oren33 Privacy Policy

1. Who We Are

oren33 operates the online casino and sportsbook platform accessible at oren33.win (the "Platform"). In the context of data protection law, oren33 acts as the data controller in respect of personal data collected from registered Members and Platform visitors. References to "oren33", "we", "us", or "our" throughout this Privacy Policy refer to the oren33 operating entity responsible for the Platform.

oren33 is committed to handling personal data responsibly and in compliance with applicable data protection principles. We recognise that Malaysian Members place trust in oren33 when they share personal information, and we take that responsibility seriously — both as a legal obligation and as a matter of platform integrity.

2. Personal Data We Collect

oren33 collects personal data at various points in the Member relationship. The categories of data we collect include:

2.1 Registration Data. When you create an oren33 account, we collect your full name, date of birth, email address, mobile number, and residential address. This information is required to establish and verify your identity and to comply with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents. As part of mandatory KYC verification, oren33 collects copies of government-issued identification documents (Malaysian IC or passport), proof of address, and where required, proof of payment method ownership. These documents are processed and stored securely in accordance with this Policy.

2.3 Financial Data. We collect transaction data relating to your deposits and withdrawals, including payment method identifiers (e-wallet account references, bank account details, card BINs). We do not store full card numbers or CVV codes — payment processing is handled by PCI-DSS compliant third-party payment processors.

2.4 Gaming Activity Data. oren33 records your gameplay history, wager amounts, wins and losses, game preferences, session durations, and responsible gaming tool settings. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data. When you access oren33.win, we automatically collect IP address, browser type and version, operating system, device identifiers, referring URL, and session timestamps. This data is used for platform security, fraud detection, and service improvement.

2.6 Communications Data. When you contact oren33 support, we retain records of those communications — including live chat transcripts, emails, and any attachments — to assist with ongoing support and to maintain service quality standards.

3. How We Use Your Personal Data

oren33 uses the personal data we collect for the following purposes:

• Account Administration: Creating, managing, and maintaining your oren33 Member account, including processing login authentication and account security.
• KYC & AML Compliance: Verifying identity and age, fulfilling anti-money laundering obligations, and reporting to regulatory bodies as required by applicable law.
• Payment Processing: Facilitating deposits and withdrawals, verifying payment method ownership, and preventing payment fraud.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised account access, collusion, bonus abuse, and other integrity violations.
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling, enforcing self-exclusion requests, and administering responsible gaming tools including deposit and session limits.
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of oren33 support services.
• Marketing (with consent): Sending promotional emails, bonus notifications, and platform updates to Members who have opted in to marketing communications.
• Platform Improvement: Analysing aggregated usage data to improve game selection, user interface, and overall platform performance.

4. Legal Basis for Processing

oren33 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to perform the Member agreement — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable KYC, AML, and regulatory reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service quality improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time by contacting oren33 support or using the unsubscribe mechanism in any marketing email.

5. Cookies & Tracking Technologies

oren33.win uses cookies and similar tracking technologies to operate the Platform, maintain your session state, and analyse usage patterns. The categories of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and game lobby filters.
• Analytics Cookies: Used to understand how Members use oren33.win, which pages are visited most, and where users encounter issues. Data collected is aggregated and not personally identifiable in analytical reports.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. oren33 does not use third-party advertising cookies or behavioural tracking for advertising purposes on the Platform.

6. Data Sharing & Third-Party Disclosure

oren33 does not sell your personal data to third parties. We may share personal data with the following categories of recipients, strictly as necessary:

• Payment Processors: To facilitate deposits and withdrawals. These processors operate under their own data protection obligations and are prohibited from using your data for any purpose other than payment processing.
• KYC & Identity Verification Providers: Specialist third parties used to verify identity documents and perform biometric checks where required.
• Fraud Prevention Services: To detect and prevent fraudulent activity, oren33 may share device and behavioural data with fraud detection service providers.
• Regulatory Authorities: Where required by applicable law, oren33 may disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies.
• Game Providers: In the course of live casino and slot gameplay, limited technical data (session identifiers, game result records) may be shared with the relevant game provider for dispute resolution purposes.

All third parties with whom oren33 shares personal data are contractually required to maintain appropriate data security standards and to process data only for the purposes specified by oren33.

7. International Data Transfers

oren33 operates internationally and some personal data may be transferred to and processed in countries outside Malaysia in the course of normal operations. Where such transfers occur, oren33 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent data transfer mechanisms — to protect personal data to a standard equivalent to that required within Malaysia.

8. Data Retention

oren33 retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in any case for no shorter than the period required by applicable regulatory obligations. Specific retention periods include:

• Account registration and KYC documents: Minimum five (5) years from account closure, as required for AML compliance;
• Financial transaction records: Minimum seven (7) years from the date of the transaction;
• Gaming activity logs: Three (3) years from the date of the activity, or longer where required for dispute resolution;
• Support communications: Two (2) years from the date of the last communication in a support thread.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

9. Your Data Rights

Subject to applicable law and regulatory restrictions, oren33 Members have the following rights in respect of their personal data:

oren33 will respond to data rights requests within thirty (30) calendar days. Complex requests may require up to ninety (90) days, with notification of extension provided within the initial thirty-day window.

10. Security Measures

oren33 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and oren33.win;
• Encryption at rest for sensitive personal data and KYC documents stored on oren33 servers;
• Access controls limiting personal data access to authorised personnel with a legitimate business need;
• Regular security audits and penetration testing of Platform infrastructure;
• Incident response procedures for managing data breaches, including timely notification to affected Members where required by law.

While oren33 takes data security seriously, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords and to enable two-factor authentication to reduce the risk of unauthorised account access.

11. Children & Minors

The oren33 Platform is strictly intended for individuals aged 21 years and above. oren33 does not knowingly collect personal data from individuals below this age. Age verification is a mandatory step in the account registration and KYC process. If oren33 becomes aware that personal data has been collected from a person under 21 without valid consent, that data will be deleted promptly and the associated account closed. If you believe an underage individual has registered an oren33 account, please contact support immediately.

12. Marketing Communications

oren33 may send promotional emails, bonus notifications, and platform updates to Members who have consented to receive marketing communications during registration or at any point thereafter. Consent to marketing is entirely optional and has no bearing on access to the oren33 Platform.

You may withdraw marketing consent at any time by: (a) using the unsubscribe link included in every marketing email from oren33; or (b) contacting oren33 support and requesting removal from all marketing communications. Withdrawal of consent will be processed within five (5) business days.

13. Changes to This Privacy Policy

oren33 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Members via the email address on file or by prominent notice on the Platform, at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised upon each update. Continued use of the oren33 Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. It is your responsibility to review this Policy periodically.

14. Contact & Complaints

For any questions, data rights requests, or complaints relating to this Privacy Policy or oren33's handling of your personal data, please contact us through:

24/7 Live Chat — available within your oren33 member dashboard.

Email: [email protected] (plain text only — not a clickable link)

Please include your registered account username and describe your query or request in detail. oren33 aims to respond to all privacy-related enquiries within five (5) business days. If you are not satisfied with oren33's response, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.