Privacy Policy

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, including name, identification number, contact details, financial account information, and behavioral data associated with a specific account.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means ora788, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of ora788 under a contractual relationship and in accordance with our instructions.
• "Platform" means the ora788 website at https://ora788.cam, including all subdomains and associated digital services.
• "KYC Data" means identity-verification documentation provided by you in fulfilment of our Know Your Customer obligations, including copies of government-issued identification and proof of address.
• "Cookies" means small text files placed on your device by the Platform to store session preferences, authentication tokens, and aggregated usage analytics.

Personal Data We Collect

The following table outlines the categories of personal data that ora788 may collect from you, along with examples of the specific data points within each category:

How We Collect Your Data

ora788 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technologies: Data collected automatically as you navigate the Platform, including session cookies, server access logs, and analytics scripts that record technical and behavioral information.
• Payment Processors: Transactional data returned to us by payment partners (including local Indonesian banks such as BCA, BRI, BNI, Mandiri, CIMB Niaga, and e-wallets such as OVO, DANA, and GoPay) to confirm the status, timing, and amount of deposits and withdrawals.
• Identity Verification Partners: Data returned by our KYC and anti-fraud service providers when validating your identity documents and confirming your eligibility to use the Platform.
• Third-Party Game Providers: Aggregated game session data (rounds played, bet amounts, return-to-player outcomes) shared by our integrated game studios such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft for settlement, dispute resolution, and responsible gaming monitoring.

Purpose of Data Processing

We process your personal data only for clearly defined and legitimate purposes. The primary purposes for which ora788 uses your data are as follows:

• Account Administration: Creating, maintaining, and securing your registered Account, verifying your identity, and managing your account settings and preferences.
• Service Delivery: Processing deposits and withdrawals, settling bets, crediting bonuses, providing live customer support, and delivering the full range of gaming services available on the Platform.
• Legal and Regulatory Compliance: Fulfilling our obligations under applicable anti-money laundering (AML) regulations, responsible gaming requirements, and any other legal obligations, including responding to lawful requests from competent authorities.
• Fraud Prevention and Security: Detecting, investigating, and preventing unauthorized access, fraudulent transactions, bonus abuse, collusion, and other prohibited activities as defined in our Terms and Conditions.
• Responsible Gaming: Monitoring player activity patterns to identify indicators of problem gambling, enforcing player-set deposit and loss limits, and facilitating self-exclusion requests in accordance with our Responsible Gaming policy.
• Platform Improvement: Analyzing aggregated usage data and behavioral patterns to improve the functionality, performance, and user experience of the ora788 Platform.
• Marketing Communications: Sending promotional offers, seasonal campaigns (such as those aligned with Idul Fitri, Ramadhan, or Indonesian Independence Day), and personalized bonus notifications — but only where you have provided your consent and have not opted out.
• Dispute Resolution: Maintaining records sufficient to investigate and resolve any dispute raised by you or by ora788 concerning account activity, transactions, or game outcomes.

Legal Basis for Processing

Where recognized data protection principles require us to identify a legal basis for each processing activity, ora788 relies on the following grounds:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration — for example, verifying your identity, processing your transactions, and settling your bets.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing for purposes that serve our legitimate business interests without overriding your privacy rights — for example, fraud detection, platform security, and internal analytics to improve our services.
• Consent: Processing for optional purposes such as direct marketing communications, where we have obtained your clear and freely given consent. You may withdraw your consent at any time by contacting our support team or updating your communication preferences within your Account.

Data Sharing & Disclosure

ora788 does not sell, rent, or license your personal data to any third party for their own marketing or commercial purposes. We may, however, share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment Service Providers: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, BSI) and e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja) to process your financial transactions. These partners receive only the minimum data required to complete the transaction.
• KYC and AML Providers: Identity verification and fraud-screening service providers that assist us in meeting our Know Your Customer and anti-money laundering obligations.
• Game Content Providers: Licensed game studios and live casino operators (such as Pragmatic Play, Evolution Gaming, and Spribe) that require session identifiers and bet records to deliver their services and resolve disputes.
• IT and Infrastructure Partners: Cloud hosting, content delivery, and cybersecurity service providers that process data on our behalf in their capacity as Data Processors, under strict contractual confidentiality obligations.
• Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, courts, or other government authorities where disclosure is required by law or is necessary to protect the rights, property, or safety of ora788, our players, or the public.
• Professional Advisors: Auditors, legal counsel, and compliance consultants who require access to relevant records in the course of providing professional services to ora788, subject to professional secrecy obligations.

In each case where data is shared with a third party, ora788 requires that party to maintain appropriate technical and organizational security measures and to use the data solely for the specified purpose.

