Privacy Policy

This Privacy Policy ("Policy") describes the data practices of ori777, the online gaming platform accessible at https://ori777.cam ("ori777", "we", "us", "the Platform"). It applies to all personal data collected from individuals who visit our website, register as Members, or interact with our services in any capacity, including players located in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, and other cities across Indonesia.

By accessing ori777, registering an account, or using any feature of the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how ori777 processes personal data, you should not use the Platform.

This Policy should be read alongside the Terms & Conditions, which govern the overall relationship between you and ori777. In the event of a conflict between this Policy and the Terms & Conditions on data-specific matters, this Policy takes precedence.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, date of birth, email address, phone number, IP address, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, ori777 is the Controller.
• "Member" / "User" / "You" — any natural person who has registered an account on ori777 or otherwise interacts with the Platform.
• "Third Party" — any entity other than you and ori777, including payment processors, game studios, analytics providers, and technology infrastructure partners.
• "KYC" — Know Your Customer; the identity and document verification process applied to all Members as described in the Terms & Conditions.
• "Cookie" — a small text file stored on your device by a website when you visit it, used to remember preferences, track sessions, and gather analytics data.
• "Sensitive Data" — a subset of Personal Data that requires heightened protection, including government-issued ID numbers, biometric data, and financial account credentials.

ori777 collects Personal Data in several categories depending on how you interact with the Platform:

ori777 does not collect special category data (such as racial or ethnic origin, political opinions, health data, or religious beliefs) unless strictly required for responsible gaming compliance and with your explicit consent.

ori777 collects Personal Data through the following means:

• Direct submission: Information you provide when completing the registration form, the KYC verification process, deposit or withdrawal requests, support tickets, or promotional opt-ins.
• Automated collection: Technical and usage data gathered automatically when you access the Platform, via server logs, cookies, pixels, and analytics software.
• Third-party verification: Identity and address verification data received from our KYC service providers when confirming the authenticity of documents you submit.
• Payment processors: Transaction reference data shared by your bank or e-wallet provider when you initiate a deposit or withdrawal. ori777 does not receive or store your full banking credentials or card numbers.
• Fraud and security tools: Device fingerprinting and behavioral analytics data collected by our security systems to detect and prevent unauthorized access, multi-accounting, and financial fraud.

ori777 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity: Processing required to create and maintain your account, process transactions, and deliver the gaming services you have requested — including deposit handling via BCA, BRI, BNI, Mandiri, and supported e-wallets.
• Legal obligation: Processing required to comply with anti-money laundering (AML) obligations, fraud prevention mandates, and identity verification requirements applicable to international online gaming operators.
• Legitimate interests: Processing carried out for ori777's legitimate business interests, including platform security, fraud detection, product analytics, and service improvement, provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, carried out only where you have given freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ori777 uses the Personal Data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your ori777 account; processing password resets and two-factor authentication; managing account status changes including self-exclusions and voluntary closures.
• Transaction processing: Verifying and executing deposit and withdrawal requests via bank transfer (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata) and e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja); reconciling transaction records; investigating payment disputes.
• Identity verification (KYC): Confirming that you meet the eligibility requirements set out in the Terms & Conditions, including the 21+ age requirement and single-account rule, in accordance with applicable AML standards.
• Fraud prevention and security: Detecting and investigating suspicious activity, unauthorized account access, multi-accounting, bonus abuse, and money laundering. This includes automated monitoring of betting patterns and transaction flows.
• Customer support: Responding to inquiries, processing complaints, and resolving disputes. Our support team operates 24/7 and includes Indonesian-speaking agents.
• Responsible gaming: Monitoring usage patterns for signs of problem gambling; applying deposit limits, cooling-off periods, and self-exclusions requested by Members; delivering responsible gaming alerts where appropriate.
• Platform improvement: Analyzing usage data and session behavior to improve the ori777 user experience, optimize game loading performance, and prioritize feature development.
• Marketing communications: Sending promotional offers, bonus announcements, and seasonal campaigns (such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day) to Members who have opted in. You may unsubscribe at any time.
• Legal compliance: Retaining records as required by applicable law; responding to lawful requests from competent authorities; enforcing our Terms & Conditions.

ori777 will not use your Personal Data for any purpose that is materially different from those listed above without providing prior notice and, where required, obtaining your consent.

ori777 does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We may share Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC and identity verification providers: Third-party services that assist with document authentication, liveness checks, and sanctions screening as part of the ori777 KYC process.
• Payment service providers: Banks, payment gateways, and e-wallet operators involved in processing your deposits and withdrawals. These providers receive only the minimum data necessary to complete the transaction.
• Game content providers: Studio partners such as Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe receive session and stake data necessary to deliver gameplay and calculate results. These providers operate under contractual data protection obligations.
• Technology and infrastructure providers: Cloud hosting, content delivery, cybersecurity, and analytics vendors who process data on ori777's behalf under strict data processing agreements.
• Legal and regulatory authorities: Competent courts, law enforcement agencies, or regulatory bodies when ori777 is required by law to disclose data, or when disclosure is necessary to protect the rights, property, or safety of ori777 or its Members.
• Professional advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations.

