Oren88 Privacy Policy – Data Protection for Malaysian Members

1Personal Information We Collect

As an online casino platform serving users in Malaysia, oren88 collect the personal information necessary to provide a secure, responsible, and high-quality service. Data collection takes place through two main channels:

Data you provide directly:

• Account registration details – full name, date of birth, Malaysian identity card number (MyKad), email address, and mobile phone number.
• Financial information for transaction processing – including bank account details and e-wallet numbers registered for DuitNow, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay.
• Identity verification documents uploaded at our request as part of the KYC (Know Your Customer) process.
• Information you share when interacting with the oren88 customer support team via live chat or email.
• Feedback, reviews, or responses to surveys you voluntarily complete.

Automatically collected data:

• Technical log data – IP address, device type and operating system, browser name and version, date and time of access.
• Platform activity data – game records, total wagers, wins and losses, and deposit and withdrawal history in Malaysian Ringgit (MYR).
• Cookie and session data – information stored by your browser to keep the platform running smoothly.
• Approximate location data derived from IP address for geographic eligibility verification purposes.

2How We Use Your Personal Data

Personal data collected by oren88 used solely for the following purposes directly related to delivering the platform's services to you:

• Account Management: Creating and maintaining your account, verifying your identity and age, processing password reset requests, and keeping your account secure.
• Financial Transaction Processing: Processing MYR deposits and withdrawals via the local payment methods you have registered, and maintaining transaction records for account statement and dispute resolution purposes.
• VIP Programme Management: Calculating and updating VIP points, determining VIP tier eligibility from Bronze through Crown Diamond, and automatically crediting weekly cashback and special bonuses.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, identifying suspicious activity, and ensuring compliance with the one-account-per-person policy.
• Service Communications: Sending you important account-related notifications such as deposit confirmations, security alerts, and promotional updates you have opted in to receive.
• Platform Improvements: Analysing aggregated, anonymised usage patterns to improve platform design, speed, and overall user experience.
• Legal Compliance: Fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.

oren88 does not use your personal data to make automated decisions that have a significant impact on you without any human involvement. Every important decision concerning your account — including suspensions, fraud investigations, and dispute resolution — involves review by a trained human team.

3Third-Party Data Sharing & Disclosure

oren88 takes a strict approach to data sharing. In short: we does not sell, rent, or trade member personal data to any third party for their own commercial purposes. Full stop.

However, there are limited circumstances in which we need to share certain data with specific parties to enable the platform to function properly:

• Payment Service Providers: To process deposits and withdrawals in MYR, the required transaction details are shared with the payment gateways handling DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX. These providers are bound by strict confidentiality agreements and use the data solely for transaction processing purposes.
• Game Providers: Required game session information is shared with third-party game software providers to enable you to play slots, live casino, and other games on the oren88 platform. This data does not include your full identity details.
• Regulatory Authorities: Where required by Malaysian law or a valid court order, oren88 may be required to disclose certain information to the relevant authorities. We will notify you of any such request unless prohibited from doing so by law.
• Identity Verification Services: Information required for the KYC process may be shared with accredited third-party identity verification services to authenticate the documents you submit.

All third parties that receive data from oren88 contractually bound to protect that information to a standard no less rigorous than this Privacy Policy. We conduct regular reviews of all third-party providers to ensure ongoing compliance.

4Technical Security & Data Protection

oren88 continuously invests in cybersecurity infrastructure to keep our members' personal data protected at all times. The key technical security measures we employ include:

• 256-bit SSL/TLS Encryption: All communications between your browser and oren88's servers are encrypted using the latest TLS protocols. This means that even if someone were to intercept your network traffic, they would be unable to read its contents.
• Data Encryption at Rest: Sensitive data stored in oren88's database – including financial information and identity details – is encrypted using the AES-256 algorithm. Only authorised systems with the correct decryption keys can access it.
• Two-Factor Authentication (2FA): We offer two-factor authentication for account login. We strongly encourage all members to enable this additional security feature.
• Real-Time Security Monitoring: Automated monitoring systems operate 24 hours a day to detect suspicious login activity, unauthorised access attempts, and unusual transaction patterns.
• Regular Security Audits: oren88 conducting regular penetration testing and security audits by independent security teams to identify and patch any vulnerabilities before they can be exploited.
• Internal Access Controls: Access to systems storing user data is restricted on a need-to-know basis. All staff access is logged and audited on a regular basis.

5Cookies, Tracking Technologies & Analytics

Platform oren88 uses cookies and similar tracking technologies to enable core platform functionality, enhance the user experience, and analyse usage patterns for continuous improvement.

