oren333 Privacy Policy

1 Data Controller

For the purposes of this Privacy Policy, the data controller is the operator of the oren333 platform at oren333.win, licensed under applicable international gaming authority frameworks. When this Policy refers to "oren333", "we", "us", or "our", it refers to that licensed operator in its capacity as the entity responsible for determining the purposes and means of processing your personal data.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you may contact oren333 at any time via live chat on the Platform or by email at [email protected].

2 Data We Collect

oren333 collects personal data in the following categories, depending on how you interact with the Platform:

Registration and Account Data:

• Full name, date of birth, and nationality.
• Email address and contact number.
• Username and encrypted password.
• Residential address (required for KYC verification).

Identity Verification (KYC) Data:

• Copies of government-issued identification documents (e.g., Malaysian National Identity Card, passport).
• Proof of address documentation.
• Payment method verification documents where required under anti-money laundering obligations.

Financial Data:

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers.
• Account balance history and wagering records.

Technical and Usage Data:

• IP address and approximate geolocation.
• Device type, operating system, and browser information.
• Session logs, including login timestamps and pages visited.
• Game play data including bet amounts, game titles, and outcomes.

Communications Data:

• Records of correspondence with oren333 customer support, including live chat transcripts and email exchanges.

3 How We Use Your Data

oren333 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your oren333 player account, including authentication and credential recovery.
• Service Delivery: To provide access to casino games, sportsbook markets, lottery, arcade, and all other features of the Platform.
• Financial Processing: To process deposits and withdrawals in MYR via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, Maybank, CIMB, FPX, and Public Bank.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with Know Your Customer (KYC) obligations under our gaming licence.
• Anti-Money Laundering (AML): To monitor transactions and detect suspicious activity in compliance with international AML obligations.
• Responsible Gaming: To identify patterns of play that may indicate gambling-related harm and to administer self-exclusion, deposit limit, and cooling-off requests.
• Customer Support: To respond to your enquiries, resolve disputes, and administer the formal complaints procedure.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time by contacting support.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the oren333 Platform experience.
• Legal Compliance: To comply with applicable laws, gaming regulations, court orders, and regulatory authority requests.

4 Legal Basis for Processing

oren333 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the player account agreement, including game access, payment processing, and account administration.
• Legal Obligation: Processing necessary to comply with gaming licence conditions, KYC requirements, AML regulations, and applicable law.
• Legitimate Interests: Processing conducted for oren333's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing conducted on the basis of your explicit consent, including receipt of marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Disclosure

oren333 does not sell, rent, or trade your personal data. We may share data with the following categories of third parties, solely to the extent necessary for the purposes described in this Policy:

• Payment Processors: Financial institutions and payment gateway providers (including those facilitating Touch 'n Go eWallet, Boost, Maybank, CIMB, FPX, and Public Bank transactions) to process deposits and withdrawals.
• KYC and AML Service Providers: Identity verification and fraud detection partners engaged to fulfil regulatory compliance obligations.
• Game Software Providers: Third-party game developers and live casino operators who supply certified games to the oren333 Platform under contractual data protection terms.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and platform technology partners who process data solely on our documented instructions.
• Regulatory Authorities: Gaming licensing authorities, financial intelligence units, and law enforcement agencies where disclosure is required by law or regulation.

All third-party data processors engaged by oren333 are subject to binding data processing agreements that require them to handle personal data only in accordance with our documented instructions and applicable data protection law.

6 Cookies and Tracking Technologies

oren333 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Collect aggregated, anonymised data about how players use the Platform to help us identify performance issues and improve the user experience.
• Functional Cookies: Remember your preferences such as language settings, last visited game category, and display options to provide a more personalised experience.
• Marketing Cookies: Used with your consent to display relevant promotional offers and track the effectiveness of oren333 marketing communications.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the oren333 Platform. Disabling other cookie categories will not affect your ability to access the Platform but may reduce personalisation features.

7 Data Retention

oren333 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and Transaction Data: Retained for a minimum of five (5) years following account closure, in compliance with gaming licence and anti-money laundering record-keeping obligations.
• KYC Documentation: Retained for the period required by the applicable gaming authority, typically five (5) years from the date of verification.
• Customer Support Records: Retained for three (3) years following resolution of the relevant enquiry or complaint.
• Marketing Consent Records: Retained until consent is withdrawn, after which records of the withdrawal are retained for two (2) years for compliance documentation purposes.
• Technical Log Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Where a legal dispute, regulatory investigation, or fraud investigation is ongoing, oren333 may retain relevant data beyond the standard retention periods specified above until the matter is fully resolved.

8 Data Security

oren333 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and oren333 servers.
• Encrypted storage of passwords using industry-standard hashing algorithms.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security audits and penetration testing of Platform infrastructure.
• Incident response procedures for the identification, containment, and notification of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, oren333 will notify you without undue delay in accordance with applicable data protection regulations.

9 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that oren333 holds about you:

• Right of Access: To request a copy of the personal data oren333 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal or regulatory retention obligations.
• Right to Restriction: To request that oren333 restrict the processing of your data in certain circumstances.
• Right to Data Portability: To request a structured, machine-readable copy of data you provided to oren333 on the basis of contract or consent.
• Right to Object: To object to processing conducted on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the oren333 support team via live chat on the Platform or by email. oren333 will respond to verified requests within 30 days. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or refused, with reasons provided.

10 Children's Privacy

oren333 is strictly an adult platform. Registration and use of the Platform is limited to individuals aged 21 years or older. oren333 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, the relevant account will be immediately suspended, any associated balance will be placed on hold pending investigation, and the data will be deleted in accordance with applicable law. If you believe a minor has accessed the Platform, contact oren333 support immediately.

11 International Data Transfers

Personal data collected by oren333 may be transferred to and processed in countries outside Malaysia, including the jurisdiction in which oren333 holds its international gaming licence and the locations where our third-party service providers operate. Where such transfers occur, oren333 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect your personal data to a standard equivalent to that applied within Malaysia.

12 Updates to This Policy

oren333 may update this Privacy Policy periodically to reflect changes in our data practices, Platform features, or applicable legal requirements. Material changes will be communicated to registered players via a notice upon login or by email to the registered address on their Account.

The effective date at the top of this page indicates when the current version of this Policy was last updated. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the personal data oren333 holds about you, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the oren333 Platform

oren333 aims to respond to all privacy-related enquiries within 14 business days. Where a request involves complex or voluminous data, we will notify you of any extension within the initial 14-day period. If you are dissatisfied with our response, you may escalate your complaint to the relevant gaming or data protection authority in the jurisdiction applicable to your circumstances.