Privacy Policy – dss777

1. Introduction

dss777 ("we", "us", "our") operates the online gaming platform accessible at dss777.org and is committed to protecting the privacy and personal data of all individuals who use or interact with the Platform. This Privacy Policy sets out the basis on which personal data collected from users — whether Players who have registered an Account or visitors who have not — will be processed by dss777.

By registering an Account on dss777, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the dss777 Platform.

This Policy should be read together with the dss777 Terms & Conditions, which govern your overall use of the Platform.

2. Personal Data We Collect

dss777 collects the following categories of personal data from registered members and, where applicable, from visitors to the Platform:

2.1 Identity Data

• Full legal name as appearing on a government-issued identification document
• Date of birth (for age verification purposes)
• Nationality and country of residence
• Copies of identity documents submitted during KYC verification (e.g., MyKad, passport)

2.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential or correspondence address (where provided for KYC purposes)

2.3 Financial Data

• Payment method details (e.g., bank account numbers linked to FPX, Touch 'n Go eWallet token identifiers, Boost account references)
• Transaction history including deposit amounts, withdrawal requests, and bonus redemptions, all denominated in MYR
• Verification documents for payment methods (where applicable)

2.4 Account & Gameplay Data

• Username and encrypted password credentials
• Login timestamps and session durations
• Game history, wagering records, bet amounts, and game outcomes
• Responsible gaming preferences, including deposit limits and self-exclusion status
• Customer support interaction records

2.5 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Referring URL and navigation behaviour on the Platform
• Cookie identifiers and session tokens (see Section 9)

3. How We Collect Your Data

dss777 collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically when you access and navigate the Platform, via cookies, server logs, and similar technologies.
• Third-party sources: Identity verification results from KYC service providers; fraud screening data from risk management partners; payment confirmation data from payment processors including FPX, Touch 'n Go eWallet, and Boost.

4. Purpose and Legal Basis for Processing

dss777 processes your personal data only where a lawful basis exists. The primary purposes and corresponding lawful bases are as follows:

• Account administration and service delivery — necessary for the performance of the contract between you and dss777.
• Age and identity verification (KYC) — necessary for compliance with our legal and regulatory obligations under our international gaming licence.
• Payment processing and fraud prevention — necessary for the performance of the contract and compliance with legal obligations.
• Responsible gaming monitoring — legitimate interest in protecting Player welfare and complying with regulatory requirements.
• Marketing communications — based on your consent, which may be withdrawn at any time.
• Security and abuse prevention — legitimate interest in maintaining the integrity of the Platform and protecting other users.
• Analytics and Platform improvement — legitimate interest in improving the quality and performance of dss777's services.

5. Disclosure to Third Parties

dss777 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following circumstances:

• Service providers: Third-party processors engaged to provide KYC verification, payment processing, fraud detection, IT infrastructure, and customer support tooling. Such processors are bound by data processing agreements and may not use your data for their own independent purposes.
• Regulatory and licensing authorities: dss777 may be required to disclose certain Player data to its gaming licence regulator, financial intelligence authorities, or law enforcement agencies where compelled by applicable law or regulatory obligation.
• Game content providers: Aggregated or session-level data may be shared with certified game studios for the purpose of verifying RTP compliance and auditing game outcomes. No personally identifiable information is shared with game content providers.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of dss777's business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6. International Data Transfers

dss777 operates internationally, and your personal data may be processed in jurisdictions outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection, dss777 implements appropriate safeguards including standard contractual clauses or other mechanisms recognised under applicable data protection law to ensure that your data is afforded adequate protection.

7. Data Retention

dss777 retains your personal data for as long as your Account remains active and for a period thereafter as required by applicable laws, regulatory obligations, and legitimate business purposes. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents are retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Marketing preference records are retained until you withdraw consent and for a reasonable period thereafter to evidence compliance.
• Technical and usage data collected via cookies is retained in accordance with the cookie retention periods described in Section 9.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

8. Security Measures

dss777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the dss777 Platform
• AES-256 encryption for personal data stored at rest
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular independent penetration testing and security audits
• Multi-factor authentication for internal system access by dss777 personnel
• Automated anomaly detection and login monitoring systems

While dss777 takes reasonable steps to protect your personal data, no system is entirely immune from security threats. You are encouraged to use a strong, unique password for your dss777 Account and to enable two-factor authentication where available.

9. Cookies and Tracking Technologies

The dss777 Platform uses cookies and similar technologies to provide functionality, analyse usage, and personalise content. The principal categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication tokens, and security features. These cannot be disabled without impairing Platform functionality.
• Analytical cookies: Used to collect aggregated data about how visitors use the Platform — pages visited, session duration, and navigation paths — to help dss777 improve its services. Data collected via analytical cookies is anonymised or pseudonymised.
• Functional cookies: Store your preferences such as language settings, last-played game, and responsible gaming limit preferences so these do not need to be re-entered on each visit.
• Marketing cookies: Used, with your consent, to deliver promotional content relevant to your interests. Marketing cookies are set only where you have provided explicit consent.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the dss777 Platform.

10. Your Data Rights

Subject to applicable law, dss777 members are entitled to exercise the following rights with respect to their personal data:

• Right of access: Request a copy of the personal data dss777 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of personal data where the basis for processing no longer applies, subject to legal retention requirements.
• Right to restriction: Request that processing of your personal data be restricted in certain circumstances.
• Right to data portability: Receive a copy of personal data you have provided to dss777 in a structured, machine-readable format.
• Right to object: Object to processing of your personal data on grounds of legitimate interest or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent to any processing activity based on consent at any time, without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the dss777 support team via live chat or by emailing [email protected]. Requests will be acknowledged within 5 business days and processed within 30 days. dss777 may require identity verification before actioning a data subject request.

11. Children and Minors

The dss777 Platform is strictly for individuals aged 21 years and above. dss777 does not knowingly collect personal data from individuals under 21 years of age. If dss777 becomes aware that personal data has been collected from a person below the minimum age, the relevant Account will be immediately closed and all personal data deleted. If you believe a minor has registered on dss777, please notify us immediately via live chat or at [email protected].

12. Changes to This Privacy Policy

dss777 reserves the right to update this Privacy Policy at any time. Where changes are material, we will provide notice via email to your registered address and/or via a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by dss777, please contact us through the following channels:

• Live Chat: Available 24/7 on the dss777 Platform
• Email: [email protected]

Please do not include sensitive information such as your full password, payment card details, or complete identity document numbers in any email correspondence.