CasaBet777 Privacy Policy

1. Introduction

CasaBet777 ("we", "us", "our", "CasaBet777") operates the online casino and sports betting platform accessible at casabet777.cam ("the Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform — whether as registered players, prospective users, or general visitors.

This Privacy Policy ("Policy") describes what personal data CasaBet777 collects, the purposes for which that data is used, how it is stored and protected, and the rights that individuals have in relation to their personal data. This Policy applies to all data processing activities carried out by CasaBet777 in connection with the operation of the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your agreement with CasaBet777. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

2. Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly — including name, identification number, location data, or online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Subject" means the individual to whom the personal data relates — in most cases, a registered player or website visitor.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, CasaBet777.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a binding contractual agreement.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance and fraud prevention.
• "AML" means Anti-Money Laundering — the regulatory framework and internal controls designed to detect and prevent money laundering activity.
• "Cookies" means small text files placed on your device by a website to store and retrieve information about your browsing session and preferences.

3. Data Controller

CasaBet777 is the Data Controller for all personal data collected and processed through the Platform. As Data Controller, CasaBet777 is responsible for determining how and why your personal data is processed, and for ensuring that such processing is carried out in accordance with applicable data protection principles.

Where CasaBet777 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification services, or IT infrastructure providers), those parties act as Data Processors and are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

4. Data We Collect

CasaBet777 collects personal data in the categories set out in the table below. The specific data collected in each category may vary depending on the nature of your interaction with the Platform.

5. How We Collect Your Data

CasaBet777 collects personal data through the following means:

5.1 Direct Collection

Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions. This includes forms, document uploads, and live chat interactions on the Platform.

5.2 Automated Collection

Technical and usage data collected automatically as you interact with the Platform, through cookies, server logs, and similar tracking technologies. This includes your IP address, device information, session behaviour, and in-Platform navigation patterns.

5.3 Third-Party Sources

In certain circumstances, CasaBet777 may receive personal data about you from third parties, including:

• Identity verification and KYC service providers who confirm the authenticity of your submitted documents.
• Payment service providers (such as FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks) who provide transaction confirmation data.
• Fraud prevention and AML screening databases used to verify the legitimacy of account activity.

6. How We Use Your Data

CasaBet777 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your CasaBet777 account, including login authentication and profile management.
• Service Delivery: Enabling you to access games, place bets, participate in promotions, and use all features of the Platform.
• Payment Processing: Processing deposits and withdrawals via your chosen payment methods, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels.
• KYC and Compliance: Verifying your identity and age (minimum 21 years), complying with anti-money laundering obligations, and fulfilling regulatory reporting requirements.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised access, bonus abuse, multi-accounting, and other prohibited conduct.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance via live chat and email.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and administering self-exclusion, deposit limits, and session controls in accordance with our Responsible Gambling Policy.
• Platform Improvement: Analysing usage data to improve Platform performance, user experience, game selection, and feature development.
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant Platform updates — only where you have consented to receive such communications or where permitted by applicable law. You may opt out at any time.
• Legal Obligations: Complying with applicable laws, court orders, regulatory directions, and lawful requests from competent authorities.

7. Legal Basis for Processing

CasaBet777 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to fulfil our contract with you — including account operation, payment processing, and service delivery — is necessary for the performance of the agreement between you and CasaBet777.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML reporting, age verification, and regulatory record-keeping.
• Legitimate Interests: Processing carried out to pursue CasaBet777's legitimate business interests — including fraud prevention, security monitoring, Platform improvement, and internal analytics — where those interests are not overridden by your data protection rights.
• Consent: Where we rely on consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

8. Data Sharing & Disclosure

CasaBet777 does not sell or rent your personal data to any third party. We may share your data in the following limited circumstances:

8.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under binding data processing agreements, including: payment processors (FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, cryptocurrency networks), identity verification and KYC providers, cloud infrastructure and hosting providers, customer support platform operators, and fraud detection services.

