Privacy Policy

This Privacy Policy ("Policy") issued by 777win ("Company", "we", "us", "our"), the operator of the online sports betting and casino platform accessible at https://777win.casa ("Platform"). This Policy describes how 777win collects, processes, stores, and protects personal data relating to users ("you", "Player") who register accounts, interact with, or otherwise access the Platform.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Platform.

By registering an account on777win, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not register an account or access the Platform.

The following definitions apply throughout this Policy:

• Personal Data — any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial information, and device identifiers.
• Processing — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• Controller — 777win, as the entity that determines the purposes and means of processing your personal data.
• Processor — a third party that processes personal data on behalf of 777win (e.g., payment service providers, KYC verification vendors).
• Data Subject — the registered user or individual whose personal data is being processed.
• Consent — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• KYC — Know Your Customer, the identity verification procedures777win is required to conduct before processing withdrawals or as required by AML obligations.
• AML — Anti-Money Laundering, the regulatory framework and internal controls designed to prevent the use of the Platform for illicit financial activity.

777win collects the following categories of personal data from registered users and Platform visitors:

We collect personal data through the following means:

• Direct collection — data you actively provide during registration, KYC submission, deposit and withdrawal requests, support chat conversations, and email correspondence.
• Automated collection — data gathered automatically through cookies, web beacons, and server logs when you access or interact with the Platform. See Section 8 (Cookies & Tracking) for details.
• Third-party sources — identity and fraud-screening data received from KYC verification providers, payment processors (including DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, and Hong Leong Bank networks), and AML screening databases where we are legally obligated to conduct such checks.

777win processes your personal data one or more of the following legal bases:

• Contractual necessity — processing required to register your account, process transactions, and deliver the services you have requested under our Terms & Conditions.
• Legal obligation — processing required to comply with applicable AML regulations, responsible gambling obligations, age verification requirements, and requests from competent regulatory or law enforcement authorities.
• Legitimate interests — processing necessary for fraud detection and prevention, platform security, improvement of our services, and internal analytics — where such interests are not overridden by your rights and interests.
• Consent — processing for optional purposes such as marketing communications, where you have freely provided specific and informed consent that you may withdraw at any time.

We process your personal data for the following purposes:

Core Platform Operations

• Creating and managing your 777win account
• Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as cryptocurrency channels
• Processing withdrawal requests and performing associated verification steps
• Administering bonuses, promotions, and VIP loyalty rewards
• Providing customer support in English, Bahasa Melayu, and Mandarin

Compliance & Risk Management

• Conducting KYC identity verification before processing withdrawals or upon regulatory trigger
• Performing AML transaction monitoring and suspicious activity screening
• Enforcing the 21+ age restriction and responsible gambling obligations
• Detecting, investigating, and preventing fraud, collusion, and prohibited conduct
• Responding to lawful requests from regulatory, law enforcement, or judicial authorities

Service Improvement

• Analysing usage patterns to improve platform performance, user experience, and product features
• Conducting internal audits and quality assurance reviews of support interactions
• Sending service notifications, security alerts, and important policy updates to your registered email

777win does not sell, rent, or trade your personal data to any third party. Data is shared externally only in the following strictly defined circumstances:

• Payment processors — transaction data is shared with DuitNow, FPX, Boost, GrabPay, Touch 'n Go eWallet, and banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank) solely to execute your deposit and withdrawal instructions.
• KYC and fraud prevention vendors — identity documents and verification data are shared with accredited third-party KYC and AML screening providers operating under strict data processing agreements.
• IT and infrastructure providers — hosting, database, and security service providers who process data on our behalf under contractual data protection obligations.
• Legal and regulatory authorities — where we are required by applicable law, court order, or a lawful regulatory request to disclose personal data, we will do so to the minimum extent required.
• Business succession — in the event of a merger, acquisition, or asset sale, personal data may be transferred to a successor entity, subject to equivalent data protection obligations.

The 777win Platform uses cookies and similar tracking technologies to enable core functionality, improve performance, and analyse usage patterns. The following categories of cookies are used:

You may control optional cookies through your browser settings. Disabling certain cookies may affect Platform functionality. Strictly necessary and security cookies cannot be disabled without rendering the Platform inoperable.

777win retains personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active account data — retained for the duration of your account's existence and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction records — deposit, withdrawal, and betting transaction logs are retained for a minimum of seven (7) years from the date of the transaction.
• KYC documents — identity verification documents are retained for five (5) years after account closure or last transaction, whichever is later.
• Support communications — live chat transcripts and email correspondence are retained for two (2) years to support quality assurance and dispute resolution.
• Cookies and analytics data — aggregated analytics data is retained for up to twenty-four (24) months. Session cookies are deleted when you close your browser.

Where data is no longer required for the applicable purpose and no retention obligation applies, we securely delete or anonymise it such that it can no longer be linked to an identifiable individual.

777win implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for personal and financial data stored at rest within our database infrastructure
• Strict role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data
• Multi-factor authentication requirements for all internal administrative access to production systems
• Regular independent security audits, penetration testing, and vulnerability assessments
• Comprehensive activity logging and anomaly detection on all systems processing personal data
• Formal incident response procedures to detect, contain, and notify of data breaches within required regulatory timeframes

Subject to applicable data protection law and any overiding legal obligations (such as AML record-keeping requirements), you hold the following rights with respect to your personal data: