Privacy Policy

Oribet Privacy Policy – Malaysia User Data Protection

Oribet is committed to protecting the privacy and personal data of every user. This document transparently explains how we handle your information from start to finish.

Updated: 1 January 2026
256-bit SSL Encryption All data transmitted securely
Data Not Sold No sharing without consent
Full Control in Your Hands Right to access, amend, and delete
PDPA Compliance Complying with local regulations

Oribet Privacy Policy

At Oribet, we understand that your trust cannot be bought — it must be earned through real action. This Privacy Policy was written not merely to satisfy legal requirements, but because we genuinely care about how your personal data is handled. Every provision in this document reflects actual practices we carry out daily in the operation of the Oribet platform.

Important Note: By using the Oribet platform, you agree to this Privacy Policy. If you have any questions or concerns, our support team is available 24 hours a day via live chat on the platform.

1Introduction and Scope of This Policy

This Privacy Policy is issued by Oribet and applies to all users who access or use our platform via the oribet.vin website or the Oribet mobile app. It covers all categories of personal data we collect, store, process, and share in the course of providing our services.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your personal data is processed lawfully, fairly, and transparently. In the context of this policy, "personal data" refers to any information that can identify you directly or indirectly as an individual.

When we say we protect your data, it is not an empty slogan. We invest in robust security infrastructure, conduct regular internal audits, and ensure every staff member who handles user data undergoes ongoing privacy training.

2Types of Personal Data We Collect

We only collect data that is genuinely necessary to provide, manage, and improve Oribet's services to you. The following are the categories of data we collect:

Data Categories Examples of Information Purpose of Collection
Identity Data Full name, date of birth, identification card number KYC and account verification
Contact Data Email address, phone number Communication and verification
Financial Data Bank account number, e-wallet information Processing deposits and withdrawals
Technical Data IP address, device type, web browser Platform security and improvements
Usage Data Game records, betting history, session duration Responsible gaming and analytics
Location Data State, country based on IP Jurisdictional legal compliance

We never collect sensitive data such as medical information, political views, or religious beliefs. Biometric data is only collected when you use face or fingerprint authentication on your own device, and that data is not stored on our servers.

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not process your data for any undisclosed purpose without obtaining fresh consent from you. The primary purposes of data use are as follows:

  • Account management: Registering, verifying, and maintaining your account so you can use all platform features without interruption
  • Transaction processing: Managing your deposits, withdrawals, and financial history accurately and securely
  • Identity verification (KYC): Ensuring you meet the age and legal eligibility requirements before using the platform
  • Platform security: Detecting and preventing fraud, money laundering, and unauthorised access to your account
  • Service communications: Sending important notifications related to your account, transactions, and platform updates
  • Relevant marketing: Informing you about promotions and offers that may interest you — only with your consent
  • Platform improvements: Analysing usage patterns to continuously improve your experience over time
  • Responsible Gaming: Monitoring wagering behaviour to identify users who may need assistance

You may withdraw consent to receive marketing communications at any time by contacting our support team or through your account settings on the platform.

4Sharing Information with Third Parties

Oribet does not sell, rent, or trade your personal data to any third party for their own commercial purposes. This is a commitment we uphold without compromise. However, there are limited situations where we need to share your data with other parties:

  • Payment service providers: To process your deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and any other payment method of your choice
  • Identity verification service providers: To conduct KYC checks as required by law
  • Gaming service providers: Minimum information required to deliver games from our content providers
  • Legal authority: When required by court order, law enforcement directive, or other legal obligation
  • Auditors and professional advisors: Within a limited scope and subject to strict confidentiality agreements

All third parties working with us are required to meet data protection standards equal to or higher than our own. We conduct thorough due diligence on all partners before any data sharing is approved.

In the event of a business merger, acquisition, or asset sale, user data may be transferred to the new entity. You will be notified in advance and given the option to delete your account if you do not agree.

5oribet Data Security Measures

Protecting your data is more than a legal obligation for us — it is part of oribet's identity as a platform trusted by hundreds of thousands of Malaysian users. We implement multiple layers of technical and organisational protection:

  • Data encryption in transit: All communications between your device and oribet servers use TLS 1.3 protocol with 256-bit encryption
  • Data encryption at rest: Sensitive data such as financial information and KYC documents is stored in encrypted format on our servers
  • Internal access controls: Staff may only access user data based on specific job requirements (principle of least privilege)
  • Two-factor authentication (2FA): Available to all user accounts as an added layer of protection
  • 24/7 threat monitoring: Our intrusion detection system operates around the clock to identify and respond to cyber threats
  • Regular security audits: We conduct regular penetration testing and independent security audits

In the event of a data breach affecting your information, we will notify you within 72 hours and take immediate action to contain the damage and prevent recurrence.

