Sma777 Privacy Policy – Personal Data Protection Malaysian Members

Sma777 collects various categories of personal information when you register and use our platform. The types of information we collect depend on how you interact with sma777 and the services you use. Generally, the categories of data we collect include:

Sma777 only collects information that is necessary for clearly stated, legitimate purposes. We do not collect information beyond what platform operations require, and we do not request sensitive personal information such as health data except in responsible gaming situations that call for specific support.

Every piece of information we collect is used for a clear and legitimate purpose. sma777 uses your personal data for the following:

• Account Management: To create and manage your sma777 account, verify your identity at login, and keep your account secure from unauthorised access.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and to process withdrawal of winnings to your chosen account.
• Service Delivery: To ensure all games — from online slots, Live Casino, baccarat, Malaysia Super League football betting, badminton, e-sports, to lottery — function correctly for your account.
• Customer Support: To provide effective assistance when you reach out to the sma777 support team via live chat or email.
• Security & Fraud Prevention: To detect and prevent fraud, money laundering, and activities that violate sma777's Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns and identify members who may require responsible gaming support, as well as to enforce limits you have set yourself.
• Marketing Communications: To send you information about sma777's latest promotions, bonuses, and offers — provided you have given your consent to receive such communications.
• Legal Compliance: To fulfill applicable legal obligations in Malaysia, including reporting requirements under relevant legislation.

Sma777 does not use your personal data for purposes unrelated to platform operations or inconsistent with the purposes stated above. Any new use of your data not covered by the list above will require fresh consent from you.

Sma777 does not sell or rent members' personal data to any party for commercial purposes. However, in the course of operating the platform, there are limited situations where sma777 needs to share certain information with selected third parties:

• Payment Provider: Required transaction information is shared with licensed Malaysian payment gateway providers such as FPX, Touch 'n Go, GrabPay, DuitNow, Boost, and ShopeePay processors, solely for the purpose of processing your financial transactions.
• Game Provider: The account information required is shared with licensed game providers such as Pragmatic Play, Evolution Gaming, PG Soft, and others to grant you access to their games within the sma777 platform.
• Technical Service Providers: Cloud infrastructure providers and technical service providers that support sma777's platform operations may have limited access to data as needed to carry out their functions, subject to strict confidentiality agreements.
• Competent Authorities: sma777 will disclose required information to the relevant Malaysian authorities when mandated by law, court order, or in efforts to prevent serious financial crime.

Sma777 continuously invests in cybersecurity infrastructure to ensure members' personal data is protected to the highest standard. The technical and organisational security measures we implement include:

• Transit Encryption: All data transmitted between your device and sma777's servers is encrypted using TLS 1.3 with 256-bit SSL encryption — the same standard used by leading Malaysian banks such as Maybank and CIMB.
• Storage Encryption: Sensitive data stored in sma777's databases — including financial information and identification details — is encrypted at rest using industry-standard encryption algorithms.
• Layered Access Controls: sma777's systems use role-based access control (RBAC) to ensure each staff member can only access the data necessary for their specific role.
• 24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect and respond to any suspicious activity involving member data.
• Regular Security Assessments: sma777 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): sma777 members are encouraged to enable 2FA on their accounts as an effective additional layer of protection.

While sma777 takes all reasonable steps to protect your data, no system can guarantee 100% security in an online environment. In the unlikely event of a data breach involving your personal information, sma777 is committed to notifying you and the relevant authorities within the timeframe required by applicable Malaysian law.

Sma777 uses cookies and similar tracking technologies to improve the user experience and analyse how our platform is used. Below is an explanation of the types of cookies we use:

• Essential Cookies: Cookies required for the core functionality of the sma777 platform — including maintaining your login session and remembering your language preference. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Cookies that collect information about how you use sma777 — such as the most frequently visited pages and any error messages encountered. This information is used to improve platform performance.
• Functional Cookies: Cookies that remember your preferences — such as your favourite game type, display settings, and any login information you choose to save — to deliver a more personalised experience.
• Analytical Cookies: sma777 uses analytics tools to understand platform usage patterns in an aggregated and anonymised form for the purpose of continuous improvement.

You can manage cookie settings through your internet browser's preferences. However, disabling certain cookies may affect the functionality of the sma777 platform — particularly essential cookies required to maintain a secure login session. For the best experience on sma777, we recommend keeping essential and functional cookies enabled.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal information held by sma777. These rights include:

Sma777 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Specifically:

• Active Account Data: For as long as your sma777 account remains active, and for the period required after account closure to fulfil legal obligations and resolve any outstanding claims.
• Financial Transaction Records: Records of all deposit and withdrawal transactions are retained for a minimum of seven years in accordance with applicable Malaysian financial legislation.
• Support Communication Logs: Live chat conversation records and support emails are retained for two years for quality control and case reference purposes.
• Gaming & Betting Data: Game and betting history is retained for as long as required for compliance, dispute resolution, and responsible gaming purposes.
• Technical Data: Technical logs such as IP address records and login activity are retained for three months for security and fraud detection purposes.

Once the relevant retention period has expired, sma777 will delete or anonymise your personal data in a secure and irreversible manner. In cases where immediate deletion is not technically feasible, the data will be securely archived and no longer used for active processing until deletion can be carried out.

Sma777 takes every privacy and personal data enquiry, complaint, or request seriously. If you have any concerns about how we handle your data, or if you wish to exercise any of the rights outlined in this Privacy Policy, please contact us through the following channels:

• Live Chat: The sma777 Malay-speaking support team is accessible 24 hours a day, 7 days a week directly from the sma777 platform. This is the fastest channel for privacy enquiries that require an immediate response.
• Email: Send your privacy enquiry to support@sma777.best, including "Privacy Enquiry" or "Privacy Policy" in the email subject line for a faster resolution.

Sma777 is committed to responding to all privacy-related enquiries within a reasonable timeframe. For complex requests such as data access or data deletion, we will notify you within 7 business days regarding the status of your request and an estimated timeline for resolution.

If you believe that sma777 has failed to meet our data protection obligations after you have contacted us, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, which is the PDPA regulatory authority in Malaysia.