Your privacy matters to us. This policy explains exactly what personal data ora78 collects, why we collect it, how it is used, and the rights you hold as a player based in Indonesia.
These six principles guide every decision we make about how your personal information is handled on the ora78 platform.
All personal data transmitted to and from the ora78 platform is protected by SSL/TLS encryption. Sensitive data at rest is stored using AES-256 encryption standards consistent with internationally recognised information security frameworks.
ora78 does not sell, rent, or trade your personal data to third-party marketers or advertising networks — ever. Your information is used solely to operate the platform, verify your identity, process your transactions, and deliver customer support.
We collect only the minimum data necessary for each specific purpose. Data collected for identity verification is not repurposed for marketing. Data collected for fraud prevention is not shared with game studios. Each dataset has a clearly defined, limited purpose.
Your personal data is not kept indefinitely. ora78 applies clearly defined retention schedules: account data is retained for the lifetime of your account plus a maximum of five years after closure, consistent with anti-money laundering record-keeping obligations.
We tell you what we collect, why we collect it, and who we share it with before we do so — not after. This Privacy Policy is written in plain, professional language so that you can make fully informed decisions about your data at every stage.
You have the right to access, correct, and request deletion of your personal data held by ora78. Submit a data request via live chat or email and our team will respond within 30 days. See Section 8 below for the full list of your data rights.
This Privacy Policy applies to all users of the ora78 platform at ora78.bio. By registering an account, depositing funds, or otherwise using the platform, you confirm that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please do not use the platform.
ora78 is an internationally licensed online sports betting and casino platform, accessible at ora78.bio. The platform is operated by a legal entity holding a valid gaming licence issued by a recognised international regulatory authority. For the purposes of this Privacy Policy, "ora78", "we", "us", and "our" refer to that operating entity in its capacity as the data controller responsible for the personal information collected through the platform.
ora78 is Indonesia's premier English-language online betting platform, serving players across Jakarta, Surabaya, Medan, Bandung, Bali, Yogyakarta, Semarang, and other major cities throughout the archipelago. All transactions are denominated in Indonesian Rupiah (IDR), and the platform accepts deposits and withdrawals via leading Indonesian banks including BCA, BRI, BNI, and Mandiri, as well as e-wallets such as OVO, DANA, GoPay, ShopeePay, and LinkAja.
If you have any questions about how we handle your personal data, you can reach our Data Protection team at any time via live chat on the platform or by emailing [email protected] (plain text — not a clickable link).
ora78 collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with the platform, and occasionally from third-party sources as part of our identity verification processes. The categories of data we collect are described below.
| Data Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, Indonesian National Identity Card (KTP) number or passport number, selfie photograph for KYC verification. |
| Contact Data | Email address, mobile phone number, city or region of residence within Indonesia. |
| Account Credentials | Username; password (stored as a salted hash — never in plain text); security question responses if set. |
| Financial Data | Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga); e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja); transaction history including deposit and withdrawal amounts in IDR. |
| Support Communications | Content of live chat transcripts, emails, and any documents or screenshots submitted to the support team. |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, session time limits, and self-exclusion requests submitted via the Account Settings panel. |
| Data Category | Examples |
|---|---|
| Technical Data | IP address, browser type and version, operating system, device type, screen resolution, time zone setting (WIB/WITA/WIT detected automatically). |
| Usage Data | Pages visited, features used, games played (slots, live casino, sportsbook, togel), bet amounts, session duration, clickstream data. |
| Cookie Data | Session cookies, authentication tokens, preference cookies, analytics identifiers. See Section 6 for full cookie details. |
As part of our Know Your Customer (KYC) and anti-money laundering (AML) obligations, ora78 may obtain supplementary identity and sanctions-screening data from authorised third-party verification service providers. This data is used solely to confirm that you are who you say you are and that your account activity is consistent with applicable regulatory requirements. We do not purchase marketing lists or enrich your profile with data from social media platforms.
ora78 uses your personal data only for the purposes described below. We do not use your data for purposes that are incompatible with those for which it was originally collected.
ora78 does not use your personal data to build advertising profiles for sale to third parties, nor does it engage in automated decision-making that produces legal or similarly significant effects on you without human review.
Every processing activity at ora78 is carried out on one or more of the following lawful bases, consistent with internationally recognised data protection principles:
| Legal Basis | When It Applies at ora78 |
|---|---|
| Contractual Necessity | Processing required to operate your account, process transactions, and deliver the services you signed up for — including deposits, withdrawals, and game access. |
| Legal Obligation | KYC/AML verification, age verification (21+), record-keeping for regulatory compliance, and responding to lawful authority requests. |
| Legitimate Interests | Fraud detection, platform security, abuse prevention, aggregated analytics for service improvement, and responsible gaming monitoring — where these interests are not overridden by your rights. |
| Consent | Marketing emails, promotional SMS, and any processing beyond what is strictly necessary to deliver the service — where you have provided clear, freely given opt-in consent. |
ora78 does not sell your personal data. We share it only in the limited circumstances described below, and always subject to appropriate contractual data protection obligations.
