platforms operated under the Orisbet brand. References to "you", "your", or "user" mean any individual who visits the Orisbet website or holds a registered player account. References to "we", "us", or "our" mean Orisbet.

By accessing the Orisbet website, creating an account, depositing funds, claiming a promotion, or using any platform feature, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described. If you do not agree, you should not create an account or use the platform. This policy is to be read alongside the Orisbet Terms & Conditions and Responsible Gambling policy.

The following terms carry the meanings set out below throughout this Privacy Policy.

Orisbet collects personal data through direct provision by you, automated means, and where permitted, third-party sources. The categories of data we may process include:

• Identity data: legal full name, date of birth, gender, nationality, and government-issued identification numbers such as MyKad, passport, or driver's licence number.
• Contact data: registered email address, mobile number, and residential address — which may include references to Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, or other Malaysian locations.
• Financial data: bank account and payment details associated with MYR deposit and withdrawal methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and supported cryptocurrency wallet addresses.
• Transaction data: deposit and withdrawal records, bonus claims, wager history, game participation, and account balance movements.
• Verification data: copies of identity documents, proof of address documents such as utility bills or bank statements dated within three months, and selfie images submitted during KYC review.
• Technical data: IP address, browser type, device identifiers, operating system, session duration, clickstream data, referring URL, and time zone.
• Usage data: game preferences, search queries within the platform, promotion redemption history, and support interaction records.
• Communication data: live chat transcripts, email correspondence, and any content you provide when contacting support.

We do not knowingly collect sensitive personal data beyond identity and payment verification requirements, and we do not collect data from individuals under the age of 21.

Personal data collected by Orisbet is used for the following lawful purposes:

1. Account management: creating, maintaining, securing, and closing player accounts, and processing login and authentication requests.
2. Identity verification: conducting KYC checks, anti-money laundering screening, age verification (confirming players are aged 21 or above), and source-of-funds reviews as required by applicable regulations.
3. Payment processing: facilitating MYR deposits and withdrawals through supported banking and e-wallet partners, matching payment details to account records, and managing transaction records.
4. Game and betting operations: recording wagers, calculating results, awarding winnings, applying bonus credits, and maintaining auditable transaction trails.
5. Responsible gambling: monitoring play patterns where necessary to identify signs of problem gambling, applying deposit limits or restrictions requested by the player, and managing self-exclusion requests.
6. Fraud prevention and security: detecting and investigating suspicious activity, preventing account takeover, identifying duplicate registrations, and protecting the integrity of the platform.
7. Legal and regulatory compliance: meeting obligations under applicable gaming regulations, financial crime prevention rules, and data retention requirements.
8. Customer support: responding to account queries, processing complaints, and providing technical assistance via live chat and email.
9. Platform improvement: analysing aggregate usage patterns, performance metrics, and player feedback to improve the Orisbet product.
10. Promotional communications: sending eligible players information about bonuses and promotions, subject to applicable preferences and permission rules.

Orisbet processes personal data on the following legal grounds as applicable:

• Contractual necessity: processing required to fulfil the account agreement, including registration, payments, wager settlement, and support.
• Legal obligation: compliance with anti-money laundering, identity verification, and gaming regulatory requirements to which Orisbet is subject.
• Legitimate interests: fraud prevention, platform security, internal analytics, and responsible gambling monitoring, where these interests are not overridden by the individual's rights.
• Consent: for optional promotional communications and non-essential cookies, where consent is solicited and documented.

Orisbet does not sell personal data. We may disclose data to third parties only in the following circumstances and only to the extent necessary:

• Payment processors and banking partners: to facilitate MYR deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and supported cryptocurrency networks. These parties process data as data processors under contractual obligations consistent with this policy.
• Identity verification and compliance services: third-party KYC and anti-fraud providers used to verify player identity, payment ownership, and to screen against financial crime risk lists.
• Game content providers: certified game studios and live dealer operators who may process game participation data in order to operate their titles under applicable licensing requirements.
• Cloud and infrastructure providers: hosting, database, and security service providers operating under contractual data processing agreements with access restricted to what is operationally necessary.
• Legal and regulatory authorities: where required by a valid legal obligation, court order, regulatory direction, or in connection with a law enforcement request that Orisbet is legally required to comply with.
• Professional advisers: auditors, legal counsel, and compliance consultants subject to professional confidentiality obligations, where access is necessary for their engagement.