International Data Transfers

The ora788 Platform serves players primarily located in Indonesia, and our operations are centered on the Indonesian market. However, certain service providers and technology partners with whom we work may be located in, or operate infrastructure in, jurisdictions outside of Indonesia. Where personal data is transferred to a jurisdiction that may not offer the same level of data protection as Indonesia, ora788 takes appropriate steps to ensure that adequate safeguards are in place, including:

• Entering into data processing agreements with recipient parties that contractually require them to protect your data to the same standard as this Policy.
• Transferring data only to jurisdictions or organizations that have implemented recognized security frameworks and adhere to applicable international data protection standards.
• Limiting transferred data to the minimum necessary for the purpose of the transfer.

By using the ora788 Platform, you acknowledge that your personal data may be processed outside of Indonesia in the circumstances described above.

Data Retention

ora788 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active Account is retained for the full duration of the account relationship.
• Transaction Records: Financial transaction records, including deposit, withdrawal, and betting history, are retained for a minimum of five (5) years from the date of the transaction in order to satisfy anti-money laundering and audit requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the closure of your Account, or longer if required by applicable law or ongoing regulatory proceedings.
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the last communication, to facilitate dispute resolution and service quality management.
• Marketing Data: Where you have consented to marketing communications, your contact preferences and related data are retained until you withdraw your consent or for two (2) years following your last interaction with a marketing communication, whichever is earlier.
• Closed Account Data: Following account closure, a pseudonymized record of your account history may be retained for a period of up to seven (7) years for legal, audit, and responsible gaming monitoring purposes.

When personal data is no longer required, it is securely deleted or anonymized so that it can no longer be associated with any individual.

Cookies & Tracking Technologies

ora788 uses cookies and similar tracking technologies to support the operation, security, and improvement of the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in securely and security cookies that protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as your chosen display configuration and responsible gaming limits, so that they persist between sessions.
• Analytical Cookies: Used in aggregate to understand how players navigate the Platform — which pages are most visited, where users encounter difficulties, and how session flows can be improved. These cookies do not identify you personally and the data is processed in anonymized form.
• Security & Fraud Detection Cookies: Used to identify unusual activity patterns, detect automated bots, and flag potentially fraudulent behavior at the session level.

ora788 does not deploy third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will affect your ability to log in and use core Platform features.

Your Privacy Rights

As an ora788 user, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within a reasonable timeframe and may require identity verification before processing sensitive requests.

Security Measures

ora788 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, and destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ora788 Platform is encrypted using 256-bit Transport Layer Security (TLS), preventing interception during transit.
• Data-at-Rest Encryption: Sensitive personal data stored on our servers, including financial records and KYC documents, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their Accounts to provide an additional layer of protection against unauthorized access.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the unlikely event of a data breach that poses a material risk to your rights, ora788 will notify affected users and relevant authorities in accordance with applicable legal obligations.

While we take all reasonable precautions, no digital platform can guarantee absolute security. You are also responsible for safeguarding your Account credentials and for notifying us immediately if you suspect any unauthorized access to your Account.

Children's Privacy

The ora788 Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an Account or use any service on the Platform.

If ora788 becomes aware that personal data has been collected from an individual under the age of 21 without the requisite verification, we will take immediate steps to delete that data, close the associated Account, and return any deposited funds in accordance with our Terms and Conditions. If you believe that a minor has registered an Account on our Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Third-Party Links

The ora788 Platform does not contain links to third-party websites for commercial or affiliate purposes. Where references to external entities appear in content (such as mentions of game studios like Pragmatic Play or Evolution Gaming, or payment partners such as BCA and OVO), these references are informational only and do not constitute hyperlinks to those parties' own websites or services.

ora788 is not responsible for the privacy practices, content, or security of any third-party services you may access independently, and we encourage you to review the privacy policies of any external service you choose to use in connection with your gaming activities.

Amendments to This Policy

ora788 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technological developments, or applicable legal requirements. When a material change is made, we will provide reasonable prior notice through an on-platform notification and, where appropriate, by email to the address associated with your Account.

The revised Policy will take effect on the date specified in the updated document. By continuing to use the Platform after the effective date of any amendment, you agree to the revised Privacy Policy. If you do not accept the revised terms, you should stop using the Platform and contact us to close your Account. We recommend reviewing this Policy periodically to stay informed of how we protect your information.

Contact & Data Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data ora788 holds about you, please contact our Data Protection team using the details below. All data subject requests will be handled confidentially and with priority.

Platform: https://ora788.cam
Data Inquiries Email: [email protected]
Support Hours: 24/7, Western Indonesia Time (WIB, UTC+7). Support is also available during WITA (UTC+8) and WIT (UTC+9) hours for players in Bali, Sulawesi, Maluku, and Papua.

We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 days. For complex requests, we will keep you informed of progress throughout the process.