Privacy Policy orpay44 —
Your Data, Our Responsibility

Orpay44 understands that privacy is more than a legal requirement — it is the foundation of the trust you place in us. This Privacy Policy is written to help you clearly understand how your personal information is handled from the moment you register through every interaction with our platform.

This policy applies to all services provided through orpay44.com, including user accounts, financial transactions, gaming activity, and customer support communications. It should be read together with Terms and Conditions which together form the complete agreement between you and orpay44.

If you do not agree with any part of this Privacy Policy, you are advised not to use orpay44's services. Continued use of the platform constitutes full acceptance of this policy.

Orpay44 collects information in two main ways — information you provide directly and information collected automatically while you use our platform.

Information you provide directly includes:

• Full name, date of birth, and identification card number (MyKad) during registration and KYC verification.
• Email address, phone number, and account password.
• Bank account or eWallet details registered for deposit and withdrawal purposes.
• Identity verification documents such as MyKad copies and bank statements for compliance purposes.
• Any information you share when contacting our customer support team.

Information collected automatically includes:

Every piece of data we collect has a clear purpose. orpay44 uses your information for the following:

• Verifying your identity and processing new account registrations.
• Processing deposits, withdrawals, and all financial transactions securely.
• Meeting legal compliance requirements, including Anti-Money Laundering (AML) and KYC procedures.
• Providing effective customer support and resolving disputes accurately.
• Sending important notifications related to your account, transactions, and security.
• Detecting and preventing fraud, hacking attempts, and any suspicious activity.
• Improving the user experience based on aggregated and anonymised platform usage patterns.
• Sending promotional offers and bonuses if you have consented to receive marketing communications.

Orpay44 does not sell or trade users' personal data. However, there are limited situations where we need to share certain information with other parties to ensure our services run smoothly:

• Payment processors and eWallet service providers that facilitate financial transactions — they are bound by strict confidentiality agreements and receive only the minimum data required.
• Third-party game service providers that supply content within the orpay44 platform, subject to data protection agreements.
• Legal authorities or regulatory bodies when required by court order or applicable laws in Malaysia.
• Third-party identity verification services used to carry out the KYC process.

In all data sharing arrangements, orpay44 ensures that recipients maintain data protection standards equal to or exceeding our own. Cross-border data transfers are only carried out where adequate safeguards are in place.

Orpay44 invests seriously in security infrastructure to ensure your data is always protected. The technical security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols, which represent the highest industry standards.
• Data encryption at rest — sensitive data such as bank details and identity documents are stored in encrypted format.
• Two-factor authentication (2FA) is available for all accounts as an added layer of security.
• Real-time cyber threat monitoring with automated intrusion detection systems.
• Regular security audits conducted by our internal security team and independent third parties.
• Role-based access control (RBAC) ensures that internal staff can only access data relevant to their specific duties.

Orpay44 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies — required for core platform functions such as maintaining your login session and security settings. These cookies cannot be disabled.
• Functional Cookies — store your preferences such as language and display settings for a more convenient return experience.
• Analytics Cookies — collect aggregated, anonymous information on how users interact with the platform for improvement purposes.
• Session Cookies — temporary data that is automatically deleted when you close your browser.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect platform functionality.

Orpay44 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements.

• Active account data — retained for the duration of the active account and for an appropriate period after account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of seven years in accordance with Malaysia's financial legislation.
• KYC documents — retained for as long as required by applicable anti-money laundering regulations.
• Customer support communication logs — retained for three years for reference and dispute resolution.
• Analytics and technical log data — retained for no more than two years before being deleted or anonymised.

When data is no longer needed and there is no legal requirement to retain it, orpay44 will delete or anonymise that data using secure, irreversible methods.

As an orpay44 user, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our customer support team via live chat. We will process your request within 30 business days of receipt.

Orpay44 is a platform dedicated to adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their child has registered on our platform are encouraged to contact us promptly.

Orpay44 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technologies used, or applicable legal requirements. The last updated date will always be displayed at the top of this page.

For significant and material changes, we will notify active users via in-platform notifications or email at least seven days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.