Privacy Policy Pirate777 – Malaysia User Data Protection

1 Introduction & Scope of Privacy Policy

Pirate777 ("we", "the platform") is a digital entertainment platform operating in Malaysia via pirate777.best. We offer services including slots, Sports Betting on the Malaysia Super League and international leagues, poker, E-Sports, Live Casino table games, and a VIP Rewards programme to eligible Malaysian users.

This Privacy Policy explains in detail how Pirate777 collects, processes, stores, uses, and protects your personal data when you register for, access, or use any of our services. It also outlines your rights as a data owner and how you may exercise those rights.

Pirate777 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). We treat user privacy protection as a priority, not merely a legal obligation. Every data-related decision is made with the best interests of our users across Malaysia in mind — from Johor Bahru, Kuala Lumpur, Penang, and Kota Kinabalu to Kuching.

This Policy applies to all personal information you provide to Pirate777, whether directly through registration forms, through your use of the platform, or collected automatically through our platform technologies.

2 Types of Personal Data We Collect

Pirate777 collects personal data that is necessary to provide a safe, fair, and effective service. We only collect what is genuinely needed and do not gather data beyond what our operations require.

Automatically collected data includes information about how you interact with the Pirate777 platform — pages you visit, games you play, session duration, and general usage patterns. This information is collected for security purposes, platform improvement, and a better overall user experience.

For identity verification (KYC) purposes, Pirate777 may request copies of identification documents such as your Malaysian identity card or passport. These documents are stored securely and used solely for identity verification and legal compliance purposes.

3 How Pirate777 Uses Your Data

Pirate777 uses collected personal data solely for legitimate purposes directly related to the provision of our services. Below are the primary purposes for which data is used:

• Account management – register, verify and manage your Pirate777 member account
• Transaction processing – processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and manages withdrawal of winnings in MYR
• Service provision – enables you to access and use all games and features on the Pirate777 platform
• Identity verification (KYC) – ensures compliance with relevant legal requirements and prevents fraud and money laundering
• Platform security – detect and prevent fraudulent activity, unauthorised access and platform abuse
• Customer support – resolving inquiries and complaints and providing technical assistance to members
• Service communications – sends you important information about your account, changes to terms, and system updates
• Relevant marketing – notifies you about Pirate777 promotions, bonuses, and offers that may interest you (can be unsubscribed)
• Platform improvement – analyse usage patterns to improve Pirate777's design, functionality and overall experience
• Legal compliance – fulfil reporting and compliance obligations to the relevant Malaysian authorities

Pirate777 does not use your personal data to make automated decisions that significantly affect your rights without human involvement. Every important decision relating to your account – such as account closure or withdrawal rejections – is reviewed by our qualified staff.

4 Third-Party Data Sharing & Disclosure

Pirate777 does not sell, rent or trade our members' personal data to any third party for their marketing purposes. This is an absolute commitment we make to every Pirate777 user in Malaysia.

However, in the context of normal platform operations, Pirate777 may share your personal data with the following parties in limited and controlled circumstances:

• Payment providers – e-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow, as well as Malaysian banks (Maybank, CIMB) via FPX, for processing financial transactions. This sharing is limited to the minimum necessary to complete the transaction.
• Game providers – companies that supply slots, live table games, and poker software to Pirate777 may receive limited technical data necessary for the provision of gaming services. They are bound by strict confidentiality agreements.
• IT service providers – hosting, cybersecurity, and analytics service providers that assist Pirate777 in managing its technical infrastructure. All such providers are bound by data processing agreements that comply with the PDPA.
• Legal authorities – Malaysian law enforcement agencies or regulatory bodies where required by law, court order or in the context of a legitimate criminal investigation.
• Business mergers – if Pirate777 is involved in a merger, acquisition or asset sale, user data may be transferred as part of that transaction, subject to prior notice being given to users.

In all cases of data sharing described above, Pirate777 ensures that only the minimum necessary data is shared, and all recipients are bound by data protection obligations equivalent to or stricter than our own.

