Privacy Policy

01 Introduction

r777 ("we", "our", "the Platform", "the Operator") is an English-language online casino and sports betting platform operated for entertainment purposes, targeting players based in Malaysia. The Platform is accessible at https://r777.casa and all associated pages and mobile interfaces.

We are committed to handling personal data with the highest standard of care, transparency, and respect. This Privacy Policy ("Policy") sets out in plain terms what personal data we collect from you, why we collect it, how it is processed and stored, who we share it with, and what rights you hold over your own information.

This Policy applies to all users who register an account, make a deposit, place a bet, access customer support, or simply browse the r777 Platform. It should be read together with our Terms and Conditions and Responsible Gambling Policy, both of which are available on this website.

By accessing r777 or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform.

02 Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or in combination with other available data.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means r777, as the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" means the individual to whom Personal Data relates — in this context, any registered player or site visitor.
• "Third Party" means any natural or legal person, authority, or body other than the Data Subject, r777, or persons under r777's direct authority.
• "KYC" means Know Your Customer — the identity verification process required for regulatory and anti-fraud compliance.
• "Cookies" means small data files placed on your device by a web server for purposes including session management, preferences, and analytics.
• "Platform" means the r777 website, mobile site, and all associated services accessible at https://r777.casa.

03 Personal Data We Collect

r777 collects Personal Data only to the extent necessary to provide our services. The categories of data we collect include:

r777 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification under applicable KYC standards.

04 How We Collect Personal Data

r777 collects Personal Data through the following channels and means:

• Direct provision by you — when you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal, or contact our support team.
• Automated technical collection — when you interact with the Platform, certain technical data (IP address, device identifiers, session duration, page interactions) is automatically logged by our servers and analytics systems.
• Payment processors — when you conduct a financial transaction via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, Visa/Mastercard, or cryptocurrency channels, relevant transaction data is relayed to us by the payment service provider.
• KYC verification providers — identity verification workflows may involve third-party KYC service providers who process your documents on our behalf under strict data processing agreements.
• Cookies and tracking technologies — as described in Section 9 of this Policy.

05 Purposes of Data Processing

r777 processes your Personal Data for the following defined and specific purposes:

1. Account creation and management — to register, maintain, and administer your r777 account.
2. Identity verification (KYC) — to confirm your identity, verify your age as 21+, and comply with anti-money laundering obligations.
3. Payment processing — to facilitate deposits, withdrawals, and all MYR and cryptocurrency transactions securely.
4. Responsible gambling compliance — to apply and monitor deposit limits, self-exclusion requests, and session controls you have activated on your account.
5. Fraud prevention and platform security — to detect, investigate, and prevent unauthorised access, fraudulent activity, and abuse of the Platform.
6. Customer support — to respond to queries, resolve disputes, and maintain communication records for quality and audit purposes.
7. Platform improvement — to analyse anonymised usage patterns and improve the performance, design, and content of the r777 Platform.
8. Legal and regulatory compliance — to meet applicable obligations under financial crime, data protection, and online gaming regulations.
9. Marketing communications — to send you promotional offers, bonus notifications, and event alerts where you have provided explicit opt-in consent. You may withdraw this consent at any time.

06 Legal Basis for Processing

r777 processes Personal Data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under your account agreement, including registration, payments, and support services.
• Legal obligation — processing required to comply with applicable anti-money laundering laws, KYC obligations, and other regulatory requirements.
• Legitimate interests — processing carried out to pursue our legitimate interests in platform security, fraud prevention, and service improvement, where those interests are not overridden by your rights and freedoms.
• Consent — processing of personal data for marketing communications and optional features, based on your explicit opt-in consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Third-Party Disclosure

r777 does not sell, rent, or otherwise transfer your Personal Data to third parties for commercial marketing purposes. We may, however, share your data with the following categories of recipient where strictly necessary:

• Payment service providers — including operators of Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Visa, Mastercard, and cryptocurrency gateways — to process your financial transactions.
• KYC and identity verification services — third-party providers engaged to verify your identity documents and confirm eligibility, operating under binding data processing agreements.
• IT infrastructure and cloud service providers — entities providing hosting, security, and platform infrastructure services on a strictly processor basis.
• Regulatory and law enforcement authorities — where we are legally compelled to disclose Personal Data by court order, regulatory directive, or applicable law.
• Professional advisers — including legal counsel, auditors, and compliance consultants, subject to strict confidentiality obligations.

