Privacy Policy — Orion88

Orion88 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at orion88.cam. As part of delivering our services to registered Members ("you", "the Member", "the User"), we necessarily collect and process certain categories of personal data.

This Privacy Policy ("Policy") sets out, in clear and accessible terms, the full scope of Orion88's data processing activities: what data we hold, the legal basis on which we hold it, how long we retain it, with whom it may be shared, and the rights you can exercise at any time. This Policy complies with the requirements of Orion88's international licensing obligations and applicable data protection frameworks.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with Orion88.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, location data, or online identifiers.
• "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — Orion88, being the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party engaged by Orion88 to process Personal Data on its behalf, under documented instructions and appropriate contractual safeguards.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a defined purpose.
• "KYC" — Know Your Customer; the identity and age verification process mandated by Orion88's licensing obligations.
• "Sensitive Data" — categories of Personal Data requiring heightened protection, including financial account details, government-issued identification numbers, and source of funds documentation.
• "Cookie" — a small data file placed on a user's device by a website to store session or preference information.

Orion88 collects Personal Data across several categories, depending on the nature of your interaction with the Platform. The table below summarises the primary data categories and typical examples within each.

We collect only the minimum data necessary for the purpose stated. We do not collect any Special Category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where expressly required by applicable law or our licensing obligations.

Orion88 collects Personal Data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technical collection: Data gathered automatically when you access the Platform, including IP address, device identifiers, session data, and browsing behaviour within the site — collected through server logs, cookies, and similar technologies.
• Payment processors: Transaction confirmation data relayed by our integrated payment partners, including Malaysian bank systems (FPX, DuitNow), e-wallet providers, and cryptocurrency networks.
• Identity verification services: Results of automated and manual identity checks conducted by third-party KYC service providers engaged by Orion88.
• Fraud and AML monitoring tools: Risk scoring data generated by third-party compliance systems in connection with deposit and withdrawal activity.

All processing of your Personal Data by Orion88 is conducted on one or more of the following legal bases:

• Contractual necessity: Processing that is required to perform our contractual obligations to you under the Terms & Conditions — including account creation, game delivery, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements imposed by our licensing authority — including anti-money laundering (AML) obligations, age verification (21+ policy), and fraud prevention duties.
• Legitimate interests: Processing that Orion88 undertakes in pursuit of its legitimate business interests, where those interests are not overridden by your data protection rights — including platform security, fraud detection, product improvement, and service optimisation.
• Consent: Processing for purposes where your explicit consent has been obtained, in particular the sending of marketing and promotional communications. You may withdraw consent at any time via your Account Settings or by contacting support.

Orion88 uses the Personal Data it collects for the following specific purposes:

• Account creation and management: Registering, maintaining, and securing your Member account, including password recovery and session management.
• Identity verification (KYC): Confirming your identity, age (21+ requirement), and eligibility to use the Platform in compliance with our licensing obligations.
• Payment processing: Facilitating deposits via Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency networks; processing withdrawal requests to verified payment methods.
• Delivering gaming services: Providing access to casino games, live dealer tables, slots, and the sportsbook; tracking betting activity for settlement and dispute resolution purposes.
• Fraud prevention and AML compliance: Monitoring account and transaction activity for indicators of fraud, money laundering, match-fixing, or other prohibited conduct; fulfilling mandatory regulatory reporting obligations.
• Responsible gaming: Operating deposit limits, loss limits, self-exclusion, and session reminder tools; monitoring usage patterns to identify potential problem gambling indicators in line with our Responsible Gambling Policy.
• Customer support: Responding to enquiries, complaints, and account requests submitted via live chat, email, or other support channels.
• Marketing communications: Sending promotional offers, bonus notifications, and product updates — only where you have provided consent, or where we have a legitimate interest in communicating with you as an active Member.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the functionality, performance, and user experience of the Platform.
• Legal compliance: Meeting obligations imposed by our licensing authority, including record-keeping, reporting, and audit cooperation requirements.

