Privacy Policy

This Privacy Policy (hereinafter "Policy") issued by Kawi777 (hereinafter "the Platform", "we", "us", or "our") and applies to all personal data collected, processed, stored, and transmitted in connection with your use of the online gaming and sports betting services available at https://kawi777.cam (hereinafter "the Website" or "the Platform").

Kawi777 operates as a Malaysia-focused online gaming platform offering live casino, slot games, sports betting, and related entertainment services to eligible players. In the course of providing these services, the Platform necessarily processes certain categories of personal data about registered players and website visitors.

This Policy sets out, in clear and transparent terms, the categories of personal data we collect, the purposes for which we process such data, the legal bases upon which we rely, the third parties with whom data may be shared, the retention periods applicable, and the rights available to you as a data subject.

By registering an Account on the Platform or by continuing to use the Website, you acknowledge that you have read, understood, and accept the data practices described in this Policy. This Policy should be read together with our Terms & Conditions, which govern your contractual relationship with the Platform.

For the purposes of this Policy, the following terms shall have the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, device identifiers, and online activity data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means Kawi777, being the entity that determines the purposes and means of the Processing of Personal Data.
• "Data Subject" means the individual to whom Personal Data relates — in this context, primarily registered Players and Website visitors.
• "KYC Data" means identity verification documentation submitted by Players in connection with know-your-customer compliance obligations, including government-issued identification and proof of address.
• "Cookies" means small text files placed on a user's device by the Website for the purposes of functionality, analytics, and personalisation.
• "Third Party" means any natural or legal person other than the Data Subject and the Data Controller who is involved in the processing of Personal Data in connection with the Platform's services.

The Platform collects the following categories of Personal Data, depending on the nature of your interaction with the Website:

The Platform collects Personal Data through the following means:

• Direct Collection: Information you provide voluntarily when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or updating your Account profile. This includes all forms completed on the Website and documents uploaded for identity verification.
• Automated Technical Collection: Data collected automatically through cookies, server logs, and similar tracking technologies when you access or interact with the Website. This includes your IP address, session data, browser fingerprint, and navigation patterns.
• Payment Processors: When you make a deposit or withdrawal via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks, our payment processor partners may share transactional reference data with us to facilitate and confirm the transaction.
• Third-Party Verification Services: Where required for KYC or anti-fraud compliance, we may engage third-party identity verification providers to cross-reference the information you submit against external databases.
• Game Providers: Our licensed international game studio partners may provide aggregated or session-level gaming data to the Platform for the purposes of account management, dispute resolution, and responsible gambling monitoring.

The Platform processes Personal Data only where a valid legal basis exists. The following table sets out the primary purposes of processing and the corresponding legal basis applied:

Where the Platform relies on consent as a legal basis — particularly for marketing communications — you may withdraw that consent at any time by updating your communication preferences in your Account settings or by contacting our support team.

Kawi777 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. Personal Data is disclosed to third parties only in the following limited circumstances:

• Payment Service Providers: We share transactional data with payment processors necessary to facilitate your deposit and withdrawal transactions. This includes e-wallet operators, banking partners supporting FPX and DuitNow, and cryptocurrency network service providers. These parties process data only as necessary to complete transactions.
• KYC and Identity Verification Partners: Third-party identity verification service providers may process your KYC documents and identity data on our behalf for the purpose of meeting know-your-customer compliance obligations.
• Game Technology Partners: Our licensed game studio and technology partners may access limited gaming-session data as necessary to deliver games, resolve technical disputes, and maintain fair play standards.
• Regulatory and Legal Authorities: We may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts when required to do so by law, court order, or binding regulatory direction. We will notify you of such disclosure to the extent permitted by law.
• Anti-Fraud and AML/CTF Service Providers: We may share data with specialist compliance screening providers for the purpose of preventing financial crime and meeting international AML/CTF obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, Personal Data may be transferred to a successor entity, subject to that entity assuming equivalent data protection commitments.

As an internationally operating platform, Kawi777 may transfer Personal Data to, and process it in, countries outside Malaysia. Such transfers may occur where our technology infrastructure, third-party processors, or game partners are located in other jurisdictions.