8.2 Regulatory and Legal Authorities

CasaBet777 may be required to disclose personal data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required and will be documented in accordance with our internal compliance procedures.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of CasaBet777's business, personal data held by CasaBet777 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any material changes to the way their data is handled.

9. Cookies & Tracking Technologies

CasaBet777 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and collect analytical data about Platform usage. The types of cookies used are described below:

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to function correctly. They enable core features such as user authentication, session management, security controls, and fraud detection. Essential cookies cannot be disabled without impairing Platform functionality.

9.2 Analytical Cookies

These cookies collect aggregated, anonymised data about how visitors interact with the Platform — including pages visited, session duration, and navigation paths. This data helps us understand usage patterns and improve Platform performance and user experience.

9.3 Functional Cookies

These cookies remember your preferences — such as language settings, display preferences, and game history — to personalise your experience on the Platform. They persist between sessions to save you from re-entering preferences each time you visit.

9.4 Cookie Management

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of specific Platform features. By continuing to use the Platform, you consent to the use of cookies as described in this Policy.

10. Data Retention

CasaBet777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:

• Account Data: Retained for the duration of your account's active period, plus a minimum of five (5) years following account closure — in compliance with AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and Usage Data: Retained in aggregated or anonymised form indefinitely for analytical purposes. Identifiable technical data is typically retained for twelve (12) months.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

11. Data Security

CasaBet777 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and CasaBet777's servers.
• Encryption at rest for sensitive data categories including KYC documents and financial records.
• Role-based access controls limiting data access to authorised personnel with a legitimate operational need.
• Two-factor authentication (2FA) for both player accounts and internal staff access to data systems.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Audit logging of all access to personal data systems by internal personnel.
• Incident response and breach notification procedures aligned with applicable data protection requirements.

Whilst CasaBet777 takes all reasonable technical measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

12. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by CasaBet777:

To exercise any of these rights, please contact our Data Protection team using the details in Section 16. Requests will be acknowledged within five (5) business days and responded to within thirty (30) calendar days. We may request proof of identity before processing your request.

13. Minors & Age Restriction

The CasaBet777 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account, access the Platform, or provide any personal data to CasaBet777.

CasaBet777 implements mandatory age verification as part of the account registration and KYC process. Where we become aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the Platform or submitted personal data without your knowledge or consent, please contact us immediately via the details in Section 16.

14. International Data Transfers

CasaBet777's primary player base is located in Malaysia, and we endeavour to process personal data within appropriate jurisdictions where data protection standards are upheld. Where personal data is transferred to or accessed by service providers located outside of Malaysia — for example, cloud infrastructure providers or identity verification services operating across multiple regions — CasaBet777 ensures that appropriate safeguards are in place.

Such safeguards may include contractual data processing agreements incorporating internationally recognised data transfer clauses, or reliance on the service provider's adherence to established international data protection frameworks. CasaBet777 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures.

15. Amendments to This Policy

CasaBet777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The most current version of this Policy will always be accessible at casabet777.cam/privacy-policy, with the "Last Updated" date revised accordingly.

For material changes — such as new categories of data being collected, new purposes for processing, or changes in data sharing arrangements — CasaBet777 will provide reasonable advance notice to registered players via email or an in-Platform notification prior to the changes taking effect. Your continued use of the Platform following such notice constitutes acceptance of the revised Policy.

If you do not accept the terms of an updated Privacy Policy, you may request account closure in accordance with the account termination provisions in our Terms & Conditions.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, your personal data, or the exercise of your data rights, please contact CasaBet777's Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the CasaBet777 Platform. Live chat is the fastest route for urgent data security concerns — typical response time is under 5 minutes.
• Email: [email protected] (plain text — not a clickable link) — responses to data protection requests are typically provided within 5–10 business days.

When submitting a data rights request by email, please include your registered account username, the nature of your request, and sufficient information to allow us to verify your identity before actioning the request. This is a security measure to ensure your personal data is not disclosed to any person who does not have the right to receive it.