Modal777 Privacy Policy – Data Protection for Malaysian Players

Modal777 is an online casino platform built for Malaysian players, operating under the domain modal777.biz. We understand that privacy is more than a legal requirement — it is a fundamental right of every individual that must be respected and protected.

This Privacy Policy applies to all information collected through the Modal777 website, including during account registration, deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost or ShopeePay, use of slots, Live Casino, Sports Betting, and all interactions with our customer support team.

This policy does not cover third-party websites or services that may be linked from the Modal777 platform. We encourage you to read the privacy policy of each external website you visit separately.

Modal777 only collects data that is necessary to provide our services safely and effectively. The following are the categories of data we collect:

Modal777 no collect your full credit or debit card number. All sensitive payment information is handled directly by registered payment providers that maintain their own PCI-DSS security standards.

Your personal data is collected through several different channels as you interact with Modal777:

• Account registration: When you register a new account at Modal777, you provide us directly with basic information such as your name, phone number, and date of birth.
• Financial transactions: Each time you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u or CIMB Clicks, Boost, or ShopeePay, the transaction record is stored in our system for compliance and financial security purposes.
• Platform usage: Usage data such as the games you play, session duration, and betting records are collected automatically while you use the Modal777 platform. This data is used to enhance the user experience and meet compliance requirements.
• Cookies and tracking technologies: Modal777 uses cookies and similar technologies to remember your preferences, analyse usage patterns, and improve platform performance. Further details about cookies are covered in Section 8.
• Support communications: When you contact the Modal777 support team via live chat or email, records of those communications are retained to help resolve your issues and for service quality training purposes.
• Identity verification (KYC): In certain situations — such as large withdrawals or unusual account activity — Modal777 may require additional identity verification documents, such as a copy of your MyKad or bank account details, to comply with anti-money laundering (AML) requirements.

Modal777 uses your personal data only for legitimate purposes directly related to the provision of our services. We do not use your data for any other purpose without your explicit consent.

Primary purposes for data use:

• Account management: Creating and maintaining your Modal777 account, processing logins, and keeping your account secure.
• Payment processing: Processing deposits and withdrawals using your preferred Malaysian payment method — including ensuring payments reach the correct account promptly and securely.
• Gaming service provision: Grants access to all Modal777 games and services, including slots, live casino, blackjack, Sports Betting on football, badminton, e-sports, and more.
• Customer support: Responding to enquiries, resolving technical issues, and handling your complaints effectively.
• Security and fraud prevention: Detecting and preventing fraud, money laundering, and platform abuse — including identifying unauthorised login attempts and suspicious account activity.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including KYC and AML requirements that online financial and betting platforms are required to comply with.
• Platform improvement: Analysing usage patterns to improve the performance, design, and functionality of the Modal777 platform for a better player experience.
• Service communications: Sending important notices related to your account, including deposit confirmations, withdrawal notifications, changes to terms, and security alerts.

Modal777 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a non-negotiable commitment.

However, in the course of operating the platform, we may share only the necessary data with the following categories of third parties — and strictly to the extent required:

• Payment provider: Information required to process your transactions is shared with supported payment service providers such as FPX processing systems, DuitNow, and local Malaysian e-wallet providers. These providers maintain their own privacy policies and security standards.
• Game providers: Minimal technical data is shared with game providers such as Evolution Gaming and Pragmatic Play Live for the purpose of delivering gaming services. This does not include your full financial information.
• Technical service providers: Companies that assist us with server hosting, cybersecurity, and platform analytics may have limited access to technical data — all subject to strict confidentiality agreements with Modal777.
• Legal authorities: Modal777 will disclose personal data to the relevant authorities when required by law — for example, in response to a valid court order or financial crime investigation.

In all of the above cases, Modal777 ensures that only the necessary data is shared, and all third parties involved are bound by data protection agreements that meet Malaysia's PDPA standards.

Player data security is Modal777's highest technical priority. We continuously invest in security infrastructure to ensure your information remains protected at all times.

Technical security measures we employ:

• 256-bit SSL Encryption: All data transmitted between your device and Modal777's servers is protected by 256-bit Transport Layer Security (TLS) encryption — the same standard used by digital banks and financial institutions in Malaysia.
• Secure data storage: Personal data is stored on servers protected by multi-layered access controls, firewalls, and intrusion detection systems (IDS) operating 24 hours a day.
• Internal access controls: Only Modal777 staff who genuinely need access to specific data to perform their duties are granted that access — the principle of least privilege is strictly enforced.
• Two-factor authentication (2FA): We offer a 2FA option for player accounts as an added layer of protection. We encourage all Modal777 members to enable this feature.
• Continuous monitoring: Modal777's security system monitors account activity in real-time to detect unusual patterns that may indicate unauthorised access attempts or fraudulent behaviour.
• Regular security audits: Modal777 undergoes regular third-party security audits to identify and address any vulnerabilities in our systems before they can be exploited.

While we take all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. You also play an important role in keeping your account safe — never share your password with anyone, and use a strong, unique password for your Modal777 account.

Modal777 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law.

Once the specified retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

Modal777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our site.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the Modal777 platform and your overall experience.

As a data subject under Malaysia's PDPA, you have the following rights regarding the personal data Modal777 holds about you. Modal777 respects and facilitates the exercise of all these rights:

• Access rights: You have the right to request a copy of all personal data we hold about you. Modal777 will provide this within 21 business days of receiving a valid request.
• Right to rectification: If you find that any information we hold about you is inaccurate or outdated, you have the right to request a correction. This includes your name, phone number, or any other details in your Modal777 account profile.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that this right has limitations — we may need to retain certain data to fulfil legal obligations even after a deletion request.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time. Once you object, we will stop using your data for that purpose immediately.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
• Right to data portability: You may request the data you have provided to us in a machine-readable format for transfer to another service provider, where technically feasible.

To exercise any of the above rights, please submit a written request to privacy@modal777.biz with the subject line "Data Rights Request — [Your Account Number]". We will verify your identity before processing the request to ensure the security of your data.

Modal777 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store, or process personal data from any individual under the age of 18.

If we discover or receive credible information that an individual under the age of 18 has registered an account on Modal777, we will take immediate action to:

• Suspend the account in question immediately
• Delete all personal data associated with the account
• Return any remaining funds in the account to the original payment method
• Reporting the case to the relevant authorities if required

If you are a parent or guardian and believe that your underage child may have registered an account on Modal777, please contact us immediately at privacy@modal777.biz with the relevant details so we can take appropriate action without delay.

Modal777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our services.

When material changes are made to this policy, we will:

• Updating the "Last Updated" date shown at the top of this document
• Sending a notification to your registered email address if the changes significantly affect how we use or protect your data
• Displaying a prominent notice on the Modal777 homepage for a minimum of 14 days before the changes take effect

Your continued use of the Modal777 platform after any policy changes take effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account and request data deletion in accordance with the procedure outlined in Section 9.

We encourage you to review this Privacy Policy page periodically so you stay informed of our latest commitments to protecting your privacy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Modal777 handles your personal data, our team is here to help:

• Dedicated Privacy Email: privacy@modal777.biz — for all enquiries related to personal data, data access requests, and privacy complaints
• General Support Email: support@modal777.biz — for general enquiries about the Modal777 platform
• Live Chat: Available on the platform after login — for immediate support
• Operating hours: 24 hours a day, 7 days a week

For formal privacy complaints, please send an email with the subject line "Formal Privacy Complaint" along with full details of your issue. Modal777 is committed to responding to all privacy complaints within 5 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).