08 Data Retention

r777 retains Personal Data only for as long as is necessary for the purposes described in this Policy or as required by applicable legal, regulatory, or operational requirements. The following general retention guidelines apply:

• Active account data — retained for the duration of your account relationship with r777 and for a minimum of five (5) years following account closure, for AML compliance and dispute resolution purposes.
• KYC documentation — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in line with applicable financial crime prevention standards.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Support communications — retained for a minimum of two (2) years from the date of the interaction.
• Technical and log data — retained for a maximum of thirteen (13) months from the date of collection for platform security and fraud analysis purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

09 Cookies & Tracking Technologies

r777 uses cookies and similar technologies on the Platform to support essential functions and improve the user experience. We do not use cookies to deliver targeted advertising to third-party platforms or to track your activity across unrelated websites.

The cookies we deploy fall into the following categories:

• Strictly necessary cookies — essential for the operation of the Platform, including session authentication, account security, and load balancing. These cannot be disabled without affecting Platform functionality.
• Functional cookies — used to remember your preferences, language settings, and notification choices between sessions.
• Analytics cookies — used to collect aggregated, anonymised data on how visitors interact with the Platform, for the purpose of improving performance and content. Individual users are not identified through analytics data.

You may manage cookie preferences through your browser settings. Disabling all cookies may affect certain Platform features including session persistence and account login. Most modern browsers allow you to delete or block cookies selectively.

10 Security Measures

r777 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• Encryption of sensitive data at rest, including stored KYC documents and financial records
• Role-based access controls limiting internal staff access to Personal Data on a need-to-know basis
• Two-factor authentication (2FA) for all account logins and administrative access
• Real-time fraud detection and anomaly monitoring systems
• Regular security audits and penetration testing conducted by independent specialists
• Incident response protocols aligned with data breach notification obligations

11 Your Data Rights

As a Data Subject, you hold a number of rights in relation to the Personal Data that r777 holds about you. These rights are summarised below. To exercise any of them, please submit a written request to our support team via the contact details in Section 15.

r777 will respond to all data rights requests within 30 calendar days of receipt. Where requests are complex or numerous, this period may be extended by a further 30 days, and you will be notified accordingly. Responses will be provided in English via email.

12 Third-Party Links

The r777 Platform does not contain links to external third-party websites other than those strictly necessary for platform operations (such as payment gateways accessed during a transaction). Where any third-party interface is involved in a transaction — such as the interface of your FPX bank, Maybank2u, CIMB Clicks, or a cryptocurrency exchange — that party's own privacy policy governs the processing of your data on their platform.

r777 accepts no responsibility for the privacy practices or content of any third-party platforms that may be accessed in the course of completing transactions or account functions.

13 Children's Privacy

The r777 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. Account registration is subject to age verification, and any account found to belong to a person under 21 will be immediately suspended pending investigation.

If r777 becomes aware that it has inadvertently collected Personal Data from an individual under 21, that data will be promptly deleted and any associated Account balance will be dealt with in accordance with our Terms and Conditions. Parents or guardians who believe their child has registered on the Platform are encouraged to contact our support team without delay.

14 Policy Amendments

r777 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, our data processing practices, or the services we offer. All amendments will take effect upon publication on this page with a revised "Last Updated" date.

Where amendments are material — meaning they significantly affect how we use your Personal Data or your rights under this Policy — r777 will provide advance notice to registered players via email or an in-platform notification no fewer than 14 days before the revised Policy takes effect. Continued use of the Platform following any such notice constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how r777 handles your Personal Data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by r777, please contact our Data Protection team using the details below. All requests must be submitted in English and will be handled confidentially.

Our support team serves players from across Malaysia including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other regions. All privacy-related correspondence is handled by trained personnel and treated with strict confidentiality.