vm777 Privacy Policy

Introduction

vm777 ("we", "us", "our") is the operator of the online casino and sports betting platform accessible at vm777.casa. This Privacy Policy describes how we collect, use, share, protect and retain personal data about you when you visit vm777, register an account, make MYR deposits or withdrawals, place wagers on casino games, Liga Super Malaysia, the EPL, UFC or other supported markets, contact our support team, or claim promotions.

By creating a vm777 account or using our services, you acknowledge that you have read this Privacy Policy and understand how your personal data will be handled. If you do not agree, you should not register or continue to use vm777.

This Privacy Policy is to be read alongside the Terms & Conditions and the Responsible Gambling page. In the event of conflict, the Privacy Policy governs data matters.

Definitions

The following expressions carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably identify you as an individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data — including collection, storage, use, disclosure, correction and deletion.
• "Account" means your registered vm777 player profile and associated credentials.
• "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, vm777.
• "Processor" means a third party that processes Personal Data on our behalf under our documented instructions.
• "Services" means all products, features and communications made available through vm777, including casino games, the sportsbook, promotions, and customer support.
• "You" or "User" means the individual whose Personal Data is being processed — typically a registered vm777 player or visitor.

Personal Data We Collect

vm777 collects Personal Data that you provide directly, that is generated by your use of the Services, or that we receive from third-party verification and payment partners. We collect only the data reasonably necessary for the purposes described in this Privacy Policy.

3.1 Registration and Identity Data

When you create a vm777 account, we collect your full legal name, date of birth, residential address (including city — e.g., Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, or Johor Bahru), email address, and mobile number. Identity verification (KYC) may additionally require a copy of your Malaysian NRIC (MyKad), passport, driving licence, a recent utility bill or bank statement, and a selfie image.

3.2 Financial and Payment Data

To process MYR transactions, we collect details sufficient to route payments through approved methods — such as account name references for Maybank, CIMB Clicks, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and supported cryptocurrency wallets. We do not store full card numbers, banking PINs, or e-wallet passwords.

3.3 Gameplay and Transaction Records

We maintain records of deposits, withdrawals, bonus claims, wager history (including sports markets such as Liga Super Malaysia and EPL), game session data, and account balance movements. These records support account management, dispute resolution, and regulatory compliance.

3.4 Technical and Device Data

Our systems automatically record your IP address, browser type, operating system, device identifiers, session timestamps, referring URLs, and error logs when you access vm777. This data is used for security monitoring, fraud detection, and service improvement.

3.5 Communications Data

If you contact vm777 support via Live Chat, WhatsApp, or email, we retain a record of the conversation, including any attachments or evidence you provide, to facilitate resolution and for training and audit purposes.

How We Use Your Personal Data

vm777 processes your Personal Data for the following purposes:

• Account creation and management — to register, verify, maintain and secure your vm777 account.
• Payment processing — to receive deposits and issue withdrawals through supported MYR and cryptocurrency payment methods.
• Identity verification (KYC) — to confirm you meet the minimum age requirement of 21 years, verify ownership of payment instruments, and satisfy anti-money-laundering standards.
• Service delivery — to provide access to casino games, the sportsbook, live dealer tables, promotions, and the VIP programme.
• Security and fraud prevention — to detect and prevent unauthorised account access, bonus abuse, collusion, money laundering and other prohibited conduct.
• Responsible gambling — to administer deposit limits, self-exclusion and cooling-off requests, and to identify patterns that may indicate problematic gambling.
• Customer support — to respond to enquiries, investigate complaints and maintain service records.
• Legal and regulatory compliance — to meet obligations imposed by our international licensing authority, anti-money-laundering frameworks, and applicable law.
• Analytics and improvement — to understand how our platform is used, identify technical issues, and make improvements. Aggregated, anonymised data may be used for these purposes.
• Marketing communications — to send promotional offers, bonus notifications and platform news where you have given consent or where a legitimate interest applies, subject to your communication preferences.

Legal Basis for Processing

We process your Personal Data on one or more of the following grounds, depending on the specific purpose:

• Contractual necessity — processing required to perform the vm777 player agreement, including account administration, payment processing, and game delivery.
• Legal obligation — processing required to comply with anti-money-laundering rules, identity verification obligations, and directives issued by our licensing authority.
• Legitimate interests — processing for fraud prevention, security monitoring, responsible gambling functions, and service improvement, where our interests do not override your fundamental rights.
• Consent — processing for optional marketing communications, where we rely on your clear affirmative agreement. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Sharing of Personal Data

vm777 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share data only as described below and only to the extent necessary.

6.1 Identity Verification Partners

We engage licensed KYC and AML service providers to verify identity documents and conduct background screening. These providers process your Personal Data as data processors under our instructions and applicable data protection frameworks.

