Privacy Policy

1. About This Policy

1.1 This Privacy Policy ("Policy") is issued by oribet ("we", "us", "our"), the operator of the online betting and casino platform accessible at oribet.one ("Platform"). It describes how oribet collects, processes, stores, and discloses personal data relating to individuals ("you", "Member", "User") who access or use the Platform.

1.2 This Policy should be read alongside the oribet Terms & Conditions, which govern the overall relationship between you and oribet. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

1.3 oribet is committed to handling personal data in a manner consistent with applicable data protection legislation and the data protection requirements of our international gaming licensing authority.

2. Data We Collect

oribet may collect and process the following categories of personal data:

oribet does not collect special categories of sensitive personal data (such as biometric data, health data, or religious beliefs) except where strictly required by law or regulatory mandate.

3. How We Collect Data

oribet collects personal data through the following means:

• Direct provision: Data you submit when registering, completing KYC verification, making deposits or withdrawals, placing bets, or contacting support.
• Automated technologies: Cookies, web beacons, server logs, and similar tracking technologies that record your interaction with the Platform — including pages visited, features used, and session duration.
• Third-party sources: Identity verification agencies, payment processors (including FPX, Maybank, CIMB, and Public Bank), and fraud prevention services that provide additional data points to verify your identity and protect Platform integrity.

4. How We Use Your Data

oribet uses your personal data for the following purposes:

• To create, verify, and maintain your oribet account.
• To process deposits, withdrawals, and bet settlements in MYR (Malaysian Ringgit).
• To carry out identity verification and KYC checks as required by our licensing authority.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct.
• To personalise your experience on the Platform, including relevant promotions where you have consented to marketing.
• To operate responsible gaming tools including deposit limits, session timers, and self-exclusion features.
• To provide customer support and respond to enquiries.
• To comply with legal and regulatory obligations, including reporting requirements under applicable anti-money laundering legislation.
• To analyse Platform usage and improve our products and services.

5. Legal Basis for Processing

oribet processes your personal data on the following legal grounds:

5.1 Contractual Necessity

Processing required to fulfil our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and bet settlement.

5.2 Legitimate Interests

Processing necessary to pursue legitimate business interests, including fraud prevention, Platform security, and internal analytics, provided these interests are not overridden by your data protection rights.

5.3 Legal Obligation

Processing required to comply with applicable law and regulatory requirements, including identity verification, anti-money laundering obligations, and reporting to our licensing authority.

5.4 Consent

Where processing is based on consent — such as receiving marketing communications — you may withdraw your consent at any time by contacting oribet support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Data Sharing & Disclosure

oribet does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: FPX, Maybank, CIMB, Public Bank, Touch 'n Go, and Boost — to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and fraud screening services used to verify your identity and meet regulatory requirements.
• IT and hosting providers: Infrastructure and hosting partners who process data on our behalf under strict data processing agreements.
• Gaming platform providers: Game studios and casino software providers who operate games accessible via oribet, to the extent required for game operation and dispute resolution.
• Regulators and law enforcement: Where we are required by law, court order, or regulatory instruction to disclose your data.
• Responsible gaming organisations: Where you have requested self-exclusion or intervention services.

All third-party processors engaged by oribet are contractually obligated to process your data only for specified purposes and to maintain appropriate security standards.

7. Cookies

7.1 oribet uses cookies and similar technologies to operate the Platform effectively. Cookies are small text files stored on your device that allow the Platform to recognise your browser across sessions.

7.2 oribet uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled as they are essential for login session management, security tokens, and core feature operation.
• Performance cookies: Collect anonymised data about how Members use the Platform — which pages are visited most, where errors occur — to help oribet improve the user experience.
• Functional cookies: Remember your preferences such as language settings and layout choices to personalise your experience across sessions.

7.3 oribet does not place third-party advertising or cross-site tracking cookies. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair Platform functionality.

8. Data Retention

8.1 oribet retains your personal data for as long as your account is active and for a minimum period thereafter as required by our licensing authority and applicable law. In practice, this typically means:

• Account and identity data: Retained for a minimum of 5 years from account closure.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Betting records: Retained for a minimum of 3 years from the date of each bet.
• Support communications: Retained for 2 years from the close of each support case.

8.2 Where retention beyond these minimum periods is required for ongoing legal proceedings, regulatory investigations, or dispute resolution, data will be held until such matters are fully resolved.

9. Security

9.1 oribet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the oribet Platform.
• Encrypted storage of sensitive data fields, including passwords and financial identifiers.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security audits and penetration testing conducted by independent third parties.
• Multi-factor authentication requirements for administrative access to data systems.

9.2 Notwithstanding these measures, no internet-based system can guarantee absolute security. oribet encourages Members to use strong, unique passwords for their oribet login and to log out from shared devices after each session.

10. Your Data Rights

Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data held by oribet:

• Right of access: You may request a copy of the personal data oribet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request that oribet delete your personal data. This right may be limited where retention is required by law or regulatory obligation.
• Right to restriction: You may request that oribet limit the processing of your data while a dispute regarding its accuracy or lawfulness is resolved.
• Right to data portability: Where technically feasible, you may request your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on legitimate interests. oribet will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the oribet support team using the email address displayed in plain text in the footer. We will respond within 30 days of receiving a valid request.

11. Children and Minors

11.1 The oribet Platform is strictly for individuals aged 21 years and above. oribet does not knowingly collect personal data from persons under the age of 21.

11.2 If oribet becomes aware that personal data has been collected from a person under 21, it will immediately suspend the relevant account, delete the associated personal data, and refund any remaining real-money balance to the source of deposit.

11.3 If you believe a minor has accessed the Platform using a falsified identity, please notify oribet immediately via the support email in the footer.

12. International Data Transfers

12.1 oribet's servers and some of our third-party service providers may be located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide equivalent data protection standards to those applicable under our licensing framework, oribet will implement appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to protect your data.

12.2 By using the oribet Platform, you acknowledge that your personal data may be transferred and processed in countries outside your country of residence.

13. Changes to This Policy

13.1 oribet reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Members via the email address registered to their account and by posting the revised Policy on this page with an updated effective date.

13.2 Your continued use of the oribet Platform following notification of a Policy update constitutes acceptance of the revised terms. If you do not agree to the revised Policy, you should close your oribet account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or oribet's data practices, please contact the oribet Data Protection team. Our support email address is displayed in plain text in the footer of every page on this site.

For responsible gaming enquiries, please visit our Responsible Gaming page.

For the full Terms and Conditions governing your use of oribet, please visit our Terms & Conditions page.