Privacy Policy

This Privacy Policy ("Policy") is issued by weplay777 ("the Platform", "we", "us", "our") and applies to all personal data collected from registered players, website visitors, and individuals who interact with the weplay777 platform at weplay777.cam and its associated services.

weplay777 operates as a premium online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and surrounding areas. We process personal data as both a data controller (for our own operational purposes) and, in certain limited circumstances, as a data processor (acting on behalf of our players in connection with third-party service integrations).

This Policy should be read in conjunction with our Terms & Conditions, our Responsible Gambling Policy, and any specific terms applicable to individual promotions or features of the Platform. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

weplay777 collects Personal Data through several channels: directly from you during Account registration and use of the Platform; automatically as you interact with the Platform; and, in limited circumstances, from verified third-party sources for identity verification purposes. The following table sets out the categories of data we collect and the primary source of each:

weplay777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity document verification under applicable KYC obligations.

weplay777 processes your Personal Data on one or more of the following lawful bases, as appropriate for each processing activity:

• Contractual Necessity: Processing is necessary for the performance of the agreement between you and weplay777 — including Account registration, transaction processing, and delivery of gaming services.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and gaming licence conditions.
• Legitimate Interests: Processing is necessary for the legitimate interests of weplay777, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent (such as optional marketing communications), we will obtain your explicit consent prior to processing and provide a straightforward mechanism for withdrawal of that consent at any time.

weplay777 processes your Personal Data for the following purposes:

weplay777 does not sell, rent, or trade your Personal Data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to binding contractual data protection obligations:

• Payment Service Providers: Malaysian payment processors including Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, and partner banks (Maybank, CIMB, Public Bank, Hong Leong Bank) to process deposits and withdrawals in MYR and, where applicable, USDT TRC20 cryptocurrency.
• KYC & Identity Verification Providers: Third-party identity verification platforms that assist in processing document submissions and conducting age and identity checks in compliance with our regulatory obligations.
• Game Studio Partners: Licensed international game content providers who require certain technical data (such as anonymised player identifiers and session data) to deliver their games on the Platform and to comply with their own licensing conditions.
• Fraud Prevention & AML Services: Specialist third-party services used to screen for fraud, money laundering, sanctions exposure, and PEP status as required by applicable regulations.
• IT Infrastructure & Cloud Service Providers: Hosting and cloud infrastructure providers who process technical and operational data on our behalf under strict data processing agreements.
• Legal & Regulatory Authorities: Where required by law, court order, or regulatory mandate, weplay777 will disclose Personal Data to competent legal, regulatory, or law enforcement authorities, including gaming regulators and financial intelligence units.

weplay777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device that help us recognise you across sessions, maintain your login state, and understand how the Platform is being used.

weplay777 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account's active status on the Platform.
• Account Closure: Upon voluntary Account closure or Platform-initiated termination, core Account data (identity, transaction history, KYC documentation) is retained for a minimum period of five (5) years to satisfy anti-money laundering, regulatory, and licensing obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with applicable financial recordkeeping requirements.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of the lawful basis for any communications sent.
• Support Communications: Live chat transcripts and email correspondence retained for a minimum of three (3) years for quality assurance and dispute resolution purposes.
• Technical & Analytical Data: Anonymised or aggregated analytical data may be retained indefinitely for platform improvement purposes. Identifiable technical data (IP logs, session records) retained for a maximum of thirteen (13) months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data destruction practices.

weplay777 implements a comprehensive set of technical, organisational, and physical security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for all sensitive data stored in our databases, including KYC documents and payment information.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access Personal Data.
• Multi-factor authentication required for administrative access to production systems and data stores.
• Regular penetration testing and vulnerability scanning conducted by independent third-party security specialists.
• Continuous security monitoring and real-time alerting for suspicious system activity.
• Staff data protection training conducted on an annual basis and upon onboarding.
• Incident response procedures establishing clear protocols for breach detection, containment, notification, and remediation.

While we maintain robust security practices, no online platform can guarantee absolute security. You are responsible for maintaining the security of your Account credentials. If you suspect your Account has been compromised, contact weplay777 Support immediately via live chat.

Subject to applicable data protection law, you hold the following rights in relation to your Personal Data held by weplay777. You may exercise any of these rights by contacting our Data Protection team as described in Section 14 of this Policy.

weplay777 will respond to all verified data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and its reasons.

The weplay777 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain Personal Data relating to individuals under the age of 21. All registrations are subject to mandatory age verification as part of the KYC process.

If weplay777 discovers or has reason to believe that an Account has been registered by, or that Personal Data has been collected from, an individual under the age of 21, we will immediately suspend the relevant Account, forfeit all associated balances, and securely delete the relevant Personal Data in accordance with applicable law.

If you are a parent or guardian and believe that your child may have registered an Account on the Platform, please contact us immediately at the details provided in Section 14.

In the course of operating the Platform, weplay777 may transfer certain Personal Data to third-party service providers located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your Personal Data, including:

• Transfer to countries that have been assessed as providing an adequate level of data protection.
• Use of standard contractual clauses or equivalent contractual protections approved by competent data protection authorities.
• Binding corporate rules where transfers occur within a corporate group subject to uniform data protection standards.

Notably, payment processing for Malaysian payment methods (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX) is handled by Malaysian-based payment partners operating within the jurisdiction of Malaysian financial regulators, which limits the need for international data transfers in the payment processing context.

weplay777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the scope of the Platform's services. The "Last Updated" date at the top of this page will be revised accordingly whenever material changes are made.

Where changes are material and affect your rights or the manner in which we process your Personal Data, we will notify registered Players by email (to the address on file) at least 14 days before the updated Policy takes effect. Your continued use of the Platform after the effective date of the revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Policy periodically. Archived versions of previous Policy editions are available upon request from our Data Protection team.

For all data protection enquiries, data subject requests, or privacy-related complaints, please contact weplay777 through the following channels. When submitting a data subject request, please provide sufficient information to verify your identity as the Account holder.

If you are not satisfied with the resolution provided by weplay777, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your residency. weplay777 will cooperate in good faith with any investigation initiated by a competent supervisory authority.