grab777 Privacy Policy

1. Who We Are

grab777 is an online gaming platform accessible at https://grab777.win, offering live casino, sports betting, slot games, and related entertainment services to eligible members. In the context of this Privacy Policy, "grab777", "we", "us", and "our" refer to the operator of the Platform. "You" and "Member" refer to any individual who registers an account or otherwise interacts with the grab777 Platform.

grab777 acts as the data controller in respect of the personal data you provide directly to the Platform. Where we engage third-party service providers to process data on our behalf, those parties act as data processors under our instruction.

2. Personal Data We Collect

grab777 collects the following categories of personal data from Members and prospective Members:

• Identity Data: Full legal name, date of birth, nationality, gender, and copies of government-issued identity documents submitted during verification.
• Contact Data: Malaysian mobile number, email address, and residential or correspondence address.
• Financial Data: Bank account details, e-wallet identifiers (such as Touch 'n Go eWallet or Boost account references), transaction history, deposit and withdrawal records, and wallet balance information. All amounts are held in Malaysian Ringgit (MYR).
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, session duration, and connection metadata logged at the time of Platform access.
• Usage Data: Pages visited, games played, bet history, wager amounts, game session duration, feature interactions, and search queries made within the Platform.
• Communications Data: The content and metadata of live chat sessions, support tickets, emails, and any other written communications sent to grab777.
• Preference Data: Language settings, notification preferences, responsible gaming tool elections (such as deposit limits and self-exclusion), and marketing communication opt-in or opt-out status.

3. How We Collect Your Data

grab777 collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or updating your account profile.
• Automatically: Technical and usage data collected through cookies, server logs, session tracking technologies, and similar tools when you access the grab777 website or application.
• From third parties: Identity and fraud screening data from third-party verification providers engaged by grab777 to comply with applicable anti-money laundering and know-your-customer obligations; payment confirmation data from payment processors including Touch 'n Go, Boost, Maybank, CIMB, and FPX operators.

4. How We Use Your Personal Data

grab777 uses the personal data it collects for the following purposes:

• To create, manage, and maintain your grab777 Member account and verify your identity and age eligibility (21+ requirement).
• To process deposits, withdrawals, and internal wallet transactions in MYR.
• To deliver the gaming and betting services you have requested, including personalising game recommendations and promotional offers based on your activity.
• To detect, prevent, and investigate fraud, money laundering, collusion, multi-accounting, and any other conduct prohibited under the grab777 Terms and Conditions.
• To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements imposed by the licensing authority under which grab777 operates.
• To provide customer support and respond to enquiries submitted through live chat or email.
• To send you service communications, including transaction confirmations, security alerts, and changes to Platform terms or policies.
• To send you marketing communications about grab777 promotions, new games, and features, where you have provided consent or where we have a legitimate interest in doing so and you have not opted out.
• To monitor and improve the technical performance, security, and user experience of the Platform.
• To administer our responsible gaming programme, including processing deposit limit elections, cooling-off requests, and self-exclusion instructions.

5. Legal Basis for Processing

grab777 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to deliver the Services you have contracted for when registering a grab777 account, including account management, payment processing, and game delivery.
• Legal obligation: Processing required for grab777 to comply with applicable AML, KYC, age verification, and licensing obligations.
• Legitimate interests: Processing for fraud detection and prevention, platform security, product improvement, and business analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and the use of non-essential cookies, where your consent has been obtained and can be withdrawn at any time.

6. Data Sharing & Disclosure

grab777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients:

• Payment processors: Banks, e-wallet operators (Touch 'n Go, Boost, GrabPay, DuitNow), and FPX-connected institutions necessary to process your financial transactions.
• Identity verification providers: Third-party KYC and AML screening services that verify your identity and check your details against applicable watchlists and politically exposed persons (PEP) databases.
• Game content providers: Licensed game studios and aggregators who deliver casino games and slot titles within the grab777 Platform and who may receive anonymised session data for technical support purposes.
• Technology and hosting providers: Cloud infrastructure, content delivery, and cybersecurity partners who process data on grab777's behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory direction from the licensing authority under which grab777 operates.
• Corporate transactions: In the event of a merger, acquisition, or restructuring of the grab777 business, personal data may be transferred as part of the transaction, subject to equivalent data protection obligations being maintained.

