Privacy Policy

1.1 Who We Are. oreo5d ("we", "us", "our") is a premium online betting and casino platform designed specifically for Indonesian players aged 21 and above. We are committed to protecting your privacy and ensuring that your personal information is handled with the utmost care, security, and transparency.

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected through the oreo5d website at https://oreo5d.cam, including mobile-optimized versions, and any related communications such as email, live chat, or customer support interactions. It explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal data.

1.3 Consent. By registering an account, making a deposit, placing a bet, or otherwise using oreo5d, you explicitly consent to the collection, processing, storage, and use of your personal information as described in this policy. If you do not agree with any aspect of this policy, you must cease using the platform immediately and contact us to request account closure.

1.4 Data Controller. oreo5d acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

oreo5d collects several categories of personal information to provide services, verify identity, prevent fraud, and comply with legal obligations. The data we collect includes:

2.1 Account Registration Data

When you create an oreo5d account, we collect the following information:

• Full legal name (as it appears on your Indonesian national ID or passport)
• Date of birth (to verify you are at least 21 years old)
• Residential address in Indonesia (street, city, province, postal code)
• Email address (used for account notifications and communications)
• Mobile phone number (used for account security and two-factor authentication)
• Username and encrypted password (chosen by you during registration)

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and verify your identity before processing withdrawals, we collect:

• Government-issued photo ID (KTP Nasional or passport), including document number, issue date, expiry date, and photograph
• Selfie photograph of you holding your ID document and a handwritten verification note
• Proof of address document (utility bill, bank statement, or government correspondence) dated within the last three months
• Source of funds documentation (bank statements, employment letter, or business registration) for large transactions or high-volume accounts

2.3 Financial Transaction Data

We collect details of all financial transactions you conduct on oreo5d, including:

• Deposit amount, date, time, and payment method (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Bank account name and last four digits of account number (for bank transfers)
• E-wallet account name and phone number (for e-wallet deposits)
• Withdrawal requests including amount, destination account, and processing status
• Transaction history including deposits, withdrawals, bonuses claimed, and wagers placed

2.4 Betting and Gaming Activity

We automatically log all your activity on the platform, including:

• Bets placed (sport, event, market, odds, stake amount, result)
• Casino games played (game name, provider, session duration, bet sizes, wins/losses)
• Live dealer interactions (table join/leave times, hands played, dealer interactions)
• Togel (Indonesia's traditional numbers lottery) ticket purchases and draw results
• Bonuses and promotions claimed (type, amount, wagering progress, completion status)

2.5 Technical and Device Data

When you access oreo5d, we automatically collect technical information including:

• IP address and approximate geographic location (city/province level, based on IP)
• Device type (desktop, mobile, tablet), operating system, and browser type/version
• Screen resolution, language preference, and time zone setting
• Referral source (how you arrived at oreo5d — direct, search engine, advertising link)
• Pages visited, features used, time spent on each page, and clickstream data
• Login timestamps and session duration

2.6 Communications Data

When you contact our support team via live chat, email, or any other channel, we retain:

• Full text of all messages exchanged between you and support agents
• Attachments or screenshots you submit (if relevant to your inquiry)
• Timestamp, channel (live chat, email, phone), and agent identification
• Resolution status and satisfaction ratings (if provided)

oreo5d processes your personal information for the following specific purposes:

Marketing Communications. oreo5d may send you promotional emails about new bonuses, exclusive VIP offers, tournament invitations, and platform updates. You may opt out of marketing communications at any time by clicking "Unsubscribe" in any promotional email or by contacting support. Note that you cannot opt out of transactional emails (account notifications, withdrawal confirmations, security alerts) as these are essential to the service.

Under international data protection law, oreo5d must have a lawful basis to collect and process your personal information. We rely on the following legal grounds:

• Contractual Necessity: Most data processing is necessary to perform the contract between you and oreo5d (the Terms & Conditions). Without processing your registration data, we cannot create your account. Without processing financial data, we cannot process deposits or withdrawals. Without processing betting data, we cannot accept wagers or pay winnings.
• Legal Obligation: We are legally required to verify your identity (KYC), retain transaction records, report suspicious activity to authorities, and comply with anti-money laundering regulations. This processing is mandatory and not optional.
• Legitimate Interests: oreo5d has a legitimate business interest in preventing fraud, detecting multiple accounts, protecting platform security, analyzing usage patterns to improve services, and ensuring fair play. We balance these interests against your privacy rights and implement safeguards to minimize intrusion.
• Consent: Where required by law, we obtain your explicit consent before processing personal data (such as for marketing communications). You may withdraw consent at any time, though this will not affect the lawfulness of processing conducted prior to withdrawal.

