Privacy Policy sip777 — Data Protection & Information Security

01Privacy Policy Introduction & Scope

Sip777 is an online casino entertainment platform operating under a recognised licence and fully committed to protecting the privacy of every player who uses our service. This Privacy Policy is an official document describing our practices for managing your personal information in a transparent, fair, and responsible manner.

This document applies to all sip777 platform users without exception — including registered players, general website visitors, and anyone who interacts with any of our digital services, whether through a desktop web browser, iOS or Android mobile app, or any other supported device.

By accessing or using any part of the sip777 platform, you confirm that you have read, understood, and agreed to the data collection and usage practices described in this Privacy Policy. If you do not agree with any provision herein, we respect your decision not to use our platform.

02Information We Collect

Sip777 only collects information that is strictly necessary to provide you with a safe, compliant, and high-quality service. The following are the categories of data we collect:

We also collect information automatically when you use our platform through cookies, tracking pixels, and server logs. This information helps us understand how players interact with the platform for continuous improvement.

03How We Use Your Data

Collected data is used solely for legitimate purposes within the scope stated at the time of collection. sip777 uses your personal data for the following purposes:

• Account management: To create and maintain your player account, verify your identity at login, and enable secure access to all platform features.
• Transaction processing: To process deposits, withdrawals, and any other financial transactions in your account swiftly and securely.
• Legal compliance: To fulfil our obligations under data protection laws, anti-money laundering (AML) prevention, and KYC requirements set by regulatory authorities.
• Platform security: To detect and prevent fraudulent activity, unauthorised access, multi-account use, and other cybersecurity threats.
• Customer support: To resolve queries, complaints, and technical issues you report to our support team more efficiently using your account history as context.
• Personalisation: To personalise game recommendations, promotional offers, and platform interface displays based on your preferences and playing habits.
• Service communications: To send important account notifications, terms updates, security alerts, and promotional information (subject to your communication preferences).
• Platform improvements: To analyse usage patterns in aggregate and anonymised form in order to develop new features and improve overall platform performance.

04Legal Basis for Data Processing

Sip777 processes your personal data on a solid legal basis in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection regulations. The legal bases we rely on are as follows:

• Contract fulfilment: Processing required to perform the agreement between you and sip777 — including registering your account, processing payments, and providing access to games.
• Legal obligations: Processing required to comply with applicable laws including KYC requirements, AML reporting, and relevant tax obligations.
• Legitimate interests: Processing required for the legitimate interests of sip777, such as fraud prevention, network security, and business analytics — provided those interests do not override your fundamental rights.
• Consent: For certain processing activities such as marketing communications and the use of non-essential cookies, we request your explicit consent beforehand. You are free to withdraw this consent at any time.

05Data Sharing With Third Parties

Sip777 does not sell, rent, or disclose your personal data to third parties for their marketing purposes. However, there are limited circumstances where we need to share your data with certain parties to enable the smooth operation of the platform:

• Licensed payment providers: Required transaction information is shared with approved payment providers such as FPX, Touch 'n Go, and the relevant banks solely to process your deposits and withdrawals.
• Game providers: Usernames and relevant game history are shared with game software providers such as Pragmatic Play, Evolution, and other partners to enable you to play on their platforms via sip777.
• Identity verification services: KYC data is shared with licensed identity verification service providers to verify your identity in accordance with legal requirements.
• Regulatory authority: Where required by law, we will disclose the necessary information to regulatory authorities, law enforcement agencies, or courts upon official order.
• Technology service providers: Cloud infrastructure providers, analytics services, and technical support parties involved in our platform operations are subject to strict data confidentiality agreements.

06Cookies & Tracking Technologies

The sip777 platform uses cookies and similar tracking technologies to enhance website functionality, analyse usage patterns, and personalise your experience. We use several types of cookies:

• Essential cookies: Required for core platform functions such as Login session authentication, account security, and basic user preferences. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: To save your preferences such as language, currency, and display settings so you do not need to reconfigure them each time you access the platform.
• Analytics cookies: To collect anonymous information about how users interact with the platform, helping us understand which areas are popular and where improvements are needed.
• Marketing cookies: Used to display more relevant content and offers based on your interests. This type of cookie is only activated with your explicit consent.