All third-party service providers engaged by grab777 are contractually required to maintain the confidentiality and security of personal data and to use it only for the specific purposes authorised by grab777.

7. Cookies & Tracking Technologies

grab777 uses cookies and similar tracking technologies on the Platform to deliver and improve the Services. Cookies used by grab777 include:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Store your preferences such as language settings, game history display options, and responsible gaming elections to improve your experience.
• Analytics cookies: Collect anonymised usage data to help grab777 understand how Members navigate the Platform and identify areas for improvement. Data is aggregated and does not identify individual users.
• Marketing cookies: Where you have consented, these cookies allow grab777 to deliver targeted promotions based on your activity. You may withdraw consent at any time through your account preferences.

You can control cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. Strictly necessary cookies cannot be refused without discontinuing use of the Platform.

8. Data Retention

grab777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable legal, regulatory, or licensing obligations. As a general guide:

• Account and identity data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Communications data is retained for two (2) years from the date of the communication, unless a longer period is required for an ongoing dispute or legal matter.
• Technical and usage data derived from cookies and logs is retained for up to thirteen (13) months, after which it is aggregated or deleted.

Where data is retained solely on the basis of a legal obligation, it will not be used for any other purpose and will be securely deleted at the end of the applicable retention period.

9. Data Security

grab777 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and grab777's servers.
• Encryption of sensitive data at rest within grab777's database infrastructure.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Two-factor authentication for all administrative access to Platform systems.
• Regular independent security audits and penetration testing of the Platform infrastructure.
• Incident response procedures enabling grab777 to detect, contain, and report data breaches in accordance with applicable regulatory requirements.

While grab777 takes all reasonable precautions, no online system is entirely immune from security risk. Members are also responsible for maintaining the security of their own account credentials and for notifying grab777 immediately if they suspect any unauthorised access to their account.

10. Your Data Rights

Subject to applicable law and any overriding legal obligation on grab777, Members have the following rights in respect of their personal data:

• Right of access: You may request a copy of the personal data grab777 holds about you.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. Minor updates (such as address changes) can typically be made directly through your account settings.
• Right to erasure: You may request deletion of your personal data where there is no overriding legal reason for retention. Note that grab777 is required to retain certain data for regulatory and AML compliance purposes, and such data cannot be erased upon request.
• Right to restrict processing: You may request that we temporarily restrict the processing of your data while an accuracy dispute or objection is being assessed.
• Right to data portability: Where data has been provided by you and is processed on the basis of consent or contract, you may request a machine-readable copy for transfer to another service.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact grab777 support via live chat or at the email address listed in Section 14. We will respond within a reasonable timeframe and in any event within the period required by applicable law.

11. Children's Privacy

The grab777 Platform is strictly for individuals aged 21 and above. grab777 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, the associated account will be suspended immediately, all data will be reviewed, and any funds held will be dealt with in accordance with our Terms and Conditions and applicable law.

If you believe a minor may have accessed or registered on the grab777 Platform, please contact us immediately via live chat so that we can investigate and take appropriate action.

12. Third-Party Links

The grab777 Platform does not contain links to external third-party websites for browsing purposes. Where references to third-party services appear in the context of payment methods (such as Touch 'n Go eWallet, Boost, or Maybank), those services are governed by their own separate privacy policies, and grab777 is not responsible for their data practices. Members should review the privacy policies of any third-party service through which they transact with grab777.

13. Changes to This Privacy Policy

grab777 reserves the right to update this Privacy Policy at any time. The most current version will always be available on this page, with a revised effective date noted at the top. Where a material change is made, grab777 will make reasonable efforts to notify active Members via on-platform notification or email to their registered address prior to the change taking effect.

Continued use of the grab777 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by grab777, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the Platform
• Email: [email protected] (display only — not a clickable link)

grab777 aims to acknowledge all data-related enquiries within one (1) business day and to resolve them within thirty (30) days of receipt, in accordance with applicable data protection standards.