orca88 Privacy Policy —
Your Data, Protected
and Handled Honestly

1📜 Introduction & Scope

orca88 is committed to protecting the privacy of every player who registers or interacts with the platform. This Policy applies to all personal data collected through the orca88 website at https://orca88.app, including the account registration process, the orca88 Login portal, all game interfaces, the PKR deposit and withdrawal flow, and all support communications.

This Policy applies regardless of the device or network you use to access orca88 — whether that is a Pakistan mobile phone on an Easypaisa account, a laptop on a home broadband connection in Islamabad, or any other combination. It applies to players across all cities of Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Peshawar and every other location from which orca88 is accessed.

2🏢 Who We Are — Data Controller

For the purposes of data protection law, orca88 is the data controller of personal information collected through the platform. As data controller, orca88 determines the purposes for which personal data is processed and the means by which it is processed. orca88 holds an international gambling licence that imposes specific data handling and record-keeping obligations, including anti-money laundering (AML) data retention requirements.

Questions or requests relating to your personal data held by orca88 should be directed to our data support team at [email protected] or via WhatsApp and Telegram at orca88_support.

3📋 What Personal Data We Collect

orca88 collects the following categories of personal data, depending on how you interact with the platform:

4📥 How We Collect Your Data

orca88 collects personal data through the following channels:

• Account Registration: When you complete the orca88 sign-up form, providing your name, Pakistan mobile number, username and password.
• KYC Verification: When you submit identity documents in response to a verification request from orca88 — typically triggered at first withdrawal or when transaction thresholds are reached.
• Deposits and Withdrawals: When you transact via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, or MCB Bank — orca88 receives transaction reference data from the payment provider sufficient to match the payment to your account.
• Gameplay: Your game sessions, bet amounts, win/loss records, and session durations are recorded automatically by the orca88 platform as part of normal operation and regulatory record-keeping.
• Support Interactions: When you contact orca88 via WhatsApp, Telegram, or email, the content of those communications is retained as part of your account record.
• Automated Technologies: The orca88 platform automatically collects technical data — including your IP address, device type, browser information, and session tokens — when you access the site, for security, fraud detection and platform optimisation purposes.

5🎯 Why We Use Your Data — Purposes

orca88 uses the personal data it holds for the following specific purposes:

• Account creation and management: To create your orca88 account, maintain your PKR wallet, manage your login credentials, and communicate important account information.
• Identity and age verification: To confirm that you are who you say you are and that you are at least 18 years old, as required by our gambling licence and these Terms.
• Payment processing: To process PKR deposits from and withdrawals to your Easypaisa, JazzCash or bank account, and to maintain an accurate financial record for your account.
• Anti-money laundering compliance: To monitor transactions for patterns indicative of money laundering or other financial crime, as required by our international gambling licence, and to report suspicious activity to the relevant financial intelligence authority where required by law.
• Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, multi-accounting and other forms of fraud — using your IP address, device fingerprint, login history and betting pattern data.
• Responsible gaming: To enforce deposit limits, loss caps, session time reminders and self-exclusion requests that you have set on your account, and to identify players who may be exhibiting signs of problematic gambling behaviour.
• Customer support: To investigate and resolve complaints, answer queries, and document support interactions for quality assurance and dispute resolution purposes.
• Platform improvement: To understand how players use the orca88 platform, identify technical issues, and improve the product — using aggregated, anonymised data where possible.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via SMS or WhatsApp — but only where you have consented to receive marketing, and with an easy opt-out at any time.
• Legal compliance: To comply with applicable law, respond to court orders, and cooperate with lawful requests from regulatory authorities.

6⚖️ Legal Bases for Processing

orca88 processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and orca88 — including account management, PKR payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable law — including AML record-keeping, KYC verification, and mandatory reporting of suspicious financial activity.
• Legitimate interests: Processing carried out for orca88's legitimate business interests where those interests are not overridden by your data rights — including fraud prevention, security monitoring, and platform analytics.
• Consent: Processing based on your explicit consent — specifically marketing communications via SMS or messaging apps. You may withdraw this consent at any time by contacting orca88 support.

7🤝 Sharing Your Data with Third Parties

orca88 does not sell your personal data to any third party. orca88 shares personal data with third parties only in the following specific, limited circumstances:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank and other payment providers receive only the minimum transaction data necessary to process your PKR deposits and withdrawals.
• KYC and AML service providers: Licensed identity verification and AML screening providers receive the personal and documentary data required to complete Know Your Customer checks on behalf of orca88, in accordance with our licence obligations.
• Game providers: Certified game providers (including but not limited to Evolution Gaming, Pragmatic Play, and Microgaming) receive session and account reference data required to deliver their game content — but do not receive your CNIC, financial data, or full contact details.
• Regulatory and licensing authorities: orca88's gambling licence authority may request player data as part of regulatory oversight or licence compliance reviews. orca88 is obligated to comply with such requests.
• Law enforcement: Where orca88 receives a lawful request from a court or law enforcement agency with proper jurisdiction, player data will be disclosed to the extent legally required.
• Platform infrastructure providers: Cloud hosting, cybersecurity and analytics service providers who process data on orca88's behalf under strict data processing agreements are bound by the same data protection standards as orca88 itself.

8🌐 International Data Transfers

The orca88 platform operates under an international gambling licence, and some of the services and infrastructure supporting the platform are located outside Pakistan. Where personal data is transferred internationally, orca88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by applicable data protection law. These safeguards include contractual data processing agreements with all international service providers that impose obligations equivalent to those that apply to orca88 directly.

orca88 will not transfer personal data to any country or territory that does not provide an adequate level of data protection without implementing appropriate additional safeguards. If you wish to obtain information about the specific safeguards in place for any particular international transfer, please contact our data team at [email protected].