Orion88 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment service providers: Banks, e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow/FPX network operators, and cryptocurrency processors — solely to execute your payment instructions and verify transaction legitimacy.
• KYC and identity verification services: Third-party providers engaged to perform automated and manual identity checks, document verification, and age confirmation.
• AML and fraud screening services: Compliance technology providers engaged to screen transactions and account activity against risk indicators and sanctions databases.
• Game content providers: Licensed game studios and live dealer platform providers who supply games available on Orion88. These providers may receive limited technical data (such as session tokens and game round IDs) necessary to deliver their services.
• IT infrastructure and hosting providers: Cloud infrastructure and server hosting services that process data on Orion88's behalf under appropriate data processing agreements.
• Regulatory and licensing authorities: Orion88's licensing regulator and, where required by applicable law, law enforcement agencies or government authorities — where Orion88 is under a legal obligation to disclose.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by Orion88 on a confidential basis.

Orion88 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to maintain session security, and to improve user experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Retain your preferences such as language settings, preferred game view, and responsible gaming tool configurations across sessions.
• Analytical cookies: Collect anonymised usage data to help us understand how Members navigate the Platform, which games are most popular, and where technical improvements are needed. Data is aggregated and not linked to individual Member identities.
• Security cookies: Detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF) attacks.

Orion88 does not use third-party advertising cookies or behavioural targeting technologies that track your activity across external websites. You may manage cookie preferences through your browser settings; note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features.

Orion88 retains Personal Data for the period necessary to fulfil the purposes for which it was collected, and for as long as required to meet our legal, regulatory, and licensing obligations. The following retention guidelines apply:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of seven (7) years from the date of the relevant transaction, as required by our licensing authority's financial record-keeping standards.
• KYC documents: Retained for a minimum of five (5) years following the date of verification or account closure, whichever is later.
• Communications data: Support chat logs and email correspondence retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Marketing preference data: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligation.
• Technical and session data: Retained for up to twelve (12) months for fraud detection and platform security analysis purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with Orion88's data destruction procedures. Where anonymisation is applied, the resulting anonymised dataset no longer constitutes Personal Data and may be retained indefinitely for analytical purposes.

Orion88 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Orion88 Platform.
• Encryption at rest for all sensitive data stored on Orion88 servers, including financial records and identity documents.
• Role-based access controls restricting internal access to Personal Data on a strict need-to-know basis.
• Multi-factor authentication required for privileged system access by Orion88 staff.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Automated monitoring for anomalous account activity, including unusual login patterns, bulk withdrawals, and suspected data exfiltration attempts.
• Secure destruction procedures for physical documents containing Personal Data.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, Orion88 will notify affected Members and the relevant supervisory authority within the timeframes required by our licensing obligations.

Subject to applicable law and our legal obligations, you hold the following rights with respect to your Personal Data held by Orion88. To exercise any of these rights, please contact our support team via live chat or at the email address set out in Section 15.

• Right of Access: You may request a copy of the Personal Data Orion88 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held in your Account. Many basic details can be updated directly through Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected. Note that we may be required to retain certain data for the retention periods described in Section 9 regardless of erasure requests.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of data held, pending verification.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (in particular, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The Orion88 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect Personal Data from any person under the age of 21. Mandatory KYC verification is in place to confirm the age of all Members prior to withdrawal processing, and may be requested at any stage of the account lifecycle.

If Orion88 becomes aware that an Account has been registered by a person under the age of 21, the Account will be immediately suspended, all deposits will be returned to the originating payment method, and all associated Personal Data will be deleted from our systems in accordance with our data destruction procedures, subject to any applicable legal retention obligations.

If you are aware that a minor may have accessed or registered on the Orion88 Platform, please contact our support team immediately so that appropriate action can be taken.

Orion88 operates globally and engages Data Processors in various jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, Orion88 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with the relevant Data Processor.
• Binding corporate rules where applicable to intra-group transfers.
• Processing in jurisdictions recognised as providing an adequate level of data protection by Orion88's licensing authority.

By using the Orion88 Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where necessary for the delivery of our services, subject always to the safeguards described above.

Orion88 reserves the right to update or amend this Privacy Policy at any time. Changes may be required to reflect updates to our services, changes in applicable law, new licensing obligations, or improvements to our data handling practices.

Where amendments are material — in particular where they affect the categories of data collected, the purposes for which it is used, or your rights — Orion88 will provide advance notice by email to your registered address and/or through a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you may request voluntary account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact Orion88 through the following channels:

• Live Chat: Available 24/7 directly through the Platform. Average first response within 3–5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries.
• Languages supported: English, Bahasa Melayu, and Mandarin Chinese.

For responsible gaming enquiries and self-exclusion requests, please visit our dedicated Responsible Gambling page.