Privacy Policy
m777play is committed to protecting the privacy and personal data of every player on our platform. This Policy explains what data we collect, why we collect it, how we use it, and the rights available to you as a Malaysian user.
Our Privacy Principles
Six commitments that guide how we handle your personal information at m777play.
Purpose Limitation
We collect only the data we genuinely need to deliver our services. We do not harvest personal information speculatively or beyond the stated purposes in this Policy.
Security by Design
Your data is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted on a strict need-to-know basis across our teams.
No Data Selling
m777play does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your information is not a commodity on our platform.
User Control
You have the right to access, correct, restrict, and request deletion of your personal data at any time. We provide clear mechanisms to exercise these rights without unnecessary friction.
Full Transparency
This Policy tells you exactly what data we hold, who may see it, and how long we keep it. We notify users of material changes before they take effect.
Minimal Retention
We retain personal data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. Data no longer required is securely deleted or anonymised.
- 1. Introduction
- 2. Definitions
- 3. Data We Collect
- 4. How We Collect Data
- 5. Data Processing & Use
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. Cookies & Tracking
- 9. Data Retention
- 10. Data Security
- 11. Your Rights
- 12. Minors & Age Restrictions
- 13. Third-Party Services
- 14. International Transfers
- 15. Policy Amendments
- 16. Contact Us
Introduction
This Privacy Policy ("Policy") is published by m777play ("we", "us", "our", "the Operator", "the Platform") and governs the collection, processing, storage, and disclosure of personal data in connection with your use of the m777play online gaming and sports betting platform accessible at https://m777play.cam and any related interfaces (collectively, "the Platform").
m777play recognises that the privacy of our users is of fundamental importance. We are committed to handling your personal information with care, transparency, and in a manner consistent with applicable data protection standards. This Policy applies to all registered users, visitors to the Platform, and any individuals whose personal data we process in connection with the provision of our services.
By registering an account on m777play, making a deposit, or continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to request account closure.
Definitions
In this Privacy Policy, the following terms have the meanings set out below unless the context requires otherwise:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, deletion, or destruction. |
| Data Controller | m777play, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Data Processor | A third-party service provider that processes personal data on behalf of m777play, under contractual instructions and with appropriate data protection obligations. |
| Cookies | Small text files stored on your device by your web browser when you access the Platform, used to maintain session state, preferences, and analytics data. |
| KYC | Know Your Customer — the identity verification process under which we collect and verify identity documents to confirm user eligibility and comply with anti-money laundering requirements. |
| User / You | Any natural person who accesses, registers on, or uses the m777play Platform in any capacity. |
Personal Data We Collect
m777play collects personal data across several categories depending on your relationship with the Platform and the services you use. The categories of personal data we collect include the following:
Identity Data
- Full legal name as it appears on your government-issued identification;
- Date of birth (used to verify that you are 21 years of age or older);
- National Registration Identity Card (NRIC) number or passport number;
- Copies of identity documents submitted during the KYC verification process.
Contact Data
- Email address used during registration;
- Mobile phone number;
- Residential address (city, state, postcode) — relevant for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities.
Financial & Transaction Data
- Deposit and withdrawal transaction records, including amounts, timestamps, and payment methods used;
- Bank account numbers and e-wallet account references used for transactions via Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX;
- Cryptocurrency wallet addresses used for deposits or withdrawals in Bitcoin, Ethereum, or USDT TRC20;
- Wagering history, bet records, and game session data.
Technical & Usage Data
- IP address and approximate geographic location derived from IP;
- Device type, operating system, and browser version;
- Session timestamps, pages visited, and navigation patterns on the Platform;
- Login history and account activity logs.
Communications Data
- Records of communications with our customer support team via live chat;
- Email correspondence relating to account queries, disputes, or complaints;
- Feedback and survey responses where provided voluntarily.
