Privacy Policy r777 — Protecting Your Personal Data

1. Introduction

Welcome to the r777 Privacy Policy. This document is the official statement by r777 on how we handle the personal data of every member using our platform in r777.lc. We understand that your trust is the most valuable asset we hold, and we take our responsibility to protect your privacy seriously.

This Privacy Policy applies to all information collected through the r777.lc website, the r777 mobile app, customer support services, and any other interactions you have with our platform. It should be read together with Terms and Conditions as well as Responsible Gaming Policy us.

By registering and using the r777 platform, you agree to the collection and use of information as described in this document. If you do not agree with any part of this Privacy Policy, please contact our support team before continuing to use the platform.

2. Data We Collect

R777 collects several categories of personal data to ensure the platform operates securely, fairly, and efficiently. Below are the types of data we collect and their respective purposes:

3. How We Use Your Data

Every piece of data collected by r777 has a clear and lawful purpose. We use your personal data for the following:

• Identity verification and KYC — To verify age and identity and fulfil legal compliance requirements before your account is fully activated.
• Financial transaction processing — To process deposits via FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay, as well as withdrawals to your registered bank account.
• Account management and security — To detect suspicious login activity and fraudulent behaviour, and to protect the integrity of your account.
• Providing gaming services — To enable access to Live Casino, Sports Betting, Slots, bingo, and all games available on the r777 platform.
• Customer Support — To provide relevant assistance and handle any complaints or enquiries you submit more effectively.
• Responsible gaming — To monitor gaming patterns and identify members who may require additional support or protection.
• Marketing Communications — To send promotional offers, bonus information, and platform updates, subject to your consent.
• Platform analytics and improvement — To understand usage patterns and improve the overall user experience.

4. Data Sharing

R777 takes a highly cautious approach to sharing members' personal data. We do not share your data except in the following limited and controlled circumstances:

• Trusted payment processors — Required financial data is shared with licensed payment gateways such as FPX and DuitNow solely for the purpose of processing your transactions.
• Gaming service providers — Minimal game session information is shared with third-party game providers (such as slot and live casino providers) to enable game delivery.
• Legal authorities — r777 will disclose data when required by a valid court order, a request from a competent authority, or to fulfil a legal obligation.
• Fraud prevention and anti-money laundering — In cases involving financial crime investigations, relevant data may be shared with the appropriate authorities in accordance with legal procedures.
• Business transfer — In the event of a merger or acquisition, member data will be transferred to the successor entity with prior notice given to members.

5. Cookies & Tracking Technologies

R777 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Here are the types of cookies we use:

• Essential Cookies (Required) — Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled.
• Preference Cookies (Functionality) — Stores your preferences such as language, display settings, and favourite game selections for your convenience.
• Analytics Cookies (Performance) — Helps us understand how members use the platform for continuous improvement purposes. This data is collected in aggregate and cannot be individually identified.
• Marketing Cookies (Optional) — Used to display relevant promotions and offers to you. You may decline these cookies without affecting the core functionality of the platform.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect certain features of the r777 platform.

6. Data Security

R777 continually invests in robust cybersecurity infrastructure to protect the personal data of all members. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and r777's servers.
• Data-at-rest encryption for all sensitive information stored in our databases, including passwords stored in an irreversible hashed format.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.
• 24/7 security monitoring by a dedicated cybersecurity team that detects and responds to any threats in real time.
• Penetration Testing conducted periodically by independent third parties to identify and address any security vulnerabilities.
• Role-based access control ensuring internal staff can only access data required for their specific roles.
• Incident response plan to handle any security breaches swiftly and effectively.

7. Your Rights

As an r777 member and as an individual protected under the Personal Data Protection Act (PDPA), you have the following rights regarding your personal data:

8. International Data Transfers

As a globally operating platform, r777 may need to transfer members' personal data to servers or processors located outside Malaysia. All international data transfers are carried out with strict safeguards:

• Data transfers are only carried out to countries or regions with an equivalent or higher level of data protection than Malaysia.
• All transfers are governed by legally binding data processing agreements with all recipient parties.
• Standard protection clauses are applied in all contracts with data processors outside Malaysia to ensure your rights remain protected.
• Data transfers for backup and disaster recovery purposes are conducted in a fully encrypted environment.

Members who wish to learn more about the countries where their data may be processed are welcome to contact our privacy officer directly.

9. Data Retention Period

R777 retains members' personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. The following are our data retention guidelines:

• Active account data — Retained for the duration your account is active, plus an additional six months after account closure to resolve any outstanding disputes.
• Financial transaction records — Retained for a minimum of seven years in accordance with legal requirements relating to financial compliance and taxation.
• Security & activity log — Retained for two years for fraud detection purposes and to support security investigations.
• Support communication records — Retained for three years from the date of last interaction to allow reference to service history.
• Marketing data — Retained until you withdraw consent or request deletion, whichever comes first.
• KYC Data — Retained for a minimum of five years after the business relationship ends, in accordance with anti-money laundering requirements.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

10. Changes to the Privacy Policy

R777 reserves the right to update this Privacy Policy from time to time to reflect changes in business operations, legal requirements, or industry best practices. When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice of changes on the r777 platform homepage for a minimum of 14 days.
• Sending email notifications to all registered members for changes that materially affect your privacy rights.
• For changes that require fresh consent, we will seek your explicit agreement before implementing them.

Continued use of the r777 platform after changes take effect will be considered acceptance of the latest version of the Privacy Policy. We recommend reviewing this page periodically.

11. Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the r777 Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly through the r777 platform — the fastest way to get answers to general privacy enquiries.
• Privacy Email: [email protected] — for official requests relating to data access, correction, or deletion. Please state "Privacy Request" in the email subject line.
• Help Centre: Browse section FAQ for answers to the most frequently asked privacy questions.

Our privacy team will respond to all personal data enquiries within 14 business days. For more complex cases, we will keep you informed of the investigation progress within that timeframe.