We engage carefully selected third-party service providers to support platform operations. These include: payment processors and banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, LinkAja) to execute your transactions; KYC and identity verification providers to validate your identity documents; third-party game studios (including Evolution Gaming, Pragmatic Play, Pocket Games Soft, NetEnt, and Microgaming) to deliver games; cloud hosting and infrastructure providers to store platform data securely; and fraud-detection and cybersecurity specialists. All service providers operate under binding data processing agreements and are prohibited from using your data for any purpose beyond the specific service they provide to ora78.
We may disclose your personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of ora78, its users, or the public. We will notify you of any such disclosure where we are legally permitted to do so.
In the event that ora78 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via the email address on your account prior to any such transfer and before your data becomes subject to a different privacy policy.
ora78 will never share your personal data with third-party advertisers, data brokers, or any entity that intends to use it for independent marketing purposes. Sharing is strictly limited to the operational and legal purposes described above.
ora78 uses cookies and similar tracking technologies to operate the platform securely, remember your preferences, and understand how users navigate the site. The following cookie categories are in use:
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality. |
| Functional | Remember your preferences — such as language display settings, your last-visited game category, and responsible gaming limit preferences — across sessions. |
| Analytics | Collect anonymised, aggregated data about how users interact with the platform (page views, session duration, feature usage) to inform product improvements. No personally identifiable information is included in analytics reports. |
| Security & Fraud | Device fingerprinting and behavioural tokens used to identify unusual activity patterns consistent with fraud, multi-accounting, or bot usage. |
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the platform. Disabling functional or analytics cookies will not prevent access but may affect your experience.
ora78 takes the security of your personal data seriously and has implemented a multi-layered technical and organisational security framework to protect it against unauthorised access, disclosure, alteration, and destruction.
No online platform can guarantee absolute security. In the unlikely event of a data breach that poses a high risk to your rights, ora78 will notify affected users without undue delay and take immediate steps to contain and remediate the incident.
As a user of the ora78 platform, you hold a number of rights in relation to the personal data we hold about you. These rights are listed below. To exercise any of them, contact our support team via live chat or email [email protected]. We will respond within 30 days of receiving a verifiable request.
ora78 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedules apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of account plus 5 years after account closure (AML record-keeping requirement). |
| Transaction Records | 7 years from the date of each transaction, consistent with standard financial record-keeping practice. |
| KYC Documents | 5 years after account closure or the date of the last transaction, whichever is later. |
| Support Communications | 3 years from the date of the interaction, or until the matter is resolved and no further action is anticipated. |
| Responsible Gaming Records | Duration of account plus 5 years, to demonstrate compliance with responsible gaming obligations. |
| Marketing Consent Records | Until consent is withdrawn plus 3 years, to demonstrate that marketing was conducted on a lawful basis. |
| Analytics Data | Anonymised after 12 months; the anonymised aggregate data may be retained indefinitely for product planning purposes. |
When your data reaches the end of its retention period, it is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.
The ora78 platform is strictly for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and accounts where the holder is found to be under 21 will be immediately suspended, with all funds returned to the source payment method.
If you are a parent or guardian and believe that your minor child has submitted personal data to ora78, please contact us immediately at [email protected]. We will investigate and, where confirmed, delete the data and close the account without delay.
21+ Only. It is a condition of using the ora78 platform that you are at least 21 years of age. By registering an account, you represent and warrant that you meet this age requirement. ora78 uses automated and manual age-verification checks as part of its KYC programme.
ora78 is an internationally operated platform. As a result, your personal data may be processed on servers located outside Indonesia — for example, where our cloud infrastructure provider or a third-party game studio maintains data centres in another country. Whenever your data is transferred internationally, we ensure that adequate safeguards are in place to protect it to a standard equivalent to what you would expect within Indonesia.
These safeguards include: contractual data processing agreements incorporating internationally recognised standard contractual clauses; transfer only to service providers operating in jurisdictions with recognised adequacy standards for data protection; and regular third-party security audits of overseas processors.
If you would like further information about the specific safeguards applicable to any particular international transfer of your data, please contact our support team at [email protected].
ora78 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered account holders via email or an in-platform notification at least 7 days before the updated policy takes effect.
The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the ora78 platform after the effective date of any revision constitutes your acknowledgement and acceptance of the updated policy.
We encourage you to review this page periodically to stay informed about how we protect your personal data. The current version number and effective date are displayed at the top of this page.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ora78 handles your personal data, please reach out to our team through any of the following channels:
Native Indonesian-speaking support agents are available around the clock to assist with all account, payment, and data-related enquiries, even though the platform itself is operated in English as its primary language.
If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. ora78 will cooperate fully with any such authority in the exercise of its regulatory functions.
For data subject access requests, please be prepared to verify your identity before we can release or modify any personal data. This is a security measure to ensure that your data is not disclosed to or altered by an unauthorised party.
ora78 protects your privacy so you can focus on what matters: great odds, hundreds of slots, live casino action, and fast IDR payouts. Join over 2 million players across Indonesia today.
Have additional questions? Visit our FAQ page or read our About Us page to learn more about the platform.