Privacy Policy — How Catur777 Handles Your Personal Data

1 Introduction

Catur777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and security of the personal information of all users who access or register on the Catur777 online gaming platform, available at catur777.cam.

This Privacy Policy ("Policy") describes how Catur777 collects, uses, stores, discloses, and protects personal data in connection with the operation of its online casino, sports betting, live dealer, and related gaming services targeting users in Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions across the country.

This Policy is to be read in conjunction with our Terms & Conditions, which govern the overall use of the Catur777 Platform. By registering an account or using any service on Catur777, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Definitions

3 Data Controller

Catur777 is the Data Controller responsible for the personal data of all registered users and visitors to the Platform. As Data Controller, Catur777 determines the purposes for which personal data is collected and the manner in which it is processed.

All data protection queries, rights requests, and concerns should be directed to our designated data protection contact. Contact details are provided in Section 15 of this Policy.

Catur777 operates under the data protection framework applicable in its licensing jurisdiction. Where Malaysian users are concerned, Catur777 is committed to adhering to standards consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia in terms of how personal data is collected, used, and disclosed.

4 Data We Collect

Catur777 collects personal data in the following categories, depending on the nature of your interaction with the Platform:

4.1 Registration Data

When you create an account, we collect:

• Full legal name
• Date of birth (for age verification purposes — must confirm 21 or above)
• Residential address (including city, state, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password

4.2 Identity Verification (KYC) Data

For compliance with Anti-Money Laundering (AML) obligations and to process withdrawal requests, we may request:

• Copy of Malaysian National Identity Card (MyKad) or valid passport
• Proof of residential address (utility bill or bank statement, dated within 3 months)
• Proof of payment method ownership (e-wallet screenshot or bank statement)
• Source of funds documentation where required by regulatory risk assessment

4.3 Transaction & Financial Data

• Deposit and withdrawal history
• Payment method details (e-wallet identifiers, bank account reference — not full card numbers)
• Transaction amounts and timestamps
• Currency information (Malaysian Ringgit / MYR by default)

4.4 Gameplay & Betting Data

• Games played, bets placed, wagers, outcomes, and winnings
• Sports betting market selections (e.g., Liga Super Malaysia, EPL, UFC)
• Session duration and frequency of play
• Responsible gambling tool settings and activity

4.5 Technical & Device Data

• IP address and approximate geolocation (country/region level)
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access logs and error reports

4.6 Communications Data

• Live chat transcripts and email correspondence with Catur777 support
• Feedback, complaints, and dispute records
• Marketing communication preferences and opt-in/opt-out history

5 Purposes of Processing

Catur777 processes your personal data for the following clearly defined purposes:

6 Legal Basis for Processing

Catur777 processes personal data on the following legal grounds:

• Contract Performance: Processing is necessary to fulfil the contractual obligations set out in our Terms & Conditions, including operating your Account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable laws including anti-money laundering regulations, age verification obligations, and licensing requirements.
• Legitimate Interest: Processing is necessary for Catur777's legitimate business interests including fraud prevention, security monitoring, platform improvement, and responsible gambling oversight, where these interests do not override your fundamental rights.
• Consent: Where processing is based on your consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

Catur777 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared only in the following limited and controlled circumstances:

7.1 Payment Processing Partners

We share necessary transaction data with verified payment processing partners to facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and other integrated payment channels. These partners are bound by their own data protection obligations and are contractually prohibited from using your data for any purpose other than transaction processing.

7.2 Identity Verification Providers

KYC (Know Your Customer) verification may be carried out with the assistance of third-party identity verification services. These providers process identification documents and verify their authenticity under strict data handling agreements with Catur777.

7.3 Regulatory and Law Enforcement Authorities

Catur777 may be required to disclose personal data to regulatory authorities, licensing bodies, or law enforcement agencies where compelled to do so by applicable law, court order, or regulatory instruction. Such disclosures will be limited to the minimum data necessary to satisfy the legal requirement.

