Privacy Policy — dan777

1 Introduction

dan777 (hereinafter referred to as "we", "us", "our", or "the Platform") operates the online gaming platform accessible at https://dan777.lat. We offer casino games, live dealer experiences, sports betting, lottery products, and related services primarily to users located in Malaysia.

This Privacy Policy (hereinafter "Policy") sets out how dan777 collects, uses, stores, shares, and protects the personal information of individuals (hereinafter "User", "you", or "your") who access, register on, or otherwise interact with the Platform.

By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue your use of the Platform.

2 Definitions

For the purposes of this Policy, the following definitions shall apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, contact details, payment information, device identifiers, and activity logs.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means dan777, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of dan777, such as payment gateway providers or KYC verification services.
• "Cookies" means small data files placed on your device by our Platform for the purpose of session management, preference storage, and analytics.
• "KYC Data" means identity verification documents and associated information collected during the Know Your Customer process, including MyKad copies, passport pages, and proof-of-address documents.
• "Transaction Data" means records of deposits, withdrawals, wagers, bonuses, and associated payment method details processed through the Platform.

3 Data We Collect

dan777 collects the following categories of personal data depending on how you interact with the Platform:

3.1 Registration Data

When you create an account, we collect:

• Full legal name
• Date of birth (to verify that you are aged 21 or above)
• Email address
• Mobile phone number
• Chosen username and encrypted password
• Preferred currency (MYR / cryptocurrency)
• Residential country and state (e.g., Selangor, Penang, Johor)

3.2 Identity Verification (KYC) Data

For identity verification, we may collect:

• Copies of government-issued identification (e.g., Malaysian MyKad — front and back)
• Passport photo page
• Proof of address documents (utility bills, bank statements)
• Selfie or live photograph for biometric verification, where applicable

3.3 Transaction and Financial Data

• Deposit and withdrawal amounts, dates, and methods
• e-Wallet identifiers associated with Touch 'n Go eWallet, Boost, or GrabPay accounts
• Bank account details (last four digits and bank name) for FPX and DuitNow transfers
• Cryptocurrency wallet addresses (for BTC, USDT, ETH transactions)
• Transaction history and bonus redemption records

3.4 Usage and Technical Data

• IP address and approximate geolocation
• Browser type and version
• Operating system and device type
• Pages visited, session duration, and navigation patterns
• Game activity logs — titles played, wagers placed, outcomes, session timestamps
• Login timestamps and frequency data

3.5 Communication Data

• Live chat transcripts
• Email correspondence content
• Support ticket records and resolution notes
• Feedback and survey responses

4 How We Collect Data

We collect Personal Data through the following channels:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, contact support, or respond to surveys.
• Automatically via the Platform — through cookies, log files, and similar tracking technologies when you browse or use the Platform.
• From third-party service providers — including payment processors, KYC verification partners, and fraud detection services who may share data with us as part of their contracted services.
• From publicly available sources — where permitted by law and relevant to AML compliance or fraud prevention purposes.

5 Purpose of Data Processing

dan777 processes your Personal Data for the following purposes:

6 Legal Basis for Processing

dan777 processes your Personal Data under the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted at registration — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable laws, including KYC obligations, AML regulations, and age verification requirements.
• Legitimate Interests: Processing required for fraud prevention, platform security, responsible gambling monitoring, and service improvement — where our legitimate interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and certain promotional personalisation — where you have provided explicit, freely given consent that may be withdrawn at any time.

7 Data Sharing & Third Parties

dan777 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and under strict confidentiality obligations:

7.1 Payment Service Providers

We share necessary transaction and identity data with payment processors operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency gateway services — solely to process your deposits and withdrawals.

7.2 KYC and Identity Verification Partners

Where identity verification is carried out by a third-party KYC service provider, we share the minimum personal data required to complete verification. All KYC partners are contractually bound to handle your data securely and in line with this Policy.

7.3 Fraud Prevention and AML Services

We may share data with fraud detection platforms and AML compliance tools that help us identify and prevent financial crime, collusive behaviour, and account abuse on the Platform.

7.4 Legal and Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a valid court order, subpoena, or regulatory investigation.

7.5 IT and Infrastructure Providers

Certain technical service providers (hosting, cloud storage, analytics platforms) may process data on our behalf under Data Processing Agreements that require them to maintain security standards equivalent to our own.

8 Cookies & Tracking Technologies

The dan777 Platform uses cookies and similar tracking technologies to enable core functionality, improve user experience, and gather aggregate analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session authentication, login state management, and security tokens. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred currency, and game filter selections.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including page views, session durations, and bounce rates — to help us improve the site.
• Marketing Cookies: Used, with your consent, to personalise promotional content displayed within the Platform. You may withdraw consent for marketing cookies at any time via your account preferences.

9 Data Retention

dan777 retains your Personal Data for as long as necessary to fulfil the purposes set out in this Policy, comply with legal obligations, and resolve any disputes that may arise. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your account relationship and for a minimum of 5 years following account closure, in compliance with AML and record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of collection or from the date of the last transaction, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for a maximum of 3 years from the date of last interaction, unless required for longer in connection with an ongoing dispute or legal matter.
• Technical and Usage Logs: Retained for up to 12 months for security and analytics purposes, after which they are aggregated or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

10 Data Security

dan777 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and our servers.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms — your plaintext password is never stored.
• Two-factor authentication (2FA) available to all Users for account login.
• Segregated access controls ensuring that staff can only access Personal Data relevant to their specific job function.
• Regular security audits and penetration testing by qualified third-party assessors.
• Automated fraud and anomaly detection systems monitoring for unusual account or transaction activity in real time.
• Secure, access-controlled data centre environments with physical and logical access restrictions.

While we employ robust security practices, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a high risk to your rights, we will notify affected Users without undue delay and take all reasonable steps to mitigate the impact.

11 User Rights

Subject to applicable data protection law, you have the following rights with respect to your Personal Data held by dan777:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected — subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link). We aim to respond to all rights requests within 30 calendar days. We may need to verify your identity before actioning certain requests.

12 Children's Privacy

The dan777 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21.

If we become aware that Personal Data has been collected from a person under 21 years of age, we will immediately suspend the associated account, notify the relevant parties, and securely delete the data concerned in accordance with our data retention procedures.

If you believe that a minor has provided us with Personal Data, please contact us immediately at [email protected] (plain text — not a clickable link) so that appropriate action can be taken promptly.

13 Cross-Border Data Transfers

As an internationally operated platform serving Malaysian users, dan777 may transfer certain Personal Data to countries outside of Malaysia in order to operate effectively. This may include data transfers to our hosting infrastructure, KYC partners, and game studio providers located in other jurisdictions.

Where such transfers occur, dan777 ensures that adequate protections are in place, including contractual safeguards (such as Standard Contractual Clauses or equivalent data transfer agreements) to protect your data to the same standard as if it remained within Malaysia.

We do not transfer your data to countries that lack adequate data protection frameworks without first implementing appropriate safeguards.

14 Amendments to This Policy

dan777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Material changes to this Policy will be communicated to registered Users via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your Personal Data, please contact our Data Protection team using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform
• Response Time: Privacy-related email enquiries are typically acknowledged within 24 hours and fully responded to within 30 calendar days

For information about your rights in relation to your account, bonuses, or wagering activity, please consult our Terms & Conditions.

For tools to help manage your gambling activity — including deposit limits and self-exclusion — please visit our Responsible Gambling page.