Privacy Policy club7 —
Your Data Protection Is Our Priority

Club7 takes user privacy very seriously. As a digital entertainment platform serving millions of Malaysian players, we understand that your trust is our most valuable asset. This Privacy Policy is designed to explain clearly and honestly how we handle your personal data from the moment you register until you stop using the platform.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognized data protection standards. This means every decision we make regarding your data is guided by the principles of fairness, transparency, and accountability.

In plain terms: we collect only what we need, we use it solely for the stated purposes, and we never sell your personal information to anyone.

Club7 collects your personal data through several key channels: registration forms, active platform usage, the KYC verification process, and interactions with our customer support team. Below is a summary of the types of data we collect and the reasons for collecting them:

We do not collect sensitive personal data such as your medical information, religious beliefs, or political affiliations.

Every piece of data we collect has a specific and legitimate purpose. club7 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and maintaining your club7 account securely.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions quickly and securely.
• KYC Verification: Meeting regulatory requirements to keep the platform free from fraud and money laundering.
• Platform Security: Detecting and preventing suspicious activity, fraud, or unauthorized access to your account.
• Customer Support: Helping resolve inquiries, complaints, and technical issues effectively.
• Platform Communications: Sending important account-related notifications, promotions you have subscribed to, and service updates.
• Platform Improvement: Analyzing aggregated usage patterns to improve the quality and performance of the platform.
• Legal Compliance: Complying with directives from competent authorities when legally required.

Club7 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where sharing data with selected partners is necessary for platform operations:

• Payment Providers: Required transaction information is shared with approved payment gateways to process your deposits and withdrawals.
• Game Providers: The minimum necessary data is shared with licensed game providers to ensure a seamless gaming experience.
• KYC Services: Identity verification documents are shared with verified and approved third-party KYC service providers.
• Authorities: Data may be disclosed to the relevant authorities when required by law or a valid court order.
• Cloud Services: Data is stored on secure cloud servers with infrastructure providers holding recognised security certifications.

All third-party partners we work with are bound by strict confidentiality agreements and are required to comply with data protection standards equivalent to those of club7.

Protecting your personal data from unauthorized access, leaks, or misuse is a core technical priority at club7. We continually invest in robust security infrastructure to ensure your data remains safe at all times.

The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and club7's servers is fully encrypted.
• Two-Factor Authentication (2FA): An additional security layer for login and important transactions.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to threats in real time.
• Data Segregation: Financial data is stored separately from profile data with strict access controls.
• Regular Security Audits: Independent security assessments are conducted periodically by external experts to identify and patch any vulnerabilities.
• Restricted Internal Access: Only authorized personnel have access to user data, and every access is automatically logged.

The club7 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Cookies are small text files stored on your device when you browse our platform.

Types of cookies we use:

• Essential Cookies: Required for basic platform operations such as login session verification and account security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how users interact with the platform to help us improve performance and stability.
• Functional Cookies: Remembering your preferences and settings such as language and display mode for a more personalized experience.
• Analytics Cookies: Used for internal analytics to understand aggregated and anonymised usage patterns.

You can manage or block cookies through your web browser settings. Please note that blocking essential cookies may affect certain features of the club7 platform.

As a club7 user, you have the following rights regarding your personal data under Malaysia's PDPA and our internal policies:

To exercise any of the above rights, please contact the club7 support team. We will process your request within 14 business days of receipt.

Club7 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active Account Data: Retained for the duration your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years to comply with accounting and taxation legal requirements.
• KYC Documents: Retained for a minimum of 5 years following the end of the business relationship to comply with anti-money laundering requirements.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: Aggregated and anonymised usage data may be retained for a longer period for business analytics purposes.

Once the specified retention period has ended, your data will be securely deleted or anonymized using approved data disposal procedures.

Club7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or current industry standards. When significant changes occur, we will notify you via:

• In-platform notifications within club7 upon login.
• Notification email sent to the address registered on your account.
• Updates the "Last Updated" date at the top of this document.

Continued use of the club7 platform after changes are published will be considered your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you.

You may contact the club7 Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the club7 platform
• In-Platform Support: Log in to your account and access the "Contact Us" section.

We are committed to responding to all privacy-related inquiries within 3 business days. For complaints requiring further investigation, we will provide a status update within 14 business days.