ori33 Privacy Policy

This page describes what we collect when you use ori33 and how we keep that data protected. When you create an account, deposit funds, or place a bet on our platform, we gather information necessary to operate the service, comply with local law, and prevent fraud. Our commitment is to be transparent about what we collect, how we use it, and who has access to it.

We at ori33 operate an online entertainment platform available where local law permits. We serve account holders across supported regions, including Jakarta, Surabaya, Bandung, and Medan. The data we collect — your email, identity documents, payment method details, and betting history — stays protected through encryption, access controls, and regular security audits. We do not sell your personal information to marketers or data brokers.

This privacy policy explains our data practices in plain language. If you have questions after reading, contact us via live chat or email; our support team responds to privacy inquiries within one business day.

What We Collect and Why

We collect information in three categories. First, account setup data: your email address, full name, date of birth, identity document (passport or national ID), address, and phone number. We require this to verify your identity and comply with anti-money-laundering (AML) regulations in our operating jurisdictions. Second, payment information: the payment method you choose (DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet), your account number, and transaction history. We use this to process deposits and withdrawals and to detect fraud. Third, activity data: which games you access, your sportsbook markets (Liga 1, Piala AFF, Champions League, badminton), live-dealer sessions, and betting patterns. We use this to provide customer support, improve our platform, and comply with regulations.

We also collect technical information automatically. When you visit ori33.app or use our app, we log your IP address, browser type, operating system, and pages visited. We use cookies and similar tracking technologies to remember your preferences and to understand how you navigate our platform. This technical data helps us diagnose performance issues and protect against unauthorized access.

Account data

Email, identity documents, address, phone number. Required for account creation and regulatory compliance.

Payment data

Payment method, account numbers, transaction history. Used to process deposits and withdrawals and prevent fraud.

Activity data

Games accessed, betting history, sportsbook markets, live-dealer participation. Used for support and regulatory reporting.

Technical data

IP address, browser type, pages visited, cookies. Used to improve platform performance and security.

We do not collect data directly from third parties about you. However, we may receive information from our payment processors, identity-verification services, and fraud-prevention partners to confirm that your information is accurate and to detect suspicious activity.

How We Use Your Data and Who We Share It With

We use your data for four primary purposes: to operate ori33, to comply with local regulations, to prevent fraud, and to improve your experience. Operationally, we need your email to send account notifications, your payment details to process deposits and withdrawals, and your activity history to settle bets correctly. Regulatorily, we report player activity to authorities where required by law — for example, large deposits or withdrawals trigger reports to anti-money-laundering agencies. We share this data with government agencies only under legal obligation.

We also share data with third-party service providers who help us run ori33. Our payment processors (including the operators of DANA, e-wallet, mobile banking, local payment, online payment, and e-wallet) receive payment details to authorize transactions. Our cloud hosting provider (which may be located outside your jurisdiction) stores our servers and databases. Our identity-verification partner checks your documents against official registries. Each of these processors signs a data-processing agreement committing to protect your information under privacy laws comparable to our own.

We share your data only when necessary to operate ori33, comply with law, or prevent fraud. We do not sell it.

We keep your data only as long as necessary. Account data is retained for the life of your account plus one year after closure (to handle any disputes or regulatory inquiries). Payment records are retained for at least five years as required by anti-money-laundering law. Technical logs (IP addresses, page visits) are deleted after 90 days unless we need them to investigate a security incident.

Our servers may be located outside your jurisdiction. Data transfers across borders happen under legal safeguards — either adequacy determinations by your local government, standard contractual clauses, or your explicit consent. If you are located in a region with strict data-protection law and you do not consent to international transfer, you should not create an ori33 account.

We secure your data through encryption (HTTPS for data in transit, AES-256 for data at rest), role-based access controls, and regular security audits. Our staff can access your payment details only when necessary to resolve a support request. We train all employees on data protection and require them to sign confidentiality agreements. If a data breach occurs, we notify affected account holders and relevant authorities within the timeframe required by law.

This privacy policy may change as ori33 evolves. We will notify you of material changes by email or by posting an updated policy here. Continued use of ori33 after a change constitutes acceptance of the new policy. This policy was last updated February 2025 and applies to account holders accessing ori33 in supported jurisdictions.

If you have privacy questions or wish to exercise your rights (access, correction, deletion, objection to marketing), contact us via live chat or email. Requests are processed within 30 days. For jurisdictions with formal data-protection authorities, you also have the right to lodge a complaint with your local regulator.