pepsi777 Privacy Policy

1. Introduction

pepsi777 ("pepsi777", "we", "us", "our") operates the online gaming platform accessible at pepsi777.asia. We are committed to protecting the privacy and personal data of every individual who accesses, registers on, or uses the pepsi777 platform ("you", "Member", "User"). This Privacy Policy ("Policy") sets out in clear terms what personal information pepsi777 collects, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you in respect of your personal data.

By registering an account with pepsi777 or continuing to use the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside pepsi777's Terms and Conditions and Responsible Gaming Policy, both of which are accessible on this platform.

pepsi777 processes personal data in accordance with applicable data protection legislation and in a manner consistent with the principles of international gaming authority compliance frameworks. If you have any questions regarding this Policy or the way pepsi777 handles your personal data, please contact us at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

pepsi777 collects personal data from Members through several channels, including account registration, identity verification, platform usage, and customer support interactions. The categories of personal data we collect include:

2.1 Registration & Identity Data. When you create a pepsi777 account, we collect your full legal name, date of birth, residential address, email address, and a chosen username. This information is necessary to establish and administer your account and to verify your eligibility to use the Services.

2.2 Identity Verification (KYC) Data. To comply with Know Your Customer (KYC) requirements consistent with international gaming authority standards, pepsi777 will request copies of government-issued identity documents — such as your Malaysian MyKad or valid passport — and may also request proof of address and, in certain circumstances, documentation evidencing source of funds. KYC documents are processed for the purpose of age verification, identity authentication, and fraud prevention.

2.3 Financial Data. pepsi777 collects details of deposit and withdrawal transactions including payment method identifiers (e-wallet account references, bank account details used for transfers), transaction amounts in Malaysian Ringgit (MYR), and transaction timestamps. pepsi777 does not store full card numbers or sensitive payment authentication data beyond what is strictly necessary for transaction processing.

2.4 Technical & Usage Data. pepsi777 automatically collects technical data when you access the platform, including IP address, device type, operating system, browser type, session duration, pages visited, game activity, wagering history, and login timestamps. This data is used for security monitoring, fraud detection, platform performance optimisation, and regulatory compliance.

2.5 Communications Data. Where you contact pepsi777 customer support — via live chat or email — the content of those communications, together with associated metadata, is retained for quality assurance, training, compliance, and dispute resolution purposes.

2.6 Responsible Gaming Data. Where a Member utilises pepsi777's responsible gaming tools — including deposit limits, self-exclusion, or cooling-off periods — records of those elections are maintained as part of your account profile to ensure the tools are correctly enforced and to prevent circumvention.

3. How We Use Your Personal Data

pepsi777 processes your personal data for the following purposes:

• Account administration: creating, maintaining, and closing your pepsi777 account; verifying your identity and age; processing deposits and withdrawals in MYR; managing bonus credits and promotional eligibility.
• Service delivery: providing access to games, sportsbook markets, live casino content, and all other features of the pepsi777 platform.
• Regulatory compliance: fulfilling obligations under international gaming authority licensing requirements including KYC verification, anti-money laundering (AML) monitoring, sanctions screening, and reporting obligations.
• Security & fraud prevention: detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and any conduct that breaches pepsi777's Terms and Conditions.
• Responsible gaming: administering self-exclusion, deposit limits, and cooling-off periods; identifying patterns of play that may indicate problem gambling and taking appropriate intervention steps.
• Customer support: responding to enquiries, resolving complaints, and managing disputes.
• Marketing communications: where you have opted in to receive marketing communications, sending you information about pepsi777 promotions, bonuses, and new features. You may opt out of marketing communications at any time by contacting pepsi777 support.
• Platform improvement: analysing aggregate usage data to improve the pepsi777 platform, fix technical issues, and enhance user experience.

4. Legal Basis for Processing

pepsi777 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between pepsi777 and the Member, including account management, game access, and payment processing.
• Legal obligation: processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and gaming licensing obligations.
• Legitimate interests: processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by the Member's fundamental rights and freedoms.
• Consent: processing for direct marketing communications, where the Member has provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

5. Disclosure to Third Parties

pepsi777 does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipient where necessary and on a need-to-know basis only:

• Payment processors: financial institutions and e-wallet service providers (including those facilitating Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions) to process deposits and withdrawals in MYR on your behalf.
• Identity verification providers: third-party KYC and AML screening services engaged to verify Member identity and fulfil regulatory compliance obligations.
• Game content providers: licensed game studios and software suppliers whose games are hosted on the pepsi777 platform may receive limited technical data necessary for game delivery and RNG certification.
• Regulatory authorities: gaming licensing authorities, law enforcement agencies, and other competent regulatory bodies where disclosure is required by applicable law or regulatory instruction.
• Technology service providers: cloud hosting, customer support platform, and cybersecurity vendors engaged by pepsi777 to support platform operations under confidentiality obligations.

