Privacy Policy — THR777

This Privacy Policy ("Policy") describes how THR777 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the THR777 website and associated services accessible at thr777.click ("the Platform").

This Policy applies to all users of the THR777 platform, including registered players, visitors who browse the site without registering, and any individual who contacts us through our support channels. By accessing or using the THR777 platform, you confirm that you have read and understood this Privacy Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. In the event of any inconsistency between this Policy and those documents, this Policy shall prevail with respect to the processing of personal data.

For the purposes of applicable data protection legislation, THR777 acts as the data controller in respect of the personal data collected and processed through the platform. This means THR777 determines the purposes for which, and the manner in which, your personal data is processed.

Where THR777 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or customer support platforms — those parties act as data processors and are bound by written data processing agreements that require them to implement appropriate technical and organisational security measures.

THR777 collects the following categories of personal data, depending on how you interact with the platform:

THR777 collects personal data through the following means:

• When you complete the registration form to create an account on the THR777 platform.
• When you submit identity documents for KYC verification.
• When you make a deposit or withdrawal using any supported Malaysian payment method.
• When you contact our customer support team via live chat or email.
• When you respond to surveys, complete preference settings, or update your account profile.

• When you visit the THR777 website, our servers automatically record technical data including your IP address, browser type, and pages visited. This data is collected via server logs and cookies.
• When you engage with games or the sportsbook, game interaction data including wagers placed, game outcomes, and session duration is recorded automatically.

• From identity verification service providers during KYC processing.
• From payment processors when confirming transaction status for deposits and withdrawals via Maybank2u, CIMB Clicks, DuitNow, FPX, or e-wallet providers.
• From fraud prevention and anti-money laundering (AML) screening services as required by applicable compliance obligations.

THR777 processes your personal data for the following purposes, each of which is supported by a defined legal basis:

• Account Registration and Management — To create and maintain your player account. Legal basis: performance of a contract.
• Identity Verification (KYC) — To verify your identity and age prior to processing withdrawals, in accordance with applicable anti-money laundering requirements. Legal basis: legal obligation.
• Payment Processing — To process deposits and withdrawals in MYR via supported Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers. Legal basis: performance of a contract.
• Game and Sports Betting Services — To provide access to casino games, live dealer tables, sports betting markets (including Liga Super Malaysia and EPL), and related platform features. Legal basis: performance of a contract.
• Customer Support — To respond to your enquiries, resolve disputes, and provide account assistance. Legal basis: legitimate interest / performance of a contract.
• Fraud Prevention and Security — To detect and prevent fraud, money laundering, and platform abuse. Legal basis: legal obligation and legitimate interest.
• Responsible Gambling Compliance — To monitor gaming activity for indicators of problem gambling and administer self-exclusion, deposit limit, and session reminder tools. Legal basis: legal obligation and legitimate interest.
• Platform Improvement — To analyse usage patterns and improve the performance, security, and features of the THR777 platform. Legal basis: legitimate interest.
• Legal and Regulatory Compliance — To comply with applicable laws, regulations, court orders, or requests from competent authorities. Legal basis: legal obligation.

THR777 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

We share financial data with payment processors necessary to facilitate your deposits and withdrawals. These include Malaysian payment infrastructure providers such as those supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major banking institutions including Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB. All payment data is transmitted via encrypted channels.

To fulfil our KYC obligations, we may share identity data (name, date of birth, MyKad details) with authorised identity verification service providers. These providers process data solely for verification purposes and are bound by strict confidentiality obligations.

THR777 utilises third-party technology providers for server hosting, game delivery, and platform infrastructure. These providers act as data processors under written agreements and may process limited technical data in the course of providing their services.

We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or to protect the rights, property, or safety of THR777 or its players.

In the event of a merger, acquisition, or sale of all or a material part of THR777's assets, player data may be transferred to the acquiring entity, provided that the acquiring entity agrees to process that data in accordance with this Privacy Policy or provides equivalent protections.

Some of THR777's technology and service providers are located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, THR777 implements appropriate safeguards — such as standard contractual clauses or data processing agreements — to ensure that your personal data continues to receive an adequate level of protection regardless of where it is processed.

By using the THR777 platform, you acknowledge that your data may be processed in countries outside Malaysia in connection with the delivery of platform services.

THR777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, in accordance with applicable AML legislation.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by financial record-keeping obligations.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of the activity.
• Support Communications: Retained for two (2) years following the closure of each support interaction, unless the content relates to a dispute that remains unresolved.
• Technical and Cookie Data: Session data is deleted at session end; persistent cookie data is retained for up to thirteen (13) months.

After the applicable retention period expires, personal data will be securely deleted or anonymised. Where anonymisation is not technically feasible, data will be stored in a form that prevents re-identification.

As a player on the THR777 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Support team at [email protected].

THR777 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it. We reserve the right to verify your identity before processing any data rights request.

THR777 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device that help us recognise you across sessions, remember your preferences, and analyse how the platform is used.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and load-balancing cookies. They cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings and game display options to personalise your experience on THR777.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the platform. This helps us identify performance issues and improve user experience.
• Security Cookies: Used to detect and prevent fraudulent logins, unauthorised account access, and bot activity.

You may adjust your browser settings to refuse all cookies or to receive a notification when a cookie is set. Please note that disabling strictly necessary cookies may prevent you from logging into your THR777 account or accessing certain platform features. Instructions for managing cookies are available in the help section of your browser.

THR777 implements a multi-layered security infrastructure to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and THR777 servers.
• Encrypted storage of sensitive data at rest, including identity documents and payment method identifiers.
• Two-factor authentication (2FA) available to all registered players to protect account access.
• Role-based access controls ensuring that only authorised personnel can access specific categories of player data.
• Regular security audits, penetration testing, and vulnerability assessments of platform infrastructure.
• A dedicated incident response procedure to investigate and contain any potential data security events.

While THR777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact our support team immediately.

The THR777 platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal data from persons under the age of 21.

Age verification is conducted as part of the KYC process prior to the first withdrawal. Where THR777 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated balances forfeited, and the collected data deleted in accordance with applicable legal requirements.

If you believe that a minor has registered an account on the THR777 platform, please contact us immediately at [email protected].

THR777 may update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or platform features. The "Last Revised" date at the top of this Policy will be updated accordingly whenever a material change is made.

Where changes are material — meaning they meaningfully affect your rights or how your data is processed — we will notify registered players by email to the address on file at least fourteen (14) days prior to the change taking effect. For non-material changes, continued use of the THR777 platform following the updated Policy's publication constitutes acceptance of the revised terms.

We encourage you to review this Policy periodically to remain informed about how THR777 protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how your personal data has been handled, please contact our support team using the details below. Please mark your enquiry clearly as a "Data Privacy Request" to ensure it is directed to the appropriate team.

THR777 serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. Our team is available at all times to assist with privacy-related queries in English.