5.1 General Principle. oreo5d does not sell, rent, lease, or otherwise commercially exploit your personal information to third parties. We share data only with essential service providers necessary to operate the platform and only under strict confidentiality and data protection agreements.

5.2 Service Providers We Work With

• Payment Processors: We share necessary financial information (bank account details, e-wallet information, transaction amounts) with payment gateway partners to process deposits and withdrawals via BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, and LinkAja. These providers are contractually obligated to use your data solely for payment processing and to maintain strict security standards.
• Game Providers: When you play slots, live casino, or other third-party games, we share your username, session token, and bet data with game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft) to enable gameplay. These providers process data under their own privacy policies, which you should review.
• Identity Verification Services: We may use automated identity verification services to cross-check your KYC documents against government databases, watch lists, and fraud databases. These services receive only the minimum data necessary for verification.
• Cloud Infrastructure Providers: oreo5d operates on cloud servers provided by SOC 2 certified data centers. These infrastructure partners have physical access to servers but are contractually prohibited from accessing or using the data stored on them.
• Customer Support Tools: Our support team uses live chat software and ticketing systems to manage inquiries. These tools store conversation logs but are configured to comply with our data protection standards.

5.3 Legal Disclosures

oreo5d may disclose your personal information where required by law or legal process, including:

• In response to a valid court order, subpoena, search warrant, or other lawful government request
• To comply with anti-money laundering reporting obligations to financial intelligence units
• To investigate suspected fraud, money laundering, match-fixing, or other illegal activity
• To protect the rights, property, or safety of oreo5d, our members, or the public

Where legally permitted, we will notify you before disclosing your data to authorities and will disclose only the minimum information necessary to comply with the request.

5.4 Business Transfers

In the event that oreo5d is acquired by, merged with, or sells substantially all of its assets to another entity, your personal information may be transferred to the acquiring party. You will be notified via email and/or prominent notice on the platform of any such change in ownership and will be given the opportunity to delete your account before the transfer if you do not consent.

6.1 What Are Cookies. Cookies are small text files placed on your device by websites you visit. They enable the website to remember your preferences, recognize you on return visits, and analyze how you use the site.

6.2 Cookies We Use. oreo5d uses the following types of cookies:

• Essential Cookies: Required for basic platform functionality such as maintaining your login session, remembering your language preference, and enabling secure transactions. You cannot opt out of essential cookies as the platform will not function without them.
• Security Cookies: Used to detect fraudulent logins, prevent session hijacking, and identify unusual access patterns that may indicate account compromise.
• Performance Cookies: Collect anonymized data about how you use oreo5d (pages visited, time spent, features used) to help us optimize the platform and fix technical issues.
• Functional Cookies: Remember your preferences such as favorite games, preferred odds format (decimal/fractional), and customized dashboard layout.

6.3 Third-Party Cookies. Some oreo5d pages may embed content from third-party game providers. These providers may set their own cookies governed by their privacy policies. We do not control third-party cookies and recommend reviewing the privacy policies of game providers you interact with.

6.4 Managing Cookies. Most browsers allow you to view, delete, and block cookies through browser settings. However, disabling essential cookies will prevent you from logging into your account and using oreo5d services. Disabling performance or functional cookies may degrade your user experience but will not prevent basic platform use.

oreo5d implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). All personal data stored on our servers is encrypted at rest using 256-bit AES encryption.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All employees and contractors with data access are bound by confidentiality agreements and undergo background checks.
• Secure Data Centers: Personal information is stored on servers located in SOC 2 Type II certified data centers with 24/7 physical security, biometric access controls, video surveillance, and environmental monitoring.
• Intrusion Detection: We deploy firewall protection, intrusion detection systems, and real-time security monitoring to identify and respond to potential threats.
• Regular Audits: oreo5d undergoes annual third-party security audits and penetration testing to identify vulnerabilities and validate that security controls are operating effectively.
• Incident Response: We maintain a detailed data breach response plan. In the unlikely event of a security incident, we will notify affected members within 72 hours and provide guidance on protective measures.

