Tiger777 Privacy Policy – Personal Data Protection for Malaysian Members

Tiger777 is an online Sports Betting and casino platform built specifically for Malaysian users. We take the privacy of our members seriously. Your trust in Tiger777 depends not only on a quality betting experience, but also on the confidence that your personal information is in safe hands and fully protected.

This Tiger777 Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing how organisations in Malaysia handle individuals' personal data. We do not merely meet the minimum legal requirements; we hold ourselves to a higher standard of data protection because we believe it is simply the right thing to do.

When you register a Tiger777 account, make a deposit via Touch 'n Go, DuitNow, GrabPay, or other methods, place a bet on a Malaysia Super League match, or use any feature on our platform, you share certain information with us. This policy explains exactly what that information is, how it is used, who it may be shared with, and how you can control your own data.

Tiger777 collects various types of personal data depending on how you interact with our platform. Below is a detailed explanation of each category of data we collect:

Account Registration Data: When you register a Tiger777 account, we collect your full name, Malaysian mobile number, email address, password (stored in encrypted form that is unreadable by anyone, including Tiger777 staff), and date of birth for age verification purposes.

Identity Verification Data (KYC): To process withdrawals exceeding certain thresholds and to comply with anti-money laundering requirements, Tiger777 may request a copy of your identity document such as your MyKad or passport. This data is stored at the highest level of security and is accessible only to authorised verification staff.

Financial Data: Your deposit and withdrawal records, including the payment method used (whether Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay or FPX), transaction amounts and reference numbers. We do not store your full bank account number or credit card details — these are handled directly by registered payment processors.

Betting Activity Data: Your betting records, including matches wagered on, amounts, odds, and outcomes. This data is required for bonus calculations, dispute resolution, and compliance with regulatory reporting requirements.

Technical Data: IP address, device type, operating system, browser type, access times and system log data. This data is used for security, fraud detection and technical platform improvement purposes.

The personal data we collect is used for clearly defined and limited purposes. Tiger777 does not use your data for anything other than what is stated below:

• Account management: To create, verify, and maintain your Tiger777 account so you can log in, deposit, place bets, and withdraw funds securely.
• Payment processing: To process your deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and to process withdrawal of your winnings to your verified payment method.
• Identity verification: To verify that you meet the minimum age requirement of 18 years and to comply with KYC (Know Your Customer) requirements set by the relevant regulatory bodies.
• Fraud prevention: To identify and prevent fraudulent activity, money laundering, duplicate accounts, and platform abuse.
• Bonus management: To calculate bonus eligibility, process bonus claims and monitor the fulfilment of rollover requirements.
• Customer support: To allow Tiger777's support team to verify your identity and assist you with any issues that arise.
• Service communications: To send important notifications about your account, platform updates, or security information via email or SMS.
• Platform improvements: To analyse usage patterns on an aggregate (not individual) basis in order to improve the Tiger777 user experience.
• Regulatory compliance: To fulfil reporting obligations to the relevant regulatory bodies in accordance with applicable law.

Tiger777 does not use your data for commercial profiling sold to advertisers, for third-party marketing purposes, or for any purpose not listed above without first obtaining your explicit consent.

Tiger777 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). These grounds are:

• Consent: When you register a Tiger777 account and agree to our Terms & Conditions and Privacy Policy, you provide consent for the data processing described herein. You may withdraw this consent at any time, though doing so may mean you are no longer able to use the Tiger777 platform.
• Contract performance: The majority of data processing is necessary to perform the service agreement between Tiger777 and you as a member — including the processing of deposits, withdrawals and bet settlements.
• Legal obligation: Certain data processing is required to comply with applicable Malaysian laws, including anti-money laundering requirements and relevant gambling regulations.
• Legitimate interests: Tiger777 has a legitimate interest in processing certain data for the purposes of platform security, fraud prevention, and operational risk management.

Tiger777 does not sell, rent, or trade members' personal information to any third party for commercial purposes. This is an absolute commitment with no exceptions. However, in certain limited circumstances, Tiger777 may share some of your data with the following parties:

• Authorised payment processors: To process your deposits and withdrawals, Tiger777 shares the necessary transaction information with authorised payment processors such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX. These processors are bound by strict confidentiality agreements and receive only the minimum data required to process transactions.
• Technical service providers: Third-party companies that assist Tiger777 with technical operations such as server hosting, security monitoring and platform performance analytics. All such providers are bound by data processing agreements that prohibit them from using your data for any other purpose.
• Competent authorities: In situations where Tiger777 is required by law or court order to disclose certain information to law enforcement agencies or regulatory bodies, we will do so. Tiger777 will inform you of any such disclosure unless we are legally prohibited from doing so.
• Business transfer: In the event of a merger, acquisition, or sale of Tiger777's assets, member information may be transferred to the new entity. In such circumstances, the receiving party will be bound by the same or stricter privacy obligations.

