MSG777 Privacy Policy – Malaysia Personal Data Protection

1 Introduction

MSG777 ("we", "platform", "msg777.my") values the privacy of every individual who uses our online Sports Betting and casino platform. This Privacy Policy transparently outlines how we collect, process, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all users of the MSG777 platform – including website visitors, registered members, and anyone who interacts with our services, customer support, or communication channels. By using the MSG777 platform, you acknowledge that you have read and understood this Privacy Policy.

2 Information We Collect

MSG777 collects several categories of information from users for the purposes set out in this policy. The types of information we collect include:

Personal Identity Information:

• Full name as per identification document (MyKad or passport)
• Identity card number or passport number
• Date of birth
• Gender
• Profile photo (if voluntarily uploaded)

Contact Information:

• Active email address
• A valid Malaysian mobile number
• Residential address (for KYC verification purposes)

Financial Information:

• Bank account number or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
• Deposit and withdrawal transaction history in MYR (RM)
• Betting records and gaming activity

Technical Information:

• Device IP address
• Web browser type and operating system
• Cookie and login session data
• Mobile device information (model, device ID) if accessed via a mobile app
• Platform activity logs including dates, times, and actions performed

3 How We Use Your Data

MSG777 uses collected personal data solely for legitimate and relevant purposes. The following are the primary purposes for which your data is used:

• Account Management: Registering, verifying, and managing your MSG777 member account.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods, as well as fund withdrawals to your account.
• Identity Verification (KYC): Verifying the identity and age of members in accordance with regulatory requirements.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support: Processing enquiries, complaints, and support requests submitted via Live Chat, email, or other support channels.
• Personalise Your Experience: Tailoring content, promotions, and game recommendations based on your preferences and activity history.
• Marketing Communications: Sending promotional information, bonuses, and platform updates – only where you have consented to receive such communications.
• Legal Compliance: Fulfilling legal obligations and reporting requirements to the relevant Malaysian authorities.
• Analytics & Improvement: Analysing usage patterns to improve the performance, security, and user experience of the MSG777 platform.

4 Basis for Personal Data Processing

MSG777 processes your personal data on valid legal grounds in accordance with the Malaysia PDPA, including:

• Consent: You have given consent for the processing of your data for specific purposes at the time of registration or while using our services.
• Contract Performance: Processing is necessary to fulfil the contract between you and MSG777, including the provision of betting services and account management.
• Legal Obligation: Processing is necessary to comply with legal obligations imposed on MSG777 under Malaysian law.
• Legitimate Interest: Processing is necessary for MSG777's legitimate interests, such as fraud prevention and platform security, provided these interests do not override your fundamental rights.

5 Sharing Information with Third Parties

MSG777 does not sell or rent your personal data to any third party. However, we may share your information in the following limited circumstances:

• Service Provider: Payment providers such as Touch 'n Go, GrabPay, DuitNow, and FPX for processing your financial transactions. They receive only the data required for that purpose.
• Identity Verification Providers: Third-party KYC companies that assist us in verifying member identities in accordance with legal compliance requirements.
• IT Service Provider: Hosting, cybersecurity, and data analytics companies that help us operate the platform securely and efficiently.
• Legal Authority: Malaysian government agencies, law enforcement bodies, or courts where required by law or a valid court order.
• Merger or Acquisition: In the event of a merger, acquisition, or asset sale involving MSG777, user data may be transferred as part of that transaction. You will be notified in advance.

All third parties with whom we share data are required to comply with data protection standards equivalent to or stricter than the Malaysia PDPA, and are prohibited from using that data for any other purpose.

6 Cookies & Tracking Technologies

MSG777 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, user sessions, and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting information on how users interact with the platform to help us identify technical issues and improve site performance.
• Functional Cookies: Saving your preferences such as language, region, and display settings to provide a more personalised experience.
• Analytics Cookies: Used alongside third-party analytics tools to understand aggregate usage patterns and improve platform content and features.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the MSG777 platform. For more information on managing cookies in popular browsers, refer to your browser's help documentation.

7 Data Security Measures

MSG777 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, damage, or accidental disclosure:

• Data Encryption: All sensitive data is encrypted using AES-256 encryption at rest and SSL/TLS 256-bit encryption in transit.
• Access Controls: Access to members' personal data is strictly limited to staff who require it to perform their duties, enforced through role-based access control (RBAC).
• Two-Factor Authentication: MSG777's internal systems containing user data are protected by mandatory two-factor authentication (2FA) for all staff.
• Continuous Monitoring: Our Endpoint Detection and Response (EDR) system monitors the platform infrastructure 24 hours a day, 7 days a week.
• Security Audits: Penetration testing and security audits are conducted regularly by independent third-party experts.
• Staff Training: All MSG777 staff who handle personal data receive comprehensive data protection training and are required to sign confidentiality agreements.

8 Data Retention Period

MSG777 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law:

• Active Account Data: Retained for the duration your account remains active and for any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysian financial and tax regulatory requirements.
• Platform Activity Logs: Retained for 2 years for security and investigation purposes.
• KYC (Identity Verification) Data: Retained for 5 years after account closure, in accordance with AML (Anti-Money Laundering) compliance requirements.
• Customer Support Communications: Retained for 3 years for reference and dispute resolution.
• Marketing Data: Deleted within 30 days of you withdrawing consent for marketing communications.

When your data is no longer required, MSG777 will securely delete or anonymise the information using methods that ensure it cannot be recovered.

9 Your Rights Regarding Personal Data

Under Malaysia's PDPA and MSG777's policies, you have the following rights regarding your personal data:

To submit any request relating to the above rights, please contact our privacy team at support@msg777.my with the email subject "Data Privacy Rights Request". We will process your request within 30 working days.

10 Protection of Children's Data

The MSG777 platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you believe your minor child has provided personal data to MSG777, please contact us immediately at support@msg777.my. We will take prompt action to delete the information and close the account in question once verification is complete.

11 Cross-Border Data Transfers

In the course of its operations, MSG777 may transfer your personal data to servers or service providers located outside Malaysia. In all such cases, we ensure that:

• Data transfers only take place to countries or parties that provide a level of data protection equivalent to or greater than that of the Malaysia PDPA.
• Appropriate data transfer agreements have been put in place with recipients, including standard data protection clauses.
• The transfer is necessary for the performance of a contract between you and MSG777, or in the recognised public interest.

You have the right to request further information about the safeguards used for cross-border data transfers by contacting us at support@msg777.my.

12 Contact Us & Policy Amendments

If you have any questions, concerns, or requests regarding this Privacy Policy or how MSG777 handles your personal data, please contact us via:

• Email: support@msg777.my (with the subject line "Data Privacy Enquiry")
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the MSG777 platform

MSG777 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant changes will be clearly displayed on this page along with the latest update date, and you will be notified via the email address registered to your account.

Your continued use of the MSG777 platform following any amendments to the Privacy Policy constitutes your acceptance of the revised policy. It is your responsibility to review this page periodically.