Privacy Policy — 777pnl Malaysia

Section 1 Introduction

This Privacy Policy (hereinafter "this Policy" or "the Policy") is issued by 777pnl (hereinafter "777pnl", "the Company", "we", "us", or "our") and applies to all personal data collected, processed, and stored in connection with the operation of the 777pnl online gaming platform accessible at https://777pnl.cam, including all associated web pages, mobile-optimised interfaces, and related digital services (collectively, "the Platform").

This Policy is intended to inform all users of the Platform (hereinafter "you", "your", "the User", or "the Player") of their rights in relation to their personal data and to set out clearly how 777pnl processes that data. By registering an account on the Platform and by continuing to use the Platform's services, you confirm that you have read, understood, and accepted the terms of this Privacy Policy.

This Policy should be read in conjunction with the 777pnl Terms & Conditions, which govern your use of the Platform as a whole. Where there is a conflict between this Policy and the Terms & Conditions on a matter related to the processing of personal data, this Policy shall prevail.

Section 2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, location data, online identifier, or factors specific to that person's identity.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means 777pnl as the entity that determines the purposes and means of processing personal data collected via the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of 777pnl under a documented contractual arrangement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "KYC Data" means identity verification documents and information submitted by Users to satisfy Know Your Customer obligations, including government-issued identification, proof of address, and selfie photographs.
• "Transaction Data" means records of financial transactions conducted through the Platform, including deposits, withdrawals, game wagers, bonus credits, and payment method details.
• "Platform" has the same meaning as defined in the Introduction above.

Section 3 Data Controller

777pnl acts as the Data Controller in respect of all personal data collected via the Platform. As Data Controller, 777pnl is responsible for determining the purposes for which personal data is collected and the means by which it is processed. The Company is committed to processing personal data in a manner consistent with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

For all data protection enquiries, rights requests, and complaints, please contact 777pnl using the contact details provided in Section 18 of this Policy.

Section 4 Personal Data We Collect

777pnl collects the following categories of personal data from Platform users:

Data Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, nationality, gender, government ID number (MyKad, Passport, Driver's Licence)	Account registration & KYC verification
Contact Data	Email address, phone number, residential address (including city — e.g. Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya)	Account registration
Financial Data	Bank account details, eWallet identifiers (Touch 'n Go, Boost, GrabPay), CIMB/Maybank/Public Bank account references, cryptocurrency wallet addresses, transaction history	Deposit & withdrawal processing
Identity Documents	Scanned/photographed copies of Malaysian MyKad, passport, driver's licence; utility bills; bank statements; selfie photographs	KYC verification portal
Gaming & Betting Data	Game history, bet amounts, win/loss records, session durations, preferred game categories	Platform activity (automated)
Technical Data	IP address, device type, browser version, operating system, session timestamps, login history, geolocation data (country/region level)	Platform access (automated)
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Marketing Preferences	Communication channel preferences, promotional opt-in/opt-out status, bonus interest history	Account settings & communication history

Section 5 How We Collect Your Personal Data

777pnl collects personal data through the following primary channels:

• Direct provision by you — when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or update your account settings;
• Automated collection via Platform technology — when you access the Platform, our servers automatically collect technical data including IP address, device identifiers, browser type, and session activity logs. This collection occurs via server logs, session cookies, and related tracking technologies;
• Payment processing partners — when you conduct financial transactions via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or our cryptocurrency payment processor, transaction confirmation data is shared with us by those providers;
• Third-party identity verification providers — where 777pnl utilises a third-party KYC verification service to assist in identity document validation, that provider will share verification results with us;
• Fraud detection and security systems — our automated fraud detection systems generate and retain records of account behaviour that may indicate fraudulent activity or Platform policy violations.

Section 6 Data Processing & Purposes

777pnl processes personal data for the following clearly defined purposes:

6.1 Account Management

To create, maintain, and administer your Player Account, including processing registrations, verifying account details, and managing account settings and preferences.

6.2 Identity Verification (KYC)

To comply with applicable anti-money laundering, counter-terrorist financing, and responsible gambling obligations by verifying the identity, age, and residential status of all Players prior to withdrawal processing. All persons under the age of 21 are strictly prohibited from using the Platform, and KYC is the primary mechanism by which this restriction is enforced.

6.3 Financial Transaction Processing

To process deposits and withdrawals via approved Malaysian payment methods, to maintain accurate transaction records, and to detect and prevent payment fraud. Transaction Data is retained in accordance with financial record-keeping obligations described in Section 10.

6.4 Platform Provision and Improvement

To deliver the games, betting markets, promotions, and account features that constitute the 777pnl Platform service. Technical data is used to diagnose performance issues, improve load times, and optimise the user experience on both desktop and mobile interfaces.