9🔐 Data Security

orca88 takes data security seriously and implements the following technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit TLS encryption on all data transmissions between your device and the orca88 platform — including during login, payment processing and game sessions.
• Password hashing: Account passwords are stored as salted cryptographic hashes. orca88 does not store or have access to your plaintext password.
• Access controls: Player personal data is accessible only to orca88 personnel with a genuine operational need to access it. Access is logged and audited.
• Fraud monitoring: Automated systems continuously monitor login attempts, payment patterns and session behaviour for signs of account compromise or fraudulent activity.
• Secure data centres: Player data is hosted in certified, physically secured data centre facilities with restricted access and environmental controls.
• Incident response: In the event of a personal data breach that poses a risk to player rights or freedoms, orca88 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

10🗓️ Data Retention

orca88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gambling licence. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with orca88, plus five years following account closure (for AML record-keeping purposes mandated by our licence).
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, as required by applicable AML regulations.
• KYC verification documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Game and betting records: Retained for five years from the date of each transaction, for regulatory compliance and dispute resolution purposes.
• Support communications: Retained for three years from the date of the interaction, unless a longer period is required for an ongoing dispute.
• Self-excluded players: Identifying data for self-excluded players is retained for the full duration of the exclusion period and five years thereafter, to prevent re-registration.
• Marketing consent records: Retained for three years from the date of consent, or until withdrawn, whichever is earlier.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

11🍪 Cookies & Tracking Technologies

The orca88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to detect fraud, and to understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to operate. These include session cookies that maintain your orca88 login state, security tokens that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without preventing core platform functions from working.
• Functional cookies: Remember your preferences — such as your last-selected game category or preferred display language — to provide a more personalised experience. These are enabled by default but can be disabled without affecting core platform functionality.
• Analytics cookies: Allow orca88 to understand aggregate usage patterns — which game categories are most popular, what device types are most commonly used, and where players encounter technical issues. These use anonymised data only.
• Security and fraud-detection cookies: Used by orca88's fraud detection system to identify suspicious patterns — such as an account being accessed from multiple IP addresses in rapid succession — and to maintain device recognition for registered accounts.

You can manage cookie settings through your browser. Please note that disabling strictly necessary cookies will prevent you from logging in to your orca88 account.

12✅ Your Data Rights

You hold the following rights over your personal data held by orca88. You may exercise any of these rights at no cost by contacting our data team:

• Right of Access: Request a copy of the personal data orca88 holds about you. orca88 will respond within 30 days of a verified request.
• Right to Rectification: Request correction of inaccurate or incomplete personal data. Minor corrections (such as a username change) can be made via account settings; corrections to identity data require support team assistance.
• Right to Erasure: Request deletion of your personal data where orca88 no longer has a legal basis to retain it. This right is subject to mandatory AML and licence retention obligations — data that must be retained by law cannot be erased early.
• Right to Restrict Processing: Request that orca88 stop actively processing your data while a dispute about accuracy or lawfulness is resolved, without requiring full deletion.
• Right to Data Portability: Request a structured, machine-readable copy of the personal data you provided to orca88 (such as your account profile and transaction history), for transfer to another provider.
• Right to Object: Object to processing based on legitimate interests — including direct marketing. Marketing opt-out requests are processed immediately.
• Right to Withdraw Consent: Where processing is based on consent (marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

13🔞 Children & Minors

The orca88 platform is strictly for adults aged 18 years and over. orca88 does not knowingly collect personal data from anyone under the age of 18. If orca88 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed without delay.

If you are a parent or guardian and believe that a minor in your care has created an orca88 account or provided personal information to orca88, please contact us immediately at [email protected]. We will investigate and take action within one business day.

14📣 Marketing Communications

orca88 may send promotional communications — including bonus offers, free spin notifications, jackpot alerts and seasonal promotions — to players who have opted in to marketing communications during account registration or subsequently through their account settings.

Marketing communications from orca88 are delivered via SMS to your registered Pakistan mobile number and/or via WhatsApp or Telegram to your registered messaging contact. orca88 does not send unsolicited marketing emails to purchased contact lists — all marketing communications go only to players who have an active orca88 account and have consented to receive them.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your orca88 account settings (under "Notifications")
• Sending an opt-out request to orca88 support at [email protected]
• Replying "STOP" to any SMS received from orca88

Opt-out requests are processed within 48 hours. Please note that opting out of marketing communications does not affect essential account communications — such as withdrawal confirmation messages, security alerts, or responsible gaming notifications — which are sent regardless of marketing preferences.

15📝 Changes to This Policy

orca88 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, changes in applicable law, or feedback from players and regulators. When material changes are made — particularly changes that affect how we use personal data or your data rights — orca88 will notify active account holders via SMS to their registered Pakistan mobile number at least 14 days before the updated Policy takes effect.

The effective date displayed at the top of this Policy indicates when the current version came into force. Minor clarifications, typographical corrections, and updates to contact information may be made without advance notice. The current version of this Policy is always available at https://orca88.app/privacy-policy.

16💬 Contact the Data Team

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how orca88 has handled your personal information, please contact us through any of the following channels:

• Email: [email protected] — for data access, correction, deletion and portability requests. Include "Privacy Request" in the subject line. Responses are provided within 30 days of receiving a verified request.
• WhatsApp & Telegram: orca88_support — available 24/7 in English for general privacy queries and urgent matters such as potential data breaches on your account.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previously published versions. 18+  orca88 is strictly an adults-only platform.