In all of the above data-sharing situations, Tiger777 ensures that the receiving party adheres to data protection standards equivalent to or higher than those we apply ourselves.

Tiger777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key measures we have in place are:

• 256-bit SSL encryption: All communications between your browser and Tiger777's servers are encrypted using TLS protocol with a 256-bit key length — the same level of encryption used by leading banking institutions worldwide.
• Stored data encryption: Sensitive data stored in our databases — including passwords, identity document numbers, and payment details — is encrypted at rest using industry-standard encryption.
• Two-factor authentication (2FA): Tiger777 offers 2FA via SMS OTP codes for all accounts. We encourage all members to enable this feature for an added layer of protection.
• Internal access controls: Access to member data within Tiger777's internal environment is restricted to staff who require it to carry out their duties. All access is logged and periodically audited.
• Continuous security monitoring: Automated monitoring systems operate around the clock to detect suspicious activity, intrusion attempts, and anomalies in data access patterns.
• Regular security audits: Tiger777's security infrastructure undergoes periodic independent third-party audits to identify and address any potential vulnerabilities.
• Incident response plan: Tiger777 has a detailed incident response procedure in the event of a data breach. This includes protocols for notifying affected members and regulatory authorities within the timeframes prescribed by law.

Tiger777 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform operations — including maintaining your login session, saving language preferences and ensuring security features function correctly. These cookies cannot be disabled as the platform will not function without them.
• Performance cookies: Collecting information on how you use the Tiger777 platform — pages visited, time spent, and errors encountered. This data is used in aggregate to improve platform performance and is not used to identify individuals.
• Functional cookies: Allowing the platform to remember your preferences, such as favourite sports markets, display settings, and language selection, so you do not need to reconfigure them every time you log in.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to fully use certain features of the Tiger777 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Tiger777 does not retain your personal data for longer than is necessary for the purposes outlined in this policy, or longer than is required by law. The retention periods for key data categories are:

• Active account data: Retained for the duration your Tiger777 account remains active, plus any additional period required for audit and legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with applicable legal requirements in Malaysia.
• Betting records: Retained for a minimum of 5 years for dispute resolution, audit and regulatory compliance purposes.
• KYC documents: Retained for the duration of the active account period plus 5 years after account closure, in line with anti-money laundering requirements.
• Technical log data: Retained for a maximum of 90 days for security and fraud detection purposes, then automatically deleted.
• Customer support communication data: Retained for 2 years from the date of last interaction for service quality purposes and reference in the event a dispute arises at a later stage.

When data is no longer required and there is no legal obligation to retain it, Tiger777 will securely delete or anonymise the data using methods that ensure it cannot be recovered.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to the personal data Tiger777 holds about you:

• Right of access: You have the right to request a copy of the personal data Tiger777 holds about you. Tiger777 will respond to valid access requests within 21 days of receipt.
• Right to rectification: If you find that the personal data we hold about you is inaccurate, outdated or incomplete, you have the right to request that we correct it. You can update most of your profile information directly in your Tiger777 account settings.
• Right to withdraw consent: You may withdraw your consent to certain data processing activities at any time. Such withdrawal will not affect the validity of any processing carried out prior to that point.
• Right to object: In certain situations, you have the right to object to the processing of your personal data, particularly for direct marketing purposes.
• Right to restrict processing: In certain circumstances prescribed by the PDPA, you have the right to request that Tiger777 restrict the processing of your data while your request is under review.

To exercise any of the above rights, please contact the Tiger777 privacy team by email at support@tiger777.asia, stating the specific right you wish to exercise along with sufficient identity verification information. Tiger777 will verify your identity before processing any data-related request.

Tiger777 is a platform intended exclusively for adults aged 18 and above. We actively prevent individuals under the age of 18 from using our platform and do not knowingly collect personal data from them.

During registration, we require date-of-birth verification and reserve the right to request identity documents to confirm age where there is reasonable cause for doubt. Should Tiger777 determine that personal data has been inadvertently collected from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian who believes your underage child may have registered a Tiger777 account, please contact us immediately at support@tiger777.asia. We will investigate and take appropriate remedial action without delay.

Tiger777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or newly introduced platform features. Any changes will be published on this page with an updated effective date.

For significant amendments — particularly those that materially change how we collect or use your personal data — Tiger777 will endeavour to notify you via your registered email address or through an in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the changes and decide whether you wish to continue using the Tiger777 platform.

Your continued use of the Tiger777 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We therefore recommend that you review this page periodically.

If you have any questions, concerns or complaints regarding how Tiger777 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

Tiger777's support team is available 24/7 via live chat within the platform. For privacy-related matters that require more thorough review, emailing support@tiger777.asia is the most appropriate channel, as it allows us to accurately record your request and provide a detailed response.

Tiger777 is committed to responding to all privacy-related enquiries within 3 working days of receipt. For more complex data access or data amendment requests, the response period is up to 21 working days, in line with Malaysia's PDPA 2010 requirements.