Privacy Policy Orion Stars — Our Commitment to Protecting the Personal Data of Malaysian Players

Orion Stars collects your personal information through several means — directly from you during registration and platform use, and automatically through industry-standard tracking technologies. We only collect what is strictly necessary.

We do not collect sensitive information such as biometric data, medical records, or political views unless a specific legal requirement mandates it — and in such cases, your written consent will be sought beforehand.

Orion Stars uses your personal information only for lawful, specified purposes. Below are the primary purposes for which your data is used, along with the legal basis governing each use:

• Account Management: Creating and maintaining your account, processing logins, recovering passwords and ensuring account security. Basis: Contract performance.
• Transaction Processing: Processing deposits (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) and withdrawals in MYR, verifying payments and resolving any financial disputes. Basis: Contract performance.
• Identity Verification (KYC): Verifying your identity and age in accordance with data protection and anti-money laundering compliance requirements. Legal basis: Legal obligation.
• Customer Service: Handling enquiries, resolving complaints, and providing technical support in Bahasa Melayu. Legal basis: Performance of contract.
• Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, or the use of duplicate accounts. Basis: Legitimate interests.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer proactive support. Legal basis: Legal obligation & public interest.
• Platform Improvements: Analysing anonymised usage data to improve the user experience at Orion Stars. Basis: Legitimate interests.
• Marketing Communications: Sending offers, promotions and the latest news about Orion Stars — only if you have consented to receive such communications. You may withdraw your consent at any time. Basis: Consent.

Orion Stars will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

Orion Stars does not sell or share players' personal data for commercial purposes. However, to operate the platform, we need to share limited data with the following categories of third parties — and only to the extent necessary for the stated purpose:

• Payment Gateway Provider: To process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX. Data shared is limited strictly to the transaction information required.
• KYC Service Providers: Third-party identity verification firms that help us verify players' identity and age in accordance with compliance requirements.
• Game Providers: Slots, Live Casino and Sports Betting providers that supply content to the platform Orion Stars. Only the minimum technical data required to run the game is shared.
• Customer Support Platform: The CRM and support tools we use to manage player enquiries. Access is restricted to staff who require it.
• Regulatory Authority: Malaysian government agencies or law enforcement bodies where a valid court order or legal compliance requirement mandates disclosure. In such cases, Orion Stars will inform you unless prohibited from doing so by law.

All third parties we work with are required to meet data protection standards equal to or higher than our own. Legally binding data processing agreements are signed with all third-party vendors before any data is shared.

Orion Stars continuously invests in security infrastructure to ensure Malaysian players' data is always protected to the highest standards. Below are the key security measures we have in place:

• Data Transmission Encryption: All communications between your browser/app and the Orion Stars encrypted with TLS 1.3 / SSL 256-bit.
• Data-at-Rest Encryption: Sensitive data stored on our servers is encrypted using AES-256 — the same standard used by national security agencies.
• Tiered Access Controls: Only authorised staff with a clear operational need may access player data. All access is logged and monitored automatically.
• Two-Factor Authentication (2FA): All internal staff accounts Orion Stars with access to player data are required to use 2FA. Players are also encouraged to enable 2FA on their own accounts.
• 24/7 Threat Monitoring: An automated intrusion detection system monitors platform traffic around the clock to identify suspicious activity.
• Regular Penetration Testing: Independent cybersecurity firms conduct penetration testing on the platform Orion Stars on a regular basis to identify and address any vulnerabilities before they can be exploited.
• Secure Data Backup: Critical data is backed up regularly to separate, fully encrypted server locations, ensuring service continuity in the event of an emergency.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection against every threat. Should a security incident occur that affects your data, Orion Stars will notify you within 72 hours and take immediate action to contain the damage.

Orion Stars uses cookies and similar tracking technologies to enhance your gaming experience and ensure the platform functions properly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform operations — login, session security and language preferences. Cannot be disabled as the platform will not function without them.
• Performance Cookies: Collecting anonymous data on how players use the platform to help us improve performance and navigation. This data cannot be used to identify you personally.
• Functional Cookies: Saving your preferences — such as language, screen resolution, and game settings — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand overall platform usage patterns — for example, which slots games are most popular among Malaysian players. This data informs our product decisions.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the platform Orion Stars. We recommend using the default cookie settings for the best gaming experience.

