Privacy Policy gkk777 — Personal Data Protection for Malaysia Members

Gkk777 is an online gaming platform operated to serve members in Malaysia with a safe, fair, and enjoyable gaming experience. In the course of our operations, we collect and process certain personal data necessary to provide you with a high-quality service.

This Privacy Policy explains:

• What types of personal data we collect from you
• How and why we collect that data
• Who may receive or access your data
• How long we retain your data
• What are your rights regarding your personal data
• How you can contact us for any privacy-related enquiries

This Policy applies to all information collected through the gkk777 website, our mobile app, email communications, live chat, and any other interactions you have with our platform. This Policy does not apply to third-party websites that may be linked from our platform.

Gkk777 only collects personal data that is strictly necessary to operate the platform and provide you with the best possible service. The following are the categories of data we collect:

A. Information You Provide Directly

• Registration Information: Full name, date of birth, email address, mobile number, username, and password.
• Identity Information (KYC): A copy of your identity card (MyKad), passport, or other official identity document required for identity verification and legal compliance purposes.
• Financial Information: Bank account number, bank name, account holder name, and e-wallet details (Touch 'n Go, GrabPay, Boost) used for deposit and withdrawal transactions.
• Address Information: Current residential address, city, state, and postcode for verification and compliance purposes.
• Communications: The content of messages, complaints, feedback, or any communications you send to our support team.

B. Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, screen resolution, and device ID.
• Usage Data: Pages visited, time spent on each page, games played, wagering amounts, session frequency, and navigation patterns.
• Location Data: Estimated location information based on IP address for geographic area verification and regulatory compliance purposes.
• Cookie Data: Session information, user preferences, and analytics data collected via cookies and similar tracking technologies.

Gkk777 uses collected personal data solely for legitimate, stated purposes. We do not process your data for any other purpose without your prior consent. The following are the primary purposes for which your data is used:

• Account Management: Creating, managing, and maintaining your member account on the gkk777 platform, including processing registration, login, and profile updates.
• Transaction Processing: Processing fund deposits and withdrawals quickly and securely, verifying payment methods, and maintaining transaction records for compliance purposes.
• Identity Verification: Conducting legally required KYC checks to verify member age and identity, and to prevent fraud and money laundering.
• Service Provision: Ensuring you can access all games and features on the gkk777 platform seamlessly, and personalizing your experience based on your preferences and usage patterns.
• Service Communications: Sending important notifications about your account, platform updates, changes to terms and conditions, and responses to customer support inquiries.
• Security & Fraud Prevention: Monitoring account activity to detect and prevent unauthorized access, fraud, money laundering, or any activity that violates the law.
• Platform Improvements: Analyzing usage data to understand how members interact with our platform and making continuous improvements to the interface, performance, and user experience.
• Legal Compliance: Fulfilling reporting and record-keeping obligations required under Malaysian law, including PDPA 2010 and relevant financial regulations.
• Marketing Communications: With your consent, to send information about gkk777 promotions, bonuses, and exclusive offers. You may withdraw this consent at any time.

Gkk777 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of our operations, we may share your data with the following categories of parties in limited and controlled situations:

• Payment Service Providers: Financial institutions, banks, and e-wallet providers responsible for processing your deposit and withdrawal transactions. They receive only the data necessary to complete the relevant transaction.
• Technical Service Providers: Companies that provide IT infrastructure, server hosting, cloud services, or software required to operate the gkk777 platform. All such providers are bound by strict confidentiality agreements.
• Identity Verification Providers: Third-party services that assist gkk777 in conducting KYC checks and identity verification as required by law.
• Legal Authorities: Law enforcement agencies, courts, or regulatory bodies that may require data disclosure as part of a lawful investigation or legal proceeding.
• Analytics Providers: Analytics services that help us understand platform usage patterns for improvement purposes. Data shared is typically aggregated or anonymized.

In the event that gkk777 undergoes an acquisition, merger, or sale of company assets, members' personal data may be transferred to the new entity. Members will be notified in advance of any significant changes in data ownership or use, and will be given the option to delete their account if they do not agree.

The gkk777 platform uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage cookie usage through your browser settings. Please note, however, that disabling certain cookies may affect the functionality of the gkk777 platform, including the ability to stay logged in or access certain features.

Gkk777 does not use any cross-site tracking technology or collect your data from other websites you visit. Our tracking is strictly limited to your activity within the gkk777 platform only.

Gkk777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data Encryption: All sensitive data — including financial information and passwords — is encrypted using AES-256 encryption at rest and SSL/TLS 1.3 in transit.
• Layered Access Control: A role-based access control (RBAC) system ensures gkk777 staff can only access data relevant to their job responsibilities. All access is logged and audited on a regular basis.
• Continuous Monitoring: A 24/7 security monitoring system tracks platform activity to swiftly detect and respond to any threats or security incidents.
• Vulnerability Management: gkk777 conducts regular security testing, including penetration testing and vulnerability scans, to identify and address weaknesses before they can be exploited.
• Staff Training: All gkk777 staff who handle personal data receive regular security and data privacy training to ensure best practices are consistently upheld.
• Incident Response Plan: gkk777 has a comprehensive incident response procedure to address any data breaches swiftly and effectively, including timely notification to affected members where required by law.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and gkk777's policy, you have the following rights regarding your personal data:

Gkk777 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. The following are our data retention guidelines:

• Active Account Data: While your account remains active, we retain all data necessary to operate your account and provide services to you.
• Post-Account Closure Data: When your account is closed, we will retain certain data for a minimum of 7 years to comply with applicable Malaysian legal and financial regulatory requirements.
• Financial Transaction Records: Records of all deposits, withdrawals, and in-platform transactions are retained for a minimum of 7 years from the date of the relevant transaction, in line with financial legal requirements.
• KYC Documents: Identity verification documents are retained for the duration of membership and for a minimum of 5 years after account closure for anti-money laundering (AML) compliance purposes.
• Communication Logs: Communication records between you and the gkk777 support team are retained for 3 years for reference and dispute resolution purposes.
• Marketing Data: If you withdraw consent for marketing communications, we will remove you from our mailing list within 10 business days.

Once the retention period expires, your personal data will be securely deleted or anonymised (converted into a format that cannot identify any individual) using industry-approved data deletion procedures. Anonymised data may be retained for statistical analysis purposes without a time limit.

Gkk777 is a gaming platform exclusively for adults aged 18 and above. We do not accept registrations from individuals under the age of 18 and do not knowingly collect any personal data from minors.

The gkk777 registration process includes strict age verification, including identity document verification (KYC), to ensure no underage users can register or access our platform. This is part of our commitment to responsible gaming.

Gkk777 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technologies used. We are committed to informing you of any significant changes.

When we make changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page
• Sending email notifications to all registered members if the changes are material
• Displaying a prominent notice on the gkk777 homepage for a period of at least 30 days before the changes take effect
• For material changes, to obtain your renewed consent before those changes take effect on the processing of your data

We encourage you to review this Privacy Policy periodically to ensure you are always informed about how we protect your information. Continued use of the gkk777 platform after notification of changes is considered your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by gkk777, please do not hesitate to contact us through the following channels:

The gkk777 Data Protection Officer (DPO) is responsible for ensuring privacy policy compliance across the organization. Any privacy-related complaints or inquiries that cannot be resolved through customer support may be directed to our DPO via email with the subject line "Privacy Complaint — DPO".

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe that the processing of your personal data violates the PDPA 2010.