vr777 Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by vr777 in connection with your use of the vr777 website accessible at https://vr777.app and the vr777 mobile application (collectively, the "Platform").

vr777 is committed to handling your personal data responsibly and in accordance with applicable data protection legislation. By registering an Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the vr777 Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

vr777 collects the following categories of personal data in connection with your use of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and copies of government-issued identification documents provided during Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile phone number, and residential address.
• Financial Data: Payment method details including bank account numbers, e-wallet identifiers (such as Touch n Go eWallet or Boost account references), transaction history, deposit and withdrawal records, and balance information.
• Account Data: Username, password (stored in encrypted form), account preferences, responsible gaming settings, bonus and promotional history, and VIP tier status.
• Gaming Activity Data: Records of games played, bets placed, wagers settled, win/loss history, session durations, and sportsbook activity including markets wagered on (including Malaysia Super League, EPL, UFC, and other events).
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, geographic location data derived from IP, and platform access logs.
• Communications Data: Records of communications between you and the vr777 support team, including live chat transcripts and email correspondence.
• Verification Documents: Copies of documents submitted in response to KYC requests, including passports, national identity cards, utility bills, and bank statements.

3. How We Collect Your Data

vr777 collects personal data through the following mechanisms:

• Direct Provision: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a promotional communication.
• Automated Collection: Technical and usage data collected automatically as you browse and interact with the Platform, including via cookies, web beacons, and server logs.
• Third-Party Sources: Data received from payment processors (including Touch n Go, Boost, Maybank, CIMB, Public Bank, and other financial institutions) in connection with deposit and withdrawal processing; identity verification data from KYC service providers; and fraud prevention and anti-money laundering data from third-party screening services.
• Publicly Available Sources: In limited circumstances, vr777 may supplement your profile data with information from publicly available databases for the purposes of verifying identity or complying with sanctions screening requirements.

4. Purpose and Legal Basis for Processing

vr777 processes your personal data for the following purposes and on the following legal bases:

• Account Administration and Service Delivery: To create and manage your vr777 Account, process transactions, operate gaming and betting services, and provide customer support. Legal basis: performance of contract.
• Identity Verification and KYC Compliance: To verify your identity, age (21+), and eligibility to use the Platform. Legal basis: legal obligation.
• Anti-Money Laundering (AML) and Fraud Prevention: To monitor transactions and activity for indicators of money laundering, fraud, or other financial crimes, and to report suspicious activity to relevant authorities where required. Legal basis: legal obligation and legitimate interests.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to apply responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where requested or required. Legal basis: legal obligation and legitimate interests.
• Personalisation and Platform Improvement: To personalise your experience on the Platform and to analyse usage patterns to improve features, performance, and content. Legal basis: legitimate interests.
• Marketing Communications: To send you information about promotions, bonuses, and Platform updates, subject to your communication preferences. Legal basis: consent (which may be withdrawn at any time).
• Legal and Regulatory Compliance: To comply with applicable laws, gaming regulations, court orders, and requests from competent authorities. Legal basis: legal obligation.

5. Disclosure to Third Parties

vr777 does not sell your personal data. We may disclose your personal data to third parties in the following circumstances:

• Payment Processors: Financial data is shared with payment service providers including e-wallet operators and Malaysian banking institutions as necessary to process deposits and withdrawals.
• Game Providers: Limited technical and account data may be shared with third-party game studios and aggregators to enable game delivery, session management, and jackpot participation where applicable.
• KYC and AML Service Providers: Identity data and verification documents may be shared with specialist KYC verification and AML screening providers as part of our compliance obligations.
• Technology and Infrastructure Providers: Data may be accessible to hosting, cloud storage, security monitoring, and customer support technology providers engaged by vr777, all of whom are contractually bound to process data only on vr777's instructions and to maintain appropriate security standards.
• Regulators and Law Enforcement: vr777 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required to do so by applicable law or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of vr777's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6. International Data Transfers

vr777 operates on an internationally hosted infrastructure. As a result, your personal data may be transferred to, stored in, and processed in countries outside Malaysia. Where such transfers occur, vr777 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require recipient parties to process data to a standard equivalent to that required within your jurisdiction.

By using the vr777 Platform, you acknowledge and consent to the transfer of your personal data to international jurisdictions as described in this section.

7. Data Retention

vr777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. Specific retention periods are as follows:

• Account Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years following the date of the transaction.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the conclusion of the customer relationship.
• Gaming Activity Logs: Session and wagering data is retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes.
• Communications Data: Support communications are retained for a minimum of two (2) years.

Where personal data is no longer required, vr777 will securely delete or anonymise it in accordance with our data disposal procedures.

8. Cookies and Tracking Technologies

The vr777 Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, and collect analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your logged-in session, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how users interact with the Platform, including pages visited, session duration, and error events, to inform performance improvements.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings, currency display, and interface configurations.
• Marketing Cookies: Used to track interactions with promotional content and to measure the effectiveness of campaigns, subject to your consent.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the vr777 Platform. By continuing to use the Platform with cookies enabled, you consent to their use as described herein.

9. Security Measures

vr777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and vr777's servers.
• Encryption of sensitive data at rest, including passwords and financial identifiers.
• Multi-factor authentication options for Account access.
• Access controls limiting personal data access to authorised personnel with a legitimate need.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Incident response procedures for managing and reporting data breaches in accordance with applicable regulatory requirements.

While vr777 takes all reasonable steps to protect your data, no transmission over the internet or electronic storage system is completely secure. You are responsible for keeping your vr777 Account credentials confidential and for notifying support immediately if you suspect unauthorised Account access.

10. Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by vr777:

• Right of Access: You may request a copy of the personal data vr777 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to Object: You may object to processing based on legitimate interests, including profiling, unless vr777 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact vr777 customer support via live chat or at the email address specified in Section 13. vr777 will respond to verified requests within thirty (30) days, subject to any applicable legal exemptions.

11. Children's Privacy

The vr777 Platform is strictly for individuals aged 21 and above. vr777 does not knowingly collect, process, or store personal data from individuals under the age of 21. If vr777 becomes aware that personal data has been collected from an underage individual, that data will be immediately deleted and the associated Account closed.

If you have reason to believe that a person under the age of 21 has provided personal data to vr777 or has accessed the Platform, please notify the support team immediately so that appropriate action can be taken.

12. Changes to This Privacy Policy

vr777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform operations. Where changes are material, vr777 will endeavour to notify registered Users via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the vr777 Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data is being handled by vr777, please contact our support team through the live chat facility available within the Platform, which operates daily from 8:00 AM to 2:00 AM (Malaysia Time, MYT).

Written enquiries and formal data subject requests may be directed to the following email address (plain text, not a clickable link): [email protected]

Please include your full name and registered Account username in any data rights request to allow vr777 to verify your identity before processing the request.