vr777 Privacy Policy

1 About This Policy and the Data Controller

1.1 This Privacy Policy ("Policy") describes how vr777 ("vr777", "we", "us", "our") — accessible at vr777.net — collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "Player") who access or use the vr777 online gaming platform, including its website, account dashboard, games lobby, sportsbook, and customer support channels.

1.2 vr777 acts as the data controller in respect of all personal data collected through the platform. As data controller, vr777 determines the purposes and means by which your personal data is processed and is responsible for ensuring such processing is carried out in accordance with applicable data protection legislation.

1.3 This Policy should be read alongside the vr777 Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with the vr777 platform.

1.4 By registering an Account with vr777, making a deposit, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Personal Data We Collect

2.1 vr777 collects personal data that you provide directly, data generated through your use of the platform, and data received from authorised third parties. The categories of personal data we collect include:

2.2 vr777 does not intentionally collect Sensitive Personal Data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where strictly required for regulatory compliance purposes and only with your explicit consent.

3 How We Collect Your Personal Data

vr777 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to promotions;
• Automated Technologies: Data collected automatically through cookies, web beacons, pixels, and server logs when you access or interact with the vr777 platform — see Section 7 for details;
• Payment Processors: Transaction confirmation data and fraud-screening indicators received from vr777's payment service providers, including e-wallet operators (Touch n Go eWallet, Boost) and card networks (Visa, Mastercard);
• Identity Verification Services: Data received from third-party KYC and identity verification providers used to validate documentation submitted by Players;
• Fraud Prevention Services: Risk signals and device fingerprint data received from fraud detection partners to protect the platform and its players from fraudulent activity;
• Game Providers: Game session data and RNG outcome logs provided by certified game suppliers (including Pragmatic Play, PG Soft, Evolution Gaming, NetEnt, and Habanero) for the purpose of dispute resolution and fairness auditing.

4 How and Why We Use Your Personal Data

4.1 vr777 uses your personal data for the following purposes:

• Account Registration and Management: To create, maintain, and administer your vr777 Account, including authentication and access control;
• Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by KYC obligations under international gaming authority regulations;
• Transaction Processing: To process deposits, withdrawals, bonus credits, and related financial transactions through your chosen Malaysian payment methods;
• Game Provision: To deliver the platform's gaming services, including slots, live casino, sportsbook betting, Toto 4D, and crash games, and to maintain accurate records of all gaming activity;
• Customer Support: To respond to your enquiries, complaints, and support requests via live chat, email, and other channels;
• Regulatory Compliance: To fulfil obligations imposed by anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and international gaming authority conditions, including mandatory record-keeping and suspicious activity reporting;
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling and to apply player protection tools including deposit limits, session limits, and self-exclusion measures where activated by the Player or required by policy;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other abusive activities;
• Platform Improvement: To analyse aggregated usage patterns in order to improve platform performance, game offering, and user experience;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where vr777 has a legitimate interest in doing so and you have not opted out.

5 Legal Bases for Processing

5.1 vr777 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing necessary for the performance of your Account agreement with vr777, including account management, transaction processing, and game delivery;
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC, AML, and gaming authority obligations;
• Legitimate Interests: Processing carried out for vr777's legitimate business interests where these are not overridden by your fundamental rights — including fraud prevention, platform security, and product improvement;
• Consent: Processing carried out on the basis of your explicit consent, including marketing communications and the collection of certain optional data categories. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Disclosure of Personal Data to Third Parties

6.1 vr777 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. vr777 may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Service Providers: E-wallet operators (Touch n Go eWallet, Boost), bank payment networks (Maybank, CIMB, Public Bank), and card networks (Visa, Mastercard) to facilitate transaction processing and fraud screening;
• Identity and KYC Verification Providers: Third-party services engaged to verify identity documents and perform age verification;
• Game Providers and Software Suppliers: Certified game providers receive technical session data necessary for game delivery and dispute resolution;
• Fraud Detection and Security Services: Third-party fraud prevention platforms that process device and behavioural data to detect and prevent abusive activity;
• Regulatory and Law Enforcement Authorities: Competent authorities including the applicable gaming regulator, financial intelligence units, and law enforcement agencies where vr777 is legally required to disclose data — including in connection with AML reporting obligations;
• Professional Advisers: Legal, accounting, and audit professionals engaged under strict confidentiality obligations;
• Business Successors: In the event of a merger, acquisition, or restructuring of the vr777 business, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

6.2 All third-party service providers engaged by vr777 are subject to contractual data processing obligations requiring them to process personal data only for specified purposes, to maintain appropriate security measures, and to comply with applicable data protection laws.

