orionplay Privacy
Policy

1. Introduction

orionplay is committed to protecting the privacy and personal data of every player who uses our platform. We recognize that Filipino players trust us with sensitive information, and we take that responsibility seriously. This Policy has been prepared in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the orionplay website, mobile-optimized platform, customer support channels, and any other service operated by orionplay. It does not apply to third-party websites or services that may be linked from our platform.

If you have questions about how orionplay handles your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create an orionplay account, we collect:

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Email address;
• Mobile number;
• Residential address (city, province, Philippines);
• Username and encrypted password.

2.2 KYC Verification Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, we may collect:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID);
• Proof of address documents;
• Proof of payment method ownership (e.g., GCash account screenshot showing your registered name);
• Selfie or liveness verification image for identity confirmation.

2.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, payment method identifiers (e.g., GCash-registered mobile number, bank account name), and transaction timestamps. orionplay does not store full debit card numbers — card data is handled by our PCI-DSS compliant payment processors.

2.4 Gaming Activity Data

We record your gaming history, including games played, wager amounts, win/loss outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and regulatory reporting.

2.5 Technical Data

When you access the orionplay platform, we automatically collect:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps and page interaction data;
• Cookie identifiers and similar tracking technologies.

2.6 Communications Data

If you contact orionplay's support team via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Your Data

orionplay collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, web beacons, server logs, and similar technologies when you access the platform;
• From third parties — including identity verification service providers, payment processors, and fraud prevention partners, where permitted by law.

4. How We Use Your Personal Data

orionplay uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your orionplay account;
• Identity and age verification: Confirming you meet the 21+ age requirement and verifying your identity as required by PAGCOR and Philippine law;
• Payment processing: Processing deposits and withdrawals via GCash, Maya, bank transfer, and debit card;
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and applying responsible gaming tools where appropriate;
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services;
• Platform improvement: Analyzing usage data to improve the orionplay platform, fix bugs, and develop new features;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by applicable law;
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized account access, and other security threats.

5. Legal Basis for Processing

orionplay processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — including account creation, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, NPC regulations, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 Service Providers

orionplay shares personal data with trusted third-party service providers who assist in operating the platform, including payment processors (GCash, Maya, banking partners), identity verification providers, cloud hosting providers, and customer support software vendors. All service providers are contractually bound to process data only on orionplay's instructions and in compliance with applicable Philippine data privacy law.

6.2 Game Providers

Certain technical data (such as player session tokens and game transaction records) may be shared with our licensed Game Providers (e.g., Pragmatic Play, PG Soft, Jili) solely for the purpose of delivering game services. Game Providers do not receive your full personal profile.

6.3 Regulatory Authorities

orionplay may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other Philippine government bodies where required by law, court order, or regulatory directive.

6.4 No Sale of Personal Data

orionplay does not sell, rent, or trade your personal information to any third party for their own commercial or marketing purposes. Any sharing of data is limited to what is necessary for the purposes described in this Policy.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of orionplay's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your rights under this Policy will continue to apply.

7. Data Retention

orionplay retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. Specifically:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years in accordance with AMLA requirements;
• Gaming activity data: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes;
• Support communications: Retained for two (2) years after the resolution of the relevant inquiry or dispute;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC guidelines.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the orionplay platform. They help us recognize your browser, remember your preferences, and analyze how you use our services.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience.
• Analytics cookies: Collect anonymized data about how players use the platform to help us improve performance and usability.
• Marketing cookies: Used to deliver relevant promotional content within the orionplay platform. These are only set with your consent.

8.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the orionplay platform. Strictly necessary cookies cannot be disabled as they are essential for platform operation.

9. Data Security

orionplay implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the orionplay platform;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication options for player accounts;
• Regular security audits and penetration testing by independent third parties;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Incident response procedures aligned with NPC breach notification requirements.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by orionplay:

• Right to be informed: The right to know what personal data orionplay collects and how it is used — as described in this Policy;
• Right of access: The right to request a copy of the personal data orionplay holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to orionplay's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact orionplay's Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days, as required by NPC regulations.

11. Children's Privacy

12. Third-Party Links

The orionplay platform may contain references to third-party game providers and payment services. orionplay is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the orionplay platform.

13. Changes to This Privacy Policy

orionplay reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or a prominent notice on the platform. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the orionplay platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you may request account closure by contacting our support team.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact orionplay's Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.