Privacy Policy

1. Data Controller

oren88 (referred to in this Privacy Policy as "oren88", "we", "us", or "our") is the data controller responsible for the personal data of individuals who register accounts on, or otherwise interact with, the oren88 Platform at oren88.win.

As data controller, oren88 determines the purposes and means by which personal data is processed in connection with the operation of the Platform. If you have questions or concerns regarding the processing of your personal data, please refer to Section 14 (Contact Us) of this Policy.

2. Personal Data We Collect

oren88 collects the following categories of personal data in connection with the operation of the Platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents provided during KYC verification.
• Contact Data: Email address, Malaysian mobile phone number, and correspondence address.
• Account Data: Username, account registration date, account status, login history, and session activity.
• Financial Data: Deposit and withdrawal transaction records, payment method details (e.g., Touch n Go eWallet, Boost, bank account reference numbers), wallet balance history, and bonus transaction records.
• Gaming Data: Game history, bet records, wagering patterns, session durations, responsible gaming tool usage, and self-exclusion status.
• Technical Data: IP address, device identifiers, browser type and version, operating system, geolocation data (where consented to or inferred from IP), and cookie data.
• Communications Data: Records of communications with oren88 customer support, including live chat transcripts, emails, and any feedback submitted through the Platform.

3. How We Collect Personal Data

oren88 collects personal data through the following means:

• Direct collection: Information you provide at the time of Account registration, during KYC verification, when making deposits or withdrawals, when contacting customer support, or when responding to promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and analytics tools.
• Third-party sources: Identity and fraud screening data obtained from third-party KYC and anti-money laundering (AML) service providers; payment transaction data received from payment gateway operators; and geolocation data inferred from technical identifiers.

4. Purpose & Legal Basis for Processing

oren88 processes personal data for the following purposes and relies on the following legal bases:

• Account administration and service delivery — necessary for the performance of our contract with you as a registered Player.
• Identity and age verification (KYC) — necessary for compliance with legal obligations applicable to oren88 under its gaming licence, including AML and counter-terrorism financing requirements.
• Payment processing — necessary for the performance of our contract with you in relation to deposit and withdrawal transactions.
• Fraud prevention and security monitoring — necessary for the purposes of oren88's legitimate interests in maintaining Platform integrity and protecting Players from fraudulent activity.
• Responsible gaming compliance — necessary for compliance with oren88's legal and regulatory obligations to implement player protection measures.
• Marketing communications — based on your consent, where you have elected to receive promotional communications from oren88. You may withdraw this consent at any time.
• Platform analytics and improvement — necessary for oren88's legitimate interests in understanding Platform usage patterns and improving the user experience.

5. Data Sharing & Disclosure

5.1 oren88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.2 oren88 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers — Touch n Go eWallet, Boost, and banking partners, for the purpose of processing deposit and withdrawal transactions.
• KYC and AML service providers — third-party identity verification and fraud screening services used to fulfil oren88's regulatory compliance obligations.
• Game content providers — where required to deliver game services, game providers may receive limited technical data necessary to operate the game within the oren88 Platform.
• Regulatory and law enforcement authorities — where oren88 is required by law, court order, or regulatory direction to disclose personal data.
• Professional advisers — lawyers, auditors, and insurers where necessary in connection with professional services engaged by oren88.

5.3 In the event of a merger, acquisition, or sale of all or part of oren88's business, personal data held by oren88 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6. International Data Transfers

6.1 Some of the third parties with whom oren88 shares personal data may be located outside Malaysia. Where personal data is transferred internationally, oren88 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards.

6.2 Such safeguards may include the implementation of standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms. If you require further information regarding the safeguards applicable to a specific international transfer, please contact us as set out in Section 14.

7. Data Retention

7.1 oren88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

7.2 Account data and gaming records are generally retained for a minimum period of five (5) years following Account closure, in order to meet obligations under anti-money laundering legislation and gaming regulatory requirements.

7.3 Where personal data is no longer required for any lawful purpose, oren88 will delete or anonymise it in a secure manner.

8. Cookies & Tracking Technologies

8.1 The oren88 Platform uses cookies and similar tracking technologies to operate core Platform functionality, remember your preferences, maintain your login session, and collect analytical data about Platform usage.

8.2 The categories of cookies used on the oren88 Platform include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without impairing core functionality, including the login session.
• Analytical cookies: Used to collect aggregate data on how visitors use the Platform, enabling oren88 to identify and improve areas of the user experience.
• Functional cookies: Used to remember your preferences and personalise your experience on the Platform.

8.3 You may configure your browser settings to refuse or delete cookies; however, disabling strictly necessary cookies may prevent the Platform from functioning correctly, including the ability to log in to your oren88 Account.

9. Your Data Rights

Subject to applicable data protection laws, you may have the following rights in respect of your personal data held by oren88:

• Right of access: You may request a copy of the personal data oren88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to oren88's overriding legal retention obligations.
• Right to restriction: You may request that oren88 restrict the processing of your personal data in certain circumstances.
• Right to data portability: You may request that oren88 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us as described in Section 14. oren88 will respond to valid requests within 30 days, subject to identity verification requirements.

10. Children's Privacy

The oren88 Platform is strictly intended for individuals aged 21 and above. oren88 does not knowingly collect personal data from individuals under the age of 21. If oren88 becomes aware that it has inadvertently collected personal data from a minor, that data will be deleted immediately and the associated Account will be permanently closed. If you have reason to believe that a minor has registered an Account on the oren88 Platform, please contact us immediately at the address set out in Section 14.

11. Security Measures

11.1 oren88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS encryption for all data transmitted between your browser and the oren88 Platform;
• Password hashing using industry-standard algorithms — plain-text passwords are never stored;
• OTP two-factor authentication for new device and suspicious login detection;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure.

11.2 Notwithstanding the measures described above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, oren88 will notify you and the relevant regulatory authority in accordance with applicable legal requirements.

12. Marketing Communications

12.1 Where you have provided your consent during Account registration or subsequently, oren88 may send you marketing communications regarding promotions, new game launches, VIP offers, and other Platform updates by email or SMS.

12.2 You may opt out of marketing communications at any time by following the unsubscribe instructions included in any marketing email, by adjusting your communication preferences within your Account settings, or by contacting oren88 customer support.

12.3 Opting out of marketing communications does not affect the delivery of transactional or service-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are necessary for the operation of your Account.

13. Changes to This Privacy Policy

13.1 oren88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

13.2 Where changes to this Policy are material, oren88 will endeavour to provide reasonable advance notice by posting a notice on the Platform or by sending an email to the address registered to your Account. Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of that revision.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way oren88 processes your personal data, please contact our data protection team at:

support@oren88.win

Please include your registered email address and a clear description of your request or concern. oren88 will acknowledge receipt of your request within 3 business days and aim to provide a full response within 30 days. Complex requests may require additional time, in which case oren88 will notify you of the expected timeline.

oren88 will never ask for your Account password via email or any other channel. Please do not include your password in any communications with oren88.