Privacy Policy 2777 – Our Commitment to Protecting Your Personal Data

1.Introduction – Why This Privacy Policy Exists

2777 is an online Sports Betting and casino platform operating through 2777.online, serving adult users across Malaysia. In delivering these services, we need to collect and process certain personal data from our members. This Privacy Policy is published to ensure every 2777 member understands exactly what data we hold about them, how it is used, and their rights in relation to that data.

This policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the principal legislation governing the collection and processing of personal data in Malaysia. By registering for and using the 2777 platform, you agree to the practices described in this policy.

We review this Privacy Policy periodically to ensure it reflects our current practices and compliance with applicable law. The version you are reading is effective from January 2026. If material changes are made, we will notify members via their registered email or an in-platform notification.

2.Personal Data We Collect

2777 follows a data minimisation principle — meaning we only collect information that is genuinely necessary to provide our services safely and effectively. Below are the categories of data we collect and the purpose behind each.

We do not collect information considered especially sensitive, such as biometric data, health information, or political views, unless explicitly required by applicable law (for example, age verification via Malaysian identity documents).

• Data you provide directly during registration, KYC verification or communications with 2777 support.
• Data automatically generated when you use the 2777 platform, including activity logs and cookie data.
• Data received from trusted third-party payment processors (for example, transaction confirmations from Touch 'n Go eWallet, DuitNow or FPX) — this data is limited to what is necessary to verify the transaction and does not include full bank account numbers or other sensitive details.

3.How 2777 Uses Your Personal Data

Every piece of data we collect has a clear and legitimate purpose. 2777 does not process your personal data for purposes unrelated to the provision of our platform services to you. The primary purposes of data use are as follows.

• Account Management: Creating, maintaining, and securing your 2777 account, including the identity verification (KYC) process required before your first withdrawal.
• Transaction Processing: Processing your deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u (FPX) and CIMB Clicks, with withdrawals processed within 15 minutes.
• Service Provision: Gives you access to all games and markets on 2777 — from badminton, cricket, and Malaysia Super League football betting to Live Casino, blackjack, and table games.
• Customer Support: Enables the 2777 support team to assist you with any enquiries, technical issues, or complaints efficiently and accurately.
• Platform Security: Detecting and preventing fraud, account abuse, money laundering and other security threats that could harm the 2777 platform and its members.
• Personalised Promotions: With your consent, sending you information about 2777 promotions, bonuses and offers that may interest you based on your gaming activity. You may withdraw this consent at any time.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and, where necessary, taking protective measures including contacting the member concerned or applying appropriate limits.
• Legal Compliance: To fulfil 2777's obligations under applicable Malaysian law, including anti-money laundering requirements and reporting to relevant authorities where legally mandated.

4.Sharing Data with Third Parties

2777 does not sell, rent, or share members' personal data for third-party marketing purposes. However, in the course of operating our platform, there are certain situations where data needs to be shared with trusted parties.

• Payment Processors: Required transaction data is shared with approved payment providers (such as Touch 'n Go eWallet, DuitNow and FPX processors) solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict data protection agreements.
• Technology Service Providers: Companies that assist 2777 in running the platform's technical operations, such as cloud service providers and security monitoring systems, may have limited access to certain data. All such providers are audited and bound by strict confidentiality agreements.
• Legal Authorities: 2777 will disclose data to the police, courts, or Malaysian regulatory authorities when legally required by a court order, writ of investigation, or other legal obligation. We will not disclose more data than is required by law.
• Business Transfers: In the event of a merger, acquisition, or sale of 2777's assets, member data may be transferred as part of the business assets. In such cases, we will notify members before their data becomes subject to a different privacy policy.

5.Data Security Measures at 2777

Protecting the personal and financial data of our members is the highest priority in 2777's operations. We continually invest in security infrastructure to ensure your data remains safe at all times.

