Full Malaysia PDPA Compliance

KM777 Privacy Policy – Malaysian Player Data Protection & Privacy

KM777 is committed to protecting your personal data to the highest security standards. This document transparently explains how we collect, use, store, and protect your information.

Updated: 1 January 2026  |  Version 3.1  |  Compliance: PDPA 2010 Malaysia

256-bit SSL
Data Encryption
0
Data Breaches Since 2018
24/7
Security Monitoring
48 hours
Data Request Response

This Privacy Policy ("Policy") describes the data protection practices of KM777 ("We", "Platform") operating through the website km777.ng. This policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international privacy standards.

By using the KM777 platform, registering an account, making a deposit, or using any feature of our platform, you agree to the data collection and usage practices as described in this Policy. We take this responsibility seriously and are committed to maintaining your trust.

Our Core Commitments: km777 never sells players' personal data to third parties for commercial purposes. Your data is used only for the purposes you have consented to, as explicitly stated in this document.

1 Types of Personal Data We Collect

KM777 collects personal data in three main categories. The following table details each data type, its purpose of collection, and whether it is mandatory:

Data Type Specific Examples Purpose Status
Identity Full name, MyKad number, date of birth, gender KYC, age verification, fraud prevention Mandatory
Contact Phone number, email address, residential address Account notifications, OTP, transaction alerts Mandatory
Finance Bank account number, transaction history, payment methods Deposit & withdrawal processing, AML Mandatory
Platform Activity Game history, session duration, wagering amounts Responsible gaming, service improvement Auto
Technical IP address, device type, web browser, access logs Account security, fraud prevention, technical support Auto
Priority Language settings, game preferences, bonus preferences Personalise your platform experience Options

2 How KM777 Collects Your Data

  • Account Registration: When you register a KM777 account, you directly provide basic information such as your name, email, and phone number. This is the primary method of data collection.
  • KYC Verification: During the identity verification process, you upload a copy of your MyKad and other supporting documents. This data is used solely for identity verification and AML compliance.
  • Financial Transactions: Every time you make a deposit or withdrawal, the relevant financial information is recorded for accounting, dispute resolution, and regulatory compliance purposes.
  • Platform Usage: Our system automatically records gaming activity, login sessions, and platform interactions. This helps us detect any suspicious activity and keep your account secure.
  • Cookies & Web Technology: The km777 website uses cookies and similar technologies to ensure the platform runs smoothly and to remember your preferences.
  • KM777 does not collect data from third-party sources or social media without your explicit consent.

3 Purpose of Using Your Personal Data

KM777 uses your personal data only for the following legitimate and necessary purposes:

  • Account Management: Creating, verifying, and maintaining your account; processing password reset requests; sending OTPs for login verification.
  • Transaction Processing: Verifying and processing all deposits and withdrawals; resolving transaction disputes; providing account statements.
  • Legal Compliance: Fulfilling obligations under the PDPA 2010, the Anti-Money Laundering Act (AMLA), and directives from the relevant regulatory authorities.
  • Platform Security: Detecting and preventing fraud, bonus abuse, multiple account ownership, and other unlawful activities that could harm other players.
  • Responsible Gaming: Monitoring betting patterns to identify players who may need assistance or self-control tools, in line with km777's commitment to responsible gaming.
  • Service Communications: Sending important account-related notifications, policy updates, and security information. This is distinct from marketing communications, which require separate consent.
  • Product Improvement: Analysing usage data in aggregate (not individual data) to understand usage patterns and improve the km777 platform experience.
  • KM777 will not use your data for third-party marketing purposes or sell your profile to any external entity.

4 Data Sharing with Third Parties

KM777 does not sell your personal data. However, in certain limited situations, we may share data with the following parties:

  • Payment Providers: Transaction information is shared with payment providers (such as banks, FPX, and e-wallets) solely for the purpose of processing your deposits and withdrawals.
  • Game Providers: Minimum technical data (such as game session IDs) is shared with licensed game providers such as Pragmatic Play and PG Soft for technical purposes.
  • IT Service Providers: Companies that support KM777's technical operations (such as cloud hosting and cybersecurity) have limited access to the data required for their tasks and are bound by strict confidentiality agreements.
  • Authority: KM777 will disclose data when required by a valid court order, regulatory directive, or legal investigation. We will notify you whenever possible, unless prohibited by law.
  • All third parties that receive KM777 player data are subject to data processing agreements requiring them to protect data to the same or higher standards as those practised by KM777.

5 km777 Data Security Measures

  • 256-bit SSL Encryption: All data transmitted between your browser and KM777's servers is protected with 256-bit SSL encryption — the same level of protection used by Malaysia's major banks.
  • Stored Data Encryption: Sensitive data such as financial information and identity documents are stored in encrypted databases with additional security layers. Internal access is strictly restricted and comprehensively logged.
  • 24/7 Monitoring: The km777 cybersecurity team continuously monitors systems to detect any unauthorised access attempts, hacking attempts, or security anomalies.
  • Two-Factor Authentication (2FA): KM777 offers and actively encourages the use of 2FA for all accounts. This feature adds an extra security layer that prevents unauthorized access even if your password is compromised.
  • Periodic Security Audits: KM777's infrastructure undergoes regular security audits by independent third-party auditors to ensure security controls are continuously updated against the latest threats.
  • Staff Training: All KM777 staff with access to player data undergo regular data protection training and are bound by strict confidentiality agreements.
  • While KM777 takes all reasonable precautions, no digital system can be guaranteed 100% secure. We encourage players to also take personal steps such as using strong passwords and not sharing login credentials.

