Kl777 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

1 Privacy Policy Introduction & Scope

Kl777 ("Platform", "we") is a licensed online casino and betting platform offering gaming entertainment services to members in Malaysia. We take the privacy of our members seriously and are committed to protecting the personal information you share with us.

This Privacy Policy ("Policy") describes the types of information we collect, the purposes for which it is collected, how we use and protect that information, who may receive it, how long we retain it, and the rights you hold in relation to your personal data. This Policy applies to all information collected through the kl777 platform at kl777.best, including through account registration, financial transactions, use of games, and interactions with our support team.

This Privacy Policy should be read together with kl777's Terms & Conditions, which form part of the overall agreement between you and this platform. If you disagree with any aspect of this Privacy Policy, please stop using the kl777 platform and contact us to close your account if applicable.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, make a deposit, or interact with the kl777 platform, you provide us with the following information:

• Identity Information: Full name, identity card number (MyKad), date of birth and gender.
• Contact Information: Malaysian phone number, email address and residential address.
• Financial Information: Bank account number, bank name, digital wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), and deposit and withdrawal transaction records.
• Login Information: Username and encrypted password (kl777 does not store passwords in plain text).
• Verification Documents: Copies of your identity card, bank statements, utility bills or other documents requested during the KYC (Know Your Customer) process.

2.2 Automatically Collected Data

When you use the kl777 platform, our systems automatically record the following technical information:

• IP address and IP-based location data (country/region, not precise GPS coordinates).
• Device type, operating system, browser version, and screen resolution.
• Session log data — login time, logout time, session duration and in-platform activity.
• Detailed game records — game type, bet amounts, outcomes and in-platform credit transaction history.
• Cookie data and similar tracking technologies (see Section 10 for more information).

3 How kl777 Uses Your Personal Data

Kl777 uses collected personal data solely for legitimate and necessary purposes. Below is a full list of how your data is used:

Kl777 will not use your personal data for any other purpose without first obtaining your consent. Should we wish to use your data for a new purpose not covered by this Policy, we will notify you and obtain your consent before doing so.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), kl777 processes your personal data on the following legal bases:

• Contract Performance: Processing required to provide kl777's services to you — including account management, payment processing, and the provision of games.
• Legal Obligations: Processing required to comply with Malaysian law, including KYC requirements, anti-money laundering (AML) obligations, and reporting to the relevant authorities.
• Legitimate Interests: Processing for the purposes of platform security, fraud prevention, operational analytics and service improvement — provided these interests do not override your privacy rights.
• Consent: For marketing communications and the use of data for optional purposes such as personalized game recommendations, we will only do so based on your explicit consent, which you may withdraw at any time.

5 Personal Data Sharing

Kl777 does not sell, rent, or trade our members' personal data to third parties for their marketing purposes. However, in the course of operating the platform, we may need to share your personal data in the following limited circumstances:

5.1 Trusted Service Providers

Kl777 works with third-party service providers who assist us in operating this platform, including:

• Payment Gateway Providers: To process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX. These providers receive only the minimum data required to complete a transaction.
• Game Providers: Platforms such as Pragmatic Play, Evolution Gaming and Spadegaming may receive a member's unique identifier (not their full name or financial information) to enable access to games.
• Identity Verification Services: Third-party KYC providers who assist us in verifying member identities in accordance with legal requirements.
• Technology Infrastructure: Cloud and hosting service providers that store kl777 platform data to strict security standards.

All service providers we engage are bound by data processing agreements that require them to handle your data to security and confidentiality standards equivalent to those of kl777.

5.2 Legal Authorities

Kl777 may be required to disclose members' personal data to Malaysian or international authorities when mandated by law, a valid court order, or as part of an official investigation related to financial crime prevention or anti-money laundering. In all such cases, kl777 will disclose only the minimum data necessary and will notify you where permitted by law to do so.

6 International Data Transfers

Some service providers used by kl777 may operate from locations outside Malaysia. In such cases, your personal data may be transferred internationally. kl777 ensures that any international data transfer takes place only to countries or organisations that offer a level of data protection equivalent to or greater than that required under Malaysia's PDPA.

The safeguards we apply to international data transfers include standard data transfer agreements, periodic security assessments of data recipients, and restriction of data use to specified purposes only. You have the right to find out more about the protection mechanisms applied to any international data transfer involving your account — contact us at the email address provided in Section 14.

