Privacy Policy 877 — Your Data, Our Responsibility

877 Entertainment Limited ("877", "we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy is designed to provide a clear and transparent overview of how we handle your personal data — from the moment you first browse our website to when you become an active member and use all platform features.

This document applies to all users of the 877 platform, including website visitors, registered users, active members, and former members whose accounts have been terminated. It covers all channels through which you interact with 877 — the official website, mobile app, Live Chat, email, and any customer support channels we provide.

By using the 877 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account if applicable.

877 only collects data that is strictly necessary to provide a secure, fair and regulatory-compliant service. The following are the categories of data we collect:

Every piece of data we collect has a clear and legitimate purpose. 877 processes your personal data on the following bases:

Contract Performance

To enable your full use of the 877 platform, we need to process certain data — including identity verification, payment processing and account management. This is the primary legal basis for our data processing.

Legal Compliance

As a licensed platform, 877 is required to comply with regulatory requirements including Anti-Money Laundering (AML) procedures, Know Your Customer (KYC), and reporting suspicious activity to the relevant authorities when required by law.

Legitimate Interest

• Detecting and preventing fraud, account abuse, and unlawful activity.
• Enhancing overall platform security and user experience.
• Analysing usage patterns to improve 877 products and services.
• Running a Responsible Gaming programme to protect members at risk.
• Sending essential service communications such as policy change notices and security updates.

Consent

For marketing communications, personalised promotional offers, and non-essential cookies, we rely on your consent. You may withdraw this consent at any time through your account settings without affecting your access to 877's core services.

877 does not sell or disclose member personal data to external parties arbitrarily. However, there are specific situations where data sharing is necessary and legally justified:

• Trusted Service Providers: Third parties that help us deliver our services — such as payment processors, identity verification providers, and cloud infrastructure partners — may receive limited access to the data required. They are bound by strict confidentiality agreements and may only use that data for specified purposes.
• Legal Requirements: 877 will disclose data when lawfully required by a court, law enforcement authority or regulatory body with valid jurisdiction.
• Security Protection: Data may be shared with industry security bodies or law enforcement in cases involving fraud, money laundering or other serious security threats.
• Business Transfers: In the event of a merger, acquisition or sale of business assets, member data may be transferred to the successor entity. Members will be notified in advance in such situations.

Protecting members' personal data is a responsibility we take extremely seriously. 877 continuously invests in the latest security infrastructure to keep your data safe at all times.

Technical Security Measures

• 256-bit SSL/TLS encryption for all data in transit between your device and 877 servers.
• Encryption at rest for all stored personal and financial information.
• Multi-layered firewall and intrusion detection system (IDS/IPS) operating 24/7.
• Real-time security monitoring with an on-standby incident response team.
• Regular penetration testing conducted by independent security experts.
• Two-factor authentication (2FA) for both member account and internal staff access.

Administrative Measures

• Access to member personal data is restricted solely to staff with a legitimate business need.
• All staff who handle personal data undergo comprehensive data protection training.
• Internal security audits are conducted regularly to ensure ongoing compliance.

The 877 platform uses cookies and similar tracking technologies to ensure a smooth, secure, and personalised user experience. Cookies are small text files stored on your device when you visit our website or use our app.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled as they are essential to platform operations.
• Performance Cookies: Collecting information on how you use the platform to help us identify technical issues and improve performance.
• Functional Cookies: Storing your preferences such as language and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregated, anonymised usage patterns for ongoing platform improvement purposes.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and security of the 877 platform.

Under Malaysia's PDPA and sound data protection principles, you as a 877 member have several important rights regarding your personal data. 877 fully respects and facilitates the exercise of these rights.

877 does not retain your personal data longer than is necessary to fulfil the original purpose of collection or as required by law. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account is active and for the required period following account closure to fulfil legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction, in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, in accordance with applicable AML/CFT requirements.
• Security Logs: Retained for 12 months for security incident investigation purposes.
• Communication Data: Emails and Live Chat records are retained for 2 years for training and service improvement purposes.
• Cookie Data: Depending on the type of cookie — from the current session up to a maximum of 24 months for functional cookies.

After the designated retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

The 877 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect, store or process personal data of individuals under 18 years of age.

If you believe that a person under the age of 18 has registered an account on the 877 platform, please contact us immediately at [email protected]. We will investigate the matter and take immediate action, including closing the account in question and deleting all related data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the 877 privacy team is ready to assist you.

Contact Channels

• Privacy Email: [email protected] — for data requests, privacy complaints, and policy enquiries.
• Live Chat: Available 24/7 on the 877 platform for general privacy-related enquiries.
• Help Centre: Visit the FAQ for answers to frequently asked questions on privacy and account security.

Complaints Process

If you are not satisfied with our response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia or the relevant regulatory body in your country.

We are committed to responding to all privacy-related enquiries within 5 business days and resolve formal complaints within 21 business days. For more complex cases requiring deeper investigation, we will keep you updated on the progress of your case on a regular basis.