Where Personal Data is transferred internationally, the Platform takes steps to ensure that appropriate safeguards are in place, including contractual clauses that require receiving parties to protect Personal Data to a standard equivalent to that applied on the Platform.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the processing purposes described in this Policy.

The Platform retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, taking into account applicable legal, regulatory, and operational retention requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, to meet AML/CTF record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with international anti-money laundering best practice standards.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations.
• Gaming and Betting History: Retained for the duration of the Account relationship and for up to three (3) years following Account closure, for dispute resolution and responsible gambling monitoring purposes.
• Support Communications: Retained for up to three (3) years from the date of the communication, for dispute resolution and quality assurance.
• Marketing Preferences and Consent Records: Retained for the duration of the Account relationship and for up to two (2) years following Account closure or withdrawal of consent, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with the Platform's data disposal procedures.

The Platform uses cookies and similar tracking technologies to operate the Website, improve user experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Website, including session management, login authentication, and security functions. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your preferred language, currency display settings, and game lobby preferences.
• Analytics Cookies: Collect anonymised information about how visitors use the Website — including which pages are visited most, where users navigate from, and how long sessions last. This data is used to improve Platform performance and user experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing core Platform features. For mobile users accessing the Platform via a mobile browser, cookie settings are managed through the browser application's privacy controls.

Kawi777 implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, and disclosure. Current security measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including financial data and KYC documents) at rest;
• Access controls limiting Personal Data access to authorised personnel only, on a need-to-know basis;
• Regular third-party security assessments and penetration testing;
• Two-factor authentication available for all Player Accounts;
• Secure, access-controlled data centre infrastructure;
• Staff data protection training and confidentiality obligations.

Whilst the Platform takes all reasonable steps to protect your Personal Data, no system of data transmission or storage is entirely immune from risk. You are responsible for maintaining the security of your Account credentials and for notifying us immediately if you suspect any unauthorised access to your Account.

Subject to applicable law and the Platform's legitimate operational and legal obligations, you have the following rights in relation to your Personal Data. You may exercise any of these rights by contacting our support team as set out in Section 15.

The Platform is strictly for use by individuals aged twenty-one (21) years and above. Kawi777 does not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. All Account registrations require age verification as part of the KYC process.

If the Platform becomes aware that Personal Data has been collected from an individual under 21 years of age, such data will be deleted promptly and the associated Account will be suspended. If you believe a minor has registered an Account on the Platform, please notify our support team immediately via live chat or at [email protected].

Parents and guardians are encouraged to make use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. Further guidance is available on our Responsible Gambling page.

The Platform does not contain links to third-party websites as general matter of policy. Where any reference to a third-party service provider (such as a payment method or support resource) is made on the Platform, such references are informational only. Kawi777 is not responsible for the privacy practices or content of any third-party platforms or services.

When you use a third-party payment service such as Touch 'n Go eWallet, Boost, GrabPay, or a banking portal to process a deposit or withdrawal, your interaction with that payment provider is governed by that provider's own terms of service and privacy policy.

The Platform reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered Players via in-platform notification or email at least seven (7) days prior to the revised Policy taking effect, where practicable.

The current version and effective date of this Policy are displayed at the top of this page. Your continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree to any updated Policy, you should cease use of the Platform and may request Account closure in accordance with our Terms & Conditions.

We recommend that you review this Policy periodically to remain informed of how we handle your Personal Data.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact Kawi777 through the following channels:

• Live Chat: Available24 hours a day, 7 days a week via the Platform's live chat feature. For data rights requests, please state clearly that your enquiry relates to a data subject rights request so our team can route it to the appropriate personnel.
• Email: [email protected] — please include "Privacy Request" in the subject line, together with your registered Account username and a clear description of your request. We will acknowledge receipt within 3 business days and endeavour to respond substantively within 30 days.

To protect your privacy and verify your identity before actioning any data rights request, we may ask you to provide proof of identity (such as your registered email address or Account username) before processing the request.