Big777 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is published by big777, an online entertainment platform operating under the domain big777-jit.com ("Big777", "We", "Platform"). It describes how we collect, process, store and protect the personal data of individuals ("You", "Member") who use our platform.

This Policy applies to all personal data collected through the big777 website, mobile app, customer support systems, and any other communication channels between you and big777 — including email, live chat, WhatsApp, and Telegram.

Big777 is committed to complying with all applicable data protection laws in Malaysia, including the Personal Data Protection Act 2010 (PDPA 2010) and any regulations issued under it. We view data protection not merely as a legal obligation, but as the foundation of trust we build with our growing member community.

Big777 collects personal data from you through several means. Below is a comprehensive overview of the types of data we may collect:

We may also receive data about you from legitimate third-party sources, such as identity verification service providers we use for the KYC process, or from fraud prevention service providers. Such data will only be merged with your profile for the purposes stated in this policy.

Big777 uses the personal data collected for the following purposes:

• Account Management: Creating and managing your member account, including the login process, identity verification and password management.
• Payment Processing: Processing deposits and withdrawals via your preferred Malaysian payment method — whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks.
• Service Delivery: Providing access to all big777 games and services — slots, Live Casino, table games, Sports Betting for the Malaysia Super League, EPL, badminton, e-sports, and more.
• Customer Support: Responding to enquiries, complaints and requests for assistance across all big777 support channels.
• Fraud Prevention: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and any misuse of the platform.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including financial reporting and anti-money laundering (AML) requirements.
• Platform Improvements: Analysing usage patterns to improve the overall performance, design, and user experience of the big777 platform.
• Service Communications: Sending important notifications about your account, changes to our terms, or relevant security information.
• Marketing Communications: Sending information about the latest big777 promotions, bonuses, and offers — only to members who have consented to receive such communications.
• Responsible Gaming: Monitoring gaming patterns to identify members who may need responsible gaming support and proactively reaching out to them where necessary.

Big777 will not use your data for any other purpose without first obtaining your consent, unless required by law.

Big777 processes your personal data on valid legal grounds under PDPA 2010 and internationally recognised data protection principles. The primary bases we rely on are:

• Contract Performance: Most data processing is necessary to fulfil the service agreement between you and big777 — without this data, we are unable to provide you with platform services.
• Legitimate Interest: Big777 has a legitimate interest in processing certain data for platform security, fraud prevention, and service improvement purposes — provided that these interests do not override your privacy rights.
• Legal Compliance: Certain data processing is required by Malaysian law, including anti-money laundering requirements and financial reporting obligations.
• Consent: For marketing communications and data sharing that is not essential to core operations, we will obtain your explicit consent beforehand.

Big777 understands that your trust is invaluable. We never sell your personal data. However, in the course of running the platform, we may share certain data with the following categories of third parties, strictly for the purposes stated:

• Payment Service Providers: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX processors receive only the data necessary to process your financial transactions — the minimum required to complete a payment.
• Gaming Service Providers: Gaming companies such as Evolution Gaming, Pragmatic Play, and PG Soft may receive the session identifiers required to deliver their games within the big777 platform. They do not receive your full personal identity information.
• Identity Verification Service Providers: Third-party providers that assist us in carrying out the KYC (Know Your Customer) process for accounts requiring more thorough identity verification.
• Technical Service Providers: Cloud computing, cybersecurity and analytics companies that help us operate the platform securely and efficiently. All such providers are bound by strict data processing agreements.
• Regulatory Authorities & Law Enforcement: Big777 will disclose data to the relevant authorities when required by Malaysian law or pursuant to a valid court order.

Protecting the personal and financial data of our members is big777's top operational priority. We implement multiple layers of technical and organisational safeguards to keep your data secure:

• Encryption in Transit: All communications between your device and big777's servers are protected by TLS 1.3 with AES-256 encryption — the highest industry standard currently available.
• Encryption at Rest: Sensitive data stored in big777's databases is encrypted at the field level, meaning that even in the event of unauthorised database access, the data remains unreadable without the encryption key.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection on their accounts. All internal administrative access at big777 requires 2FA without exception.
• Role-Based Access Control: big777 staff only have access to the data needed to carry out their job responsibilities. No staff member has unrestricted access to all member data.
• Real-Time Security Monitoring: big777's automated monitoring system detects and alerts on any suspicious activity, unauthorised access attempts, or patterns that indicate a potential security threat.
• Regular Security Audits: Big777 conducts regular independent security audits, engaging external cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: Big777 has tested incident response procedures in place to ensure we can respond swiftly and in an orderly manner should any security incident occur.

While no security system can guarantee complete protection under all circumstances, big777 continues to invest in the best available technology and procedures to keep your data as secure as possible.

Big777 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by Malaysian law. The following is a general guide to our data retention periods:

Once the retention period expires or upon your request for deletion (where permitted), big777 will securely delete your data using methods that ensure it cannot be recovered — including database anonymisation and permanent removal of physical files from storage servers.

Big777 uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the basic functionality of the big777 platform — including login sessions, language preference memory, and form security. Without them, the platform cannot function properly. They cannot be disabled.
• Performance & Analytics Cookies: We use anonymised analytics data to understand how members use the big777 platform — which pages are visited most, which games are popular, and where players may encounter navigation difficulties. This helps us continually improve the user experience.
• Functional Cookies: These cookies allow the big777 platform to remember your preferences — such as your display mode or notifications you have enabled — so you do not need to reconfigure them each time you log in.
• Marketing Cookies: Activated only with your explicit consent. These cookies are used to deliver promotions and advertisements relevant to your interests, based on your usage patterns on the big777 platform.

Big777 does not use cross-site tracking technologies to monitor your activity on other websites outside our platform. Our tracking is limited strictly to activity within the big777 platform.

As a big777 member and data subject under the PDPA 2010, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request and receive a copy of the personal data big777 holds about you. This request can be made through your account settings or by contacting our support team.
• Right to Rectification: If you find that personal data big777 holds about you is inaccurate or incomplete, you have the right to request a correction. Some data can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you have the right to request that big777 delete your personal data. This right is subject to big777's legal obligations to retain certain data for prescribed periods.
• Right to Restriction of Processing: You may request big777 to restrict the processing of your personal data in certain circumstances — for example, while we are verifying the accuracy of data or considering your objection to processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to Withdraw Consent: For processing that relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise any of these rights, contact the big777 support team via email at support@big777-jit.com or through 24/7 live chat. We will process your request within 30 days of receipt. For more complex situations, we may require additional time and will notify you accordingly.

Big777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect member data. For any amendments involving material changes to how we use or share your personal data, we will:

• Notifying you via your registered big777 account email at least 14 days before the changes take effect.
• Displaying a clear in-platform notification on the first login after an amendment is published.
• Updating the "Last Updated" date at the top of this page.

Continued use of the big777 platform after any amendments take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with any amendments, please contact our support team before the effective date to discuss your options.