Security
How we keep you safe
Card details never reach us
Payments go straight to our payment provider. We keep only the card type, the last four digits and whether it is a credit or debit card.
Passwords stored safely
Passwords are stored only as Argon2id hashes, so nobody at ORVETTA can read them. Repeated failed sign-ins are slowed down and blocked.
Two-step verification
Turn on an authenticator app for your account. You can see every signed-in device and sign any of them out.
Staff access is limited and recorded
Staff use two-step verification and see only what their role needs. Every staff action goes into a tamper-evident audit log.
Private files stay private
Files you upload are checked for viruses and stored outside the website, where only authorised staff can open them.
Draws you can check
Draw results are calculated from public data, so anyone can confirm them. High-value draws need a second member of staff to approve them.
Keep your account safe
- Use a password you do not use anywhere else.
- Turn on two-step verification in your account.
- We will never ask for your password, your authenticator code or your full card number by email or phone.
- We will never ask you to pay anything to receive a prize.
Report a security problem
If you think you have found a security problem on ORVETTA, email help@orvetta.comwith "Security" in the subject. Please do not access other people's data or disrupt the service while you look into it. We will reply to every report.