7.4 Platform Infrastructure Providers

Cloud hosting, data storage, and security infrastructure providers may have access to personal data as part of operating the technical environment of the Catur777 Platform. All such providers operate under data processing agreements and are required to implement appropriate security measures.

8 Data Retention

Catur777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual.

9 Security Measures

Catur777 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and Catur777 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data stored in Catur777 databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to Catur777 employees and contractors who require it to fulfil their job functions. Role-based access controls are enforced throughout the organisation.
• Security Audits: The Catur777 Platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights, Catur777 will notify affected users and relevant authorities within the timeframes required by applicable law.
• Employee Training: All Catur777 personnel with access to personal data receive data protection and security awareness training.

While Catur777 takes all reasonable steps to protect your data, no online transmission or storage system is completely secure. You are also responsible for keeping your Account credentials confidential and using strong, unique passwords.

10 Cookies & Tracking Technologies

Catur777 uses cookies and similar tracking technologies to operate the Platform and improve your user experience. The following types of cookies may be placed on your device:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and saved login state to provide a consistent experience across visits.
• Analytical Cookies: Used to understand how users navigate the Platform — which pages are most visited, where users encounter errors, and how long sessions last. Data collected is aggregated and anonymised.
• Responsible Gambling Cookies: Store your responsible gambling tool settings (session limits, deposit limits, reality check intervals) so they persist across sessions.

You can manage cookie preferences through your browser settings. However, disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. Catur777 does not use advertising or cross-site tracking cookies.

11 Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by Catur777. To exercise any of these rights, contact us as described in Section 15. We will respond within 30 days of receiving your request.

12 Minors & Age Verification

Catur777 strictly prohibits the registration or use of its Platform by individuals under the age of 21. This is a fundamental requirement of our operating standards and is actively enforced.

If Catur777 discovers or has reasonable grounds to believe that a registered user is under 21 years of age, the Account will be immediately suspended, all gameplay activity will be reviewed, and any real-money balance will be handled in accordance with applicable regulatory guidance, which may include forfeiture.

Age verification is conducted as part of the KYC process and may be triggered at any point during the user's relationship with the Platform. Catur777 processes age-related personal data solely for the purpose of verifying eligibility and does not retain identity documents beyond what is required by applicable law.

If you are a parent or guardian and believe a person under 21 has accessed the Catur777 Platform, please contact us immediately at [email protected].

13 Cross-Border Data Transfers

As an internationally operated platform, Catur777 may transfer personal data to servers or processors located outside of Malaysia. Where such transfers occur, Catur777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian data protection law and our own Policy commitments.

Safeguards applied to cross-border transfers include:

• Contractual data protection clauses incorporated into all Data Processing Agreements with third-party processors in other jurisdictions
• Transfer only to jurisdictions with adequate data protection frameworks, or to processors with independently certified security standards
• Regular review of transfer mechanisms and processor compliance as part of Catur777's ongoing data governance programme

14 Policy Amendments

Catur777 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that substantively affect how we collect, use, or share your personal data — will be communicated to registered users via email notification and a prominent notice on the Platform at least 14 days before the changes come into effect.

Non-material updates (such as clarifications of existing language, corrections of typographical errors, or formatting changes) may be made without advance notice. The date of the most recent revision is always displayed at the top of this Policy.

Your continued use of the Catur777 Platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the changes, you should discontinue use of the Platform and may request Account closure.

15 Contact Us

For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact Catur777 through the following channels:

• Email (Data Protection Enquiries): [email protected] — please include "Privacy Policy" or "Data Subject Request" in your subject line for faster routing.
• Live Chat: Available 24/7 on all pages of the Catur777 Platform. State that you are raising a data protection matter when starting the conversation.
• Response Time: Data subject rights requests will be acknowledged within 5 business days and fully responded to within 30 calendar days. Complex requests may require up to an additional 30 days, for which you will be notified.