ora78 is committed to protecting the personal data of every player on our platform. This Policy explains what we collect, why we collect it, how we use it, and the rights you hold over your own information.
These six principles underpin every data decision we make. Full details follow in the sections below.
All data transmitted between your device and ora78's servers is protected by industry-standard 256-bit SSL/TLS encryption. Your personal and financial details are never sent in plain text.
We collect only the personal information necessary to operate your account, process payments, verify your identity, and comply with our legal obligations. We do not collect data speculatively.
ora78 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your information is never commoditised without your explicit consent.
You have the right to access, correct, export, and in certain circumstances delete the personal data ora78 holds about you. Requests are handled promptly — typically within 30 calendar days.
Promotional and marketing communications are sent only with your prior consent. You may withdraw that consent at any time via your account settings or by contacting our support team directly.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations, after which it is securely deleted.
This Privacy Policy (the "Policy") describes how ora78 (the "Platform", "we", "us", or "our") collects, processes, stores, shares, and protects the personal data of individuals who access or use the ora78 online sportsbook and live casino at https://ora78.lat (the "Site").
This Policy applies to all registered players and visitors, including users accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations in Malaysia and internationally. It should be read in conjunction with our Terms & Conditions, which govern your use of the Platform generally.
By registering an account, making a deposit, or continuing to browse the Site, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately and contact us to close your account.
ora78 is committed to handling your personal data with transparency, proportionality, and respect. We collect the minimum data necessary to deliver our services and we will never sell your personal information to third parties for commercial gain.
For the purposes of this Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person — including name, email address, device identifiers, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, alteration, and deletion. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is ora78. |
| "Data Processor" | A third party that processes personal data on behalf of ora78, such as a payment gateway, KYC verification provider, or cloud infrastructure provider. |
| "User" / "Player" | Any individual who registers an account on, browses, or otherwise interacts with the ora78 Platform. |
| "Cookies" | Small text files placed on a User's device by a website to store information about browsing behaviour, session state, and preferences. |
| "KYC" | Know Your Customer — the process of verifying the identity and age of a User to meet regulatory and responsible gambling obligations. |
ora78 collects personal data across several categories, depending on how you interact with the Platform. The categories of data we collect are as follows:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (MyKad, passport) | Account registration, KYC age and identity verification |
| Contact Data | Email address, mobile phone number | Account communications, security alerts, support correspondence |
| Financial Data | E-wallet identifiers (Touch 'n Go, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank), cryptocurrency wallet addresses | Processing deposits and withdrawals, fraud prevention |
| Technical Data | IP address, browser type and version, device type and OS, session timestamps | Platform security, fraud detection, service improvement |
| Gameplay Data | Bet history, wager amounts, game types played, win/loss records | Account management, responsible gambling monitoring, regulatory reporting |
| Communication Data | Live chat transcripts, support emails, complaint records | Customer service delivery, dispute resolution, quality assurance |
| Marketing Preferences | Promotional opt-in/opt-out status, preferred communication channels | Sending consented marketing communications |
ora78 collects personal data through the following means:
ora78 processes your personal data for the following specific purposes:
ora78 processes your personal data on one or more of the following lawful bases:
ora78 does not sell your personal data to any third party. We may, however, share your data with the following categories of recipients in the circumstances described:
All third parties with whom ora78 shares personal data are required to enter into data processing agreements that obligate them to process your data only for the specified, disclosed purpose and to maintain appropriate technical and organisational security measures.
ora78 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or for such longer periods as may be required by law or regulation. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account plus 5 years after closure | AML regulatory requirement |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| KYC verification documents | 5 years from account closure or last transaction | Regulatory compliance |
| Gameplay and betting history | Duration of account plus 5 years after closure | Responsible gambling obligations and dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interests — dispute resolution |
| Marketing preferences and consent | Until consent is withdrawn or account closed | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised data may be retained indefinitely for statistical and analytical purposes.
ora78 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, ensure security, and (where consented) support analytics and performance monitoring. The categories of cookies we use are as follows:
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and security of the Platform. Continued use of the Site constitutes acceptance of our use of strictly necessary and functional cookies.
ora78 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
While ora78 maintains robust security measures, the security of your account also depends on you. You are responsible for maintaining the confidentiality of your username and password, for logging out of shared devices, and for notifying ora78 immediately at [email protected] if you suspect unauthorised access to your account.
Subject to applicable law, you hold the following rights in respect of the personal data ora78 processes about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" from your registered email address.
You may request a copy of the personal data ora78 holds about you. We will provide this within 30 calendar days of your verified request.
You may request correction of inaccurate or incomplete personal data. Certain changes may require re-verification of your identity.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
In certain circumstances, you may request that we suspend processing of your data while a rectification or objection request is under review.
Where processing is based on consent or contract, you may request a structured, machine-readable copy of the personal data you provided to ora78.
You may object to processing based on legitimate interests. You may also withdraw marketing consent at any time without affecting prior lawful processing.
ora78 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.
The ora78 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from persons under the age of 21.
As part of our KYC process, we require all Players to verify their age before withdrawals are enabled and at any time we reasonably suspect that a Player may be under the minimum age. If we discover that personal data has been collected from a person under the age of 21, we will take immediate steps to suspend the associated account, return any deposited funds in accordance with our KYC procedures, and delete the personal data collected.
Parents and guardians who become aware that a minor may have created an account on the Platform should contact us immediately at [email protected] so that we can investigate and take appropriate action.
In the course of operating the Platform, ora78 may transfer personal data to Data Processors located outside of Malaysia — for example, cloud hosting providers or KYC verification services with servers in other jurisdictions. Where such transfers occur, ora78 takes steps to ensure that adequate protection is in place, including:
By using the Platform, you acknowledge and consent to these international transfers where they are necessary for the delivery of our services.
ora78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes to this Policy will be communicated to registered Players via email or by prominent notice on the Platform prior to taking effect. The "Last Updated" date at the top of this page will be revised to reflect each update.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically. If you disagree with any amendment, you should discontinue use of the Platform and request account closure by contacting us as described in Section 15 below.
If you have questions, concerns, or complaints about this Privacy Policy or about how ora78 processes your personal data, or if you wish to exercise any of your data rights as described in Section 11, please contact us through the following channels:
ora78 is committed to resolving all privacy-related enquiries promptly. We will acknowledge your contact within 5 business days and aim to provide a full response within 30 calendar days. For formal complaints that cannot be resolved through our internal process, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
This Privacy Policy was last reviewed and updated on 1 January 2026.
Have questions about how ora78 handles your personal information? Our support team is available 24/7 — or explore the full range of services on our homepage.
For players aged 21 and above only. Gamble responsibly. Responsible Gambling tools →