SJO777 Privacy Policy — Member Personal Data Protection

01 Introduction & Scope of This Policy

Sjo777 values the privacy of every member who entrusts us with their personal information. This Privacy Policy is written in clear, plain language because we believe you have the right to know exactly what happens to your data — not just a lengthy document no one reads.

This document explains the types of personal data we collect when you register or use the SJO777 platform, the purpose of that collection, how we protect it, who may have access to it, the rights you hold as the data owner, and how to contact us should you have any questions or concerns regarding your privacy.

This policy applies to all users of the SJO777 platform in Malaysia, including unregistered website visitors, registered members, and all parties who interact with us through official communication channels. It is to be read together with Terms and Conditions our Responsible Gaming Policy our documents as a complete set of agreement.

02 Personal Data We Collect

Sjo777 only collects data that is strictly necessary to provide you with a safe, seamless, and quality service. We do not collect excessive or irrelevant information beyond the intended purpose of the platform.

Data You Provide Directly

• Registration information: Full name, mobile number, email address, date of birth, and your chosen username.
• KYC verification documents: A copy of your identity card (MyKad), passport, or other valid travel document; proof of address such as a recent utility bill or bank statement.
• Payment information: Payment method details such as bank account information for FPX, digital wallet numbers for Touch 'n Go or GrabPay, or crypto wallet addresses for USDT. We do not store your PIN or payment passwords.
• Communication with us: Any messages, complaints, or feedback you submit via Live Chat, support email, or other official communication channels.

Automatically Collected Data

• Technical data: IP address, web browser type, operating system version, screen resolution, and device identifier.
• Usage data: Pages visited, session duration, games played, access times, and general navigation patterns within the platform.
• Location data: Approximate location based on IP address for geographic verification and fraud prevention. We do not access your device's GPS location without explicit consent.
• Cookie data: Session information and preferences stored via web browser cookies — further details are outlined in Section 5.

Data From Third-Party Sources

In certain cases, SJO777 may receive additional information about you from registered payment service providers or approved identity verification agencies, solely for KYC and fraud prevention purposes. This data is handled with the same level of protection as information you provide directly.

03 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. sjo777 does not use your data for purposes not stated here without obtaining your consent first.

Primary Purposes of Data Use

1. Account management: Create and maintain your account, process login requests, and verify your identity during sensitive transactions.
2. Transaction processing: Process deposits, withdrawals, and in-platform transfers accurately and securely.
3. KYC & AML verification: Meet legal requirements for identity verification and anti-money laundering as mandated by Malaysia's financial regulations.
4. Customer support: Process complaints, respond to enquiries, and resolve any issues you report to our team.
5. Platform security: Detect and prevent fraud, bot usage, duplicate accounts, and other illegal activities that could compromise the security of all members.
6. Service improvements: Analyse usage patterns in aggregate (not at an individual level) to improve platform design, introduce new features, and enhance the overall user experience.
7. Service communications: Send important notifications regarding your account, policy changes, or security updates that require your immediate attention.
8. Promotions & offers (with consent): Contact you about bonus offers, special promotions, and relevant VIP programmes — only if you have consented to receive them at registration or at a later time.

04 Data Sharing & Disclosure

Sjo777 firmly upholds the principle that your personal data is never sold, rented, or traded to any party for commercial gain. However, there are certain situations where we need to share your information with others to enable our services to function properly and securely.

Parties Who May Receive Your Data

• Payment service providers: FPX, Touch 'n Go, GrabPay, and approved crypto providers receive only the information necessary to complete your transaction. They are bound by strict confidentiality agreements and their own privacy policies.
• Technical service providers: Companies that provide cloud computing, hosting, and security infrastructure services on behalf of sjo777. They act as data processors and are not permitted to use your data for their own purposes.
• Game providers: In the context of Live Casino games or games operated by third-party licensed providers, minimal game session information may be shared for technical purposes. No complete financial or personal identification information is shared without legitimate necessity.
• Legal authorities: sjo777 will disclose personal data to government authorities, regulatory bodies, or law enforcement agencies when legally required, or when there is an urgent need to prevent crime or protect public safety.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations may need to access certain data in the context of advisory services we engage.

In all data-sharing scenarios, SJO777 ensures that the receiving party complies with data protection standards equivalent to or stricter than those we ourselves apply.

