Privacy Policy

mya777 ("we", "us", "our", "the Platform") is the operator of the online gaming and sports betting platform accessible at mya777.casa. We are committed to protecting the privacy and personal data of all individuals who register accounts, visit our website, or otherwise interact with our services — including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

This Privacy Policy ("Policy") sets out in clear terms what personal data mya777 collects, for what purposes it is processed, with whom it may be shared, how long it is retained, and the rights that individuals hold in respect of their personal data. This Policy applies to all processing activities conducted by mya777 in connection with the operation of mya777.casa and any associated mobile applications or services.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which contain additional provisions relevant to the handling of player accounts and personal data.

The following definitions apply throughout this Policy:

mya777 collects personal data across several categories, depending on the nature of your interaction with the platform:

3.1 Account Registration Data

• Full legal name
• Email address and mobile telephone number
• Date of birth (to verify the 21+ age requirement)
• Preferred currency (Malaysian Ringgit — MYR)
• Username and encrypted password credentials

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents — Malaysian MyKad, Driver's Licence, or Passport
• Proof of residential address — utility bills, bank statements, or official correspondence issued within the last three months
• Selfie photographs taken during the verification process

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Payment method details — bank account identifiers, e-wallet reference numbers (Touch 'n Go eWallet, Boost, GrabPay), and DuitNow/FPX transaction references
• Account balance history and bonus credit/debit records
• Cryptocurrency wallet addresses where applicable (BTC, USDT)

3.4 Gaming and Betting Activity Data

• Games played, bets placed, wager amounts, and outcomes
• Session durations, active hours, and login frequency
• Responsible gambling tool settings (deposit limits, self-exclusion status, session timers)

3.5 Technical and Device Data

• IP address, device type, operating system, and browser version
• Geolocation data (country/region level, derived from IP address)
• Cookie identifiers and session tokens
• Referral source and marketing attribution data (where applicable)

3.6 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence submitted to mya777's support team
• Survey responses and feedback submissions

mya777 collects personal data through the following primary channels:

• Directly from you — when you complete account registration, submit KYC documents, make a deposit or withdrawal, contact support, or complete any form on the platform;
• Automatically — through cookies, session tracking technologies, and server logs as you navigate and interact with mya777.casa;
• From third-party verification partners — KYC verification providers may return enriched identity data as part of the document verification process;
• From payment processors — payment facilitators including DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet, Boost, and GrabPay may share transaction confirmation data with mya777 for reconciliation purposes;
• From fraud prevention services — where applicable, mya777 may receive risk signals from third-party fraud detection and anti-money laundering screening providers.

mya777 processes personal data for the following specific purposes:

mya777 processes personal data on the basis of the following legal grounds, in accordance with the Personal Data Protection Act 2010 (PDPA) and applicable international data protection principles:

• Contractual Necessity: Processing required to perform the contract between mya777 and the Player — including account registration, payment processing, game delivery, and withdrawal handling;
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including AML/CTF obligations, KYC verification, and regulatory reporting duties;
• Legitimate Interests: Processing necessary for mya777's legitimate business interests, including fraud prevention, security monitoring, responsible gambling programme administration, and platform analytics — where such interests are not overridden by the Data Subject's rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of non-essential cookies and direct marketing communications. You may withdraw consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal.

mya777 does not sell, rent, or trade personal data to third-party marketers. Personal data is shared with third parties only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment facilitators — including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, and GrabPay — to the extent necessary to process deposits and withdrawals;
• KYC Verification Providers: Identity document data is shared with accredited third-party verification partners solely for the purpose of completing mandatory KYC checks;
• Game Content Providers: Anonymised player session data (session ID, bet values, game outcomes) may be shared with licensed game software providers for game operation and RNG audit purposes;
• Fraud Detection & AML Services: Transaction data and account information may be submitted to fraud screening and anti-money laundering compliance platforms to meet regulatory obligations;
• Regulatory Authorities: mya777 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction;
• Professional Advisers: Legal counsel, auditors, and compliance advisers may access personal data on a strictly need-to-know basis under appropriate confidentiality obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of mya777's business, player data may be transferred to the successor entity. Players will be notified of any such transfer and of any changes to data processing arrangements that result from it.

All third parties engaged by mya777 as Data Processors are required to process personal data solely in accordance with mya777's documented instructions and to maintain appropriate technical and organisational security measures.

