Lawas777 Privacy Policy – Malaysia Member Data Protection

Lawas777 is an online betting and casino platform operating for Malaysian users. We understand that your trust in us depends not only on the quality of our games and the fairness of our platform, but also on how we handle the personal information you entrust to us.

This Privacy Policy has been drafted in compliance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring your personal data is processed lawfully, fairly, and transparently — only for the stated purposes and no more than is necessary.

This Policy applies to all your interactions with Lawas777 — whether through our website, mobile app, email communications, support live chat, or any other channels we operate. It should be read together with Terms & Conditions and Responsible Gaming Policy Lawas777, which forms the entire agreement between you and us.

Lawas777 only collects data that is strictly necessary to provide a safe, fair service that meets legal requirements. Below are the categories of data we collect, along with their purposes and legal basis:

We not collect sensitive data such as medical records, religious beliefs, political views, or biometric data. Data collected is limited strictly to what is directly necessary for the provision of platform services Lawas777 to you.

Your personal data is collected through several channels during your interactions with the platform Lawas777. Understanding how data is collected helps you make informed decisions about the information you share with us.

Data you provide directly:

• Account registration form — name, Malaysian phone number, email, date of birth, password;
• Identity verification process (KYC) — copy of national ID or passport, bank statement as proof of address;
• Withdrawal request form — payment account details (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u or CIMB Clicks);
• Communications with the support team via live chat, email, or other channels we provide;
• Feedback or complaints you submit to Lawas777.

Automatically collected data:

• Your IP address and country-level location information when you access the platform;
• Device type (phone, tablet, laptop), operating system, and web browser type;
• Login session records including timestamps, duration, and in-platform activity;
• Betting history, game results, and total deposit and withdrawal amounts as recorded by the system;
• Technical cookies required for core platform functionality (further details in Section 9).

Lawas777 not purchase or acquire your personal data from any third-party source such as data brokers or advertising networks. All data we hold is either provided directly by you or collected automatically through your use of our platform.

Lawas777 uses your personal data only for legitimate, clearly stated purposes. We do not process your data for any purpose not listed here without first obtaining your additional consent.

The primary purposes for which your data is used at Lawas777:

• Identity verification and KYC: To verify that you are who you claim to be, that you are aged 18 or above, and that you meet the platform's eligibility requirements. This also covers mandatory anti-money laundering (AML) and counter-terrorism financing (CFT) compliance obligations required by law;
• Financial transaction processing: To process deposits (from RM10 via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX), verify winnings, and process withdrawals within 5–15 minutes to your chosen payment method;
• Provision of gaming services: To enable you to play Sports Betting (Liga Super Malaysia, EPL, badminton), Live Casino, jackpot slots, poker, e-sports, and all other games on the Lawas777 platform;
• Security and fraud detection: To detect, investigate, and prevent fraud, collusion, bot usage, money laundering, and other illegal activities that could compromise the integrity of the platform;
• Responsible gaming: To monitor gaming patterns and identify signs of problem gambling so we can offer assistance or suggest appropriate responsible gambling tools;
• Service communications: To send transaction confirmations, account security notifications, policy update notices, and responses to your support enquiries;
• Platform improvement: To analyse aggregate (not individual) usage patterns in order to improve the interface, technical performance, and overall experience on the Lawas777 platform.

Lawas777 does not sell, rent, or trade your personal data to any third party for their marketing purposes. Data sharing only takes place under limited circumstances and for legitimate purposes as outlined below.

Circumstances under which data may be shared:

• Payment service providers: Only the minimum transaction data required is shared with your payment service provider (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) solely for the purpose of processing your deposits and withdrawals. These providers have their own privacy policies and are not permitted to use your data for any other purpose;
• Game software providers: Account information required to verify eligibility and process winnings is shared with relevant game content providers on a limited basis. No personally identifying data such as full name or IC number is shared with these parties;
• Legal obligations: Lawas777 will disclose personal data to the relevant authorities (police, courts, regulatory bodies) when required by a valid court order, warrant, or applicable legal provision in Malaysia. We will endeavour to notify you of any such disclosure where permitted by law;
• Fraud detection: Where necessary, information may be shared with fraud prevention agencies or other platforms to detect and prevent fraudulent activity, money laundering, or collusion. This is done on the basis of public interest and legitimate security requirements.

All third parties that receive data from Lawas777 are required to comply with binding data processing agreements that prohibit the use of your data for any purpose other than those specified, and prohibit further data sharing without our authorisation.

Lawas777 invests seriously in data security to protect your personal and financial information. We employ a comprehensive combination of technical and organisational measures to prevent unauthorised access, loss, destruction, or disclosure of your data.

Technical security measures we employ:

• 256-bit SSL Encryption: All data transmitted between your device and Lawas777's servers is protected with banking-grade Transport Layer Security (TLS) encryption. This covers login credentials, payment details, and all in-platform communications;
• Encryption of data at rest: Sensitive data such as financial information and identity verification documents is stored in encrypted form on our servers — data at rest is protected as well;
• Two-factor authentication (2FA): Lawas777 encourages the use of 2FA for account login. This feature adds an extra layer of security by requiring verification via your phone number in addition to your password;
• 24/7 security monitoring: Our systems continuously monitor traffic and account activity to detect and respond to security threats in real time;
• Regular penetration testing: Lawas777 conducts regular security audits and penetration testing by independent experts to identify and address vulnerabilities before they can be exploited.

