Privacy Policy KM777 – Our Commitment to Protecting Member Personal Data

1Introduction

KM777 ("we", "the platform", or "km777") takes the protection of your personal data very seriously. We understand that your trust is our most valuable asset, and that trust begins with how we handle the information you entrust to us.

This Privacy Policy covers all km777 services, including the website at km777.ceo, the Android and iOS mobile apps, and all related communication channels. It applies to all registered members, website visitors, and anyone who interacts with the km777 platform in any capacity.

We encourage you to read this policy in full. If any section is unclear or you would like further clarification, the km777 support team is available 24 hours a day via live chat within the platform.

2Personal Data We Collect

Km777 collects personal data through several methods depending on how you interact with our platform.

2.1 Data You Provide Directly

This data is collected when you register, complete your profile, or contact us:

• Full name (as shown on identity card or passport).
• Date of birth and gender.
• Active email address.
• Malaysian mobile phone number.
• Bank account details (bank name, account number) for payment processing purposes.
• Identity verification documents (copy of national ID or passport) for the KYC process.
• Residential address (if required for advanced KYC).

2.2 Data Collected Automatically

While you use the km777 platform, our systems automatically record:

• IP address and device type used.
• Web browser type and operating system.
• Pages visited and time spent on each page.
• In-platform game and transaction history.
• Login and logout timestamps.
• City-level geolocation data (not precise coordinates) for security verification.

2.3 Data Types and Purposes Table

3How We Use Your Personal Data

KM777 only uses your personal data for the purposes stated at the time of collection or those reasonably related to such purposes. We will not use your data for any other purpose without first obtaining your consent.

3.1 Platform Operations Purpose

• Processing account registration and identity verification (KYC).
• Processing deposits and withdrawals securely.
• Managing the VIP programme, bonuses, and promotions.
• Providing effective customer support.
• Sending transaction and account security notifications.

3.2 Security & Compliance Purpose

• Detecting and preventing fraud, money laundering, and suspicious activity.
• Complying with applicable legal and regulatory requirements.
• Verifying that the platform is not accessed by underage individuals.
• Monitoring activity for responsible gambling purposes.

3.3 Service Improvement Purpose

• Analysing platform usage patterns to improve the user experience.
• Sending relevant promotional communications (to consenting members only).
• Conducting customer satisfaction surveys (participation is voluntary).

4Legal Basis for Data Processing

KM777 processes your personal data on one or more of the following legal bases:

• Contractual Agreement: Processing is required to fulfill the service agreement between you and km777 (Terms and Conditions).
• Legal Obligation: Processing is required to comply with legal obligations such as AML and KYC regulations.
• Legitimate Interest: Processing for security purposes, fraud prevention, and service improvement.
• Consent: For marketing communications and non-essential cookies, we request your explicit consent.

5Data Sharing with Third Parties

Km777 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, in operating the platform, we work with a number of trusted third parties.

5.1 Trusted Service Providers

We share necessary data with the following parties, subject to strict data protection agreements:

• Payment Gateway: Transaction data is shared with licensed payment processors to handle your deposits and withdrawals.
• KYC Service Providers: Identity information is shared with approved KYC verification platforms.
• Game Providers: Usernames and session IDs are shared with integrated game providers for technical purposes.
• Cloud Services: Data is stored in cloud data centres compliant with ISO 27001 standards.

5.2 Disclosure to Authorities

KM777 will disclose personal data to the relevant authorities when required by law, court order, or a legitimate request from an investigating authority. We will notify members of such disclosure unless prohibited from doing so by law.

6Cookies & Tracking Technologies

The km777 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytics that help us improve our services.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login and session security. Cannot be disabled.
• Preference Cookies: Saving user preferences such as language and display settings. Can be disabled.
• Analytics Cookies: Collecting anonymised usage data to help us understand how the platform is used. Can be disabled.
• Session Cookies: Automatically deleted when you close your web browser.

You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect platform functionality. Cookie settings can be changed at any time via your km777 account settings page.

7Data Storage & Deletion Period

Km777 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.

7.1 Data Retention Period

• Active account data: For the duration your account is active plus 5 years after closure (AML requirement).
• Transaction records: 7 years from the transaction date (financial regulatory requirement).
• KYC documents: 5 years after the business relationship ends.
• Security logs: retained for 12 months for security investigation purposes.
• Analytics cookie data: Maximum 24 months.

Once the retention period ends, data is securely deleted using industry-recognised deletion methods. Deleted data cannot be recovered by anyone.

8Data Security

KM777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

8.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data in transit.
• AES-256 encryption for sensitive data stored in the database.
• Two-factor authentication (2FA) for account access and internal systems.
• Intrusion detection (IDS) and prevention (IPS) systems active 24/7.
• Regular vulnerability scanning and penetration testing.
• Encrypted data backups across multiple locations.

8.2 Organisational Security Measures

• Minimum access principle — staff may only access data necessary for their specific role.
• Regular privacy and security awareness training for all staff.
• Binding non-disclosure agreements (NDA) for all staff and contractors.
• Internal and external security audits conducted annually.

9Your Rights as a Data Subject

As a km777 member and data subject, you have the following rights regarding your personal data. All requests will be processed within 30 calendar days.

To exercise any of the above rights, contact the km777 support team via in-platform live chat or email [email protected] with the subject line "Data Rights Request". We may require identity verification before processing your request.

10Children & Privacy

The km777 platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from an underage individual, we will promptly delete that data and close the associated account.

If you believe a person under 18 has registered or used the km777 platform, please contact us immediately so that action can be taken without delay.

11Privacy Policy Amendments

KM777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legislation, or technology. The most recent update date is always displayed at the top of this page.

For material changes, we will notify members via their registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

12Contact Us

If you have any questions, concerns, or complaints about how we handle your personal data, please reach out to us through the following channels:

• Live Chat: Available 24/7 within the km777 platform — the fastest way to get a response.
• Email: [email protected] (for specific privacy inquiries, response within 48 hours).
• FAQ: Visit page FAQ for answers to the most frequently asked questions.

We are committed to resolving every privacy concern thoroughly and fairly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.