05 Cookies & Tracking Technology

The sjo777 platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and analyse aggregated usage patterns for continuous improvement.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication, session management, and form security. These cookies cannot be disabled without affecting the platform's ability to function.
• Performance cookies: Collect information about how visitors use the platform — most frequently visited pages, error messages received — in aggregate form without identifying individuals. This information helps us improve how the platform functions.
• Functional cookies: Allows the platform to remember your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics cookies: Help us understand overall traffic patterns and user interactions for strategic planning and product improvement.

Managing Your Cookie Preferences

You can manage your cookie settings through your web browser at any time. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling essential cookies may affect the functionality of the SJO777 platform and your overall user experience. For detailed guidance on managing cookies according to your browser type, please refer to the official documentation of that browser.

06 Your Rights as a Data Subject

Under the Malaysian Personal Data Protection Act (PDPA) 2010, you have certain rights regarding your personal data held by SJO777. We are committed to facilitating the exercise of these rights in a straightforward and hassle-free manner.

To exercise any of the above rights, contact the sjo777 Privacy team via 24/7 Live Chat or our support email. We will process your request within 30 business days from the date we receive a complete submission. Requests may require identity verification first to ensure the security of your data.

07 Data Security Measures

Sjo777 continuously invests in the latest security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration, or accidental destruction.

Technical Protection Layers

• 256-bit SSL/TLS encryption: All communications between your browser and sjo777 servers are encrypted using the latest SSL/TLS protocols, ensuring that data in transit cannot be intercepted by third parties.
• Data encryption at rest: Sensitive data stored in our databases is also encrypted for layered protection — meaning that even if a server were physically compromised, your data would remain unreadable.
• Two-factor authentication (2FA): The 2FA feature available to all member accounts adds a critical layer of security that prevents unauthorized access even if your password becomes known to others.
• 24/7 threat monitoring: An automated intrusion detection system monitors platform activity around the clock to identify and respond to security threats in real time.
• Periodic penetration testing: Security audits and penetration testing are conducted regularly by both internal and external security teams to identify and patch any vulnerabilities before they can be exploited.

Organisational Measures

Access to members' personal data is strictly limited to staff who require it to perform their duties — a rigorous "need-to-know" principle. All staff with access to personal data are bound by legally enforceable confidentiality agreements and undergo comprehensive data protection training.

08 Data Retention Period

Sjo777 does not retain your personal data longer than necessary for the purpose it was collected, or beyond the period required by law. Below is a general guide to retention periods by data category.

• Active account data: Retained throughout your active membership with SJO777, and for up to seven years after account closure to meet financial and tax legal requirements.
• Transaction records: Retained for a minimum of seven years in accordance with the requirements of the Financial Services Act and applicable AML regulations.
• KYC documents: Retained for the period required by applicable regulations, generally no less than five years after the business relationship ends.
• Customer support communication logs: Retained for three years for reference and dispute resolution purposes.
• Technical log data: Retained for 90 days under normal circumstances; may be kept longer if required for ongoing security investigations.
• Cookie data: Duration varies by cookie type — session cookies are deleted when the browser is closed; persistent cookies have a set expiry period of between 30 and 365 days.

When personal data is no longer needed and the minimum retention period has elapsed, SJO777 will delete or destroy that data securely in accordance with established industry standards.

09 Child Protection

The sjo777 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from minors. Registration by anyone under 18 is strictly prohibited and is in violation of our Terms and Conditions.

If we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that information and close the associated account. Parents or guardians who have reason to believe their child has registered on our platform are encouraged to contact our support team immediately.

10 Changes to This Privacy Policy

Sjo777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The date of the latest update is always displayed at the top of this document.

For significant or material changes — particularly those affecting how we use your data or your rights as a data subject — we will provide appropriate notice via your registered email or an in-platform notification at least seven days before the changes take effect.

Continued use of the sjo777 platform after changes are published means you accept the latest version of the Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your personal data in accordance with the procedure outlined in Section 6.

11 Contact Us Regarding Privacy

For any inquiries, complaints, or requests relating to this Privacy Policy or SJO777's handling of your personal data, please contact us through the following channels. Our Privacy Team is ready to assist you in English and Bahasa Malaysia.

• Live Chat 24/7: The fastest way to get a response — available directly within the SJO777 platform.
• Support email: [email protected] — we aim to respond within 48 business hours.

When contacting us regarding privacy, please provide your full name, SJO777 account username, and a clear description of your request. Identity verification may be required before we process your request to ensure the security of your data.

If you believe that SJO777 has failed to address your privacy complaint satisfactorily, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in accordance with the procedures set by those authorities.