7 Cookies and Tracking Technologies

7.1 The vr777 platform uses cookies — small text files stored on your device — and similar tracking technologies including web beacons and session tokens for the following purposes:

• Essential Cookies: Required for the platform to function correctly, including maintaining your login session, remembering Account preferences, and enabling secure payment processing. These cannot be disabled without significantly impairing platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players interact with the vr777 platform — which game categories are most popular, where navigation paths break down, and where performance improvements are needed. No personally identifiable data is shared with analytics providers;
• Functional Cookies: Used to remember your language preferences, display settings, and notification preferences across sessions;
• Security Cookies: Used to support fraud detection, bot identification, and account security verification processes.

7.2 You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using certain features of the vr777 platform. vr777 does not use cookies for cross-site advertising tracking or targeted advertising on third-party platforms.

8 International Data Transfers

8.1 As an international online gaming platform, vr777 may process and store your personal data on servers located outside of Malaysia. Where such transfers occur, vr777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law.

8.2 Such safeguards may include contractual data transfer agreements incorporating standard data protection clauses, transfers to jurisdictions assessed as providing adequate data protection, or other legally recognised transfer mechanisms as applicable.

9 Data Retention

9.1 vr777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and accounting obligations. Specific retention periods include:

• Account Data: Retained for the duration of the Account's active life plus a minimum of five (5) years following Account closure, to comply with AML record-keeping requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in accordance with regulatory requirements;
• KYC Documentation: Retained for a minimum of five (5) years following the end of the Player's relationship with vr777;
• Support Communications: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or regulatory investigation;
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which data is deleted or anonymised.

9.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10 Security Measures

10.1 vr777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and vr777 servers;
• Encryption of stored sensitive personal data and financial credentials at rest;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication options for Player Accounts and mandatory multi-factor authentication for administrative system access;
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security professionals;
• Automated intrusion detection systems and 24/7 security monitoring;
• PCI-DSS compliant payment processing handled exclusively by certified payment service providers — vr777 does not store full card numbers or CVV data.

10.2 Notwithstanding the above measures, no data transmission over the internet or data storage system can be guaranteed as completely secure. In the event of a data security breach affecting your personal data, vr777 will notify affected individuals and relevant authorities as required by applicable law.

11 Your Rights as a Data Subject

11.1 Subject to applicable law, you have the following rights in relation to your personal data held by vr777:

• Right of Access: The right to request a copy of the personal data vr777 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to Restrict Processing: The right to request that vr777 restrict processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Object: The right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

11.2 To exercise any of the above rights, please contact vr777 customer support via live chat or email. vr777 will respond to data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by up to a further sixty (60) days, in which case you will be notified of the extension and the reasons for it.

11.3 vr777 may need to verify your identity before processing a data subject request. This verification requirement is a security measure to ensure that personal data is not disclosed to or altered by an unauthorised party.

12 Children and Minors

12.1 The vr777 platform is strictly intended for adults aged 21 years and above. vr777 does not knowingly collect or process personal data of individuals under the age of 21. 21+

12.2 Where vr777 discovers or has reasonable grounds to believe that an Account holder is under 21 years of age, the Account will be immediately suspended, all wagers voided, and any deposited funds returned to the source payment method following identity verification. The matter may be referred to the applicable regulatory authority.

12.3 If you believe that a minor has registered an Account with vr777 or that personal data of a minor has been collected, please notify vr777 immediately via live chat or email so that the matter can be investigated and addressed promptly.

13 Changes to This Privacy Policy

13.1 vr777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or business operations. The date of the most recent revision is displayed at the top of this page.

13.2 Where changes are material, vr777 will provide reasonable notice through the platform or by email to your registered Account address. Your continued use of the vr777 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

13.3 vr777 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled.

14 Contact and Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to vr777's handling of your personal data, please contact the vr777 Data Protection team through the following channels:

14.2 vr777 takes privacy complaints seriously and will endeavour to resolve any concerns promptly. If you are not satisfied with vr777's response to your privacy complaint, you have the right to escalate the matter to the applicable data protection authority or gaming regulatory authority in the relevant jurisdiction.

14.3 vr777 is committed to co-operating fully with regulators and resolving complaints in a fair and transparent manner consistent with our obligations as a responsible international gaming operator.