There are four categories of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session management, account security, and transaction processing. These cookies cannot be disabled, as the platform will not function properly without them.
• Performance Cookies: Collects information on how you use the platform – which pages are visited most frequently, time spent, and where errors may occur. All data is collected in aggregate and anonymised form.
• Functional Cookies: Stores your preferences such as language, display settings, and saved login details for your convenience. These cookies allow the platform to remember your choices between sessions.
• Targeting Cookies (Optional): Used to display promotions and content more relevant to your interests and activity on the platform. You may choose to disable this category of cookies without affecting the platform's core functionality.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform oren88. For guidance on how to manage cookies in different browsers, please refer to the help documentation for your respective browser.

6Child & Minor Protection

oren88 has a zero-tolerance policy on the registration and use of the platform by individuals under 18 years of age. Our platform is strictly for adult users, and we take our child protection responsibilities very seriously.

Specific measures we take to prevent access by minors:

• Mandatory age verification at registration through an enforced date-of-birth declaration.
• KYC checks that may require verification of an official identity document (MyKad) confirming the applicant's actual age.
• A pattern-based detection system capable of identifying possible use of the platform by underage individuals.
• A reporting mechanism that allows anyone to flag an account suspected of belonging to a minor for immediate investigation.

If oren88 discovers that a minor's personal data has been collected without our knowledge — whether through a false age declaration at registration or by other means — we will take immediate action to close the account and delete all collected data, as well as refund any remaining balance.

7Your Personal Data Rights

As a member oren88 and as an individual whose personal data we process, you have the following rights, which you may exercise at any time:

• Right of Access: You may request a copy of all personal data we hold about you. Such requests will be processed within 14 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. For basic details such as phone number and email address, you can update these directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data when it is no longer needed for the original purpose it was collected, or when you withdraw your consent. Please note that certain data may need to be retained for a specified period to meet legal obligations.
• Right to Restrict Processing: Under certain circumstances, you may ask us to restrict how we use your data while any dispute is being resolved.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. Once an objection is received, we will immediately stop using your data for that purpose.
• Data Portability Rights: You may request that we provide your personal data in a machine-readable format for transfer to another platform, where this is technically feasible.

To exercise any of the rights above, please contact our data protection team oren88 via email at support@oren88.click, specifying the type of right you wish to exercise and your account details (do not include your password). We may need to verify your identity before processing the request.

8Cross-Border Data Transfers

In the course of its operations, oren88 may need to transfer some of your personal data to servers or service providers located outside Malaysia. This applies primarily in the context of cloud computing services we use for platform operations.

When such data transfers occur, oren88 ensure that adequate safeguards are in place through:

• Legally binding data processing agreements with all third-party service providers, requiring them to protect data to a standard equivalent to or stricter than this Privacy Policy.
• Use of internationally recognised standard contractual clauses for cross-border data transfers.
• Periodic assessments of security controls applied by third-party service providers to ensure protection standards are maintained.

By using the platform oren88, you consent to such data transfers as are necessary for the provision of the platform's services to you. If you do not agree to cross-border data transfers, please contact us to discuss available options before continuing to use the platform.

9Data Breach Notification & Incident Response

oren88 has a comprehensive incident response plan to address any data security breaches that may occur. While we take every reasonable measure to prevent breaches, we are committed to full transparency should one occur.

Our incident response protocol includes:

1. Detection & Containment (0–4 hours): Our security team monitors systems around the clock. As soon as a suspected breach is detected, immediate containment measures are taken to limit its scope.
2. Assessment & Classification (4–24 hours): The severity of the breach is assessed — what data was affected, how many members are involved, and the risks it poses.
3. Notification of Affected Members (within 72 hours): Members whose data is suspected to have been compromised will be notified by email or SMS within 72 hours of a confirmed breach, with details on the type of data affected and the steps you should take.
4. Recovery Actions: We will provide specific guidance on the steps you should take to protect yourself, which may include changing your password and monitoring your financial activity.

10Contact Us & Privacy Policy Amendments

If you have any questions, concerns, or requests regarding this Privacy Policy or how oren88 manage your personal data, please do not hesitate to reach us through the following channels:

• Data Protection Email: support@oren88.click – please include "Privacy Policy Enquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the oren88 platform once you are logged in.

We aim to respond to all privacy-related enquiries within 3 business days. For more complex requests such as data access or deletion, processing may take up to 14 business days.

oren88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we protect your data. Any material changes to this Privacy Policy will be communicated to you via:

• Email notification to your registered address at least 7 days before any changes take effect.
• A prominent notice on the oren88 platform homepage for a minimum of 14 days.
• Update the "Last Updated" date at the top of this Privacy Policy page.

Continued use of the platform oren88 after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 7 above.