ori777 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session state, prevent fraud, and understand how Members use our services. The cookies we deploy fall into the following categories:

• Strictly necessary cookies: Required for core platform functionality, including session authentication, login state persistence, and security token management. These cannot be disabled without impairing your ability to use ori777.
• Performance and analytics cookies: Collect anonymized or aggregated data about how visitors navigate the Platform — pages visited, time on page, error events — to help us improve the user experience. No individually identifiable data is shared with analytics providers for their own use.
• Functional cookies: Remember your preferences (such as preferred language, last visited game category, or notification settings) to provide a more personalized experience across sessions.
• Security cookies: Used by our fraud prevention systems to fingerprint devices and detect anomalous behavior consistent with account takeover attempts or multi-accounting.

ori777 does not deploy third-party advertising cookies or cross-site behavioral tracking cookies. You may configure your browser to refuse or delete cookies; however, doing so may significantly impair the functionality of the Platform, including your ability to log in and maintain a session.

ori777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, to satisfy AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by an ongoing investigation or legal process.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of resolution.
• Marketing preferences and opt-in records: Retained for the duration of your account and for two (2) years following unsubscription, as evidence of consent management.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymized or deleted.

When Personal Data is no longer required and no legal obligation compels its retention, ori777 will securely delete or irreversibly anonymize it so that it can no longer be attributed to any individual.

ori777 implements a layered security architecture to protect Personal Data against unauthorized access, accidental loss, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption in transit: All data exchanged between your browser and ori777's servers is encrypted using TLS 1.2 or higher (HTTPS). Connections that do not meet this standard are rejected.
• Encryption at rest: Sensitive data fields — including identity document data, financial account details, and KYC records — are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access rights undergo background checks and are bound by confidentiality obligations. Privileged access is logged and audited.
• Two-factor authentication (2FA): Available to all Members and mandatory for internal administrative accounts. We strongly recommend that all Members enable 2FA on their ori777 accounts.
• Penetration testing: ori777 conducts periodic security assessments and vulnerability testing to identify and remediate weaknesses before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in risk to affected individuals, ori777 will notify impacted Members and relevant authorities within the timeframe required by applicable law and, in any case, without undue delay.

As a Member of ori777, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of the Personal Data ori777 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to erasure: You may request that ori777 delete your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that ori777 restrict the processing of your Personal Data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your Personal Data in a commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests. ori777 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

ori777 will not charge a fee for handling routine data rights requests. We may, however, charge a reasonable administrative fee or decline to act on requests that are manifestly unfounded, excessive, or repetitive.

ori777 is strictly an adult gaming platform. We do not knowingly collect Personal Data from any person under the age of 21. Our registration process includes age verification steps, and all accounts are subject to KYC review to confirm that the account holder meets the minimum age requirement.

If ori777 becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated Personal Data, and return any real-money deposits made (net of any bonuses used). Any winnings generated by an underage account will be forfeited.

ori777 operates as an international online gaming platform. In the course of providing our services, your Personal Data may be transferred to, processed in, or stored in countries other than Indonesia. These transfers may involve jurisdictions with data protection frameworks that differ from Indonesian standards.

Wherever such transfers occur, ori777 ensures that appropriate safeguards are in place, including:

• Contractual clauses between ori777 and the receiving party that impose data protection obligations equivalent to those set out in this Policy.
• Use of third-party service providers that maintain internationally recognized certifications (such as ISO 27001) and operate under their own robust privacy frameworks.
• Technical and organizational measures to protect data integrity and confidentiality throughout the transfer and storage lifecycle.

If you would like further information about the specific safeguards applied to any international data transfer, please contact us at [email protected].

The ori777 platform may, in certain contexts, reference or display content from third-party game studios or payment partners. ori777 does not control the privacy practices of third-party websites or services, and this Policy does not apply to any external platform you may access independently.

ori777 is not responsible for the content, privacy policies, or data practices of any third-party site. We encourage you to read the privacy policy of any external service you use in connection with your gaming activity.

ori777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify Members by email or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this page always reflects the date the current version came into effect. We recommend reviewing this Policy periodically.

If you disagree with any amendment, you may request voluntary account closure by contacting [email protected] before the effective date of the change.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please reach out to the ori777 support team using the contact details below. Our team is available 24 hours a day, 7 days a week, with Indonesian-speaking agents available for Members who prefer to communicate in Bahasa Indonesia.

For questions related to our overall Terms of Service, please visit our Terms & Conditions page. For guidance on responsible gaming tools and self-exclusion options, please visit our Responsible Gaming page.