You can manage or delete cookies through your web browser settings at any time. Disabling certain cookies may affect some platform functionality but will not block access entirely.

07Data Security Measures

Sip777 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, modification, or destruction:

• End-to-end encryption: All communications between your device and our servers are secured with the latest TLS 1.3 protocol — no data is transmitted in a readable format if intercepted.
• Data-at-rest encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 algorithms.
• Role-based access control: Only staff with a legitimate business need may access player data, and all such access is continuously monitored and audited.
• Two-factor authentication: sip777's internal systems use multi-factor authentication for all staff access to systems containing player data.
• Regular penetration testing: We conduct regular security testing by qualified independent parties to identify and patch any vulnerabilities before they can be exploited.
• 24/7 Monitoring: Our intrusion detection system operates around the clock and will trigger an immediate alert should any suspicious activity occur.

08Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and related data protection legislation, you have the following rights regarding your personal data held by sip777:

• Right to access: You have the right to request a copy of the personal data we hold about you at any time. Such requests will be processed within 21 business days.
• Right to rectification: If any data we hold is inaccurate or out of date, you have the right to request a correction. You can update most information directly through your account panel.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that some data must be retained to fulfil legal obligations even after account closure.
• Right to restrict processing: You may request that we restrict the processing of your data under certain circumstances, such as while a dispute regarding data accuracy is under investigation.
• Right to object: You have the right to object to the processing of your data carried out on the basis of legitimate interests, including direct marketing.
• Right to data portability: You may request that data you have provided to us be delivered in a structured, machine-readable format to you or another service provider.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to that withdrawal.

To exercise any of the above rights, contact our data protection team by email at [email protected], stating the right you wish to exercise and your account details for identity verification.

09International Data Transfers

As part of our global operations, some of your personal data may be transferred to, stored in, or processed in countries other than Malaysia. This may occur when our service providers or server infrastructure are located outside Malaysia.

Sip777 ensures all international data transfers are protected with adequate safeguards through:

• Standard data transfer agreements approved by the relevant regulatory body
• Adequacy assessment confirming that the recipient country maintains equivalent data protection standards
• Standard contractual clauses requiring data recipients to comply with strict data protection principles

10Data Retention Period

Sip777 retains your personal data only for as long as it is needed for the purposes it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account remains active, plus the period required to resolve any outstanding transactions or disputes.
• KYC and identity verification data: Retained for a minimum of 5 years after the business relationship ends, in line with Malaysia's AML legal requirements.
• Financial transaction records: Retained for 7 years in accordance with applicable accounting and tax legal requirements.
• Security logs: Retained for 12 months for security incident investigation and digital forensics purposes if required.
• Customer support communication data: Retained for 3 years for service quality reference and improvement purposes.
• Cookie data: Expiry periods vary by cookie type — session cookies are deleted when the browser is closed, while persistent cookies have a set expiry date ranging from 30 days to 2 years.

Once the retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked back to your identity.

11Child Protection

The sip777 platform is an adult service exclusively intended for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from children under the age of 18.

Should we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered on the sip777 platform are urged to contact us immediately at [email protected].

12Amendments to This Privacy Policy

Sip777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvement suggestions we receive. All amendments will be published on this page with a clear update date.

For material amendments or those that significantly change how we process your data, we will send advance notification to your registered email address at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes and decide whether to continue using the platform.

Continued use of the sip777 platform after the effective date of any amendment is considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

13Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how sip777 handles your personal data, our Data Protection Officer (DPO) team is available to assist you every day, 24 hours.

• DPO Email: [email protected] — include "Data Privacy Inquiry" in the subject line of your message
• Live Chat: Available directly on the sip777 platform for an immediate response
• Response time: Privacy-related inquiries will be responded to within 5 business days; urgent cases are prioritised

Data protection complaints that cannot be resolved through our internal channels may be referred to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body overseeing PDPA compliance in Malaysia.