Orion Stars retains your personal data for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal requirements. Below is a guide to our retention periods by data category:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure — this is the minimum requirement under Malaysian financial law.
• Financial Transaction Records: Retained for 7 years in accordance with the requirements of the Malaysian Companies Act and anti-money laundering regulations.
• KYC & Identity Verification Records: Retained for the duration of the active account period plus 7 years, as required for legal compliance purposes.
• Customer Support Logs: Retained for 3 years from the date of the last interaction.
• Anonymised Analytics Data: Stored indefinitely as it cannot be used to identify any individual.
• Marketing Data (with consent): Retained until you withdraw your consent or close your account.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For any physical data (where applicable), secure destruction procedures are followed. You may request early deletion of your data by contacting our Privacy Officer — subject to any legal retention requirements that may prevent immediate deletion in certain categories.

As a player Orion Stars who are based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010:

• Right to Be Informed: You have the right to know what data we collect, why we collect it, and how it is used — that is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of all personal data we hold about you. We will fulfil the request within 21 days of receiving your application.
• Right to Rectification: If the data we hold is inaccurate or outdated, you have the right to request a correction. Simple updates can be made directly from your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data, subject to the legal retention requirements outlined in Section 6.
• Right to Restrict Processing: Under certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.
• Right to Data Portability: You may request your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, without having to provide any reason.

To exercise any of these rights, contact our Privacy Officer at privacy@orionstars.best, stating the right you wish to exercise and sufficient information to verify your identity. We will respond within 21 calendar days. If a request is complex and requires additional time, we will notify you within that initial period.

Financial data is among the most sensitive information we handle. Orion Stars takes a highly cautious approach to handling information related to bank accounts, e-wallets, and transaction records of Malaysian players.

Key things you need to know about your financial data at Orion Stars:

• Full bank account numbers are not stored on our servers Orion Stars — only the last digits required for display verification purposes are stored.
• All transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX are processed through a PCI-DSS certified payment gateway that is separate from our core infrastructure.
• Complete transaction records (amount, time, method) are retained for compliance and dispute resolution purposes — this is a legal requirement, not a choice.
• All financial records are encrypted with AES-256 at rest and are accessible only to authorised personnel under logged conditions.
• To ensure the highest level of protection, all withdrawals from Orion Stars may only be made to the same bank account or e-wallet used for the deposit — this prevents money transfer fraud.

If you suspect any unauthorised financial activity on your Orion Stars account, please contact us immediately at support@orionstars.best. Reports will be handled as high priority with a response within 4 business hours.

Orion Stars maintains a strict, zero-compromise policy: our platform is not intended for children or individuals under the age of 18. We do not knowingly collect, store, or process any personal data from individuals under 18 years of age.

Steps we take to protect minors:

• Mandatory age verification at registration — applicants must be 18 years of age or older.
• A KYC process that verifies date of birth through official Malaysian identity documents such as MyKad.
• All accounts suspected of belonging to underage individuals will be suspended immediately pending investigation.
• Any data inadvertently collected from individuals under 18 will be deleted immediately upon detection.

If you become aware that a minor has registered an account at Orion Stars, please contact us immediately at support@orionstars.best. We will take prompt action to close the account and delete all associated data.

Orion Stars reserves the right to update this Privacy Policy from time to time in line with changes in legislation, industry practice, or how we operate. Any material changes to this policy will be communicated to you through the following means:

• Prominent notice on the platform's main page Orion Stars for at least 14 days before the changes take effect
• Email notification to all active registered players
• In-account system message to request consent review and confirmation (where changes require renewed consent)

The "Last Updated" date at the top of this page will always reflect the latest version of the Privacy Policy. We recommend checking this page periodically.

If you do not agree with any changes to this Privacy Policy, you may choose to close your account and request deletion of your data. Continued use of the Orion Stars after the effective date of any changes will be considered acceptance of the updated policy.

Orion Stars has appointed a Data Protection Officer (DPO) responsible for ensuring full compliance with Malaysia's PDPA and this Privacy Policy. If you have any questions, concerns, or wish to exercise any of your privacy rights, please contact:

• Privacy Email: privacy@orionstars.best — For all data rights requests, privacy complaints, and sensitive enquiries
• General Support Email: support@orionstars.best — For general account and platform enquiries
• Live Chat: Available 24/7 via the in-platform chat icon Orion Stars — for immediate enquiries in Bahasa Melayu

Our committed response times:

• General Enquiries: Within 48 working hours
• Data Rights Requests (Access, Deletion, etc.): Verification within 5 working days, resolution within 21 calendar days
• Security Complaints / Incidents: Initial response within 4 hours, full update within 72 hours

If you are not satisfied with our response, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the PDPA 2010. Contact details for this statutory body are available on the official Malaysian Government website.