5 Pirate777 Data Security Measures

Pirate777 implements multiple layers of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or deletion. Below are the key security measures we have in place:

• Data encryption in transit – all communications between your browser and Pirate777's servers are protected by 256-bit TLS/SSL encryption. You can verify this by looking for the padlock icon in your browser's address bar when visiting pirate777.best.
• Data encryption at rest – sensitive data such as passwords and financial information is stored in encrypted form in our databases. Your password is stored using a one-way hashing algorithm — no one at Pirate777 can ever view your actual password.
• Strict access controls – only Pirate777 staff with a specific need relevant to their role are granted access to user data. All such access is continuously audited and monitored.
• Two-factor authentication (2FA) – we offer and encourage the use of 2FA on all member accounts as an additional layer of protection.
• 24/7 security monitoring – our cybersecurity team monitors the Pirate777 platform around the clock to detect and respond to any threats or suspicious activity.
• Regular penetration testing – we conduct regular security assessments, including independent penetration testing, to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe in a digital environment. You also play an important role in keeping your Pirate777 account secure – use a strong password, enable 2FA, and never share your login credentials with anyone.

6 Cookies & Tracking Technologies

Pirate777 uses cookies and similar tracking technologies to enhance the user experience, ensure proper platform functionality, and gather analytical information that helps us understand how our platform is being used.

Types of cookies we use:

• Essential cookies – required for core Pirate777 platform functions such as login authentication and session management. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Preference cookies – stores your preferences such as your chosen language (Bahasa Malaysia), display settings, and football match records you follow. This helps Pirate777 deliver a more personalised experience for you.
• Analytics cookies – collects information on how you use Pirate777 — pages visited, time spent, and actions taken. This information is used in aggregated, anonymised form for platform improvement purposes.
• Security cookies – used to detect and prevent fraudulent activity, suspicious login attempts and other security threats. These cookies are essential to keeping your account secure.

You can manage or block cookies through your browser settings, with the exception of essential and security cookies required for platform operation. Please note that blocking certain cookies may affect your Pirate777 experience. For more information on cookies and how to manage them, refer to your web browser's help documentation.

7 Your Rights as a Data Owner

As the owner of your personal data, Pirate777 recognizes and respects the following rights you hold under Malaysia's PDPA 2010:

8 Children's Data Protection

The Pirate777 platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process is designed to prevent sign-ups by those who do not meet the minimum age requirement.

If we discover that we have collected personal data from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the account in question. If you believe that Pirate777 may have collected data from someone who does not meet the minimum age requirement, please contact us immediately at support@pirate777.best.

Parents and guardians with concerns about the internet use of children or minors under their care are encouraged to use appropriate parental control software and to have open conversations about online safety.

9 Data Retention Period

Pirate777 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Retention periods vary by data type:

• Active account data – retained for as long as your account remains active on Pirate777, and for 7 years after account closure to meet financial compliance and auditing requirements
• Financial transaction records – retained for a minimum of 7 years in accordance with Malaysian tax and financial regulatory requirements
• Betting and game records – retained for 5 years for dispute resolution and compliance purposes
• Customer support correspondence – retained for 3 years from the date of the last interaction
• Security and technical logs – retained for 12 months or longer if required for ongoing security investigations
• Marketing data (with consent) – retained until you withdraw your consent or request deletion

Once the applicable retention period has expired, your personal data will be securely deleted or anonymized in a manner that makes it no longer attributable to you. The deletion process uses industry-recognized methods to ensure data cannot be recovered after removal.

10 Amendments to the Privacy Policy

Pirate777 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. When we make material changes to this Privacy Policy, we will notify you via:

• In-platform notification on Pirate777 the next time you log in
• Email to the address registered on your account
• Update the "Last Updated" date at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Continued use of the Pirate777 platform after any amendments to this Privacy Policy take effect will be considered acceptance of the updated terms.

If you do not agree with any amendments to this Privacy Policy, you have the right to close your Pirate777 account and request the deletion of your personal data, subject to the data retention requirements mandated by law as outlined in Section 9 above.

11 Contact the Pirate777 Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or how Pirate777 handles your personal data, please do not hesitate to get in touch. Our team is available 24 hours a day, 7 days a week in Bahasa Melayu.

How to reach us regarding privacy and data protection:

• Email: support@pirate777.best – use the subject line "Privacy Inquiry" to ensure your email reaches the right team
• Live Chat: Available 24/7 within the Pirate777 platform — click the chat icon at the bottom right corner of the page
• Response time: We are committed to responding to all privacy enquiries within 48 hours of receipt

For formal requests under Malaysia's PDPA 2010 – such as data access, correction or deletion requests – please submit your request in writing via email, clearly stating the right you wish to exercise and providing the identification details required to verify your identity before we process your request.