The operation of an online gaming platform may involve the transfer of personal data to servers, service providers, or processing facilities located outside Malaysia. Where such transfers occur, mya777 ensures that appropriate safeguards are in place to protect the transferred data, including:

• Transfer to jurisdictions that provide an adequate level of data protection as recognised under applicable law;
• Standard contractual clauses or equivalent data transfer agreements with receiving parties;
• Binding corporate rules where data is transferred within a group of companies subject to group-wide data protection policies.

By using the mya777 platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia where required for the purposes described in this Policy.

mya777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that the individual can no longer be identified.

mya777 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain session security, and understand how users interact with the site. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences — such as preferred language, display settings, and last-used payment method — to improve your experience on subsequent visits.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors navigate and use mya777.casa. This data is used solely to improve platform design and performance. Analytics cookies are optional and may be declined.
• Security Cookies: Support fraud detection and account security processes, including anomaly detection and multi-factor authentication flows.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to place bets, deposit funds, or access games on mya777, but may affect certain convenience features.

mya777 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and mya777's servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms this is active at all times on mya777.casa;
• Data Encryption at Rest: Sensitive personal data stored on mya777's servers — including KYC documents, financial data, and account credentials — is encrypted at rest using AES-256 or equivalent standards;
• Multi-Factor Authentication (MFA): Players are encouraged to enable two-factor authentication (2FA) on their accounts. MFA is required for certain high-value account actions including large withdrawal requests;
• Access Controls: Access to personal data within mya777's internal systems is strictly limited to authorised personnel on a need-to-know basis, with role-based access controls and audit logging in place;
• Penetration Testing: mya777's platform undergoes regular security assessments including penetration testing and vulnerability scanning by qualified security professionals;
• Incident Response: mya777 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to individuals' rights and freedoms, affected Players will be notified promptly in accordance with applicable requirements.

While mya777 takes all reasonable precautions to protect personal data, no online platform can guarantee absolute security. Players are reminded to use strong, unique passwords for their mya777 accounts and to keep their credentials confidential.

Subject to applicable law and regulation, you hold the following rights in respect of your personal data processed by mya777:

To exercise any of these rights, please contact mya777's privacy team using the contact details in Section 16. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, and you will be notified of any extension and the reasons for it.

mya777 is strictly an adults-only platform. Registration and use of the platform is prohibited for any person under the age of 21 years. mya777 does not knowingly collect personal data from individuals under 21.

All accounts are subject to age verification as part of the KYC process. Where mya777 has reasonable grounds to suspect that a registered account is operated by a person under the age of 21, the account will be immediately suspended pending verification, and any deposited funds will be returned to the originating payment method upon confirmation of underage registration.

If you believe that a person under the age of 21 has registered an account on mya777 or has submitted personal data to the platform without authorisation, please contact our support team immediately using the details in Section 16 so that we can investigate and take appropriate action.

mya777.casa may display references to or integrations with third-party payment services — including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay — for the purpose of processing deposits and withdrawals. Interactions with these third-party payment interfaces are governed by the respective privacy policies and terms of service of those providers.

mya777 is not responsible for the data handling practices of third-party payment providers or any other external services. Players are encouraged to review the privacy policies of any third-party service with which they interact in connection with their use of mya777.

mya777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations, or data processing practices. Material changes — that is, changes that significantly affect how we process your personal data or your rights in relation to it — will be communicated to registered Players via in-platform notification or registered email address at least fourteen (14) days before the changes take effect.

Non-material updates — such as corrections to typographical errors, clarifications of existing language, or administrative adjustments — may be made without prior notice. The effective date at the top of this page will always reflect when the Policy was last updated.

Continued use of the mya777 platform following notification of changes to this Policy constitutes your acceptance of the revised Policy. If you do not agree to an updated version of the Policy, you may close your account and request deletion of your personal data in accordance with Section 12.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights under Section 12, or wish to raise a concern about how mya777 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the mya777 platform — the fastest channel for all enquiries including urgent data access requests.
• Email (non-clickable): [email protected] — for formal data subject rights requests and written complaints. Please include "Privacy Request" in your subject line and provide your registered account username to allow efficient processing. Allow up to 24 hours for acknowledgement and up to 30 days for a substantive response.

If you are dissatisfied with mya777's response to a data-related complaint and believe that your personal data has been processed in breach of applicable data protection law, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. In Malaysia, the relevant authority is the Department of Personal Data Protection (JPDP), which operates under the Ministry of Communications and Digital.