6.2 Payment Service Providers

Payment references and transaction data are shared with FPX, DuitNow, e-wallet operators, bank payment gateways, and cryptocurrency processing services to execute and confirm your transactions. Each provider operates under its own applicable regulatory and data protection framework.

6.3 Game and Platform Suppliers

Third-party game studios and live dealer content providers may receive technical session data necessary to deliver their games, resolve technical disputes, and audit RNG certification. Aggregated, non-identifiable data may be shared for statistical and product development purposes.

6.4 Licensing Authority and Legal Disclosures

We may share Personal Data with our international licensing authority where required under our licensing obligations, and with law enforcement or other competent authorities where legally compelled or permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, Personal Data may be transferred as part of that transaction. We will provide notice before Personal Data is subject to a different Privacy Policy.

International Data Transfers

vm777 operates an internationally distributed platform. Your Personal Data may be transferred to, stored on, or processed by servers and service providers located outside Malaysia, including in jurisdictions where the data protection laws may differ from those in Malaysia.

Where Personal Data is transferred to countries not recognised as providing an equivalent level of data protection, we implement safeguards such as contractual clauses, processor agreements, and technical security measures to protect data in transit and at rest. Details of applicable safeguards may be requested through vm777 support.

Data Retention

vm777 retains Personal Data for as long as necessary to fulfil the purpose for which it was collected, to administer your account, or to comply with applicable legal, regulatory, or licensing obligations.

Account and transaction records are typically retained for a minimum period following account closure to meet anti-money-laundering, fraud investigation, and licensing audit requirements. The specific retention period depends on the nature of the data and applicable obligations.

Once the applicable retention period expires, Personal Data is deleted or anonymised so that it can no longer be linked to any individual. If you request account closure, residual copies of data held in backup systems will be deleted in accordance with our standard backup rotation cycle.

Security Measures

We implement technical, administrative and physical controls designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS) encryption for all data transmissions between your device and our servers;
• one-way cryptographic hashing for stored passwords;
• role-based access controls limiting employee access to Personal Data on a need-to-know basis;
• intrusion detection systems, real-time fraud monitoring and automated anomaly alerts;
• regular security assessments and vulnerability testing of our platform infrastructure;
• secure destruction protocols for data that has exceeded its retention period.

You also have a role in protecting your account. Use a strong, unique password for vm777, enable any available two-factor authentication, keep your contact details current, and never share your login credentials or one-time verification codes with any person. If you suspect unauthorised account access, contact vm777 support immediately.

Cookies and Similar Technologies

vm777 uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform, remember your preferences, maintain session security, and support analytics. Cookies may also be used to measure the effectiveness of promotional communications.

Most browsers allow you to refuse, delete, or receive a warning before accepting cookies. Disabling strictly necessary cookies may impair platform functionality or prevent login. Disabling optional cookies does not affect your ability to play or withdraw funds.

Your Data Protection Rights

Subject to applicable law and our legitimate interests (including legal retention obligations), you may have the following rights with respect to your Personal Data held by vm777. To exercise any of these rights, please contact our support team using the information in Section 13.

• Right of access — to receive a copy of the Personal Data we hold about you and information about how it is used.
• Right to correction — to request correction of inaccurate or incomplete Personal Data.
• Right to erasure — to request deletion of Personal Data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to legal retention requirements.
• Right to restrict processing — to request that we limit processing of your Personal Data while the accuracy or lawfulness of processing is disputed.
• Right to data portability — to receive your Personal Data in a structured, machine-readable format for transfer to another service, where processing is based on consent or contract.
• Right to object — to object to processing based on legitimate interests, including for direct marketing purposes, which we will stop unless we can demonstrate compelling grounds.
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to rights requests within a reasonable period. In cases where a request cannot be fulfilled — for example, because retention is legally required — we will explain the reason.

Minors and Age Restriction

vm777 is intended solely for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from persons under the age of 21. All account registrations are subject to age confirmation, and identity verification checks are conducted before significant withdrawals are processed.

If we become aware that Personal Data has been collected from a person under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has accessed vm777, please contact support at the email address listed in Section 13.

Contact Us and Policy Updates

If you have questions about this Privacy Policy, wish to exercise a data protection right, or want to report a privacy concern, please contact our support team. Support is available 24/7 in English, Bahasa Melayu, and Mandarin via Live Chat and WhatsApp. The vm777 support email address is displayed below as plain text — it is not a clickable link:

[email protected]

When submitting a data rights request by email, please include your registered account username and a brief description of the request. Do not include your password, full banking details, or card PIN in any communication.

vm777 may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations, or industry best practices. Material updates will be published on this page with a new effective date displayed at the top. We encourage you to review this page periodically. Your continued use of vm777 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.