Your Responsibility. While oreo5d implements robust security measures, you also play a critical role in protecting your account. Choose a strong, unique password (minimum 10 characters with uppercase, lowercase, numbers, and symbols). Never share your password with anyone. Enable two-factor authentication if offered. Log out of your account when using shared or public devices. Report any suspicious activity to [email protected] immediately.

oreo5d retains personal information only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations:

• Active Accounts: While your account is active, we retain all personal data, transaction history, and activity logs to provide ongoing services.
• Closed Accounts: After you close your account (either voluntarily or due to Terms violation), we retain core identification data (name, date of birth, ID document number) and transaction history for seven (7) years to comply with anti-money laundering record-keeping requirements and to prevent you from creating duplicate accounts.
• KYC Documents: Identity verification documents (scanned IDs, selfies, proof of address) are retained for seven (7) years after account closure.
• Financial Records: Deposit and withdrawal records are retained for seven (7) years to comply with tax reporting and financial audit requirements.
• Communications: Support chat logs and email correspondence are retained for three (3) years after the last interaction to maintain a service quality record and resolve any future disputes.
• Marketing Data: If you opt out of marketing communications, your email address is moved to a suppression list (retained indefinitely) to ensure we do not accidentally re-contact you in the future.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you as an individual.

Under international data protection law, you have the following rights regarding your personal information held by oreo5d:

• Right to Access: You may request a copy of all personal data we hold about you. We will provide this data in a structured, commonly used, machine-readable format (CSV or JSON) within 30 days of your request.
• Right to Rectification: If any personal information we hold is inaccurate or incomplete, you have the right to request correction. You can update most information directly via your account settings or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will comply unless we are legally required to retain the data (e.g., for anti-money laundering compliance, tax reporting, or fraud investigation). Even after account closure, certain data must be retained for seven years as described in Section 8.
• Right to Restriction of Processing: In certain circumstances (such as when you contest the accuracy of data or object to processing), you may request that we temporarily restrict how we use your data while the matter is resolved.
• Right to Data Portability: You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data based on legitimate interests (such as marketing communications). We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as for promotional emails), you may withdraw consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: If you believe oreo5d has not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with your local data protection supervisory authority.

Exercising Your Rights. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". Include your full name, account username, and a clear description of your request. We will respond within 30 days and may require identity verification before fulfilling your request to prevent unauthorized disclosure.

10.1 Cross-Border Transfers. oreo5d operates globally and may transfer personal data to countries outside Indonesia, including to cloud infrastructure providers, payment processors, and game studios located in jurisdictions with different data protection standards.

10.2 Safeguards. When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Transferring data only to countries that have been deemed to provide adequate data protection by recognized authorities
• Implementing Standard Contractual Clauses (SCCs) approved by data protection regulators
• Requiring third-party service providers to implement technical and organizational measures equivalent to those required under international data protection standards

oreo5d is strictly an adults-only platform. No person under the age of 21 years is permitted to create an account, make a deposit, or place a wager. We do not knowingly collect personal information from minors.

If we become aware that a person under 21 has provided personal information or created an account, we will immediately close the account, void all bets, confiscate any balance, and delete the minor's personal data. If you believe a minor has accessed oreo5d, please contact us immediately at [email protected].

12.1 Right to Modify. oreo5d reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features.

12.2 Notification. When material changes are made to this policy, we will notify you via email (to the address on file) and/or by displaying a prominent notice on the platform. The updated policy will show a new "Last Updated" date at the top of this page.

12.3 Your Acceptance. Continued use of oreo5d after a policy update constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must cease using the platform and may request account closure and data deletion (subject to mandatory retention requirements).

If you have any questions, concerns, or requests regarding this Privacy Policy or how oreo5d handles your personal information, please contact our Data Protection team:

• Email: [email protected] (use subject line "Privacy Inquiry")
• Live Chat: Available 24/7 via the oreo5d platform
• Response Time: We aim to respond to all privacy inquiries within 48 hours (typically much faster).

For data access requests, data deletion requests, or to exercise any of your privacy rights, please email [email protected] with "Privacy Rights Request" in the subject line and include your full name, account username, and specific request details.