orionplay Privacy Policy

1. Introduction

Welcome to the orionplay Privacy Policy. orionplay ("we," "us," or "our") operates the online gaming platform accessible at https://orionplay.vip (the "Platform"). We are committed to protecting the privacy and personal data of every player who registers and plays on orionplay.

This Privacy Policy explains what personal information orionplay collects from you, how we use it, with whom we share it, how long we retain it, and what rights you have over your data. It applies to all users of the orionplay Platform, including visitors, registered players, and former players whose data we continue to hold for legal or regulatory purposes.

orionplay is designed for and targeted at players in the Philippines. Our privacy practices are aligned with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

2. Data Controller

For the purposes of applicable data privacy law, orionplay is the data controller responsible for your personal information collected through the Platform. As data controller, orionplay determines the purposes and means of processing your personal data.

If you have any questions about how orionplay handles your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

orionplay collects only the personal data that is necessary to provide our services, verify your identity, process transactions, and comply with our legal and regulatory obligations. The categories of personal data we collect include:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Gender (optional, where provided)
• Nationality and country of residence
• Username and account credentials (password stored in hashed form only)

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (collected during KYC verification)

3.3 Identity Verification (KYC) Data

• Copies of government-issued photo ID (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie photographs where required for identity verification
• Proof of payment method ownership

3.4 Financial & Transaction Data

• Deposit and withdrawal history
• Payment method details (e.g., GCash account name, PayMaya registered number, BPI/BDO/Metrobank account name — we do not store full bank account numbers or card numbers)
• Transaction amounts and timestamps
• Bonus and promotional activity records

3.5 Gaming Activity Data

• Game history, bet amounts, and outcomes
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

3.6 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Unique device identifiers
• Log data including access times and pages visited

3.7 Communications Data

• Records of your communications with orionplay customer support
• Feedback, survey responses, and complaints submitted to orionplay

4. How We Collect Your Data

orionplay collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions on orionplay.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the orionplay Platform (see Section 9 on Cookies).
• From third parties — including identity verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, and analytics providers, where necessary to verify your identity or process transactions.

5. Purpose and Legal Basis for Processing

orionplay processes your personal data for specific, legitimate purposes. The table below summarizes the key purposes and the corresponding legal basis under the Philippine Data Privacy Act:

6. Data Sharing and Disclosure

orionplay does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
• Identity verification providers — third-party KYC and AML service providers who assist orionplay in verifying player identities and detecting fraudulent activity.
• Technology and hosting providers — cloud infrastructure and IT service providers who host and maintain the orionplay Platform under strict data processing agreements.
• Analytics providers — service providers who help orionplay understand Platform usage and improve user experience, using anonymized or aggregated data where possible.
• Regulatory and law enforcement authorities — where orionplay is legally required to disclose information, such as in response to a court order, regulatory investigation, or AML reporting obligation.
• Professional advisors — lawyers, auditors, and accountants, where necessary and subject to professional confidentiality obligations.

7. Data Retention

orionplay retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and KYC data — retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML regulations.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs — retained for a minimum of three (3) years.
• Customer support communications — retained for three (3) years from the date of the last communication.
• Marketing consent records — retained until you withdraw consent, plus a reasonable period thereafter for compliance purposes.

When personal data is no longer required, orionplay will securely delete or anonymize it in accordance with our data disposal procedures.

8. Data Security

orionplay implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the orionplay Platform
• Encryption of sensitive data at rest, including KYC documents and financial records
• Strict access controls — only authorized orionplay personnel with a legitimate need can access personal data
• Regular security assessments and vulnerability testing of the Platform
• Secure, hashed storage of account passwords (we never store passwords in plain text)
• Staff training on data privacy and security obligations

While orionplay takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, orionplay will notify the National Privacy Commission and affected players in accordance with applicable law.

9. Cookies and Tracking Technologies

orionplay uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and deliver a better gaming experience. The types of cookies we use include:

• Strictly necessary cookies — essential for the Platform to function, including session management and security features. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and login status to improve your experience on orionplay.
• Analytics cookies — help orionplay understand how players use the Platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymized where possible.
• Marketing cookies — used to deliver relevant promotional content to you, where you have consented to receive marketing communications from orionplay.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the orionplay Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by orionplay:

• Right to be informed — you have the right to know what personal data orionplay collects about you and how it is used, as set out in this Privacy Policy.
• Right of access — you may request a copy of the personal data orionplay holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object — you may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe orionplay has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. orionplay will respond to all valid data subject requests within thirty (30) days of receipt, or within such extended period as permitted by law.

11. Minors and Age Restriction

The orionplay Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. orionplay does not knowingly collect personal data from individuals under the age of 21.

If orionplay discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our Terms and Conditions and applicable law.

If you are a parent or guardian and believe that a minor has registered on orionplay, please contact us immediately using the details in Section 14.

12. International Data Transfers

orionplay primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed by third-party service providers located outside the Philippines — for example, cloud hosting providers or technology partners operating in other jurisdictions.

Where such international transfers occur, orionplay ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require the recipient to handle your data to a standard equivalent to that required under Philippine law.

13. Updates to This Privacy Policy

orionplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players via email or a prominent notice on the Platform, and the updated effective date will be displayed at the top of this page.

Your continued use of the orionplay Platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed about how orionplay protects your personal data.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way orionplay handles your personal data, please contact our Data Protection Officer:

Data Protection Officer — orionplay
Email: [email protected]

For general support inquiries, our customer support team is available 24/7. For responsible gaming assistance, please visit our Responsible Gaming page. For frequently asked questions, visit our FAQ page.

If you are not satisfied with orionplay's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC and how to file a complaint is available through official Philippine government channels.