Your security responsibilities:

• Use a strong and unique password for your Lawas777 account — avoid reusing passwords from other accounts;
• Do not share your login credentials with anyone, including close family members;
• Log out of your Lawas777 account when you are done, especially on shared devices;
• Contact Lawas777 support immediately if you suspect your account has been accessed without your authorisation.

Lawas777 does not retain your personal data longer than necessary for the stated purposes or as required by law. Our data retention policy is as follows:

• Active account data: Your personal data is retained for as long as your account remains active on Lawas777. Upon account closure, basic personal data will be deleted within 30 days, except for data that must be retained for legal purposes;
• Financial and transaction records: Financial transaction records (deposits, withdrawals, winnings) are retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's accounting and anti-money laundering legal requirements;
• KYC documents: Copies of identity cards and other verification documents are retained for the duration of active membership plus 5 years after account closure, in line with legal compliance requirements;
• Security logs: System access logs and security logs are retained for 12 months for fraud detection and security incident investigation purposes;
• Support communication records: Support tickets and communications are retained for 2 years from the ticket closure date for training and reference purposes;
• Cookie data: Session cookies expire when the browser is closed. Preference cookies expire after 12 months from the date of the last session or logout.

Once the specified retention period has ended, data will be securely deleted using methods that ensure it cannot be recovered. You may request early deletion of your data — see Section 8 on your rights for details on how to do so.

As a member Lawas777, you have clear and enforceable rights over your personal data. We respect these rights and are committed to processing every request within the stipulated timeframe.

To exercise any of the rights below, submit a written request to support@lawas777.site with the email subject line "Privacy Rights Request" along with your account username and the type of request.

• Right of access: You have the right to obtain a copy of the personal data we hold about you. We will provide a readable data report within 30 days of your request;
• Right to rectification: If any data we hold about you is inaccurate or out of date, you have the right to request a correction at no charge. You can also update most of your profile information directly through your account settings;
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data. We will comply with such requests subject to legal record-keeping obligations that prevent us from deleting certain data (such as financial transaction records);
• Right to object to processing: You have the right to object to the processing of your data for specific purposes, such as marketing communications. Contact us to opt out of any communication categories you no longer wish to receive;
• Right to data portability: You may request the data you have provided to us in a structured, machine-readable format for the purpose of transferring it to another platform;
• Right to lodge a complaint: If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Platform Lawas777 using cookies and similar tracking technologies to keep the platform running properly and to deliver a better experience for you. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Session Cookies — Required: Required for core platform functionality, such as maintaining your login status during an active session. These cookies expire automatically when you close your browser and do not permanently store any personal information;
• Security cookies — Mandatory: Used to verify user identity, prevent cross-site request forgery (CSRF), and detect suspicious activity. These cookies are fundamental to the security of your Lawas777 account;
• Preference cookies — Optional: Saving your platform preferences such as language, theme, and display settings so you don't have to reconfigure them every time you use Lawas777;
• Analytics cookies — Optional: Helps us understand how users interact with the platform in aggregate (not individually) to improve overall performance and user experience. Analytics data is not linked to your personal identity.

You can manage or block cookies through your browser settings. Please note that blocking essential cookies may affect core functionality of the Lawas777 platform and may prevent you from logging in or using certain features. Optional cookies can be disabled without affecting core platform functionality.

Lawas777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. We are committed to informing you of any material changes in a transparent and timely manner.

How we notify you of changes:

• For material changes that significantly affect your privacy rights, we will send a notification email to your registered address at least 14 days before the changes take effect;
• Prominent notifications will be displayed on the Lawas777 platform when you log in for a period of at least 7 days after changes take effect;
• The "Updated" date at the top of this document will always reflect the date of the latest version;
• All previous versions of this Privacy Policy are archived and can be requested through our support team for reference purposes.

Continued use of the platform Lawas777 after the date the changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data before those changes come into effect.

Lawas777 takes every privacy-related query and concern seriously. If you have any questions about this Privacy Policy, wish to exercise your rights over your personal data, or want to report any concerns about how we handle your data, please reach out to us through the following channels:

• Email: support@lawas777.site — use the subject line "Privacy Enquiry" to ensure your message is routed to the relevant team;
• Live Chat: Available 24/7 within the Lawas777 platform — ideal for urgent enquiries that do not involve sensitive personal information;
• Personal VIP Manager: Gold, Platinum, and Diamond VIP members may contact their VIP Manager via WhatsApp for privacy matters requiring immediate attention.

The Lawas777 team will acknowledge receipt of your privacy enquiry within 24 hours and aim to resolve it within 30 calendar days. For requests that are complex or require additional identity verification, we will notify you if extra time is needed.