Privacy Policy VIP77 –
Protection of Your Personal Data

Welcome to the vip77 Privacy Policy page. We understand that privacy is more than just words — it is a fundamental right of every individual that must be respected and protected. This document is provided transparently to inform you of personal data handling practices on the vip77 platform, so you can make informed decisions before sharing any information with us.

This Privacy Policy applies to all users of the vip77 platform, including website visitors, registered members, and anyone who interacts with our services via website, mobile app, or other communication channels. It covers all personal data we collect directly from you or automatically while you use the platform.

Vip77 fully complies with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and the guidelines issued by the Personal Data Protection Commissioner. We continuously update our privacy practices in line with legislative changes and the latest technological developments to ensure the best protection for your data.

Vip77 only collects data that is strictly necessary to provide you with a high-quality service. We do not collect excessive or irrelevant data. The following are the categories of data we may collect:

Data collected automatically generally cannot identify you directly as an individual, but may be combined with other information to build a usage profile. We use this technical information primarily for security purposes, fraud detection, and improving the user experience.

Every piece of data we collect has a clear and legitimate purpose. vip77 operates on a "minimum purpose" principle — we do not use your data for purposes unrelated to the services you use.

The following are the primary purposes for which your personal data is used on the vip77 platform:

• Identity verification and KYC process: Ensuring every member is a real individual who meets the age and eligibility requirements set by the platform and applicable laws.
• Account and membership management: Creating, maintaining, and securing your account, including the login process, security settings, and session management.
• Financial transaction processing: Verifying and processing your deposits and withdrawals via supported payment methods such as FPX, Touch 'n Go eWallet, GrabPay, and others.
• Service communications: Sending account-related notifications, transaction confirmations, security updates, and promotional alerts that you have agreed to receive.
• Fraud prevention and security: Detecting and preventing unauthorized activity, intrusion attempts, system abuse, or suspicious transactions that could compromise your account security.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.
• Platform improvements: Analyzing aggregate usage patterns to improve the performance, interface, and overall experience of the vip77 platform.

Vip77 takes a highly cautious approach to sharing members' personal data. We do not sell your data to any party. However, there are limited situations where we may need to share certain information with trusted parties:

• Payment service providers: Payment processors handling your deposits and withdrawals are required to receive the necessary transaction details. All such providers are bound by strict data confidentiality agreements.
• Game providers: Game providers partnering with vip77 may receive game session data required to operate the games. Full identity information is not shared unless necessary.
• Technical infrastructure providers: Cloud and server infrastructure providers that store and operate the vip77 platform have limited access to data as part of technical operations.
• Legal authority: vip77 will comply with valid court orders or official requests from law enforcement agencies when required under Malaysian law or relevant jurisdiction.
• Auditors and professional advisors: Audit firms, law firms, or professional consultants appointed by vip77 may access certain data as part of their professional duties, and all are bound by confidentiality obligations.

In all of the above data sharing cases, vip77 ensures that the receiving parties maintain a level of data protection equivalent to our own standards. We also limit the scope of shared data to the minimum necessary.

The security of your personal data is an absolute priority for vip77. We have invested in enterprise-grade security infrastructure to ensure your data is always protected against increasingly sophisticated cyber threats.

Among the technical and organisational security measures we implement:

• 256-bit SSL/TLS Encryption: All communications between your browser and vip77 servers are encrypted using the strongest available encryption protocols. This means your data cannot be intercepted even by parties who control your network.
• Data-at-rest encryption: Sensitive data stored in our databases is also encrypted, meaning that even if the data were to be physically accessed, it cannot be read without the correct encryption key.
• Two-factor authentication (2FA): Your vip77 account is supported with two-factor authentication options for an added layer of security during login.
• Continuous 24/7 monitoring: Our intrusion detection systems (IDS) and threat prevention systems operate around the clock to identify and respond to any suspicious activity.
• Periodic penetration testing: We conduct regular security tests carried out by independent security experts to identify and patch any vulnerabilities before they can be exploited.
• Staff training: All vip77 staff with access to personal data undergo comprehensive data security training and sign binding confidentiality agreements.

The vip77 platform uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and analyse usage patterns for continuous improvement.

There are several types of cookies we use:

• Essential Cookies (Required): These cookies are required for the platform to function properly. They manage your login session, maintain account security, and ensure smooth platform navigation. These cookies cannot be disabled.
• Performance Cookies: Used to gather information about how you use the platform — which pages are visited most frequently, how long is spent on each page, and any errors that occur. All such information is collected anonymously.
• Functional Cookies: Allowing the platform to remember your preferences such as language, display settings, and other personal preferences to deliver a more personalized experience.
• Analytics Cookies: Helping us understand how visitors interact with the platform as a whole, enabling us to make data-driven decisions for platform improvements.

You can manage your cookie settings through your web browser. Most browsers allow you to view, delete, or block cookies. Please note that disabling certain cookies may affect the functionality and your experience on the vip77 platform.

As a data subject under Malaysia's Personal Data Protection Act 2010, you hold the following rights, which you may exercise at any time by contacting the vip77 team:

To exercise any of the above rights, please contact the vip77 support team by submitting a written request along with a copy of your identification document for verification. We will process your request within 21 business days in accordance with the requirements of the PDPA 2010.

Vip77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Once the retention period expires, data will be securely deleted or anonymised.

General data retention period guidelines at vip77:

• Active account data: Retained for as long as your account is active and in use. We will send a notice if your account has been inactive for an extended period.
• Closed account data: Retained for a minimum of 7 years after account closure to fulfil anti-money laundering and financial reporting legal requirements.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's Financial Procedures Act requirements.
• Security and access logs: Retained for 2 years for security incident investigation purposes if required.
• Customer support communication data: Retained for 3 years after the case is closed.
• Cookie and analytics data: Session cookies are deleted when the browser is closed; persistent cookies expire within a period of 30 days to 2 years depending on their type.

Vip77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The latest version of the Privacy Policy is always accessible via this page.

When we make significant amendments to this Privacy Policy, we will take the following steps to notify you:

• Updating the "Last Updated" date shown at the top of this document.
• Displaying a clear notice on the vip77 platform homepage for at least 14 days before the changes take effect.
• Sending email notifications to all registered members who have a valid email address in our system.

If you disagree with any amendments made, you have the right to close your account and request deletion of your personal data as described in Section 7 of this document. Our team will guide you through this process carefully and respectfully.

If you have any questions, concerns, or complaints regarding vip77's Privacy Policy or how we handle your personal data, our team is ready to assist you. We are committed to providing thorough and timely responses to every privacy-related inquiry.

You may contact the vip77 Data Protection Officer through the following methods:

• Email: [email protected] — for general privacy enquiries and data subject rights requests.
• Live Chat: Available on the vip77 platform 24 hours a day for immediate responses.
• FAQ Page: Visit FAQ page us for answers to frequently asked privacy questions.

We aim to respond to all privacy-related inquiries within 3 business days, and to formally process data subject access requests within 21 business days in accordance with the requirements of PDPA 2010.