km777 Privacy Policy

1 About This Policy

1.1 This Privacy Policy ("Policy") describes how km777 ("we", "us", "our") collects, uses, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the km777 online gaming platform and associated services available at km777.lat.

1.2 km777 is committed to the responsible handling of personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

1.3 This Policy should be read alongside km777's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of the km777 platform.

1.4 If you have any questions about this Policy or km777's data practices, please contact us at [email protected] before using the Services.

2 Data We Collect

2.1 km777 collects the following categories of personal data, depending on how you interact with the platform:

2.2 km777 does not collect special category data (such as racial or ethnic origin, health data, or biometric data) except where strictly required for regulatory compliance and with your explicit consent where applicable.

3 How We Use Your Data

3.1 km777 uses your personal data for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your km777 account;
• Service delivery: Providing access to casino games, sportsbook, slots, jackpot, and all other km777 platform features;
• Payment processing: Processing deposits via TnG eWallet, Boost, FPX, and other accepted methods, and processing withdrawal requests;
• KYC and AML compliance: Verifying your identity and age, and meeting anti-money laundering obligations under applicable regulatory frameworks;
• Responsible gaming: Monitoring gaming patterns to identify problem gambling indicators and administering self-exclusion and limit tools;
• Customer support: Responding to account enquiries, payment queries, game disputes, and complaints;
• Security and fraud prevention: Detecting, investigating, and preventing fraud, cheating, money laundering, and other prohibited activities;
• Platform improvement: Analysing anonymised usage data to improve the km777 platform, game selection, and user experience;
• Legal compliance: Meeting obligations under applicable laws, regulations, court orders, and licensing conditions.

3.2 km777 will not use your personal data for purposes incompatible with those described above without your prior consent or a valid legal basis.

4 Legal Basis for Processing

4.1 km777 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between km777 and you as a registered player, including account creation, game access, and payment processing;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations;
• Legitimate interests: Processing necessary for km777's legitimate interests, including fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, including for optional marketing communications where you have opted in.

5 Sharing Your Data

5.1 km777 does not sell your personal data to third parties. km777 may share your personal data with the following categories of recipients only where necessary and with appropriate safeguards in place:

• Payment processors: Your financial data is shared with our payment gateway and e-wallet partners (including TnG eWallet, Boost, and FPX service providers) solely for the purpose of processing your transactions;
• KYC and identity verification providers: Identity and document data may be shared with third-party KYC verification services to fulfil our age and identity verification obligations;
• Game software providers: Minimum necessary data (session identifiers, game outcomes) may be shared with licensed game studios and RNG certification bodies for game integrity and auditing purposes;
• Regulatory and law enforcement authorities: km777 may disclose personal data to regulators, law enforcement agencies, or courts where required by applicable law, court order, or regulatory requirement;
• IT and security service providers: Technical infrastructure, cloud hosting, and cybersecurity providers who process data on km777's behalf under strict data processing agreements.

5.2 All third-party data processors engaged by km777 are contractually bound to process your data only on km777's instructions and in accordance with applicable data protection standards.

6 Cookies & Tracking Technologies

6.1 km777 uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect fraud, and analyse platform usage. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session management, authentication, and security features. These cannot be disabled;
• Functional cookies: Remember your account preferences and settings to personalise your experience;
• Analytics cookies: Collect anonymised data about how players use the km777 platform to help us improve performance and user experience. No personally identifiable information is included in analytics data;
• Fraud prevention cookies: Used to detect suspicious login behaviour and protect accounts from unauthorised access.

6.2 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use the km777 platform.

7 Data Retention

7.1 km777 retains personal data for the following periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of seven (7) years to meet financial reporting and AML obligations;
• KYC documents: Retained for five (5) years following the end of the business relationship, or longer if required by applicable law;
• Gaming data: Retained for the duration of the account and up to five (5) years after closure for dispute resolution and responsible gaming monitoring purposes;
• Support communications: Retained for three (3) years from the date of the interaction;
• Technical logs: Retained for twelve (12) months from the date of collection.

7.2 Where retention is no longer legally required or necessary, km777 will securely delete or anonymise personal data in accordance with our data disposal procedures.

8 Security Measures

8.1 km777 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption at rest for sensitive data including financial records and KYC documents;
• Access controls and role-based permissions limiting internal access to personal data to authorised personnel only;
• Regular security audits and penetration testing of the km777 platform;
• Login anomaly detection and automated account lockout on repeated failed authentication attempts;
• Staff training on data protection and security practices.

8.2 Notwithstanding the foregoing, no internet transmission or electronic storage system is completely secure. km777 cannot guarantee absolute security but is committed to maintaining security standards consistent with best practices in the online gaming industry.

9 International Data Transfers

9.1 km777 may transfer your personal data to servers or service providers located outside of Malaysia. Where such transfers occur, km777 ensures that appropriate safeguards are in place, including contractual data transfer agreements based on internationally recognised model clauses, to provide an equivalent level of data protection to that applicable in Malaysia.

9.2 By using the km777 platform, you acknowledge that your data may be transferred, stored, or processed in jurisdictions outside Malaysia. km777 will always ensure such transfers comply with applicable data protection standards.

10 Your Rights

10.1 Subject to applicable data protection law, you have the following rights in respect of your personal data held by km777:

• Right of access: Request a copy of the personal data km777 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where retention is no longer legally required or justified (subject to AML and regulatory retention obligations);
• Right to restriction: Request that km777 restricts the processing of your data in certain circumstances;
• Right to data portability: Request a machine-readable copy of the personal data you have provided to km777 for use with another service provider;
• Right to object: Object to processing based on km777's legitimate interests in certain circumstances;
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, please contact km777 at [email protected] with your full name, registered email address, and a description of your request. km777 will respond within thirty (30) days. Where a request is complex or numerous, this period may be extended by a further two months with prior notice to you.

11 Children's Privacy

11.1 The km777 platform is strictly for persons aged 21 years and above. km777 does not knowingly collect personal data from individuals under 21. If km777 becomes aware that personal data has been collected from a person under 21 without appropriate age verification, it will immediately delete that data and close the associated account.

11.2 If you believe that a person under 21 has created a km777 account or provided personal data to km777, please contact us immediately at [email protected] so that we can take appropriate action.

12 Changes to This Policy

12.1 km777 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email or via an in-platform notification.

12.2 Continued use of the km777 platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with a change, you should stop using the platform and may request account closure.

13 Contact Us

13.1 For questions, requests, or complaints relating to this Privacy Policy or km777's data practices, please contact us:

• Email: [email protected]
• Subject line: "Privacy Request – [Your Username]" for faster routing
• Response time: Within 30 days for data subject requests; within one business day for general queries

13.2 km777 is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.