Privacy Policy ori777 — Your Data Protection Is Our Priority

1

Information We Collect

Ori777 collects various types of information to ensure our platform operates safely, efficiently, and meets every player's needs. The information collected falls into three main categories:

a) Information You Provide Directly

• Full name as shown on your identification document
• Active email address and phone number
• Date of birth for age verification
• Current residential address
• Bank account or e-wallet information for transaction processing
• Identity document copies collected during the KYC (Know Your Customer) process

b) Information Collected Automatically

• IP address and device information used
• Browser type and version
• Game session data including login and logout times
• Deposit and withdrawal transaction records
• Usage patterns and game preferences

c) Information From Third-Party Sources

• Identity verification information from certified KYC service providers
• Anti-money laundering (AML) screening information from recognised databases

2

How We Use Your Data

Ori777 uses collected information exclusively for legitimate and stated purposes. Here is a clear overview of how your data is used within our platform:

Ori777 does not use your data to make automated decisions that materially affect you without human review. Any risk assessment or identity verification involves checks by our trained team.

3

Information Sharing & Disclosure

Ori777 does not sell or rent your personal data to any party. However, there are limited situations where we may need to share your information:

• Payment service providers: Transaction information is shared with payment processors such as FPX, TNG eWallet, and DuitNow solely to complete your transactions.
• KYC and AML providers: Identity information is shared with certified third-party identity verification providers to meet regulatory compliance requirements.
• Legal authorities: ori777 will comply with any court orders or lawful requests from relevant authorities in Malaysia.
• Technology providers: Technical service providers supporting our platform operations — all bound by strict confidentiality agreements.

4

Data Storage & Security

The security of your data is a responsibility we take seriously. ori777 implements multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL encryption for all data transmission between your browser and our servers
• Encrypted database with securely managed encryption keys
• Role-based access control — only authorised staff may access sensitive data
• Regular security audits by independent cybersecurity firms
• Intrusion detection system (IDS) and 24-hour monitoring
• Automatic data backups to ensure continuity of service

Your data is retained for as long as necessary to fulfil the purpose of collection or as required by applicable law. Generally, active account records are kept for the duration the account remains active plus seven (7) years after account closure for legal compliance purposes.

5

Cookies & Tracking Technologies

Ori777 uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language selection and display settings for a more personalized experience.
• Analytics Cookies: Helps us understand how players use the platform, which pages are visited most often, and areas that need improvement.
• Performance Cookies: Used to monitor platform speed and stability to ensure a smooth, uninterrupted gaming experience.

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the ori777 platform.

6

Your Rights as a User

Ori777 recognizes and respects your rights regarding personal data. You have the right to:

To exercise any of the above rights, contact the ori777 support team via live chat. We will process your request within 30 business days. Identity verification may be required before we can fulfill any data-related request.

7

Children's Data Protection

Ori777 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that information has been collected from someone below the stipulated age limit, we will take immediate action to delete that information and close the account in question. Parents or guardians who become aware that their child has registered at ori777 are urged to contact our support team immediately.

8

Third-Party Links & Services

The ori777 platform may contain links or integrations with third-party game provider services. Please note that this Privacy Policy applies exclusively to the ori777 platform.

• Each third-party game provider integrated with ori777 maintains its own privacy policy and data management practices.
• ori777 is not responsible for the privacy practices of third-party game providers, even when their games are accessed through our platform.
• We encourage you to read the privacy policy of each game provider you use to understand how your data is managed by them.
• All game providers partnering with ori777 have undergone a qualification assessment process to ensure minimum security and privacy standards are met.

9

Cross-Border Data Transfer

In the course of its operations, ori777 may transfer your personal data to servers located outside Malaysia. Such transfers are only carried out when necessary and with adequate safeguards:

• All cross-border data transfers are carried out under data transfer agreements that comply with internationally recognized protection standards.
• The recipient country or region must have a level of data protection equivalent to or higher than Malaysia.
• Sensitive financial data is processed in an environment that meets PCI-DSS (Payment Card Industry Data Security Standard) requirements.

10

Privacy Policy Amendments & Contact Us

Ori777 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other reasonable grounds. Any amendments will be posted on this page with an updated revision date.

It is your responsibility to check this page regularly. For significant changes, ori777 will notify you via your registered email or a prominent notice on our platform at least seven (7) days before the changes take effect.

Continued use of the ori777 platform after any amendment is published constitutes your acceptance of the revised Privacy Policy.