Privacy Notice

This Privacy Notice ("Notice") explains how Orion's Fortune and its operator (collectively, "Orion's Fortune", "us", "we", "our") handle your personal data.

This Notice applies to personal data collected from registered users ("Players") who have an account on our website and visitors to our website.

The operator of this website is the Data Controller of your personal data. We decide how and why your personal data is processed in the ways explained in this Notice.

If you have any questions about this Notice, including any requests about exercising your privacy and data protection rights, you can contact our Data Protection Officer by sending an email to dpo@orionsfortune.com.

Data you provide to us directly

• •Registration Data: To create an account, you need to provide your email address, date of birth, country, phone number, full name, and username. Upon registering, we will automatically receive your IP address and location data.
• •Due Diligence Data: We collect your identity document number (passport, national ID, or driving licence), proof of address, source of wealth or funds, and financial details to comply with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, for age and identity verification purposes, and to comply with our licence conditions and other legal requirements.
• •Financial Information: We may collect your financial information, including bank account details, cryptocurrency wallet addresses, and payment system details, to facilitate withdrawals and deposits. This information may also be used for KYC and AML compliance purposes.

Personal Data We Collect Automatically

• •Device Information: We receive information about the device and software you use to access our services, including IP address, operating system version, browser type, and device identifiers.
• •Logs and Usage Information: We automatically receive information about your interactions with our services, including records of your activities such as viewing content, performing searches, pages viewed, links followed, time spent in sessions, and date and time of your sessions. We gather some of this data through cookies and similar technologies.
• •Location Information: We may collect or infer your general location information when you use our services.

Personal Data We Receive From Others

We may collect your personal data from other sources to provide and personalise our services and to comply with legal obligations, including:

• •Publicly available sources such as government databases and public records.
• •Third-party verification providers, fraud prevention agencies, financial institutions, and public authorities, to verify your information and investigate suspicious activities.
• •Inferences based on the personal data described above (for example, game preferences based on your activity).

We use the personal data we collect to:

• •Provide you with our services and manage your account.
• •Respond to your questions or requests.
• •Test, research, troubleshoot, and analyse data to develop and improve our products and services.
• •Prevent, detect, and manage risk against harmful behaviour, fraud, and illegal activities.
• •Send you marketing content, newsletters, and personalise our communications.
• •Resolve disputes, including investigations by law enforcement or regulatory bodies.
• •Fulfil regulatory and legal obligations, including KYC, AML, and responsible gambling requirements.
• •Maintain the security and functionality of our platform, including protecting our systems from security threats and unauthorised access.

We process your personal data only when we have a legal basis to do so. For some processing, more than one lawful basis may be relevant.

Performance of a Contract

We process personal data to fulfil or enter into a contract with you: to create and support your account, to communicate with you to fulfil our obligations under the Terms of Service, and to process transactions.

Legal Obligation

Processing your personal data may be necessary to comply with legal obligations, including:

• •Verifying your age and identity as part of our KYC and AML obligations.
• •Determining your location and applicable legal requirements using your IP data.
• •Managing risks, including preventing problem gambling and promoting responsible gambling.
• •Ensuring network and information security.
• •Complying with legal processes such as subpoenas or court orders.
• •Preventing crimes related to money laundering, terrorist financing, or fraud.
• •Reporting activities to meet regulatory, financial, and legal requirements.
• •Dealing with requests from you to exercise your rights under data protection laws.

Legitimate Interest

We may process your personal data to safeguard a legitimate interest, provided your rights, freedoms, or interests do not outweigh those interests, including:

• •Initiating or defending legal claims.
• •IT and system security procedures.
• •Managing our business relationship and improving our services.
• •Analytics, data aggregation, and research for service development.
• •Customer segmentation to manage risks and ensure responsible gaming.
• •Analysing gaming behaviours to recommend games and features.
• •Detecting and preventing activities that compromise the integrity of our services.

