Privacy Policy Oragmatic – We Take Your Data Seriously

Oragmatic ("we", "Platform") is a licensed online casino platform operator. In providing our services, we collect and process personal information belonging to our members. We understand this is a significant responsibility, and we take it seriously.

This Privacy Policy ("Policy") explains in detail the types of information we collect, why we need it, how it is used, and the rights you hold over that data. Our goal is to ensure you always know what happens with your data — no surprises, no hidden activity.

By using the Oragmatic platform, you consent to the collection and use of information as described in this Policy. If you do not agree, please contact us or stop using the platform.

Oragmatic collects information in several different ways depending on your interaction with the platform. The following are the main data categories we process:

Every piece of data we collect has a clear and lawful purpose. Oragmatic uses your personal information for the following purposes:

• Account management — to create, verify, and securely maintain your account
• Transaction processing — to process deposits, withdrawals, and other financial transactions you make
• Identity verification (KYC) — to comply with anti-money laundering and age verification legal requirements
• Personalize your experience — to personalise game recommendations, bonus offers, and the interface according to your preferences
• Customer Support — to enable our team to assist you effectively whenever you contact us
• Platform Security — to detect and prevent fraud, money laundering, and other suspicious activities
• Legal compliance — to fulfil our obligations under PDPA 2010 and other relevant legislation
• Service communications — to send important notices relating to your account, security, or changes to the Terms
• Analytics & improvement — to understand how the platform is used and make continuous improvements

We do not use your data for any purpose not listed above without obtaining your consent first.

Oragmatic does not sell, rent, or trade your personal data. However, in the course of platform operations, there are certain situations where data may need to be shared:

• Service providers — payment processors, licensed gaming platforms, and technical infrastructure providers that help us operate the platform. All such parties are bound by strict confidentiality agreements and may only use your data for the specified purposes
• Legal Authority — when required by law, court warrant, or a valid request from a law enforcement agency
• Fraud prevention — in certain cases, we may share information with other platforms in the industry to prevent cross-platform fraud
• Business transfers — in the event of a merger, acquisition, or asset sale, player data will be transferred to the new entity subject to the same or stricter Privacy Policy

Oragmatic uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Strictly necessary cookies — to maintain your login session and ensure the platform functions correctly. These cookies cannot be disabled
• Functional cookies — to remember your preferences such as language, display theme, and game settings
• Analytical cookies — to understand how players use the platform so we can make improvements. This data is collected in aggregate and does not identify you individually
• Security cookies — to detect suspicious activity and protect your account from unauthorised access

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect core functionality of the Oragmatic platform.

Protecting your data is Oragmatic's top technical priority. We continuously invest in security infrastructure to ensure your data is always safeguarded:

• 256-bit SSL/TLS encryption for all data communication between your device and our servers
• At-rest encryption for all personal and financial data stored in our databases
• Two-factor authentication (2FA) is available and encouraged for all player accounts
• 24/7 security monitoring by an experienced IT security team
• Regular penetration testing by independent third parties
• Role-based access control — only staff who need it can access sensitive player data
• Security incident response procedures that are regularly tested and updated

While no system is ever 100% secure, Oragmatic takes all reasonable measures to minimise risk. Should any security incident occur that affects your data, we will notify you and the relevant authorities within the timeframes required by law.

Oragmatic does not store your personal data indefinitely. We have a clear retention policy:

• Active account data — retained for the duration your account is active, plus 5 years after closure for legal compliance purposes
• Financial transaction records — retained for 7 years in accordance with Malaysia's financial and tax legal requirements
• Customer support communication logs — retained for 3 years from the date of last interaction
• Security activity logs — retained for 2 years to facilitate investigations if required
• Data collected for marketing purposes — retained until you withdraw your consent

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you.

As a user of the Oragmatic platform and an individual protected under PDPA 2010, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact our privacy team by email at [email protected]. We will respond within 14 business days from the date your request is received.

The Oragmatic platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from minors under the age of 18.

If we find that personal data of a minor under 18 has been collected without proper age verification, we will take the following steps immediately:

• Closing the associated account
• Deleting all collected data within the shortest possible timeframe
• Refunding any funds that may have been deposited
• Reporting incidents to the relevant authorities when required

If you believe a minor has used the Oragmatic platform, please contact us immediately so we can take the appropriate action.

Oragmatic reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other operational reasons.

When we make significant changes to this Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notices to all registered players at least 14 days before changes take effect
• Displaying clear notices on the platform so you are aware of any new changes
• Maintaining an archived version of previous Policy versions for at least 12 months for reference

Continued use of the Oragmatic platform after Policy changes take effect constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the use of your personal data by Oragmatic, please contact us:

• Privacy Email: [email protected] (subject: Data Privacy Inquiry)
• Live Chat: Available 24/7 — find the chat icon on the Oragmatic platform
• Response time: We aim to respond within 5 working days for all privacy-related enquiries

For complaints that cannot be resolved directly with Oragmatic, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or any relevant regulatory body in your jurisdiction.