Privacy Policy indo777 — Personal Data Protection for Malaysian Players

Data We Collect

To provide you with a safe and effective service, indo777 collects various types of information. We only collect data that is genuinely necessary — nothing more.

Data You Provide Directly:

• Registration Information: Full name, identity card number (MyKad), date of birth, Malaysian phone number, email address, and account password.
• Financial Information: Malaysian bank account number, bank name, eWallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay), and any DuitNow or FPX details required for processing deposits and withdrawals.
• Verification Documents: A copy of your MyKad or other identity document required during the account verification process.
• Communications: Records of live chat conversations, emails, and customer support interactions.

Data Collected Automatically:

• Technical Data: IP address, browser type, operating system, screen resolution, and device information used to access indo777.
• Usage Data: Pages visited, time spent, games played, betting history, and general activity patterns on the platform.
• Cookie Data: Session information and preferences stored via cookies in your browser. See Section 05 for more details on cookies.

How We Use Your Data

Data collected by indo777 is used solely for purposes related to delivering our services to you. The following are the specific purposes for which your data is used:

• Account Management: Creating and managing your member account, verifying your identity, and ensuring login security.
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u and CIMB Clicks, as well as withdrawals of winnings directly to your Malaysian bank account.
• Gaming Services Provision: Gives you access to all games available on indo777 — from live dealer baccarat to slots, from Malaysia Super League football match odds to e-sports.
• Service Communications: Sending important notifications about your account, promotions you are eligible for, service updates, and security information.
• Fraud Prevention: Detecting and preventing suspicious activity, duplicate accounts, bonus abuse, and all forms of financial fraud.
• Legal Compliance: Fulfilling legal obligations, including anti-money laundering (AML) requirements and other regulations set by Malaysian authorities.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the performance, stability, and user experience of the indo777 platform.
• Customer Support: Enabling the indo777 support team to assist you quickly and effectively whenever you reach out to us.

Sharing Data With Third Parties

Indo777 does not sell, rent, or disclose members' personal data to third parties except in the following limited and controlled circumstances:

• Payment Providers: Information required to process deposits and withdrawals is shared with your chosen payment provider — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks. This sharing is limited strictly to what is needed to complete the transaction.
• Game Providers: Your username and the minimum session information required to allow third-party game providers (such as Evolution Gaming, Pragmatic Play) to deliver a functional gaming experience. These providers are bound by strict confidentiality agreements with indo777.
• Authorities: indo777 may be required to disclose personal data to Malaysian authorities if mandated by law, court order, or a valid official investigation. We will notify you of any such disclosure unless prohibited from doing so by law.
• Technical Service Providers: IT infrastructure, cloud services, and cybersecurity providers that support the operation of the indo777 platform. All such providers are bound by strict data processing agreements and are not permitted to use your data for their own purposes.

In all cases of data sharing with third parties, indo777 ensures that the receiving party maintains adequate security and privacy protections consistent with the standards we uphold ourselves.

Data Security & Encryption

Protecting your data is a technical and operational priority we never compromise on at indo777. The security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser or app and the indo777 servers are encrypted using the latest TLS protocol with 256-bit keys. This means that even if someone were to intercept your network traffic, the data would be unreadable without the correct key.
• Stored Data Encryption: Sensitive data stored in indo777's databases — including financial information and identity documents — is encrypted using industry-recognised algorithms.
• Access Control: Access to member personal data within indo777's internal systems is restricted to staff who require it to perform their duties — based on a strict need-to-know basis.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect unauthorised access attempts, cyberattacks, and anomalies in usage patterns that may indicate fraudulent activity.
• Regular Security Audits: The indo777 platform undergoes regular security assessments to identify and patch any vulnerabilities before they can be exploited.
• Secure Backups: Data is backed up regularly to a separate, secure location to ensure recoverability in any emergency situation.

Cookie Policy

Indo777 uses cookies — small text files stored in your browser — to enhance your experience on the platform. Below are the types of cookies we use:

You can manage cookie settings through your browser preferences. However, disabling essential and security cookies may affect core platform functionality and the security of your account. We recommend keeping essential and security cookies enabled for the best and most secure experience.

Data Storage & Retention Period

Indo777 retains your personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable laws in Malaysia.

• While Account Is Active: All personal data associated with your active account is retained for the duration that the account remains active and for the post-closure period specified below.
• After Account Closure: Financial transaction records and data required for anti-money laundering legal compliance are retained for 7 years after account closure in accordance with Malaysian legal requirements. Other information not required for legal purposes will be deleted within 90 days of account closure.
• Communication Records: Customer support conversation records are retained for 3 years for quality control purposes and to resolve any disputes that may arise.
• Security Log Data: Security system logs are retained for 1 year for the purpose of investigating cybersecurity incidents if required.

Once the relevant retention period has elapsed, data is securely deleted using methods that ensure it cannot be recovered. indo777 conducts regular reviews to ensure that data past its retention period is purged according to the established schedule.

Your Rights as a Data Subject

As an indo777 member and data subject, you have the following rights regarding your personal data. All requests to exercise these rights will be processed by the indo777 support team within 14 business days:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you and to know how it is being used.
• Right to Rectification: If your personal details are inaccurate or incomplete, you have the right to request a correction. Basic information such as your phone number and email address can be updated directly from your account settings.
• Right to Erasure: You may request the deletion of your personal data once it is no longer needed for its original purpose, subject to any legal obligations that may require its retention.
• Right to Restriction of Processing: In certain circumstances, you may request that we limit how we process your data while a dispute or review is being resolved.
• Right to Data Portability: You may request your personal data in a machine-readable format to transfer it to another service provider if needed.
• Right to Object to Marketing: You may opt out of marketing communications at any time by contacting our support team or clicking the unsubscribe link in any of our promotional emails.

To exercise any of these rights, contact the indo777 support team via live chat or email support@indo777.my. You may be required to verify your identity before we process requests involving sensitive data.

Children's Data

The indo777 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process the personal data of anyone under the age of 18.

Should we discover that personal data belonging to someone under the age of 18 has been inadvertently collected — whether through registration using false information or by any other means — we will take immediate action to delete that data and close the account without prior notice.

Privacy Policy Updates

Indo777 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in the security technologies we use.

• Members will be notified of any material changes to this Privacy Policy via a prominent notice on the platform or by email at least 7 days before the changes take effect.
• Minor changes that do not affect your fundamental rights may be implemented without prior notice, but the "Updated" date at the top of this page will always reflect the latest version.
• Continued use of the indo777 platform after any Privacy Policy amendment takes effect will be considered acceptance of the updated terms.
• We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way indo777 handles your personal data, we encourage you to reach out to us directly:

• Live Chat: The fastest option — our support team operates 24 hours a day, 7 days a week and will respond in under 2 minutes in Bahasa Melayu.
• Email: support@indo777.my — for more detailed enquiries or those requiring written documentation. We aim for a response time of under 24 hours.

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in Malaysia in accordance with the mechanisms set out under the Personal Data Protection Act 2010.