Ori777 Privacy Policy – Member Personal Data Protection

This Privacy Policy ("Policy") is issued by ori777 ("we", "Platform") and applies to all registered members and visitors of ori777.pro. This Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information.

Ori777 is committed to protecting the privacy of every individual who interacts with our platform. We handle your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and any other relevant data protection laws applicable to our operations.

This Policy covers all information collected through the official ori777.pro website, the ori777 mobile app, and any communications you have with our team — including email, live chat, and customer support calls. By using any ori777 service, you confirm that you have read and understood this Privacy Policy.

Ori777 collects various categories of personal information to enable us to provide a safe, seamless, and high-quality service to all members. This data collection is carried out directly from you during registration and platform use, as well as automatically through industry-standard tracking technologies.

We do not collect sensitive personal information such as biometric data, medical records, or political affiliations unless required by law or necessary for specific identity verification purposes.

Every piece of information we collect has a clear and legitimate purpose. ori777 uses your personal data only for the following purposes:

• Account Management: Creating and maintaining your member account, verifying your identity, and securely processing deposits and withdrawals.
• Service Provision: Enabling you to access all games and features on the ori777 platform, including Live Casino, Slots, Sports Betting, and Fish Shooting Games.
• Security & Fraud Detection: Monitoring account activity to detect and prevent fraud, money laundering, and platform abuse.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Communication: Sending important account-related notifications, promotions you have opted into, and platform updates.
• Platform Improvement: Analysing usage patterns to improve the user experience, platform performance, and the range of games on offer.
• Responsible Gaming: Identifying concerning gaming patterns and providing appropriate support to members who may need it.

Ori777 maintains a strict policy regarding the sharing of members' personal information. We do not sell or rent your data to any third party for commercial purposes. However, there are limited situations where we may need to share certain information:

• Trusted Service Providers: We share necessary data with payment service providers, gaming platforms, technology infrastructure providers, and identity verification companies working on our behalf. All parties are bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or a valid request from government authorities or regulatory bodies.
• Fraud Prevention: In cases of suspected fraud or proven illegal activity, relevant information may be shared with law enforcement bodies.
• Business Transfers: If ori777 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, with notice provided to members.

In all data-sharing situations, ori777 ensures that data recipients are subject to data protection obligations equivalent to our own standards. We never share your data with third-party advertisers without your explicit consent.

The security of your personal data is more than a legal obligation for ori777 — it is a core value that shapes every technical and operational decision we make. We continuously invest in cutting-edge security infrastructure to ensure your data remains protected at all times.

The technical and organisational security measures we employ include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ori777's servers.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Role-based access control (RBAC) ensuring only authorised personnel can access specific data.
• Round-the-clock 24/7 security monitoring with advanced intrusion detection systems (IDS).
• Regular security audits by accredited independent cybersecurity firms.
• Two-factor authentication (2FA) for all internal administrative access and available to platform members.
• A tested incident response plan to address any data breaches swiftly and effectively.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a data breach affecting your information, we will notify you within 72 hours of the breach being detected, in line with industry best practices.

Ori777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform's core functions, such as maintaining your login session and ensuring account security. They cannot be disabled.
• Performance Cookies: Helping us understand how members use the platform by collecting anonymised usage statistics for improvement purposes.
• Functional Cookies: Saving your preferences such as language, display settings, and login details for a more personalised experience.
• Marketing Cookies: Used to display relevant promotions to you based on your interests and activity on the platform. You may choose to opt out of this type of cookie.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some ori777 platform features. For more information on managing cookies, please refer to your web browser's help section.

As an ori777 member and an individual whose data we process, you have clear and enforceable rights regarding your personal information. ori777 fully respects these rights and provides straightforward mechanisms for you to exercise them.

Ori777 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable laws and regulations.

In general, data retention periods are as follows:

• Active Account Data: Retained for the duration your account is active and updated on an ongoing basis.
• Financial Records Data: Retained for a minimum of 7 years after the last transaction, in accordance with Malaysia's financial legal requirements.
• KYC & Identity Verification Data: Retained for 5 years after account closure to meet AML compliance requirements.
• Communication Log Data: Support chat records and emails are retained for 2 years for reference and service improvement purposes.
• Inactive Account: Inactive account data of more than 3 years will be reviewed and deleted or anonymised in accordance with secure internal procedures.

When data is no longer required, ori777 will ensure it is securely deleted or anonymised using methods that meet industry security standards, so that it cannot be recovered or identified by any party.

Ori777 is a platform dedicated exclusively to individuals aged 18 and above. We do not intentionally collect or store any personal information from children or minors under the age of 18.

If we discover that personal information from someone under the age of 18 has been inadvertently collected, we will take immediate action to delete that information and close the account in question. Parents or guardians who suspect their child has registered on our platform without permission are encouraged to contact the ori777 support team immediately.

The ori777 platform is integrated with a range of third-party service providers to deliver a complete gaming experience, including game providers, payment gateways, and identity verification services. Each of these providers has their own privacy policy governing how they handle your data.

Although ori777 carefully selects third-party partners and ensures they comply with strict data protection standards, we are not responsible for the privacy practices of services operating outside our direct control. We recommend reading the privacy policy of each service provider you interact with through our platform.

All third-party integrations used by ori777 undergo a thorough security assessment before being permitted to operate within our platform environment. We regularly update our list of providers and terminate partnerships with any provider that no longer meets our security standards.

Ori777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology used, legal requirements, or any other relevant factors. The "Updated" date at the top of this document will always indicate the latest version of this Policy.

For changes deemed material — meaning changes that significantly affect how we use your personal data — ori777 will notify you via your registered email or through a prominent in-platform notification at least 14 days before such changes take effect.

Your continued use of the ori777 platform after any amendments to this Policy are published constitutes your acceptance of the latest version. If you do not agree with the changes made, you have the right to close your account and request the deletion of your data before the amendments take effect.

If you have any questions, concerns, or complaints regarding how ori777 handles your personal data, or if you wish to exercise any of your privacy rights, please do not hesitate to contact us.

The ori777 Data Protection Team can be reached through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the corner of the platform.
• Email: Send your privacy enquiries to [email protected] — we will respond within 2 business days.
• In-Platform Support: Log in to your account and submit a support ticket via the "Help" section for matters relating to your account data.