How We Collect Personal Data
We collect personal data through the following means:
- Direct Collection: Data you provide when you register an account, complete your profile, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to surveys;
- Automated Collection: Data collected automatically when you access the Platform, including technical data gathered via cookies, session logs, and analytics tools integrated into the Platform;
- Payment Providers: Transaction confirmation data transmitted to us by payment service providers including Malaysian banking channels, e-wallet operators, and cryptocurrency payment gateways in connection with deposit and withdrawal processing;
- Identity Verification Services: Data received from third-party KYC and identity verification service providers engaged to validate the authenticity of documents submitted during the verification process;
- Fraud Prevention Services: Risk signals and device fingerprinting data received from fraud detection service providers to identify and prevent unauthorised account access and financial fraud.
Data Processing & Use
m777play processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your registered account, authenticating your identity at login, and managing account security including two-factor authentication. |
| Service Delivery | Processing your deposits and withdrawals, recording your betting activity, crediting winnings, applying bonus promotions, and delivering the full range of gaming and sports betting services available on the Platform. |
| KYC & Compliance | Verifying your identity and age (21+), complying with anti-money laundering obligations, and responding to regulatory or legal requests from competent authorities. |
| Fraud Prevention | Detecting and preventing fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions. |
| Customer Support | Responding to your queries, resolving disputes, processing complaints, and maintaining records of customer interactions to ensure consistent service quality. |
| Responsible Gambling | Monitoring account activity for indicators of problem gambling, enforcing deposit limits and self-exclusion requests, and facilitating access to responsible gambling tools and support resources. |
| Platform Improvement | Analysing aggregated, anonymised usage data to improve Platform functionality, game selection, payment method availability, and user experience. |
| Marketing Communications | Sending promotional communications, bonus notifications, and personalised offers via email or in-platform messaging, subject to your communication preferences and where you have given appropriate consent. |
Legal Basis for Processing
m777play processes your personal data on one or more of the following legal bases:
- Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you have agreed to, including account management, deposit processing, and bet settlement;
- Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money laundering checks, and responses to lawful requests from competent authorities;
- Legitimate Interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gambling monitoring, and platform improvement, where such interests are not overridden by your privacy rights;
- Consent: Processing of personal data for marketing communications and optional personalisation features, where your explicit consent has been obtained. You may withdraw consent at any time by adjusting your communication preferences within your Account settings.
Data Sharing & Disclosure
m777play does not sell your personal data to third parties. We share personal data with external parties only in the limited circumstances described below:
- Payment Service Providers: Transaction data is shared with payment processors — including Malaysian banking institutions, e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow, FPX, and cryptocurrency payment gateways — to the extent necessary to process your deposits and withdrawals;
- Identity Verification Providers: Identity document data is shared with certified KYC service providers for the purpose of verifying your identity and age;
- Fraud Prevention & Security Services: Technical and behavioural data may be shared with fraud detection service providers to identify and prevent unauthorised account access and financial crime;
- Game Software Providers: Certain game data (user identifier, session data, bet history) may be shared with licensed game studios and live casino operators whose software is integrated into the Platform, solely for the purpose of game delivery and dispute resolution;
- Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a court order, or other binding legal process;
- Professional Advisers: We may share data with our legal advisers, auditors, or insurance providers where necessary for the exercise or defence of legal claims or the proper conduct of our business.
All third parties with whom we share personal data are required to process such data in accordance with appropriate data protection standards and solely for the purposes for which it was shared. We do not authorise third-party service providers to use your personal data for their own independent purposes.
Cookies & Tracking Technologies
m777play uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access the Platform. The following categories of cookies are used:
- Essential Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your gaming session. These cookies cannot be disabled without impairing Platform functionality;
- Functional Cookies: Store your preferences such as language settings, device preferences, and notification settings to provide a more personalised experience;
- Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including pages visited, time on site, and features used. This data helps us identify areas for improvement;
- Security Cookies: Support our fraud detection and account security systems, including session integrity checks and bot detection mechanisms.
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Essential cookies cannot be turned off as they are required for the Platform to operate correctly.
Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | For the duration of the account, plus 5 years following account closure, to satisfy anti-money laundering record-keeping requirements. |
| KYC Documents | 5 years from the date of submission or account closure, whichever is later. |
| Transaction Records | 7 years from the date of the transaction, in line with standard financial record-keeping obligations. |
| Customer Support Records | 3 years from the date of the interaction, or until resolution of any associated dispute, whichever is later. |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year thereafter to maintain a record of the consent withdrawal. |
| Technical & Log Data | 90 days for routine session logs; up to 2 years for security-related logs where a potential incident has been identified. |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes.
Data Security
m777play implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
- AES-256 encryption for personal and financial data stored in our databases;
- Two-factor authentication (2FA) available to all users and required for high-value withdrawal processing;
- Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
- Regular internal and third-party security audits and penetration testing;
- Automated fraud detection and anomaly monitoring systems that flag unusual account activity for human review;
- Segregated database architecture to ensure that financial data, identity data, and gaming data are stored in logically separate systems.
Your Rights
As an individual whose personal data we process, you have the following rights in respect of your personal information. Requests to exercise these rights may be submitted to our compliance team at [email protected].
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold. You can update most profile information directly within your Account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.
Right to Data Portability
Where processing is based on your consent or a contractual necessity and is carried out by automated means, you may request receipt of your data in a structured, machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
We will respond to all verified data rights requests within 30 days of receipt. In complex cases, this may be extended by a further 30 days, in which case we will notify you of the extension and its reason.
Minors & Age Restrictions
m777play is strictly an adult entertainment platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory declaration of date of birth, and we apply KYC verification to confirm the age of all registered users.
If we determine that personal data has been collected from a person under 21 years of age, we will immediately close the associated Account, delete the personal data, and — where applicable — process a refund of any deposited funds in accordance with our underage gambling policies.
If you believe that a person under the age of 21 has registered an account on m777play, please contact us immediately at [email protected] so that we may investigate and take appropriate action.
Third-Party Services
The m777play Platform may contain integrations with third-party service providers including game studios, live casino operators, and payment processors. When you interact with these services — for example, when you play a live casino table powered by a third-party studio, or process a withdrawal via a Malaysian banking channel — certain data may be processed by those third parties under their own privacy policies.
m777play does not control the privacy practices of third-party service providers and is not responsible for their data handling beyond the contractual data processing obligations we impose on them. We encourage you to review the privacy policies of any third-party services with which you directly interact.
All third-party providers engaged by m777play are subject to a data processing agreement that prohibits them from using your personal data for any purpose other than delivering the specific service for which they were engaged.
International Data Transfers
In the course of operating the Platform and providing our services, your personal data may be transferred to and processed in jurisdictions outside Malaysia. This may occur in connection with the use of internationally-based data hosting infrastructure, third-party game providers, or technical service providers.
Where personal data is transferred internationally, m777play takes appropriate measures to ensure that such transfers are conducted in a manner that protects your privacy rights, including through the use of contractual safeguards with recipient entities. We do not transfer personal data to jurisdictions that we consider to offer inadequate levels of data protection without putting appropriate protective measures in place.
Policy Amendments
m777play reserves the right to update or revise this Privacy Policy at any time. We will notify registered users of material changes by sending a notification to the email address on file and/or by posting a prominent notice on the Platform at least 14 days prior to the revised Policy taking effect, except where immediate amendment is required by law or regulation.
The "Last Updated" date at the top of this page reflects when the most recent revision was made. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically so you remain informed of how we protect your personal data.
Where a proposed amendment materially affects how we process personal data for which you previously provided consent, we will seek fresh consent from you before the change takes effect.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by m777play, please contact us through the following channels. Our team includes data-aware professionals who are familiar with the privacy expectations of Malaysian users.
When submitting a data rights request by email, please include your registered account username, the email address associated with your account, and a clear description of the request. We may ask you to verify your identity before processing the request to protect your personal data from unauthorised access.
Your Privacy, Our Priority
Play with Confidence at m777play
Your data is protected, your identity is secure, and your rights are respected. Join over 250,000 Malaysian players who trust m777play. For adults aged 21 and above only.