• 256-bit SSL Encryption: All communications between your browser or app and 2777's servers are encrypted using the latest TLS protocol with a 256-bit key length. This means data transmitted over the network cannot be read by any party other than you and 2777's systems.
• Data-at-Rest Encryption: Sensitive data stored in 2777's databases — including passwords and financial information — is encrypted using modern cryptographic algorithms. Passwords are stored in hashed format and cannot be decrypted, even by 2777 staff.
• 24-Hour Monitoring: 2777's systems are continuously monitored by our cybersecurity team to detect and respond to threats in real time. Any anomalies in access patterns are investigated immediately.
• Regular Security Testing: 2777 conducts regular penetration testing and security audits with the assistance of independent third-party security experts to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA in their account settings. This feature adds an extra layer of security, ensuring that only you can log in to your 2777 account — even if your password is compromised.
• Staff Training: All 2777 staff with access to member data undergo rigorous privacy and security training, along with annual competency assessments.

6.Cookies & Tracking Technologies

The 2777 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse platform usage on an aggregate basis. Below is an explanation of the cookies we use.

• Essential Cookies: Required for core platform functions such as maintaining your login session as you navigate between sections of 2777. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Preference Cookies: Stores your personal settings such as language preference and display configuration. These cookies allow 2777 to remember your preferences so you do not need to reconfigure them each time you visit the platform.
• Analytics Cookies: Helping us understand how members use the 2777 platform in aggregate — which pages are visited most, how long sessions last and which features are used most. This analytics data is used to improve the user experience and is not linked to any individual's identity.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access, including identifying login attempts from unfamiliar devices or locations.

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the 2777 platform. Visit your browser's help section for guidance on managing cookies.

7.Data Retention Period

2777 retains your personal data only for as long as necessary for the purposes set out in this policy or as required by Malaysian law.

• Active Account Data: Personal data linked to an active 2777 account will be retained for as long as your account remains active and for a reasonable period after you close your account.
• Financial Transaction Records: All deposit, withdrawal, and financial transaction records at 2777 are retained for a minimum of seven (7) years from the date of the transaction, in accordance with Malaysia's anti-money laundering and financial reporting requirements.
• Communication Logs: Live Chat session records and support emails are retained for two (2) years for quality control purposes and to assist in resolving any disputes that may arise.
• Technical Log Data: Access logs and other technical data are retained for ninety (90) days and are then automatically deleted or anonymised.
• Once the retention period has lapsed, personal data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.

8.Your Rights Regarding Personal Data

As a 2777 member and data subject under Malaysia's PDPA 2010, you have several important rights regarding the personal data we hold about you. Below are those rights and how to exercise them.

9.Children's Privacy

The 2777 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

• During registration, users are required to confirm that they are 18 years of age or older. Registration by minors is strictly prohibited and constitutes a violation of 2777's Terms & Conditions.
• Should 2777 become aware that personal data from an underage individual has been collected, we will take immediate steps to delete that data and close the account in question.
• Parents or guardians who believe their minor child has registered on 2777 are urged to contact us immediately at support@2777.online with proof of identity so we can respond promptly.

10.Amendments to This Privacy Policy

2777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements or technological developments. Any changes will be published on this page with an updated effective date.

• For material amendments — such as changes to how we use your data or the types of data we collect — we will notify members via their registered email or in-platform notification at least 14 days before the changes take effect.
• For minor amendments such as language corrections or terminology clarifications, advance notice may not be provided, but the effective date at the top of the document will be updated.
• Your continued use of the 2777 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
• We encourage you to review this page periodically to stay informed on how we protect your data.

11.Contact 2777 About Your Privacy

We welcome any enquiries, concerns, or requests relating to this Privacy Policy or how 2777 handles your personal data. Our team is ready to assist and committed to responding promptly and transparently.

• Live Chat: The fastest way to get answers. Available 24 hours a day, 7 days a week in Bahasa Malaysia. Typical response time is under 5 minutes.
• Privacy Email: support@2777.online – for more formal requests such as data access applications, data deletion, or official privacy-related complaints. Please use the subject line "PRIVACY ENQUIRY – [Account Number]" so your request is directed to the right team.
• All privacy inquiries will receive a reference number within 24 hours, with a full decision or response provided within 21 business days for standard cases.
• If you are not satisfied with 2777's response to your privacy concern, you have the right to refer the matter to Malaysia's Department of Personal Data Protection.