All third parties engaged by pepsi777 to process personal data on our behalf are required to do so only in accordance with pepsi777's documented instructions and applicable data protection requirements, under contracts that impose appropriate data security and confidentiality obligations.

6. International Data Transfers

In certain circumstances, the personal data of pepsi777 Members may be transferred to, stored, or processed in jurisdictions outside Malaysia. Where such transfers occur, pepsi777 ensures that appropriate safeguards are in place — including contractual data transfer mechanisms consistent with applicable data protection law — to maintain an equivalent level of protection for your personal data regardless of where it is processed.

7. Cookies & Tracking Technologies

pepsi777 uses cookies and similar tracking technologies on the pepsi777.asia platform. Cookies are small data files placed on your browser or device when you visit the platform. pepsi777 uses the following categories of cookies:

• Strictly necessary cookies: required for the platform to function correctly, including session management, login state maintenance, and security features. These cannot be disabled.
• Functional cookies: used to remember your preferences and settings, such as language preference and session configuration, to enhance your pepsi777 experience.
• Analytics cookies: used to collect aggregate information about how Members use the pepsi777 platform, enabling us to improve performance, identify technical issues, and optimise user experience. Data collected through analytics cookies does not identify individual users.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the pepsi777 platform. pepsi777 does not use advertising or third-party behavioural tracking cookies.

8. Data Retention

pepsi777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. In practice, this means:

• Account data and KYC documentation are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under international gaming authority standards.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Responsible gaming records (including self-exclusion elections) are retained for a minimum of five (5) years to prevent re-registration circumvention.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pepsi777's data deletion procedures.

9. Security Measures

pepsi777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser or device and the pepsi777 platform;
• Encryption of sensitive data fields at rest within pepsi777's database infrastructure;
• Access controls restricting internal system access to authorised personnel on a need-to-know basis;
• Regular security monitoring, vulnerability assessments, and penetration testing;
• Two-factor authentication options for Member account access.

While pepsi777 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is entirely immune from security risk. Members are reminded of their own obligation to maintain the security of their pepsi777 account credentials.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by pepsi777:

• Right of access: the right to request a copy of the personal data pepsi777 holds about you.
• Right to rectification: the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pepsi777's legal retention obligations.
• Right to restriction of processing: the right to request that pepsi777 restricts the processing of your personal data in certain circumstances.
• Right to data portability: the right to receive personal data you have provided to pepsi777 in a structured, commonly used, machine-readable format.
• Right to object: the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact pepsi777 at [email protected] (plain text — not a clickable link). pepsi777 will respond to data rights requests within a reasonable timeframe and in accordance with applicable data protection law. Please note that identity verification may be required before a data rights request is actioned.

11. Children's Privacy

The pepsi777 platform is strictly restricted to individuals aged 21 years and above. pepsi777 does not knowingly collect personal data from individuals under the age of 21. Any account found to be held by an individual under 21 will be immediately closed, deposits will be returned to the source payment method, and any personal data collected will be deleted in accordance with pepsi777's data deletion procedures. If you believe that a person under the age of 21 has registered a pepsi777 account, please contact us immediately at [email protected] (plain text only).

12. Changes to This Privacy Policy

pepsi777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or platform data processing practices. Where a material change is made to this Policy, pepsi777 will notify registered Members by email to their registered address or via a prominent notice on the pepsi777.asia platform. The updated Policy will be effective from the date published on this page. Continued use of the pepsi777 platform following notification of a Policy update constitutes acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pepsi777 processes your personal data, please contact the pepsi777 Data Protection team at: [email protected] (plain text — not a clickable link).

pepsi777 customer support is available 24 hours a day, 7 days a week, and aims to respond to all data-related enquiries within five (5) business days. For formal data rights requests, a response will be provided within thirty (30) days of receipt, or within any shorter period required by applicable data protection law.