Privacy Policy — vin777

vin777 ("Company", "We", "Us", "Our") operates the online gaming platform accessible at https://vin777.casa (the "Platform"). This Privacy Policy ("Policy") sets out the basis on which personal data collected from users ("You", "User", "Player") of the Platform will be processed by vin777.

We are committed to protecting the privacy and security of all personal information entrusted to us by our members across Malaysia — including players in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and beyond. This Policy is intended to give you a clear, honest account of how we handle your data, written in plain terms rather than impenetrable legal language wherever possible.

By registering an account on the Platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not access or use the Platform.

The following definitions apply throughout this Privacy Policy:

vin777 collects the following categories of personal data in connection with the provision of our gaming and betting services:

vin777 collects personal data through the following channels and mechanisms:

• Account Registration: When you create a vin777 account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you submit identity documents for account verification, either at registration or upon our request during an account review or prior to a withdrawal.
• Deposits and Transactions: When you make a deposit via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or cryptocurrency, relevant financial and transactional data is recorded.
• Platform Use: Automatically through your interaction with the Platform — including games played, bets placed, pages visited, and session activity — via server logs and analytics tools.
• Cookies and Similar Technologies: Through browser cookies and session tokens placed on your device when you visit or log in to the Platform. See Section 9 for full details.
• Customer Support Interactions: When you contact our support team via live chat, email ([email protected]), or any other support channel, communications are recorded for quality assurance and security purposes.
• Promotions and Surveys: When you voluntarily participate in a vin777 promotion, competition, or feedback survey, any data you provide in that context is collected and processed.

vin777 processes your personal data only for defined, legitimate purposes. The table below sets out each processing activity, the data categories involved, and the stated purpose:

vin777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except in limited fraud detection scenarios where immediate intervention is required to protect the security of the Platform.

vin777 processes personal data only where a lawful basis exists for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the account registration agreement — including identity verification, transaction processing, and the delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML compliance, KYC obligations, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out for vin777's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Where you have provided explicit, freely given consent — for example, opting in to receive marketing communications from vin777. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

vin777 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share data in the following limited circumstances:

• Payment Service Providers: Financial data is shared with payment processors facilitating your transactions — including providers supporting Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost, Maybank, CIMB, and Public Bank — strictly for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: KYC data may be shared with third-party identity verification services engaged by vin777 to authenticate user identities as part of our compliance programme.
• Game Software Providers: Limited usage data may be shared with licensed game content providers for the purpose of delivering game content, resolving technical disputes, and auditing game results.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory obligation, vin777 will disclose personal data to competent authorities. We will, where legally permitted, notify the affected user of such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction, subject to equivalent privacy protections being maintained by the acquiring entity.

All third-party data processors engaged by vin777 are bound by contractual data processing agreements that require them to process personal data only as directed by vin777, maintain adequate security measures, and prohibit onward transfer without authorisation.

vin777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account plus five (5) years following account closure, to satisfy AML record-keeping and audit requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in accordance with applicable anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, or longer where the communication relates to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of your consent and for a period of two (2) years following withdrawal of consent, as evidence of your preferences.
• Technical and Usage Data: Aggregated and anonymised data may be retained indefinitely for platform analytics purposes. Individually identifiable technical data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

vin777 uses cookies and similar tracking technologies on the Platform for the purposes described below. A cookie is a small text file placed on your device when you visit the Platform; it allows the Platform to recognise your browser and remember certain information about your session.

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without impairing your ability to use the Platform.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — such as which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used solely to improve Platform performance and user experience.
• Functional Cookies: Used to remember your account preferences, including your language setting (English, Bahasa Melayu, or Mandarin), display preferences, and last-visited game category.

vin777 does not deploy third-party advertising cookies or cross-site tracking technologies for commercial profiling purposes. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of specific Platform features.

Subject to applicable law and where technically feasible, you have the following rights in relation to the personal data vin777 holds about you. To exercise any of these rights, please contact our support team via live chat or email at [email protected].

• Right of Access: You have the right to request a copy of all personal data vin777 holds about you, together with information about how it is being used and the basis on which it is processed.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update many account details directly through your account settings dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other lawful basis for processing exists. This right is subject to vin777's legal retention obligations, which may prevent immediate deletion in certain cases.
• Right to Restrict Processing: You may request that vin777 restricts the processing of your data in certain circumstances — for example, while the accuracy of the data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or a contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of vin777's legitimate interests, or to the use of your data for direct marketing purposes. Where you object to marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

vin777 will respond to all verified data subject requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

vin777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the Platform is protected by industry-standard TLS/SSL encryption.
• Password Hashing: Account passwords are stored exclusively as one-way cryptographic hashes — vin777 staff cannot read your password, and it is never stored in plain text.
• Access Controls: Access to personal data is restricted to authorised personnel who require it for their specific operational role. All internal access is logged and audited.
• Network Security: The Platform is protected by firewalls, intrusion detection systems, and DDoS mitigation infrastructure.
• Periodic Security Audits: vin777 conducts regular security reviews and penetration testing of its Platform and data infrastructure.
• Incident Response: In the event of a data breach that poses a risk to users' rights and freedoms, vin777 will notify affected users and relevant authorities as required by applicable law, without undue delay.

While we implement industry-leading security measures, no internet-based system is completely impenetrable. You are responsible for maintaining the security of your own account by using a strong, unique password and not sharing your login credentials with any third party.

The vin777 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register an account on, or in any way use, the vin777 Platform.

If vin777 becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately delete that data, close the associated account, and forfeiture all balances in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an account on vin777, please contact us immediately via live chat or at [email protected] so that we can investigate and take appropriate action without delay.

vin777 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our data processing practices, or the nature of the services we offer. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they affect your rights or the way we process your data in a significant way — we will notify registered users by email or through a prominent notice displayed upon login, with a minimum of seven (7) days' advance notice prior to the revised Policy taking effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should discontinue use of the Platform and contact us to request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which vin777 handles your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform. Support is provided in English, Bahasa Melayu, and Mandarin. Average first-response time is 3–5 minutes.
• Email: [email protected]. Please include your registered username and a clear description of your query or request. We aim to respond to all privacy-related email enquiries within two (2) business days.

For data subject access requests, rectification requests, or erasure requests, please contact us via email with the subject line "Data Subject Request — [Your Username]" and provide sufficient detail for us to identify your account and process your request efficiently.

For information about our responsible gambling tools and player protection measures, please visit our Responsible Gambling page.