Km777 Privacy Policy – Data Protection for Malaysia Members

Information We Collect

Km777 collects your personal information only when necessary and for clearly defined purposes. Below are the categories of information we collect:

• Registration Information: Full name, date of birth, phone number, email address, and the username you choose during registration.
• KYC Verification Documents: A copy of your MyKad or passport, along with a selfie, is required for identity verification before your first withdrawal is processed.
• Financial Information: Your bank account number or e-wallet details used for deposits and withdrawals. We do not store credit card numbers directly.
• Usage Data: Game history, betting records, login dates and times, and in-platform activity.
• Technical Data: IP address, device type, operating system, browser type, and session data collected automatically when you access the platform.
• Communication: Records of conversations with our support team via live chat, email, or other communication channels.

We never collect sensitive information such as your race, religion, health information, or political views. The purpose of any additional information requested will be clearly explained to you beforehand.

How We Use Your Information

Every piece of information we collect is used for specific, legitimate purposes. We do not use your data for anything unrelated to the services you use.

• Verify member identity and age in accordance with legal requirements.
• Process deposits and withdrawals securely and accurately.
• Provide effective and personalised customer support.
• Send relevant promotional information and special offers — you may unsubscribe at any time.
• Detect and prevent fraud, money laundering, and platform abuse.
• Comply with applicable legal and regulatory requirements.
• Improve the user experience based on usage patterns and feedback.

Data Encryption & Security

Km777 invests in high-grade security infrastructure to ensure your data remains protected at all times. The security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your device and km777 servers are encrypted using the latest SSL/TLS protocols, making them unreadable to unauthorized parties.
• Secure Database: Data is stored on servers protected by firewalls and an intrusion detection system (IDS) that operates 24/7.
• Strict Access Control: Only authorised staff with a legitimate business need may access members' personal data.
• Two-Factor Authentication (2FA): Available to all members to add an extra layer of security to your account.
• Continuous Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorized access attempts.
• Regular Security Audits: We conduct regular penetration testing and security audits by independent parties to ensure our systems remain robust at all times.

While no system can guarantee 100% security, km777 is committed to continuously improving our security measures in line with the latest technological developments.

Data Sharing with Third Parties

Km777 does not sell, rent, or trade your personal information to any third party for marketing purposes. Data sharing only occurs in the following limited situations:

• Payment Service Providers: Required financial information is shared with authorised payment providers to process your deposits and withdrawals.
• Technology Providers: Companies providing technical infrastructure for our platform may have limited access to certain data, subject to strict confidentiality agreements.
• Legal Requirements: km777 will disclose information to the authorities when required to do so by law, court order, or to support financial crime investigations.
• Fraud Prevention: In cases of suspected fraud or money laundering, relevant information may be shared with the appropriate authorities.

All third parties we work with are bound by data protection agreements that require them to handle your data with a level of security equal to or higher than our own standards.

Cookies and Tracking Technologies

Km777 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
• Functional Cookies: Store your preferences such as language, display settings, and last login record for your convenience.
• Analytics Cookies: Help us understand how members use the platform so we can improve it. This data is collected in aggregate and without individual identification.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality.

Data Retention Period

Km777 retains your personal data only for as long as required for the purposes stated in this policy, or as required by Malaysian law.

• Active Account Data: Retained for as long as your account is active and you continue to use our services.
• Data After Account Closure: Certain records such as transaction history and KYC documents are retained for a minimum of 7 years to comply with financial regulatory requirements.
• Communication Records: Retained for 2 years after your last interaction for reference and dispute resolution purposes.
• Technical Log Data: Retained for 90 days for security and debugging purposes.

Once the retention period expires, data is securely deleted or anonymised so it can no longer be linked to any individual.

Your Rights as a User

Under the Personal Data Protection Act 2010 and our internal policies, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If any of your information is inaccurate or outdated, you may request a correction.
• Right to Erasure: In certain circumstances, you may request the deletion of your data, subject to legal retention requirements.
• Right to Object: You may object to the processing of your data for marketing purposes at any time.
• Right to Withdraw Consent: For processing based on your consent, you may withdraw that consent at any time without affecting any processing that took place prior to the withdrawal.

To exercise any of the rights above, please contact our support team via in-app live chat or email at [email protected]. We will process your request within 14 business days.