Privacy Policy

1 Introduction

Club777 (referred to herein as "Club777", "we", "us", or "our") operates the online sports betting and casino platform accessible at https://club777.cam. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or uses our platform (referred to as "you", "Member", or "User").

This Privacy Policy (the "Policy") describes how Club777 collects, processes, stores, shares, and protects personal data in connection with your use of our services. It applies to all Club777 members across Malaysia, including players Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other regions of the country.

This Policy should be read together with Club777's Terms & Conditions, which govern the overall contractual relationship between Club777 and its members.

2 Definitions

Throughout this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — Club777, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — a third party that processes Personal Data on behalf of Club777 under a formal data processing agreement.
• "KYC" — Know Your Customer — the identity and age verification process required before a Member's first withdrawal is processed.
• "Cookie" — a small data file placed on a user's device by a website, used to store session information, preferences, and analytics data.
• "PDPA" — the Personal Data Protection Act 2010 of Malaysia, which governs the processing of personal data in commercial transactions in Malaysia.
• "Platform" — the Club777 website and all services accessible thereon at https://club777.cam.

3 Personal Data We Collect

Club777 collects only the Personal Data that is reasonably necessary to provide our services, comply with regulatory obligations, and maintain the security of the platform. The categories of data we collect are set out in the table below:

Club777 does not collect sensitive categories of personal data (such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless specifically required and consented to for responsible gambling purposes.

4 How We Collect Personal Data

Club777 collects Personal Data through the following means:

4.1 Direct Collection

Data you provide to us directly when you:

• Complete the Club777 account registration form;
• Submit identity documents for KYC verification;
• Make a deposit or request a withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or any other supported payment method;
• Contact our support team via live chat or email;
• Participate in promotions, surveys, or referal programmes;
• Update your account profile or settings.

4.2 Automated Collection

Data collected automatically when you use the platform, including via cookies and similar tracking technologies, server logs, and session analytics tools. See Section 9 for full details on cookies.

4.3 Third-Party Sources

In limited circumstances, Club777 may receive Personal Data from third-party sources, including identity verification service providers, fraud detection agencies, payment processors, and anti-money laundering databases. All such third-party data processing arrangements are governed by formal data sharing agreements.

5 Data Processing & Use

Club777 processes your Personal Data for the following specific purposes:

• Account Management: creating, maintaining, and administering your Club777 Account, including authentication, profile management, and account security.
• Service Delivery: enabling you to place bets, access games, participate in live dealer sessions, and use all platform features.
• Payment Processing: facilitating deposits and withdrawals via your chosen Malaysian payment method, reconciling transactions, and maintaining financial records.
• KYC & Regulatory Compliance: verifying your identity, age (21+), and residential address to comply with anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and applicable regulatory standards.
• Fraud Prevention & Security: detecting and preventing fraudulent transactions, account takeover attempts, bot activity, chargeback abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: monitoring betting and deposit patterns to identify potential problem gambling indicators, applying responsible gambling tools (deposit limits, time-outs, self-exclusion), and fulfilling duty-of-care obligations.
• Customer Support: responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and compliance purposes.
• Platform Improvement: analysing aggregated and anonymised usage data to improve the platform's performance, content, and user experience.
• Marketing Communications: sending you promotional offers, bonus notifications, and platform updates by email or in-platform notification — only where you have consented to receive such communications and in accordance with applicable law.
• Legal Obligations: retaining records as required by applicable law and cooperating with lawful requests from regulatory authorities or law enforcement agencies.

6 Legal Basis for Processing

Club777 processes your Personal Data one or more of the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between you and Club777 (i.e., your Account and our Terms & Conditions) — including account creation, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF requirements, identity verification obligations, and data retention rules.
• Legitimate Interests: Processing is necessary for Club777's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and business analytics — where such interests are not overridden by your privacy rights.
• Consent: For certain processing activities — in particular, marketing communications — Club777 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

Club777 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We share Personal Data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

7.1 Payment Processors

Transaction data (including payment method identifiers and transaction amounts) is shared with payment service providers including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) solely to facilitate deposit and withdrawal processing. All such providers are bound by industry-standard data security obligations.

7.2 Identity Verification Providers

Club777 engages regulated third-party identity verification providers to assist with KYC processing. These providers receive identity documents and verification data under strict data processing agreements and are prohibited from using such data for any other purpose.

7.3 Fraud Prevention & AML Agencies

In order to detect, prevent, and report suspected fraud, money laundering, or other financial crimes, Club777 may share relevant data with industry fraud prevention databases, credit reference agencies, and AML compliance service providers.

7.4 Legal and Regulatory Authorities

Club777 will disclose Personal Data to governmental bodies, regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or official request. Club777 will notify affected Members of such disclosures where legally permissible to do so.

7.5 Group Companies and Service Providers

Club777 may share data with affiliated companies or contracted service providers (such as cloud hosting providers, email delivery platforms, and analytics services) who process data on our behalf under formal data processing agreements and are not permitted to use that data for their own purposes.

8 Data Retention

Club777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: retained for the duration of the Member's active account plus minimum of 5 years following account closure, to satisfy AML record-keeping obligations.
• Transaction Records: retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial regulations.
• KYC Documents: retained for a minimum of 5 years from the date of verification, or longer if required by a specific regulatory request.
• Support Communications: retained for a minimum of 2 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: retained for as long as the consent is active, plus a reasonable period thereafter to demonstrate consent compliance.
• Technical Logs: typically retained for 12–24 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised data retained for statistical or analytical purposes is no longer considered Personal Data.

9 Cookies & Tracking Technologies

Club777 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, enhance user experience, and maintain security. The principal categories of cookies used are described below:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and display preferences) and to personalise your experience on the platform.
• Analytical / Performance Cookies: Used to collect aggregated, anonymised data about how Members use the platform — including pages visited, session duration, and errors encountered — to improve platform performance.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of Club777. Club777 does not use third-party advertising cookies or behavioural profiling cookies for marketing on external sites.

10 Data Security

Club777 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS/SSL): all data transmitted between your device and Club777's servers is encrypted using 256-bit SSL/TLS protocols.
• Data Encryption at Rest: sensitive Personal Data stored in our systems — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: access to Personal Data within Club777 is restricted on a strict need-to-know basis. Staff and contractors with access to Personal Data are subject to confidentiality obligations.
• Multi-Factor Authentication: administrative access to systems containing Personal Data requires multi-factor authentication.
• Intrusion Detection and Monitoring: Club777's infrastructure is monitored continuously for security anomalies, intrusion attempts, and data breach indicators.
• Regular Security Assessments: Club777 conducts periodic security reviews and vulnerability assessments of its systems and processes.

Notwithstanding these measures, no method of internet transmission or electronic storage is 100% secure. In the unlikely event of a data breach affecting your Personal Data, Club777 will notify you and any relevant regulatory authorities in accordance with applicable legal requirements.

11 Your Data Rights

As a Club777 member and a data subject under applicable privacy law, you hold the following rights in respect of your Personal Data. These rights are subject to certain conditions and exemptions as provided by law.