Incident Notice: In the event of any security incident involving player data, KM777 is committed to notifying affected players within 72 hours of the incident being identified, in line with data protection best practices.

6 Data Retention Period

  • Active Account Data: While your account is active, KM777 retains all data necessary for account operations. This data is reviewed and updated whenever changes are made by you.
  • Financial Records & KYC: Financial transaction records and KYC documents are retained for a minimum of 7 years from the date of the last transaction, in accordance with Malaysia's AMLA legal requirements and financial reporting obligations.
  • After Account Closure: When an account is closed at a player's request, KM777 will delete or anonymize personal data that is no longer required for legal purposes within 90 days. Data required for legal compliance will continue to be retained for the prescribed period.
  • Technical Logs: Technical and security logs (such as IP logs and access logs) are retained for 12 months for security and technical support purposes, after which they are automatically deleted.
  • Data retained for legal compliance after account closure is not used for any marketing purposes or communications with former players.

7 Your Rights as a KM777 Player

Under Malaysia's PDPA 2010 and KM777's policy, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data KM777 holds about you. Requests can be submitted through the support team and will be processed within 14 business days.

Right to Rectification

If the personal data KM777 holds about you is inaccurate or outdated, you have the right to request a correction. Corrections to basic data (name, phone number) can be made directly in your account settings.

Right to Erasure

You may request KM777 to delete your personal data under certain circumstances. However, such requests may not be fully fulfilled if the data is required for legal compliance.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Submit an unsubscribe request to the support team and we will cease all marketing communications within 5 business days.

Right to Data Portability

Under certain circumstances, you have the right to receive your personal data in a machine-readable format (such as CSV or JSON), so you can transfer it to another platform if needed.

To exercise any of the above rights, contact the KM777 support team via the in-platform live chat. We will respond within 48 business hours and fulfil requests within the timeframe required by applicable law.

8 Cookies, Analytics & Tracking Technology

  • Essential Cookies: KM777 uses cookies that are essential for basic website operations — such as maintaining your login status and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: These cookies collect information about how players use our platform (for example, the most frequently visited pages) to help us improve functionality and user experience. This data is collected in aggregate and does not identify individuals.
  • Functional Cookies: These cookies allow the platform to remember your preferences (such as language selection and display settings) to deliver a more personalised experience.
  • Cookie Management: You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the KM777 platform.
  • KM777 does not use third-party cookies for advertising or cross-site tracking purposes. Our internal analytics system operates exclusively within the KM777 platform.

9 Amendments to This Privacy Policy

  • KM777 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new technologies, or the latest legal requirements.
  • Any material changes to this Policy will be communicated to you via in-platform notifications and your registered email, at least 30 days before the changes take effect.
  • The "Updated" date at the top of this document will always reflect the date of the latest version. We encourage you to review this page periodically.
  • Continued use of the km777 platform after any amendments take effect will be considered your acceptance of the updated policy.

✉ Contact the KM777 Data Protection Officer

If you have any questions, concerns, or wish to exercise any of your privacy rights, please contact KM777's Data Protection Officer (DPO) through the following channels:

  • Official Email: [email protected] — for all privacy-related enquiries and data rights requests.
  • Live Chat Platform: The fastest option for general privacy enquiries — our team is active 24/7.
  • Response Time: Data privacy rights requests are processed within 14 business days. Cases requiring deeper investigation may take up to 30 days, and we will keep you informed of the progress.

Why Your Privacy Is Safe at km777

Six data security pillars safeguarding your information every day

Highest-Level Encryption

All data in transit and at rest is protected with 256-bit SSL encryption — the same technology used by leading financial institutions. Your data never travels unprotected.

Strict Access Controls

Only authorized personnel with a legitimate work requirement may access player data. All access is logged and periodically audited. Violations of access controls are treated as serious offences subject to disciplinary action.

Regular Independent Audits

KM777's privacy and data security practices are periodically reviewed by independent third-party auditors. This ensures we remain compliant with the latest standards and continuously identify areas for improvement.

Full PDPA Compliance

KM777 fully complies with Malaysia's Personal Data Protection Act 2010. We have an appointed Data Protection Officer (DPO) to ensure ongoing compliance and to address player privacy requests.

No Data Sales

KM777 explicitly and categorically does not sell, rent, or share players' personal data with third parties for marketing purposes. This is not merely a policy — it is a core value that will never change.

Data Rights Respected

KM777 recognizes and respects players' rights to access, correct, delete, and port their data. Requests are processed within the stipulated timeframes with concrete action, not merely acknowledged.

🛡️

Your Data Is Safe at KM777 — Join with Confidence

We understand that entrusting your personal data to any platform is a significant decision. At km777, we take that trust seriously — not just in this document, but in every technical measure and daily operation we carry out. Register today and experience a platform that truly cares about your privacy.

By registering, you agree to this Privacy Policy and Terms and Conditions km777.

Bahasa Melayu