6Use of Cookies and Tracking Technologies

The oribet platform uses cookies and similar technologies to enhance your experience, secure your login sessions, and understand how users interact with our platform.

Types of cookies we use:

  • Essential cookies: Required for the platform to function properly, including login session management and security. Cannot be disabled.
  • Performance cookies: Collecting information on how you use the platform so we can improve the overall user experience
  • Functional cookies: Remembering your preferences such as language and display settings for a smoother experience
  • Analytics cookies: Helping us understand usage patterns and identify areas of the platform that need improvement

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help guide.

7User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. Oribet respects and facilitates the exercise of these rights:

Your Rights as an Oribet User

We believe control over your personal data should rest in your hands. The following are rights you may exercise at any time.

1
Right of Access

You have the right to know what personal data we hold about you and how it is used. Access requests will be processed within 21 working days.

2
Right to Rectification

If any of your personal data is inaccurate or outdated, you have the right to request a correction. Updates can be made directly through your account settings.

3
Right to Erasure

You may request the deletion of your personal data under certain circumstances, subject to our legal obligations to retain specific records for prescribed periods.

4
Right to Withdraw Consent

For processing that relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5
Right to Object to Marketing

You may opt out of marketing communications from Oribet at any time via the unsubscribe link or by contacting our support team.

6
Right to Lodge a Complaint

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Malaysia Department of Personal Data Protection.

Why Your Privacy Is Safe with oribet

Six concrete reasons why over 500,000 Malaysia users entrust their personal data to Oribet.

Malaysia PDPA Compliance

All our data handling practices are designed in accordance with the Personal Data Protection Act 2010. We do not wait for issues to arise — we build protection in from the ground up.

No Data Selling

Your personal data is not a product we sell. We do not share your information with third-party advertisers or data brokers under any circumstances.

Secure Data Storage

Your data is stored in data centres protected by high-level encryption, physical access controls, and redundant backup systems to ensure availability.

Control at Your Fingertips

Through your account settings panel, you can manage your privacy preferences, update personal information, and control the types of communications you receive from us.

Immediate Breach Notification

In the event of any security incident involving your data, we will inform you within 72 hours and provide full details of the steps taken.

Minimal Data Retention

We only retain your data for as long as it is needed for the stated purpose or as required by law. Data that is no longer needed will be securely deleted or anonymised.

8Data Retention and Deletion Period

Oribet retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal obligations. The following are our general data retention guidelines:

  • Active account data: Retained for the duration your account is active and in use
  • Financial transaction data: Retained for a minimum of 7 years to comply with anti-money laundering legal requirements
  • Support communication records: Retained for 2 years from the date of last interaction
  • Security and access logs: Retained for 12 months for investigation purposes if required
  • Closed account data: Basic data is retained for 5 years after account closure before being permanently deleted

When data is no longer needed, it will be securely deleted using methods that ensure it cannot be recovered, or anonymised so it can no longer be linked to you as an individual.

9Children's Privacy and Age Restrictions

The oribet platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under 18. This is not merely a policy — it is a moral responsibility we take seriously.

All account registrations go through a strict age verification process, including identity document checks. Should we discover that data from an underage individual has been collected inadvertently, we will immediately delete that data and close the account in question.

If you are a parent or guardian who believes your underage child has registered an account on Oribet, please contact our support team immediately. We will take action within 24 hours.

10Amendments to This Privacy Policy

Oribet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. Any material amendments will be communicated to you via:

  • A clear notice on the oribet platform homepage
  • Email notification to all registered users at least 7 days before amendments take effect
  • In-app notifications on the oribet mobile app

Your continued use of the oribet platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the amendment takes effect.

The "Updated" date at the top of this document will always reflect the date of the latest amendment. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Join oribet with Complete Confidence

Your privacy and security are our top priority. Play with peace of mind knowing your data is protected by industry-leading security systems and a transparent privacy policy.

Bahasa Melayu