oren888 Privacy Policy

1.Who We Are and How to Contact Us

oren888 is an online casino and sportsbook platform operated under an international gaming authority licence and serving players across Malaysia, including members in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Ipoh, and beyond. For the purposes of this Policy, oren888 is the data controller responsible for your personal information.

If you have any questions, concerns, or requests regarding this Policy or your personal data, you may contact our Data Protection team at any time via live chat on the Platform or by email. Our contact email address is displayed as plain text in the footer of this page — [email protected] — and is staffed by a team with data protection responsibilities. We aim to respond to all data-related enquiries within 5 business days.

2.Personal Data We Collect

oren888 collects the following categories of personal data from Members and visitors:

oren888 does not knowingly collect or process special category data (such as health data, racial or ethnic origin, or religious beliefs) except where strictly required by applicable law or gaming regulation, for example in connection with a responsible gaming self-exclusion or problem gambling assessment.

3.How We Use Your Personal Data

oren888 processes your personal data for the following purposes, each supported by a lawful basis:

• Account creation and management: To register your Account, verify your identity, and maintain your Member profile. Lawful basis: contractual necessity.
• Service delivery: To allow you to deposit funds, place bets, play games, and withdraw winnings. Lawful basis: contractual necessity.
• Payment processing: To facilitate deposits and withdrawals via your selected Malaysian payment method, including Touch n Go eWallet, Boost, and FPX-linked banks. Lawful basis: contractual necessity.
• KYC and fraud prevention: To verify your identity before processing withdrawals and to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crime. Lawful basis: legal obligation and legitimate interests.
• Regulatory compliance: To comply with applicable gaming licence conditions, anti-money laundering (AML) obligations, and reporting requirements imposed by the relevant gaming authority. Lawful basis: legal obligation.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion. Lawful basis: legitimate interests and legal obligation.
• Customer support: To respond to your enquiries, resolve disputes, and maintain support records. Lawful basis: contractual necessity and legitimate interests.
• Marketing communications: To send you promotional offers, bonuses, and updates about oren888 services, where you have consented to receive such communications. Lawful basis: consent. You may withdraw consent at any time by updating your notification preferences in Account settings.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the functionality and security of the oren888 Platform. Lawful basis: legitimate interests.

oren888 will not use your personal data for any purpose incompatible with the purposes listed above without first obtaining your consent or unless required to do so by law.

4.Cookies and Tracking Technologies

4.1 oren888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and understand how you use the Platform.

4.2 The following types of cookies are used on the oren888 Platform:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without preventing core functionality, including login session maintenance and security tokens.
• Analytical cookies: Used to collect anonymised data about how visitors use the Platform, which pages are visited most frequently, and where errors occur. This data informs ongoing Platform improvements.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience.
• Marketing cookies: Used to track the effectiveness of promotional campaigns and, where you have consented, to deliver relevant promotional content. These are only placed where you have provided consent.

4.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality, including the ability to log in and maintain a gaming session.

5.Disclosure of Your Personal Data

5.1 oren888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Game providers and platform technology suppliers: Certified gaming providers (including but not limited to live dealer studios and RNG software licensors) receive the minimum data necessary to deliver their services within the oren888 environment.
• Payment processors: Financial service providers facilitating deposits and withdrawals, including FPX gateway operators and e-wallet service providers (Touch n Go, Boost), receive transaction data necessary to process payments.
• Identity verification services: Third-party KYC verification providers that assist in confirming Member identity and screening against sanctions and watchlists.
• Regulatory and licensing authorities: oren888's gaming licence authority and relevant financial intelligence units may receive data pursuant to mandatory reporting obligations under gaming and anti-money laundering regulations.
• Professional advisers: Legal, accounting, and audit firms engaged by oren888 under obligations of professional confidentiality.
• Law enforcement and government agencies: Where oren888 is required by law or a binding court order to disclose data to a competent authority.

5.2 All third-party data processors engaged by oren888 are required to implement appropriate technical and organisational security measures and to process personal data only on oren888's documented instructions.

6.Data Retention

6.1 oren888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or gaming regulation.

6.2 The following retention periods apply as a general guide:

• Account data and KYC documents: Retained for a minimum of 5 years from the date of Account closure, in accordance with standard AML record-keeping obligations under international gaming authority licence conditions.
• Transaction and gaming records: Retained for a minimum of 5 years from the date of the transaction or gaming session.
• Support communications: Retained for 3 years from the date of the last communication, or until resolution of any related dispute, whichever is later.
• Marketing consent records: Retained for as long as you maintain an active marketing consent, plus 2 years following withdrawal of consent.

6.3 Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with oren888's data disposal procedures.

7.Data Security

7.1 oren888 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and oren888 servers — the same standard used by Malaysian banking applications.
• One-way password hashing using a strong cryptographic algorithm. oren888 does not store plaintext passwords.
• Access controls ensuring that personal data is accessible only to authorised personnel who require it for their specific role.
• Regular penetration testing and security audits conducted by qualified independent third parties.
• Intrusion detection and anomalous login monitoring systems that flag and respond to suspected unauthorised access in real time.

7.2 Despite these measures, no data transmission over the internet or storage system can be guaranteed as 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, oren888 will notify affected Members in accordance with applicable notification obligations.

8.Your Data Rights

Subject to applicable law and gaming regulatory requirements, you have the following rights in relation to your personal data held by oren888:

• Right of access: You may request a copy of the personal data oren888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Note that material changes to identity data require KYC re-verification.
• Right to erasure: You may request deletion of your personal data in certain circumstances. This right is subject to overriding obligations, including AML record-keeping requirements, which may prevent full erasure during applicable retention periods.
• Right to restriction of processing: You may request that oren888 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being disputed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interests. oren888 will assess whether compelling legitimate grounds override your objection.

To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to verified requests within 30 days. We may require identity verification before processing your request to prevent unauthorised access to another person's data.

9.Children and Minors

The oren888 Platform is strictly intended for adults aged 21 years and above. oren888 does not knowingly collect personal data from individuals under the age of 21. If oren888 becomes aware that personal data has been collected from a person under this age, that data will be deleted and the associated Account closed without delay. If you believe that a minor has registered an Account or provided personal data to oren888, please notify us immediately via live support or at [email protected].

10.International Data Transfers

10.1 oren888 operates with the assistance of service providers that may be located outside Malaysia. Where your personal data is transferred to a jurisdiction outside Malaysia, oren888 takes steps to ensure that an adequate level of protection is applied, consistent with applicable data protection standards.

10.2 Such steps may include entering into data transfer agreements incorporating standard contractual clauses or equivalent safeguards approved by the relevant data protection authority, or relying on the recipient country's adequacy determination where applicable.

10.3 oren888 will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without your explicit consent or unless required to do so by applicable law.

11.Links to Third-Party Platforms

The oren888 Platform does not contain links to third-party websites. However, if you access the Platform through a third-party channel (such as an affiliate link or search engine result), oren888 is not responsible for the privacy practices of those third parties. This Policy applies only to personal data collected directly by oren888 through its own Platform.

12.Changes to This Privacy Policy

12.1 oren888 reserves the right to update this Privacy Policy at any time. Where changes are material, oren888 will provide notice to Members via the registered email address or through an in-platform notification prior to the changes taking effect.

12.2 The current version of this Policy, including the "Last Updated" date at the top of the page, is always available on this page. Continued use of the Platform after the effective date of any change constitutes acceptance of the revised Policy.

12.3 If you do not agree with any revised version of this Policy, you should discontinue use of the Platform and request Account closure in accordance with the procedure described in the Terms & Conditions.