KM777 Privacy Policy – Data Protection for Malaysian Players

KM777 is a licensed online casino platform that has been serving Malaysian players since 2018. We understand that your trust in our platform depends not only on fair gameplay and reliable payouts, but also on how we handle the personal information you entrust to us.

This Privacy Policy applies to all personal information collected by KM777 through:

• The km777.me website and all its subdomains.
• Account registration and verification process.
• Gaming activity and financial transactions on the platform.
• Your interactions with our customer support team.
• Any communications you send to KM777 via email or other channels.

This policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and internationally recognised data protection standards. KM777 acts as the responsible data controller for all personal information collected from Malaysian players.

KM777 collects various types of personal information depending on how you interact with our platform. Below is a full overview of the data we collect:

KM777 uses the personal data collected for the following purposes, and only for these purposes:

• Service Provision: To create and manage your account, process deposits and withdrawals via local Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and to give you access to games on the KM777 platform.
• Identity Verification (KYC): To verify that you are who you claim to be, confirm that you are aged 18 or above, and meet the legal compliance requirements applicable to KM777's platform operations.
• Fraud Prevention & Security: To detect and prevent fraud, money laundering, bonus abuse, and other unlawful activities that could harm other players or the integrity of the platform.
• Customer Support: To handle your enquiries, complaints and disputes efficiently. Your communication history helps our team provide more effective and personalised support.
• Responsible Gaming: To monitor gameplay patterns in order to identify signs of problem gambling, and to enable us to reach out to players who may need assistance or inform them of available limit-setting tools.
• Platform Improvements: Anonymised usage data is used to understand how players interact with the platform, identify technical issues, and inform decisions on new features to develop.
• Marketing Communications: To send information about promotions, bonuses and platform updates – but only to players who have agreed to receive such communications. You can unsubscribe at any time.
• Legal Compliance: To fulfil the legal and regulatory obligations applicable to KM777's platform operations under Malaysian law.

KM777 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010. The legal bases we rely on are:

• Contractual Necessity: Most of the data processing we carry out is necessary to fulfil our contractual obligations to you — that is, to provide the KM777 platform services you signed up for. This includes processing deposits, withdrawals and account operations.
• Legal Obligation: Some processing is required to comply with applicable Malaysian law, including KYC requirements for anti-money laundering purposes.
• Legitimate Interest: KM777 processes certain data on the basis of legitimate business interests, such as fraud prevention, platform security and service improvement – provided these interests do not override your privacy rights.
• Consent: For certain types of processing, such as marketing communications, we will ask for your explicit consent. You may withdraw this consent at any time.

KM777 does not sell or rent your personal data to any third party. However, there are limited circumstances in which we may need to share your data with certain parties:

• Payment Service Providers: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, we are required to share the necessary transaction information with the respective payment service providers. These providers are governed by their own privacy policies and security requirements.
• Game Providers: Game software providers such as Evolution Gaming, SA Gaming and Pragmatic Play may receive the technical data required to operate their games on the KM777 platform. These providers do not receive your full identity data.
• Legal Authority: KM777 will disclose personal data to Malaysian legal authorities where required by a valid court order or an official request with a clear legal basis.
• Technical Service Providers: Cloud infrastructure and cybersecurity service providers used by KM777 may have technical access to data, but this is governed by strict data processing agreements.

Some service providers used by KM777 may store or process data outside Malaysia. Where cross-border data transfers occur, KM777 ensures adequate protection by:

• Selecting providers that operate in countries with data protection standards equivalent to or higher than those in Malaysia.
• Requiring vendors to sign standard data protection clauses that obligate them to comply with agreed data protection standards.
• Conducting risk assessments before approving any new cross-border data transfers.

Malaysian players may request details on the specific protection mechanisms used for data transfers by contacting the KM777 support team.

KM777 implements multiple layers of technical and organisational safeguards to protect your personal data. Key measures we employ include:

• Encryption in Transit: All communications between your browser or app and KM777's servers are protected with TLS 1.3 using 256-bit SSL certificates. This ensures data cannot be intercepted in transit.
• Storage Encryption: Sensitive personal data such as identity card numbers and financial information is stored in encrypted form in our databases. Account passwords are never stored in plain text.
• Layered Access Controls: A role-based access control (RBAC) system ensures only authorised staff can access specific data. All access is logged and auditable.
• 24/7 Security Monitoring: KM777's cybersecurity team continuously monitors systems to detect any suspicious activity or unauthorised access attempts.
• Regular Penetration Testing: KM777 conducts regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) for an added layer of security on their accounts.

KM777 adheres to the principle of data minimisation — we do not retain data longer than necessary. Below is a general guide to retention periods by data type:

• Active Account Data: Retained for as long as your account remains active on the KM777 platform.
• Closed Account Data: Following account closure, core identity data is retained for a minimum of 5 years as required under Malaysia's anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of 7 years to comply with Malaysian tax and financial regulatory obligations.
• Customer Support Recordings: Live chat conversations and emails are retained for 2 years for quality assurance and dispute resolution purposes.
• Technical Log Data: Server logs and technical data are retained for 90 days for troubleshooting and security purposes.
• Marketing Data: If you withdraw consent for marketing communications, the relevant data will be deleted or anonymised within 30 days.

Once the retention period has lapsed, data is securely deleted or anonymised in a manner that can no longer be linked to your identity.

As a KM777 player based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 and international data protection best practices:

KM777 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

The KM777 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

If KM777 discovers that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child may have registered an account with KM777 should contact us immediately at support@km777.me.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how KM777 handles your personal data, you may reach us through:

• Privacy Email: support@km777.me – Please mark your email with the subject line "Data Privacy Enquiry" to ensure it is directed to the appropriate team.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the KM777 platform.
• Language: Support is available in Bahasa Malaysia and English.

KM777 is committed to addressing all privacy-related enquiries within 14 working days from the date of receipt. For more complex cases requiring in-depth investigation, we will keep you informed of the progress within the same timeframe.