Data Protection

Privacy Policy oribet – Malaysian User Data Protection

Oribet treats your privacy as a non-negotiable priority. This document transparently explains how we collect, process, store, and protect your personal information when you use our platform.

Updated: January 2026

This policy applies to all registered users and visitors of the oribet.bar website and the Oribet mobile app. By continuing to use the platform, you agree to the terms stated herein.

Oribet's Commitment to Your Privacy

Six core principles that guide how we handle users' personal data

256-Bit SSL Encryption

All data transmitted between your device and Oribet servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks to ensure your information cannot be intercepted by third parties.

No Sale of Data to Third Parties

Oribet has never and will never sell, rent, or share your personal data with any third party for marketing purposes without your explicit consent. Your data is not a product we trade.

Secure Data Storage

All personal information is stored on servers protected by multi-layered firewalls, strict access controls, and regular security audits. Sensitive financial details are not stored in our systems — they are processed directly through certified payment providers.

Right of Access & Correction

You have the right to view, update, or request corrections to your personal data at any time. Such requests will be processed within seven business days through Oribet's official support channels.

Immediate Incident Response

In the event of any data breach involving your information, the Oribet security team will notify you within 72 hours and take immediate action to contain and remediate the situation.

Right to Data Deletion

You may request the deletion of your personal data upon closing your Oribet account, subject to minimum legal record retention requirements. We only retain data that is strictly necessary and for no longer than required.

1Personal Information We Collect

Oribet collects your personal information through several means as you interact with our platform. We only collect data that is genuinely necessary to provide a safe, seamless, and responsible service to you as a user in Malaysia.

Below are the main categories of information we collect:

Data Category Examples of Information Collection Method
Identity Information Full name, date of birth, IC number / passport number Registration & KYC
Contact Information Phone number, email address, residential address Account registration
Financial Information Bank account number, account holder name Deposit / Withdrawal Process
Usage Data Wagering records, game history, login logs Activity on the platform
Technical Data IP address, device type, web browser, location Automatically during use

The information you provide during registration and the KYC process is mandatory to enable us to meet legal compliance requirements and securely process your financial transactions.

Note: Credit or debit card details are not stored directly in the Oribet system. All payment information is processed through certified payment providers that maintain their own high security standards.


2How We Use Your Data

Oribet uses collected personal information solely for legitimate and necessary purposes in operating the platform properly. We do not use your data for purposes to which you have not consented.

  • Account Management: Process registration, verify identity through KYC, and manage your user account including profile information updates.
  • Transaction Processing: Process deposits, withdrawals, and all financial activities related to your account securely and in a timely manner.
  • Customer Support: Provide effective assistance when you contact our support team — previous communication records help us better understand the context of your issue.
  • Platform Security: Detect and prevent fraud, money laundering, multiple account ownership, and other suspicious activities that could compromise the security of all users.
  • Legal Compliance: Fulfil the reporting and record-keeping obligations required by applicable laws governing online platform operations.
  • Service Improvement: Analyse usage patterns in aggregate (not individually) to understand user needs and improve the overall platform experience.
  • Marketing Communications: Send information about the latest promotions and offers — but only if you have consented to receive such communications. You may withdraw this consent at any time.

3Sharing Information with Third Parties

Oribet does not share, sell, or disclose your personal information to third parties except in the limited situations described below. In all such cases, data sharing is carried out only to the extent strictly necessary:

  • Payment Service Providers: Transaction details required for processing are shared with payment providers such as FPX, DuitNow, and e-wallet providers to process your deposits and withdrawals.
  • Technology Service Providers: Third parties that assist in operating the platform's technical infrastructure, such as cloud services and cybersecurity providers, are bound by strict confidentiality agreements.
  • Legal Requirements: If required by a court order, legal directive, or authorized enforcement body, Oribet will disclose only the information necessary within the scope of that order.
  • Protection of oribet's Rights: In cases of fraud, litigation, or the protection of Oribet's legitimate interests, relevant data may be shared with legal counsel or dispute resolution bodies.

Our Guarantee: oribet has never and will never sell your data to advertisers, data brokers, or any party not directly connected to the operation of the platform. This is our unwavering commitment.


4oribet's Data Security Measures

Protecting your data is more than a legal obligation for oribet — it is a core value we uphold. We continuously invest in best-in-class security technology and processes to ensure your information remains safe at all times.

  • Data Encryption in Transit: All communications between your device and Oribet servers use TLS 1.3 protocol with 256-bit encryption — making interception by unauthorized parties virtually impossible.
  • Data Encryption at Rest: Sensitive data stored in our databases is also encrypted. Even if our servers were physically accessed without authorization, the data cannot be read without the correct encryption key.
  • Strict Access Control: Only staff with a legitimate business need are granted access to users' personal data. All access is logged and audited on a regular basis.
  • Regular Security Testing: oribet conducts regular penetration testing and security audits by independent cybersecurity experts to identify and remediate system vulnerabilities.
  • Two-Factor Authentication: Two-factor authentication (2FA) is available for all user accounts as an additional security layer, and we strongly encourage you to enable it.

While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. We encourage you to also take personal protective measures, such as using a strong password and not sharing your login credentials.


5Cookies and Tracking Technologies

Oribet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

  • Essential Cookies: Required for core platform functions such as login, session security, and account preferences. These cookies cannot be disabled without affecting platform functionality.
  • Analytics Cookies: Helps us understand how users interact with the platform for improvements — this data is aggregated and does not identify you individually.
  • Preference Cookies: Store your preferences such as language, display theme, and display settings to deliver a more personalised experience on your next visit.

Cookie Controls: You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect certain functions within the Oribet platform.


6Your Rights as a User

As an Oribet platform user in Malaysia, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests are processed within 7 business days.

Right to Rectification

If your data is inaccurate or out of date, you may request a correction and we will update it promptly.

Right to Erasure

You may request data deletion upon closing your account, subject to minimum statutory retention requirements.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without providing any justification.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform if needed.

Right to Restrict Processing

In certain circumstances, you may request that the processing of your data be temporarily restricted during a dispute or investigation.

To exercise any of the above rights, contact the Oribet customer support team via live chat or our official email. Please provide sufficient identity verification information so we can process your request accurately and securely.


7Child Data Protection

The oribet platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

Important Warning: If we determine that personal data of a child has been collected without the knowledge or consent of a parent or guardian, we will delete that data immediately and close the associated account.

If you are a parent or guardian and discover that your underage child has registered on the Oribet platform, please contact us immediately through our official support channels for urgent data deletion.


8Amendments to the Privacy Policy

Oribet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology used, legal requirements, or legitimate business needs.

  • Material amendments to this policy will be communicated to you via the email registered to your account or through a prominent in-platform notification at least 14 days before the amendment takes effect.
  • The "Updated" date at the top of this document will always reflect the date of the latest version of this policy.
  • Your continued use of the oribet platform after any amendment takes effect constitutes your acceptance of the updated policy.
  • If you do not agree with the amendments, you have the right to close your account before the effective date of those changes.

9How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by Oribet, please contact us through the following channels:

  • Live Chat: The fastest channel — our support team is available 24/7 via the live chat button within the Oribet platform. Ideal for urgent inquiries and general questions.
  • Privacy Email: For official requests regarding personal data such as access, correction, or deletion, send an email to [email protected] with the subject "Personal Data Request".

Response Time: oribet aims to respond to all privacy-related enquiries within 3 business days. More complex requests such as data exports or deletion disputes may require up to 14 business days to be fully resolved.

This Privacy Policy is a living document that reflects Oribet's commitment to continually improving our data protection practices. Thank you for trusting Oribet with your personal information — we take that trust very seriously.

FAQ – Oribet Privacy Policy

Answers to the most frequently asked questions about privacy and data

No. Your sensitive bank account details are not stored directly in Oribet's systems. All financial transactions are processed through certified third-party payment providers such as FPX and DuitNow processors, which maintain their own PCI-DSS security standards. We only retain transaction records (amount, date, status) for your account history purposes.

Yes, you may request deletion of your personal data upon closing your account. However, certain categories of data are required by law to be retained — typically financial transaction records for a minimum period as stipulated by compliance requirements. Beyond those categories, your data will be fully deleted within 30 days of a valid request being received.

No. Oribet only sends marketing communications to users who have consented to receive them during registration or via the communication preference settings in their account. You may withdraw this consent at any time through your account settings page or by contacting our customer support. Transactional and security emails (such as deposit confirmations and login notifications) will still be sent as they are critical to your account security.

In the event of a data breach involving your information, the Oribet security team will: (1) immediately contain the incident and block unauthorized access, (2) assess the scope and impact of the breach, (3) notify affected users within 72 hours via their registered email, and (4) take the necessary remediation steps including resetting passwords if required. We will also report serious incidents to the relevant authorities as required by law.

Yes, Oribet collects IP addresses as part of standard technical data for security purposes — specifically to detect suspicious logins from unusual locations and to prevent fraud. This information is not used to pinpoint your exact location or for location-based advertising. It is a standard security measure also used by other online services such as internet banking.

Your Data Is Safe with Oribet

Privacy is not just a written policy for us — it is a daily practice we live by. Join over 500,000 users in Malaysia who trust oribet for a safe and responsible gaming experience.

Want to know more? Review Terms & Conditions or visit FAQ us.

Bahasa Melayu