ora87 Privacy Policy

In this Privacy Policy, the following terms shall carry the meanings set out below unless the context expressly requires otherwise:

ora87 collects the minimum data necessary to deliver our services, comply with applicable regulations, and maintain the security and integrity of our platform. The categories of Personal Data we collect are as follows:

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21+ age requirement);
• Residential address in Indonesia (city, province, full postal address);
• Email address and mobile phone number registered in your name;
• Username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of your KTP (Kartu Tanda Penduduk) or passport;
• Proof of address documents (e.g., utility bill, bank statement from BCA, BRI, BNI, Mandiri, or CIMB Niaga dated within three months);
• Selfie photograph holding your government-issued ID, as requested during enhanced verification;
• Bank account details or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) for withdrawal verification.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Indonesian Rupiah (IDR / Rp), timestamps, and payment method used;
• Wagering history, game session records, bet amounts, and outcomes;
• Bonus and promotion redemption records.

2.4 Technical & Usage Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser version;
• Session timestamps, page navigation paths, and feature usage patterns;
• Cookie identifiers and analytics data (see Section 8).

2.5 Communications Data

• Content of messages sent to our support team via email or live chat;
• Records of complaints, dispute submissions, and their resolution outcomes;
• Marketing communication preferences and opt-in/opt-out history.

ora87 collects Personal Data through the following channels:

1. Directly from you: When you register an account, complete the KYC process, make a deposit or withdrawal, contact our support team, or respond to a promotional offer;
2. Automatically via the platform: Through cookies, server logs, and analytics tools when you navigate the ora87 website or use our gaming services — including page views, click events, session duration, and device fingerprint data;
3. From third-party verification partners: Our KYC and fraud-prevention providers may return enriched identity data as part of the verification process (e.g., confirming that a KTP number is valid);
4. From payment processors: When a deposit or withdrawal is processed via a local bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata) or an e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja), transaction confirmation data is returned to ora87 to reconcile your account balance;
5. From publicly available sources: In rare cases where fraud investigation requires it, ora87 may cross-reference publicly available information to verify account details or detect prohibited conduct as defined in our Terms & Conditions.

ora87 processes your Personal Data only for clearly defined, legitimate purposes. The table below maps each data category to its processing purpose:

ora87 does not use automated decision-making or profiling that produces legal or similarly significant effects on Players without human review.

ora87 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to fulfill the contract between ora87 and you as a registered Player — including account management, deposits, withdrawals, and KYC — is necessary to perform our contractual obligations. Without this processing, we cannot provide our services.
• Legitimate interests: We process Technical & Usage Data and carry out fraud monitoring on the basis of our legitimate interest in operating a secure, fair, and commercially viable platform. We apply a balancing test to ensure our interests do not override your fundamental rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have given freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without penalty.
• Legal obligation: Certain data — particularly KYC and financial transaction records — must be retained to comply with applicable anti-money laundering regulations and international financial oversight requirements.

ora87 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

1. Payment processors and local banks: BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja receive the transaction data necessary to execute your deposit or withdrawal. These providers process data under their own privacy policies and applicable Indonesian financial regulations.
2. KYC and identity verification partners: Specialist third-party providers receive copies of your identification documents and return a verification decision to ora87. These providers are contractually bound to process your data solely for the purpose of identity verification.
3. Cloud infrastructure and hosting providers: ora87 uses reputable international cloud providers to host platform infrastructure. These providers act as data processors and may store data in data centers outside Indonesia; appropriate data transfer safeguards are in place.
4. Game software providers: Studios including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe may receive anonymized session and game-outcome data necessary to operate their game engines on our platform. No directly identifiable Personal Data is shared with game studios.
5. Fraud prevention and security services: Specialist providers assist ora87 in detecting account takeover, collusion, and money laundering. Data shared for this purpose is limited to technical identifiers and transaction patterns.
6. Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent authority, ora87 may disclose Personal Data without prior notice to you.