Where data is transferred to service providers outside the originating jurisdiction, Orisbet takes reasonable contractual and organisational measures to ensure an equivalent standard of protection is maintained.

Orisbet retains personal data for as long as is necessary to fulfil the purpose for which it was collected or to meet applicable legal, regulatory, and contractual obligations. Specific retention considerations include:

• Account and transaction records are ordinarily retained for a minimum of five years from account closure or the date of the final transaction, consistent with financial crime prevention obligations commonly applicable to licensed gaming operators.
• KYC documents are retained for the period required by the verification obligation and for a reasonable period thereafter to support any compliance review or dispute resolution.
• Support communication records are retained for a period sufficient to resolve the original matter and any related complaint or regulatory inquiry.
• Technical logs and access records are retained for a shorter operational period unless they form part of a security investigation or legal hold.

When personal data is no longer required, Orisbet will take reasonable steps to ensure it is securely deleted or anonymised in a manner that prevents re-identification.

Orisbet uses cookies and similar technologies on its website and platform to support the following functions:

• Strictly necessary cookies: required for session authentication, security token management, and maintaining login state. These cannot be disabled without impairing core platform functionality.
• Functional cookies: store preferences such as language settings and previously selected payment methods to reduce repeated data entry.
• Analytics cookies: collect aggregated, anonymised data about page visits, feature usage, error rates, and navigation paths to support platform performance improvements.
• Security and fraud prevention cookies: support identification of unusual access patterns and potential account compromise attempts.

Orisbet does not use cookies for third-party behavioural advertising or cross-site tracking by external advertising networks. You may manage cookie settings through your browser. Disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

Subject to applicable legal requirements and limitations, registered Orisbet users may exercise the following rights in relation to their personal data:

• Right of access: you may request a copy of the personal data Orisbet holds about you and information regarding how it is processed.
• Right to rectification: you may request correction of inaccurate or incomplete personal data held in your account record.
• Right to erasure: in certain circumstances, you may request deletion of personal data we hold about you. This right is subject to override by legal retention obligations, open dispute proceedings, or outstanding account balances.
• Right to restriction: you may request that processing of your data be restricted while an accuracy dispute or objection is reviewed.
• Right to data portability: where technically feasible and legally applicable, you may request a structured copy of data you have directly provided to Orisbet in a commonly used format.
• Right to object: you may object to processing based on legitimate interests or to the receipt of direct marketing communications.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Requests to exercise any of the above rights should be directed to the Orisbet support team. We will respond within a reasonable period, though complex requests or those subject to legal review may take longer. We may need to verify your identity before processing a request.

Orisbet implements technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include TLS/SSL encryption for data in transit, access controls and role-based permission frameworks for internal systems, secure storage with appropriate access logging, two-factor authentication options for player accounts, and regular internal security reviews. No internet-based transmission or storage system can guarantee absolute security. In the unlikely event of a data security incident affecting your personal data in a material way, Orisbet will take steps to notify you as required by applicable law and will work to contain and remediate the incident promptly.

Orisbet's platform is strictly intended for individuals aged 21 and above. We do not knowingly collect, store, or process personal data from anyone under 21 years of age. If we become aware that a minor has provided personal data or created an account, that account and its associated data will be closed and deleted in accordance with this policy and applicable legal requirements. Parents and guardians are encouraged to use parental controls and internet filtering tools to prevent underage access to online gaming platforms.

Orisbet may update this Privacy Policy from time to time to reflect changes in platform operations, applicable laws, payment partner requirements, or data protection standards. Material changes will be communicated through an appropriate website or account notice and will state the updated effective date clearly. Continued use of the platform after the effective date of a notified revision constitutes acceptance of the updated policy. If the changes affect processing in a way that requires renewed consent, we will request that consent separately before the change takes effect.

For any query, request, or concern regarding the handling of your personal data, or to exercise any of the rights described in Section 9, please contact the Orisbet support team through the following channels. Email and phone numbers are provided as plain-text reference only and are not clickable links.

• Live Chat: Available 24 hours a day, 7 days a week through the platform. Average first-response time under 3 minutes.
• Support Email: [email protected] — for formal written requests and sensitive account matters.

When contacting us regarding a data request, please include your registered username, the email address associated with your account, and a clear description of the request. We may ask for identity verification before processing. This Privacy Policy does not create any additional rights beyond those available under applicable law.