Kawi777 Privacy Policy – Malaysia Member Personal Data Protection

1 Introduction & Scope of This Policy

Kawi777 ("we", "Platform" or "kawi777") operates under the domain kawi777.vin and provides online gaming and betting services to users in Malaysia. We understand that privacy is more than just a word — it is a fundamental right of every individual who interacts with our platform.

This Privacy Policy ("Policy") transparently describes how kawi777 collects, uses, discloses, stores, and protects the personal information you provide to us or that we collect when you use the kawi777 platform. This Policy applies to all registered members, non-member users browsing our platform, and individuals who interact with us through any communication channel.

All personal data management activities at kawi777 are carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognized best practices in data protection. We take this responsibility seriously and are committed to ensuring your data is handled in the safest and most responsible manner.

2 Types of Personal Data We Collect

Kawi777 collects various types of personal data depending on your interaction with our platform. The following is a detailed breakdown of the types of data collected:

a) Data You Provide Directly:

• Full name as stated on your official identity document
• Identity card number (MyKad) or passport number
• Date of birth and gender
• Mobile phone number and email address
• Current residential address
• Bank account or e-wallet details for deposit and withdrawal purposes
• Identity verification documents (KYC) such as a copy of MyKad and proof of address
• Communications with our customer support team

b) Data Collected Automatically:

• IP address and approximate location information
• Web browser type and version used
• Device information including operating system and screen resolution
• Login and logout activity records
• Game history, betting, and transaction records within the platform
• Cookie and similar tracking technology data
• Platform usage time and duration

3 How We Use Your Personal Data

Kawi777 uses collected personal data solely for legitimate and necessary purposes to provide you with the best service. The following outlines the primary purposes for which that data is used:

• Account registration & management: Processing new account applications, verifying member identities, and managing accounts on an ongoing basis.
• Identity verification (KYC): Meeting legal and regulatory requirements for verifying the identity of online gaming platform users.
• Transaction processing: Processing deposits, withdrawals, and all other financial transactions securely and on time.
• Gaming services provision: Enabling access to all games and features on the kawi777 platform in line with your account and membership tier.
• Customer support: Enabling our support team to identify and resolve your issues efficiently.
• Account-related communications: Sending important notifications regarding your account, transactions, promotions you have subscribed to, and platform updates.
• Fraud prevention & security: Detecting and preventing fraudulent activity, unauthorised access, and other security threats.
• Legal compliance: Fulfilling reporting and compliance obligations required by law and relevant authorities.
• Platform improvements: Analysing usage patterns to improve the design, features, and performance of the kawi777 platform.

Kawi777 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.

4 Data Sharing with Third Parties

Kawi777 does not sell, rent, or trade members' personal data to third parties for commercial purposes. However, in the course of operating the platform, there are certain situations where data must be shared with specific parties:

• Payment service providers: To process deposits and withdrawals, the necessary financial data must be shared with payment service providers who have agreed to comply with our data security standards.
• Game software providers: Some technical information is shared with third-party game providers solely for verification and game integrity purposes.
• Identity verification service: KYC data is shared with licensed and registered identity verification service providers for document validity checks.
• Legal requirements: kawi777 will disclose personal data to the relevant authorities when required by law, court order, or direction from a legitimate authority.
• Financial crime prevention: In cases of suspected money laundering or financing of illegal activities, kawi777 reserves the right to report to the relevant authorities.

5 Data Security Measures

Protecting your personal data is more than a legal obligation for kawi777 — it is a moral commitment we uphold firmly. We continuously invest in the latest security infrastructure to keep your data safe at all times.

Security measures implemented by kawi777 include:

• 256-bit SSL encryption: All data transmitted between your browser and the kawi777 server is encrypted using TLS 1.3 protocol with AES-256 encryption.
• Two-factor authentication (2FA): Extra security for account login via OTP sent to your registered phone number.
• 24/7 security monitoring: An automated monitoring system that detects and alerts for any suspicious activity in real time.
• Data encryption at rest: Sensitive personal data stored in our databases is encrypted for additional protection, including against internal threats.
• Tiered access controls: Only authorised kawi777 staff may access members' personal data, and only to the extent necessary to perform their duties.
• Regular security audits: Security assessments by independent experts are conducted regularly to identify and address vulnerabilities.
• Secure data backup: Regular data backups to a secure, separate location for data recovery in the event of an unexpected incident.

While kawi777 takes all reasonable steps to protect your data, no system can guarantee absolute security. We therefore also encourage you to play your part in keeping your account secure by using a strong password and not sharing your login credentials with anyone.

6 Cookies & Tracking Technologies

Kawi777 uses cookies and similar tracking technologies to enhance your experience on our platform, understand usage patterns, and ensure account security. The following are the types of cookies used:

• Session Cookies: Temporary cookies that expire when you close your browser. Used to maintain your login session throughout your time on the platform.
• Persistent Cookies: Cookies that persist for a set period. Used to remember your preferences such as language and display settings.
• Security Cookies: Used to detect and prevent fraudulent activity and to ensure the security of your login sessions.
• Analytics Cookies: Helping us understand how members interact with the platform to improve the user experience.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the kawi777 platform. Cookies required for security and session authentication cannot be disabled as they are essential to basic platform operations.

7 Data Retention & Deletion

Kawi777 retains your personal data only for as long as necessary to fulfill the purposes stated in this Policy or as required by applicable law. Retention periods vary by data type as specified in the table in Section 2.

Once your account is closed or data is no longer required, kawi777 will:

• Deleting personal data that no longer needs to be retained from all active systems.
• Replacing personal data with anonymised data for statistical and analytics purposes where appropriate.
• Ensuring all backup copies containing your personal data are erased within the scheduled backup cycle.

Data legally required to be retained — primarily financial and transaction records — will be kept for the period stipulated under applicable law even after account closure. Such data is stored in a secure environment with strictly restricted access.

8 Your Rights as a kawi777 Member

Under Malaysia's PDPA and kawi777's commitment to member privacy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the kawi777 support team via live chat or our support email. We will process your request within 14 business days from the date of receipt.

9 Child Data Protection

The kawi777 platform is strictly for adult users aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

Should we discover that personal data of an individual under the age of 18 has been collected without proper knowledge or consent, we will take immediate steps to:

• Promptly deleting all related data from our systems.
• Closing the involved account without prior notice.
• Reporting the incident to the relevant authorities where required.

If you as a parent or guardian believe your child who is underage has registered an account at kawi777, please contact our support team immediately for prompt action.

10 Amendments to This Privacy Policy

Kawi777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or service improvements.

Any material changes to this Policy will:

• Published on the kawi777 platform with a clear effective date.
• Notified to registered members via in-platform notifications or their registration email.
• Takes effect 14 days after notice is given, allowing members sufficient time to review the changes.

Continued use of the kawi777 platform after any amendments take effect will be considered your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed of the latest updates.

11 How to Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or kawi777's handling of your personal data, please contact us through the following channels:

For official requests relating to data rights (access, correction, deletion), please state "Personal Data Request" in the subject line of your message along with your account number and a copy of your identification document for identity verification.

This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions.