VM777 Privacy Policy – Data Protection Every Malaysian Member

This Privacy Policy ("Policy") describes how VM777 ("we", "Platform") collects, uses, stores and protects the personal information you provide to us when registering, using our services or interacting with the VM777 platform. This Policy applies to all registered members, guest users and any individual accessing the VM777 platform through any device or channel.

VM777 respects the privacy of every member and is committed to handling your personal information responsibly, transparently and in accordance with recognised data protection standards. We understand that your trust is our most valuable asset, and every data-related decision we make is guided by this principle.

VM777 collects various types of information depending on how you interact with our platform. In general, the information collected falls into three main categories:

Information You Provide Directly:

• Full name as per Malaysian identity card
• An active Malaysian phone number
• Email address (if registered)
• Date of birth for age verification purposes
• Payment account details such as e-wallet phone numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account numbers for DuitNow and FPX
• Identity verification documents if requested for KYC compliance purposes (such as IC number)

Automatically Collected Information:

• IP address and general location information (state within Malaysia)
• The type and version of the web browser or app used
• Operating system and device type (Android, iOS, Windows, etc.)
• Access logs including the time, date, and pages visited
• Gaming session data including bets placed, games played and outcomes
• Cookie and similar tracking technology information

Information From Third-Party Sources:

• Payment confirmation from e-wallet and banking providers (transaction status only, not full account information)
• Identity verification information from approved KYC service providers
• Fraud prevention data from third-party security systems used by VM777

All data collected by VM777 is used solely for legitimate and transparent purposes. Below is a summary of the purposes for which data is used and the legal basis for each:

VM777 will not use your data for any purpose beyond those stated above without first obtaining your renewed consent. Whenever there is a material change to how we use your data, we will notify you by email or in-platform notification before that change takes effect.

VM777 maintains a strict policy that members' personal data will never be sold, rented, or transferred to any third party for marketing or commercial purposes. However, in the course of operating the platform, there are limited situations where VM777 may need to share certain information:

• Payment Service Providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), the minimum transaction information required to process the payment is shared with the respective provider. VM777 only shares data that is strictly necessary for transaction settlement.
• KYC Service Providers: For identity verification purposes required under compliance standards, vm777 may share limited identifying information with approved KYC service providers who are bound by strict confidentiality agreements.
• Regulatory Authority: Where required by a valid court order, direction from a competent authority, or applicable legal obligation, VM777 will comply by disclosing only the minimum information necessary — nothing more.
• Technology & Infrastructure Providers: Third parties that assist vm777 with technical operations — such as cloud service providers, cybersecurity systems, and gaming software providers — may access certain data within the limited scope required to perform their services. All such parties are bound by strict data protection agreements.

In all of the data-sharing cases described above, VM777 ensures that recipients adhere to data protection standards equivalent to or higher than those VM777 applies itself. Any data sharing that falls outside these categories requires your prior written consent.

Protecting your personal data is an operational priority at vm777 that is never compromised. We continuously invest in the latest security infrastructure and protocols to ensure the highest level of protection for every member:

• 256-Bit SSL Encryption: All communications between your device and VM777's servers are protected with 256-bit SSL encryption — the same standard used by Malaysia's leading financial institutions.
• Encrypted Data Storage: Sensitive data such as payment information is stored in encrypted format on secure servers protected by multiple layers of security
• Internal Access Controls: Only vm777 staff with a legitimate operational need are permitted to access member data, and all access is automatically logged for audit purposes
• 24/7 Threat Monitoring: Automated monitoring systems operate around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
• Regular Security Audits: The VM777 platform undergoes penetration testing and independent security audits at least once a year
• Two-Factor Authentication: For sensitive actions such as large withdrawal requests, VM777 applies additional verification to ensure only the genuine account holder can perform those actions

Vm777 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you access the vm777 platform. The types of cookies we use are as follows:

• Essential Cookies (Session): Required for core platform functions such as login, game session management and security. These cannot be disabled as they are essential to the platform's operation.
• Performance Cookies: Collects information about how you use the platform — pages visited frequently, time spent and any error messages — to help us improve the platform. This data is collected anonymously.
• Functional Cookies: Remembering your preferences — such as display language and settings you have changed — to provide a more personalised experience on your next visit.
• Analytics Cookies: Helps VM777 understand overall platform usage patterns through anonymised aggregate data — not individual data — for service improvement purposes.

You can manage or disable cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality or user experience of the VM777 platform. For more information on managing cookies, please refer to the documentation for your web browser.

As a VM777 member, you have clear rights over your personal data. VM777 is committed to respecting and facilitating the exercise of these rights without requiring you to go through complicated processes. Below are your privacy rights and how to exercise them:

VM777 retains members' personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. In general, VM777's data retention principles are as follows:

• Active Account Data: Retained for the duration of the active account period and for an additional period following account closure as required for compliance or dispute resolution purposes
• Financial Transaction Records: Retained for the minimum period required by applicable financial compliance and anti-money laundering regulations
• Security Logs: Retained for as long as necessary for security investigation, fraud prevention and compliance purposes
• Support Communication Data: Retained for a reasonable period to allow for complaint resolution and any related follow-up actions
• Marketing Data (With Consent): Retained until you withdraw your consent or request deletion

When data is no longer needed and there is no legal obligation to retain it, VM777 will securely delete or anonymise that data using industry-approved methods.

The vm777 platform is an online entertainment service that is intended solely for individuals aged 18 and above. VM777 does not intentionally collect, store or process any personal data from individuals under the age of 18. If VM777 discovers that data belonging to a person under 18 has been collected, that data will be deleted immediately and the account in question will be closed in accordance with VM777's Terms & Conditions.

Parents or guardians who suspect that their child or dependent has registered a VM777 account without authorisation are encouraged to contact the VM777 support team immediately via live chat or email at support@vm777-jit.com for prompt action.

The vm777 platform may contain links or references to third-party websites or services in certain contexts, such as payment methods or game providers. However, vm777 is not responsible for the privacy policies or data security practices of any such third parties.

When you use third-party services integrated with the VM777 platform — such as Touch 'n Go eWallet, GrabPay, Boost or ShopeePay for deposits or withdrawals — you will be separately subject to those third parties' privacy policies. VM777 encourages you to read the privacy policy of each payment service provider you use to understand how they handle your data.

In all cases, the data VM777 shares with payment service providers is limited to the minimum information required to complete your transaction — VM777 does not share gaming history, full account balances or any additional personal data that is not necessary for payment purposes.

Vm777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal compliance requirements, or service improvements. When material changes are made to how we handle your personal data, vm777 will notify you via:

• Notices displayed prominently within the vm777 platform upon login
• Email to the address registered to your account (where applicable)
• Updates the "Updated" date shown at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how vm777 handles your personal data. Continued use of the vm777 platform after notification of any changes will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding VM777's Privacy Policy or how we handle your personal data, our team is ready to assist through a number of channels:

• 24/7 Live Chat: The fastest way — click the chat icon within the vm777 platform to speak with a Malay-speaking agent in under a minute
• Privacy Email: support@vm777-jit.com — for more detailed written enquiries, we aim to respond within 24 hours on business days

For formal requests relating to privacy rights — such as data access, correction, or deletion — please clearly state the type of request in your communication along with the identity verification required to process it securely. VM777 will process valid privacy rights requests within the timeframe stipulated by applicable legal requirements.

VM777 values all feedback relating to privacy and data security. If you identify any vulnerability or issue that could potentially affect member privacy, please notify us immediately — we take every report seriously and will respond promptly.