Sl777 Privacy Policy –
Your Privacy, Our Priority

1. Introduction & Scope of This Policy

This Privacy Policy is published by sl777 and applies to all users who access or use the sl777 platform, including the website, mobile app, and any related digital services. This document explains in detail how sl777 handles your personal data from the point of collection through to storage and deletion.

By registering a sl777 account or continuing to use our platform, you are deemed to have read, understood, and agreed to all provisions of this Privacy Policy. If you do not agree, please discontinue use of the sl777 platform and contact us to close your account.

2. Personal Data We Collect

Sl777 collects various categories of personal data to enable us to provide a safe, efficient, and responsible service to all our users. Data collected is limited to what is strictly necessary for the stated purposes.

2.1 Data You Provide Directly

• Full name as per official identification document
• Malaysian identity card number (MyKad) or passport
• Date of birth for age verification
• Email address and mobile phone number
• Current residential address
• Bank account or digital wallet information for transaction purposes
• KYC documents such as a copy of MyKad and proof of address

2.2 Data Collected Automatically

• IP address and city-level geolocation data
• Device type, operating system and browser version
• In-platform activity data including game history and transaction records
• Login and logout records including time and date
• Cookie data and similar tracking technologies
• Session information and platform usage patterns

3. How We Use Your Data

Personal data collected by sl777 is used responsibly and solely for legitimate purposes. We will not use your data for any other purpose without first obtaining your consent.

4. Data Sharing With Third Parties

Sl777 takes a highly limited and transparent approach to sharing users' personal data. We do not sell or commercialise user data. Data sharing only occurs in the following situations:

• Payment Service Providers: Transaction data that must be shared with payment providers such as FPX, Touch 'n Go eWallet, GrabPay, and Boost solely for transaction processing purposes.
• Technical Service Providers: Cloud infrastructure and cybersecurity service providers that help operate the sl777 platform, subject to strict confidentiality agreements.
• Regulatory Authority: sl777 will disclose personal data to government authorities or law enforcement agencies when required by court order or applicable law.
• KYC & AML Providers: Identity verification information is shared with accredited KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers to meet compliance requirements.

Every third party that receives sl777 user data is required to comply with data security standards equal to or higher than those of sl777 itself, and the data may only be used for the stated purposes.

5. Cookies & Tracking Technologies

Sl777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the sl777 website.

5.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how users interact with the sl777 platform to help us identify technical issues and improve performance.
• Functional Cookies: Remembers your preferences such as language, display settings and login details to deliver a more personalised experience.
• Analytics Cookies: Helps us understand usage patterns and improve the content and features of the sl777 platform.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the sl777 platform.

6. Data Retention Period

Sl777 retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The following are our general data retention guidelines:

• Active account data is retained for as long as the account remains active.
• After account closure, transaction data and KYC documents are retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• Customer support communication logs are retained for 2 years.
• Session cookie data is automatically deleted when the session ends or the browser is closed.
• Analytics data is retained in aggregated, non-personally identifiable form after 12 months.

7. User Rights Regarding Personal Data

As a sl777 user, you have certain rights regarding your personal data under Malaysia's PDPA 2010. sl777 fully respects these rights and provides straightforward channels for you to exercise them.

8. Data Security & Protection Measures

Sl777 continuously invests in cutting-edge cybersecurity infrastructure to ensure user personal data is always protected. The key security measures we implement include:

• End-to-end encryption using TLS 1.3 protocol for all data communications.
• Two-factor authentication (2FA) for all admin and user account access.
• Regular penetration testing conducted by independent cybersecurity firms.
• 24-hour threat monitoring and intrusion detection system (IDS).
• Mandatory cybersecurity awareness training for all sl777 staff.
• A comprehensive and tested data breach response plan.
• Internal and external security audits conducted annually.

While sl777 takes all reasonable precautions, no security system can guarantee 100% protection against all cyber threats. We therefore encourage users to play their part in protecting their accounts by using strong passwords and not sharing their login credentials.

9. Cross-Border Data Transfers

In the course of its operations, sl777 may need to transfer users' personal data to servers or service providers located outside Malaysia. Any such data transfer will only be carried out when:

• The recipient country has data protection laws equivalent to or stricter than those of Malaysia.
• Sl777 has put in place adequate contractual protection measures with the receiving parties.
• Data transfer is necessary for the performance of the service contract between sl777 and the user.

Sl777 ensures that all cross-border data transfers are carried out to the same high security standards as data handling within Malaysia.

10. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding sl777's Privacy Policy or how we handle your personal data, we encourage you to contact us directly. The sl777 Data Protection Officer (DPO) team is ready to assist you.

You can reach us by email at [email protected] or via the 24/7 live chat available on the sl777 platform. sl777 is committed to responding within 5 working days to all privacy-related enquiries received.

11. Amendments to the Privacy Policy

Sl777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to our services. Any material amendments will be communicated to registered users via email or in-platform notification at least 7 days before taking effect.

The "Updated" date shown at the top of this document indicates when this Privacy Policy was last reviewed. Your continued use of the sl777 platform following any amendments constitutes your acceptance of those changes.