7 Data Security at kl777

Protecting your personal data is a core technical priority at kl777. We implement multiple layers of security to safeguard your information against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All communications between your device and kl777's servers are secured by TLS 1.3 protocol with 256-bit SSL encryption.
• Encryption at Rest: Sensitive data such as financial information and identification documents is stored in encrypted form within our databases.
• Layered Access Controls: A role-based access control (RBAC) system ensures that kl777 staff can only access data relevant to their job responsibilities. All access is logged automatically.
• Two-Factor Authentication: kl777's internal administration system is secured with mandatory two-factor authentication for all staff.
• 24/7 Security Monitoring: A real-time threat detection system monitors the kl777 platform around the clock for suspicious activity.
• Regular Security Audits: kl777 undergoes regular independent security audits and penetration testing to identify and address vulnerabilities.
• Staff Training: All kl777 staff who handle personal data receive regular training in data protection and information security.

While kl777 takes all reasonable steps to protect your data, no security system is completely impenetrable. Should a security incident occur that affects your personal data, kl777 will notify you in accordance with the data breach notification procedures required by law.

8 Data Retention Period

Kl777 retains your personal data for as long as necessary for the purpose it was collected, or as required by Malaysian law. General data retention guidelines are as follows:

• Active Account Data: Retained for the duration your kl777 account is active, plus 7 years after account closure, to meet audit and legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial records and AML compliance.
• KYC Documents: Retained for 5 years from the date of verification or the date of account closure, whichever is later.
• Security Logs: Retained for 2 years for fraud detection and security incident investigation purposes.
• Support Communication Data: Live chat session records and support emails are retained for 3 years.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications from kl777.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you.

9 Your Privacy Rights as a kl777 Member

As a kl777 member whose data is processed by us, you hold the following privacy rights, which you may exercise at any time:

To exercise any of the privacy rights listed above, please contact kl777's Privacy Officer by email at support@kl777.best by stating the right you wish to exercise and providing the information needed to verify your identity. kl777 will process your request within 30 business days.

10 Cookies & Tracking Technologies

Kl777 uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better user experience. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session security, and basic account preferences. These cookies cannot be disabled.
• Functional Cookies: Stores your preferences such as language, display settings, and game preferences to make the platform easier to use in future sessions.
• Analytics Cookies: Collects platform usage data anonymously to help us understand how members use kl777 and identify areas for improvement. This data cannot be linked to your personal identity.
• Security Cookies: Assists kl777's security systems in detecting and preventing suspicious activity or unauthorized access attempts.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the kl777 platform. For more information on managing cookies across different browsers, please refer to your browser's help documentation. kl777 respects the "Do Not Track" settings configured in your browser where applicable.

11 Children's Privacy

The kl777 platform is strictly for individuals aged 18 and above. kl777 does not knowingly collect or process personal data from anyone under the age of 18. If we discover that a child's data has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

If you believe that someone under the age of 18 has registered an account on kl777, please contact us immediately at support@kl777.best so we can take the appropriate action.

12 Links to Third-Party Platforms

The kl777 platform may contain links to or integrations with third-party services such as game providers or payment gateways. kl777's Privacy Policy applies solely to the kl777 platform itself and not to any such third-party platforms or services. kl777 is not responsible for the privacy practices or content of any third-party platform.

We encourage you to read the Privacy Policy of any third-party platform you visit or use, particularly before providing them with any personal information. The presence of links to third-party platforms on kl777 does not imply that we endorse or verify their privacy practices.

13 Amendments to the Privacy Policy

Kl777 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material amendments to this Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a prominent notice on the kl777 platform's homepage regarding the said amendments.
• Sending an email notification to the address registered with your kl777 account for any material amendments that significantly affect your privacy rights.

Your continued use of the kl777 platform after the effective date of any Privacy Policy amendment constitutes acceptance of the revised policy. If you do not agree with the changes, you have the right to discontinue use of the platform and close your account. The latest version of kl777's Privacy Policy is always available on this page.

14 Contact Us — Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact kl777's Privacy Officer through the following channels:

• Email: support@kl777.best (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 on the kl777 platform — click the chat icon at the bottom right corner of your screen
• Response Time: General privacy enquiries are typically answered within 3 business days; data rights requests within 30 business days.

Kl777's privacy team is able to communicate in Bahasa Malaysia and is ready to help you understand your privacy rights and process any requests you make regarding your personal data. We take your privacy seriously and are committed to resolving every query transparently and in a timely manner.