Sg777 Privacy Policy —
Member Personal Data Protection

Sg777 collects member personal data only when necessary for clearly stated and legitimate purposes. We believe privacy is a fundamental right, and we only gather information that is truly needed to provide you with high-quality service as our member.

Personal data is collected through various channels including online registration forms, platform interactions during gameplay, financial transactions, communications with our customer support team, and use of the sg777 mobile app. All data collection is carried out transparently and with the full knowledge of the members concerned.

In some cases, we may collect your data indirectly — for example through web analytics services that help us understand platform usage patterns, or through identity verification (KYC) programmes we require to ensure the security of all financial transactions on the sg777 platform.

The following are the categories of personal data sg777 collects from our members, along with the justification for each:

Sg777 does not collect data classified as sensitive under Malaysia's PDPA, such as health information, biometric data, or religious information, except in situations that specifically require such information and with your explicit consent.

Sg777 uses member personal data solely for legitimate purposes that are stated at the time of collection. Your data will not be used for any other purpose without your consent or a sound legal basis.

The primary purposes for which sg777 uses personal data are as follows:

• Account Management: Creating, verifying, maintaining and protecting your member account on the sg777 platform.
• Transaction Processing: Processing all deposits, withdrawals and other financial transactions securely and efficiently.
• Customer Support: Providing effective technical assistance and support whenever you need it.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering and any security threats to your account.
• Legal Compliance: Fulfilling legal and regulatory obligations, including reporting requirements to the relevant authorities.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem behaviour and provide necessary assistance to members.
• Platform Improvements: Analysing usage patterns to improve the user experience and develop better new features.
• Marketing Communications: Sending information about promotions and attractive offers (only to members who have consented to receive marketing communications).

Sg777 understands that your trust is our most valuable asset. As such, we enforce a strict policy on data disclosure to third parties. In general, we do not share member personal data with external parties except in the limited situations described below.

We may share your personal data with the following parties under the circumstances stated:

• Payment Service Providers: Required financial information is shared with licensed payment processors such as FPX, Touch 'n Go and GrabPay solely to enable transactions to be processed securely.
• Integrated Technology Providers: Technology partners providing services such as server hosting, data analytics, and fraud detection systems, all bound by strict confidentiality agreements.
• Legal Authority: When required by law, court order, or direction from a competent Malaysian government authority.
• Auditors & Professional Advisors: Licensed auditors and legal advisors bound by strict professional confidentiality obligations.

Every third party that receives member personal data from sg777 is required to comply with data protection standards at least equivalent to our own. Comprehensive data processing agreements are established with each partner before any data sharing takes place.

Sg777 continuously invests in sophisticated data security infrastructure to ensure every member's personal information remains protected against evolving cyber threats. Our approach to data security is layered and integrated.

The technical security measures we implement include:

• Transit Encryption: TLS 1.3 and 256-bit SSL protocols applied to all data communications between users and sg777 servers.
• Storage Encryption: Sensitive data such as financial information and identity documents are encrypted in the database using AES-256 encryption.
• Two-Factor Authentication (2FA): An extra layer of security available to all member accounts to prevent unauthorised access.
• Continuous Monitoring: A 24/7 threat monitoring system that detects and responds to any suspicious activity in real time.
• Regular Security Testing: Periodic penetration testing and security audits conducted by independent cybersecurity experts.
• Role-Based Access Control: Internal staff access rights are restricted based on each individual's role requirements, in accordance with the principle of least privilege.

Sg777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the sg777 website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform operations including login verification and session security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language, display theme and personal settings to enhance your browsing comfort.
• Analytics Cookies: Collecting anonymous information about how you use the platform to help us understand usage patterns and improve our services.
• Security Cookies: Used to detect and prevent fraudulent activity and to protect the integrity of your account.

You can manage or block cookies through your internet browser settings. Please note that blocking certain cookies may affect the functionality of some parts of the sg777 platform. More information on managing cookies is available in your browser's help guide.

In operating the sg777 platform, members' personal data may be transferred to, stored, or processed outside Malaysia by our technology service providers. This is a standard technical requirement in the global digital platform industry.

When your personal data is transferred outside Malaysia, sg777 ensures that:

• The recipient country or region has an adequate or equivalent level of data protection.
• A comprehensive data transfer agreement has been established with overseas data recipients.
• Additional protective measures such as standard contractual clauses are implemented where required.
• All cross-border data transfers are recorded and auditable by relevant authorities.

Sg777 does not retain member personal data longer than necessary for the purpose of collection or as required by Malaysian law. We maintain a clear data retention schedule for every category of data we manage.

As a general guideline, sg777 data retention periods are as follows:

• Active Account Data: Retained for the duration of the active account and up to 7 years after account closure to meet legal and tax requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the requirements of Malaysia's Anti-Money Laundering Act.
• KYC Records: Retained for 5 years after the business relationship with the member ends.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: Anonymised data may be retained for a longer period for trend analysis and service development purposes.

Upon expiry of the retention period, your personal data will be permanently deleted or anonymised using secure, irreversible procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal data held by sg777. We fully respect and facilitate the exercise of these rights.

Sg777 is an online gaming platform exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

We encourage parents and guardians to monitor their children's internet usage and install appropriate parental control software. sg777 fully supports responsible gaming programs and the protection of vulnerable individuals.

Sg777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, the latest legal requirements, or technological developments. Any changes made are intended to further protect your interests and privacy as our member.

When significant changes are made to this Privacy Policy, sg777 will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the platform's home page for a minimum of 14 days.
• Sending email notifications to all registered members regarding changes that have taken place.
• Seeking fresh consent from members if changes involve processing data for a new and different purpose.

Continued use of the sg777 platform after the effective date of any Privacy Policy change is considered your acceptance of those changes. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how sg777 handles your personal data, please do not hesitate to contact our Data Protection Officer (DPO) team.

For official requests relating to your rights under the PDPA, such as data access or data correction requests, please clearly state in your message: your full name, sg777 account username, type of request, and reason for the request. We will process your request within 21 working days as required by Malaysia's PDPA.

You may also submit a formal written complaint to the Personal Data Protection Commissioner of Malaysia if you believe your rights under the PDPA have been violated by sg777 and we have failed to resolve the complaint to your satisfaction.