Consent

With your consent, we may:

• •Send direct marketing messages via email, SMS, or platform notifications.
• •Customise offers and promotions based on your gaming history and preferences.
• •Use data about your online behaviour to display targeted content.
• •Administer your participation in competitions, tournaments, rewards, and promotional events.

We may share your personal data with the following categories of recipients:

• •Internally: authorised employees, contractors, agents, and affiliated entities within our corporate group.
• •Payment providers and financial institutions: to facilitate deposits and withdrawals and to comply with their own legal and AML obligations.
• •Third-party service providers: including customer support, technology, cloud hosting, email delivery, and identity verification providers.
• •Marketing partners: where you have consented to receive marketing communications.
• •Fraud prevention agencies.
• •Game providers.
• •Analytics providers: for market research, data analysis, and service improvement.
• •Law enforcement, regulatory, and licensing authorities: where required by law or licence condition.
• •Third parties in connection with corporate transactions: such as mergers, acquisitions, financing, or sale of business assets.

If you submit a complaint, review, or query concerning our services to a third-party platform (such as a casino review site or dispute resolution body), we may respond directly to such platforms. In doing so, we may disclose personal data strictly limited to what is necessary to identify your account and respond appropriately. Such disclosures are based on our legitimate interest in resolving disputes transparently.

We retain your personal data for the duration that you maintain an account with us and to fulfil the purposes outlined in this Notice.

We may retain your data for a longer period as required by applicable legal obligations, including anti-money laundering regulations and our licence conditions. Our standard retention period following account closure is five (5) years, in line with international AML best practice and regulatory expectations.

Once the applicable retention period has expired and there is no longer a legal or business need to retain your data, your personal data will be either deleted or anonymised so that it can no longer be associated with you.

You have certain rights regarding the personal data we hold about you, including:

• •Access: request access to the personal data we hold about you and obtain information about how we process it.
• •Rectification: correct any inaccurate or incomplete personal data about you.
• •Erasure: request deletion of your personal data where there is no compelling legal or business reason for its continued processing.
• •Restriction: restrict the processing of your personal data in certain circumstances.
• •Portability: request the transfer of your personal data in a structured, commonly used, and machine-readable format.
• •Objection: object to the processing of your personal data, particularly on grounds of legitimate interest or for direct marketing purposes.
• •Withdraw consent: withdraw your consent at any time, without affecting the lawfulness of previous processing.
• •Complaint: lodge a complaint with the relevant supervisory or regulatory authority.

To exercise your rights, contact our Customer Support at support@orionsfortune.com or our Data Protection Officer at dpo@orionsfortune.com.

We use cookies, tags, pixels, web beacons, and similar technologies to enhance your experience on our website. Upon your first visit, we will request your consent to use non-essential cookies. Strictly necessary cookies, which are required for the operation of the website, do not require your consent. For more information, please refer to our Cookie Notice.

We implement robust administrative, technical, and physical safeguards to protect your personal data from unauthorised access, loss, theft, or misuse. While we employ advanced security measures, no system is entirely immune to security threats. We continuously assess and improve our security practices to enhance the protection of your data.

We may process your personal data in countries outside of your jurisdiction of residence. When we transfer your personal data to affiliates or third parties in other jurisdictions, we ensure that appropriate safeguards are in place so that your personal data is afforded a high standard of protection. This includes transferring data only to countries providing adequate protection or employing contractual safeguards recognised under applicable law.

In the event of a sale, merger, or any other change in ownership or control, your personal data may be disclosed as part of the transaction. The new owner or controlling entity will be permitted to use your personal data only in accordance with the terms of this Notice, unless you provide explicit consent for different use.

We may update, modify, or amend this Privacy Notice as our technology evolves and as required by law. It is your responsibility to review the current version from time to time. The most recent version, as published on the Orion's Fortune website, shall apply from the effective date stated above.

If you have any questions about this Privacy Notice or our data collection practices, contact us at support@orionsfortune.com or dpo@orionsfortune.com.