In all cases, Third-Party Processors are bound by data processing agreements that prohibit use of your data for any purpose beyond that specified by ora87 and require them to maintain appropriate security measures.

ora87 retains Personal Data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual. Where anonymization is not technically feasible, data is destroyed using industry-standard methods.

ora87 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the platform, remember your preferences, and analyze how Players use our services. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security tokens, and load-balancing identifiers. These cookies cannot be disabled without rendering the platform non-functional and do not require your consent.
• Functional cookies: Remember your preferences such as preferred language, currency display format, and last-visited game categories. These are set on the basis of your implicit consent through platform use.
• Analytics cookies: Collect anonymized and aggregated data about how Players navigate the platform — pages visited, features used, session duration, and error events. This data helps ora87 improve platform performance and user experience. Analytics cookies require your explicit consent.
• Marketing cookies: Used to deliver promotional content relevant to your interests. These cookies are set only where you have given explicit consent to receive marketing communications from ora87.

You may manage your cookie preferences at any time by adjusting the settings in your web browser. Most modern browsers allow you to block or delete cookies via their privacy or security settings menus. Please note that blocking strictly necessary cookies will impair your ability to use the ora87 platform.

As a Player on ora87, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered username. ora87 will respond within 14 business days of receiving a valid request.

1. Right of Access: You may request a copy of all Personal Data ora87 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
2. Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
3. Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Please note that erasure requests cannot be fulfilled where retention is required by law (e.g., financial records under AML regulations).
4. Right to Restriction: You may request that ora87 restrict processing of your data — for example, while we investigate an accuracy dispute — so that we may store it but not otherwise process it.
5. Right to Data Portability: Where processing is based on your consent or on a contract, you may request that ora87 provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
6. Right to Object: You have the right to object to processing based on our legitimate interests (including profiling) or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

ora87 will not discriminate against Players who exercise their data rights. Exercising these rights will not affect your ability to use the platform, subject to any data that is strictly necessary for the provision of our services.

ora87 implements a layered security architecture to protect your Personal Data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.2+): All communications between your device and the ora87 platform are encrypted in transit using TLS encryption with valid certificates issued by a trusted certificate authority.
• Data Encryption at Rest: Sensitive data stored in our databases — including KYC documents, financial account identifiers, and password hashes — is encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their ora87 accounts. Support staff accounts and administrative access to production systems require mandatory 2FA.
• Access Controls: Access to Personal Data within ora87's internal systems is granted on a strict need-to-know basis. Staff access is logged, regularly reviewed, and revoked immediately upon departure or role change.
• Penetration Testing & Security Audits: The ora87 platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to Players' rights, ora87 will notify affected Players via their registered email address within 72 hours of becoming aware of the incident, including details of what data was affected and the remedial steps taken.

While ora87 takes all reasonable technical and organizational measures to protect your data, no system is completely immune to risk. You are responsible for keeping your own account credentials secure and for notifying us immediately at [email protected] if you believe your account has been compromised.

ora87 takes the protection of minors extremely seriously. Our registration process requires Players to confirm their date of birth, and our KYC verification process independently verifies age against government-issued identification. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be returned (less any transaction fees), and all associated Personal Data will be deleted from our systems within 30 days of detection.

If you are a parent or guardian and you believe that a minor has registered an account on ora87 without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action as a matter of priority.

The ora87 platform may reference or display content from third-party game software providers — including Pragmatic Play, Evolution Gaming, Pocket Games Soft, NetEnt, Microgaming, and Spribe — whose software is embedded within our platform under license. While ora87 takes care in selecting reputable partners, we are not responsible for the privacy practices of these third-party studios in respect of any data they may independently collect through their game engines.

This Privacy Policy applies solely to Personal Data processed by ora87 in connection with the operation of the https://ora87.org platform. It does not extend to any third-party websites, applications, or services that are not under ora87's direct control, even if accessible from within the platform environment.

Players are encouraged to review the privacy policies of any third-party service they interact with. ora87 accepts no liability for the data-handling practices of third parties outside our direct operational control.

ora87 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, or platform functionality. When material changes are made, we will notify registered Players via email to the address on file at least seven (7) days before the changes take effect.

The revised Privacy Policy will be published on this page with an updated effective date at the top of the document. Your continued use of the ora87 platform after the effective date of the revised policy constitutes your acknowledgment of and agreement to the updated terms.

If you do not agree with any changes to this Privacy Policy, you must cease using the platform and may request account closure by contacting our support team. We recommend bookmarking this page and reviewing it whenever you receive a notification of update.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ora87 handles your Personal Data, please contact our dedicated data support team. Our Indonesian-speaking agents are available 24 hours a day, 7 days a week.

For responsible gaming concerns, self-exclusion requests, or queries relating to our Terms & Conditions, please visit the relevant pages linked in the footer below, or contact support with the appropriate subject line for priority routing.