6.5 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as set out in our Terms & Conditions. Automated systems continuously monitor account behaviour for indicators consistent with Platform policy violations.

6.6 Customer Support

To respond to support enquiries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.

6.7 Marketing and Promotions

To send you promotional offers, bonus notifications, and other marketing communications — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time via your account settings or by contacting our support team.

6.8 Legal and Regulatory Compliance

To comply with applicable legal obligations, including responses to lawful requests from competent regulatory authorities, courts, or law enforcement agencies.

Section 7 Legal Basis for Processing

777pnl processes personal data only where a valid legal basis exists for that processing. The applicable legal bases are:

• Contractual necessity — processing required to deliver the services described in the Terms & Conditions, including account management, game access, and financial transaction processing;
• Legal obligation — processing required to comply with anti-money laundering, age verification, and other applicable regulatory requirements;
• Legitimate interests — processing for fraud prevention, platform security, and analytics conducted in a manner that does not override your fundamental privacy rights;
• Consent — processing for marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Section 8 Data Sharing & Disclosure

777pnl does not sell personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processing partners — financial data is shared with payment service providers (including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency processors) solely for the purpose of processing your transactions;
• Identity verification providers — KYC documentation is shared with licensed identity verification service providers engaged by 777pnl to assist with regulatory compliance;
• Technology service providers — technical data may be shared with cloud infrastructure, server hosting, and security service providers under contractual data processing agreements that bind those providers to confidentiality and security obligations;
• Fraud detection services — technical and behavioural data may be shared with fraud prevention service providers for the purpose of identifying fraudulent activity;
• Legal and regulatory authorities — we will disclose personal data to competent authorities where required by law, court order, or in response to a lawful regulatory request;
• Corporate transactions — in the event of a merger, acquisition, or sale of substantially all of 777pnl's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Section 9 Cookies & Tracking Technologies

The 777pnl Platform uses cookies and similar tracking technologies to maintain session state, support security measures, and collect anonymised analytics data. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session authentication, login state persistence, and security token management. These cookies cannot be disabled;
• Functional cookies — used to remember your Platform preferences, such as preferred language settings and game display options;
• Analytics cookies — used to collect anonymised data about how users interact with the Platform, including page visit frequency, session duration, and navigation paths. This data is used solely to improve Platform performance;
• Security cookies — used to detect and prevent fraudulent access attempts, bot activity, and account takeover incidents.

You may manage non-essential cookie preferences via your browser settings. Note that disabling certain cookies may affect the functionality of some Platform features. 777pnl does not use cookies to build advertising profiles or to track your activity across third-party websites.

Section 10 Data Retention

Personal data is retained by 777pnl for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention obligations. The following retention periods apply:

• Account and identity data — retained for the duration of the account's active status, and for a minimum of five (5) years following account closure, to satisfy anti-money laundering and regulatory record-keeping requirements;
• Transaction data — retained for a minimum of seven (7) years following the date of each transaction, in accordance with financial record-keeping standards;
• KYC documents — retained for the duration of the account and for five (5) years following closure;
• Customer support communications — retained for three (3) years from the date of the most recent interaction;
• Technical and server log data — retained for up to twelve (12) months for security and fraud investigation purposes;
• Marketing consent records — retained for the duration of your account and for three (3) years following account closure as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with industry-standard data destruction protocols.

Section 11 Data Security

777pnl implements technical and organisational security measures proportionate to the sensitivity of the personal data processed and the risks posed by the processing activities undertaken. Measures in place include:

• AES-256 encryption for all data stored at rest on 777pnl servers;
• TLS 1.3 encryption for all data transmitted between the user's device and the Platform;
• Two-factor authentication (2FA) available to all registered Players for enhanced account security;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented operational need;
• Regular security audits and penetration testing conducted by independent security specialists;
• Incident response procedures that include a 72-hour breach notification commitment to affected users.

While 777pnl maintains these security measures, no system is entirely immune to security incidents. We encourage all Players to use strong, unique passwords for their accounts, to enable 2FA, and to report any suspected unauthorised access to our support team immediately.

Section 12 International Data Transfers

777pnl may store or process personal data on servers located outside Malaysia, including in jurisdictions that host our cloud infrastructure and third-party service providers. Where personal data is transferred outside the jurisdiction of collection, 777pnl takes reasonable steps to ensure that adequate protections are in place, including contractual data processing agreements with receiving entities that impose obligations equivalent to those applicable under this Policy.

Where personal data is shared with payment processing partners in connection with Malaysian banking transactions (e.g., DuitNow, FPX, Maybank, CIMB, Public Bank), that data transfer is governed by the terms of the applicable payment network and is subject to the security standards of those regulated financial institutions.

Section 13 Your Rights Over Your Personal Data

Subject to applicable law and the limitations described below, you have the following rights in relation to the personal data held by 777pnl: