Vr7 Privacy Policy – Personal Data Protection for Malaysia Members

This Privacy Policy explains how vr7 ("we", "the platform", or "vr7.site") collects, uses, stores, and protects your personal information when you use our online betting and casino platform. It applies to all registered members and visitors of vr7.site who are based in Malaysia.

Vr7 respects the privacy of every individual who uses our platform. We are committed to handling your personal information responsibly, transparently, and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

By registering an account with vr7 or continuing to use this platform, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact our support team to proceed with account closure.

This Privacy Policy should be read together with vr7's Terms & Conditions, available on the relevant page. Both documents together form the complete agreement between you and vr7 regarding your use of our platform.

Vr7 collects your personal information through various channels as you interact with our platform. Below are the categories of data we collect and the reasons for doing so:

a) Data you provide directly:

• Registration information: Full name, email address, Malaysian phone number, date of birth, and account password.
• Identity verification information: A copy of your identity card (MyKad), proof of address, and any other KYC (Know Your Customer) documents required to verify your identity in line with anti-money laundering (AML) requirements.
• Financial information: Details of payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks), along with deposit and withdrawal transaction history in MYR (RM).
• Support communications: The content of your correspondence with vr7's customer support team via live chat or email.

b) Automatically collected data:

• Platform usage data: Betting history (Malaysia Super League football, EPL, badminton, MPL Malaysia esports, lottery), games played (blackjack, roulette, slots), session duration, login frequency.
• Device and technical data: IP address, device type (Android/iOS/desktop), operating system, web browser type and version, screen resolution, time zone.
• Cookie and tracking data: Session cookies, functional cookies, website usage analytics data. See Section 6 for more information.
• Approximate location data: Approximate location based on IP address for the purpose of service area verification. We do not collect precise GPS location data without your explicit consent.

Vr7 uses collected personal data solely for legitimate purposes that are necessary for operating the platform. The following outlines how your data is used:

• Account management: To create, verify, and maintain your vr7 member account. This includes processing registration, login, identity verification, and profile management.
• Transaction processing: Processing deposits and withdrawals via Malaysian local payment methods such as Touch 'n Go eWallet, DuitNow, GrabPay, and FPX. Ensuring all financial transactions are completed smoothly and securely.
• Provision of betting services: Enabling you to access all vr7 platform features, including Sports Betting, live casino, e-sports, lottery, and match odds.
• Security and fraud: To detect and prevent fraud, money laundering, system abuse, multiple account ownership, and any other unlawful activity on the vr7 platform.
• Legal compliance: To fulfil applicable legal and regulatory obligations, including KYC, AML, and Malaysia's PDPA requirements.
• Customer support: Enables vr7's support team to respond to enquiries, resolve complaints and provide technical assistance to members.
• Platform improvements: Analyses usage patterns in aggregate (not at an individual level) to improve platform features, user experience and vr7's technical performance.
• Service communications: Sending important account-related notifications such as deposit confirmations, security alerts, and policy updates. This is separate from marketing communications.
• Marketing communications (with consent): Sending information about vr7 promotions, bonuses and latest offers – only to members who have consented to receive such communications. You can unsubscribe at any time via your account settings.
• Responsible gambling: Monitoring betting patterns to identify signs of potential problem gambling and taking proactive steps to help members play responsibly.

Vr7 only processes your data where there is a valid legal basis to do so – whether because it is necessary to perform a contract with you, to fulfil a legal obligation, or based on our legitimate interests as a responsible platform operator.

Vr7 does not sell, rent or trade your personal information to any third party for marketing or commercial purposes. However, in the course of operating the platform, vr7 may need to share your data with the following categories of third parties under limited and controlled circumstances:

• Payment service providers: Payment technology providers that process your deposit and withdrawal transactions through methods such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u and CIMB Clicks. Data sharing is strictly limited to information required to process the transaction.
• Game software providers: Casino gaming and lottery technology companies that provide gaming platforms (blackjack, roulette, slots) to vr7. They receive only the data required to operate the games.
• Cloud and hosting service providers: Technical infrastructure providers that store and process vr7's data. All such providers are bound by strict data protection agreements.
• KYC and identity verification service providers: Identity verification companies that assist vr7 in verifying member identities and meeting AML/KYC legal requirements.
• Law enforcement agencies: When required by a court order, warrant, or lawful request from a Malaysian law enforcement agency. vr7 discloses only the minimum information necessary in such circumstances.

In the event of a takeover, merger, or sale of vr7's assets, member data may be transferred to the successor entity. In such circumstances, we will notify you before your data is transferred and becomes subject to a different privacy policy.

Vr7 continually invests in security infrastructure to keep your personal data safe. The technical and organisational security measures we have in place include:

• 256-bit SSL encryption: All data transmitted between your browser or app and vr7's servers is encrypted using TLS/SSL protocol with a 256-bit key length – the same standard used by leading banking institutions worldwide.
• Encryption of data at rest: Sensitive information such as member passwords is stored using a secure one-way hashing algorithm. This means your actual password is never stored in plain text anywhere in our systems.
• Internal access controls: Access to member data within vr7's internal systems is restricted on a need-to-know basis. Only employees who genuinely require access to carry out their responsibilities are permitted to view sensitive data.
• Two-factor authentication (2FA): vr7 supports and encourages the use of 2FA on member accounts as an additional layer of security.
• 24/7 security monitoring: An automated monitoring system that continuously detects and raises alerts for suspicious activity on the platform.
• Periodic security audits: Penetration testing and security audits conducted by independent third parties to identify and address vulnerabilities.
• Incident response plan: A clear procedure for handling any data security breaches, including protocols for notifying affected members within the timeframes required by law.

In the unlikely event of a security breach affecting your personal data, vr7 will notify you promptly via email or an in-platform notification, in accordance with applicable legal requirements.

The vr7 platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and understand how members use our services. Below are the types of cookies we use:

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the vr7 platform. To disable cookies in popular browsers, refer to your browser's help section (Chrome, Firefox, Safari, Edge).

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by vr7. All requests relating to these rights may be submitted through your account settings or by contacting our support team:

To submit any request relating to the rights above, contact the vr7 support team via live chat or email at support@vr7.site, clearly stating the type of request. We will verify your identity before processing the request and will respond within 14 business days.

Vr7 retains your personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable Malaysian law. Below is our data retention policy:

Once the retention period has elapsed and there is no other legal obligation requiring the data to be kept, vr7 will delete or anonymise the relevant data using secure methods to prevent unauthorised recovery.

The vr7 platform is EXCLUSIVELY for adults aged 18 and above. We do not knowingly collect, store or process personal data from individuals under the age of 18.

During registration, vr7 applies a strict age verification process including date of birth checks and identity verification (KYC) to ensure all members meet the minimum age requirement. Any account suspected of belonging to an underage individual will be suspended immediately pending investigation.

Vr7 encourages parents and guardians to use parental control software available on shared devices to prevent minors from accessing betting platforms. Early awareness of gambling risks is a shared responsibility between families and platforms like vr7.

Vr7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or other operational needs. All amendments will be posted on this page with a new "Updated" date.

For material amendments that significantly affect how we use your personal data, vr7 will provide clear notice through:

• Prominent in-platform notifications on vr7 when you log in.
• An email to the address registered on your account at least 7 days before the amendment takes effect.
• A banner or announcement on the vr7.site homepage.

Continued use of the vr7 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to proceed with account closure.

We encourage you to review this page periodically to stay informed about how vr7 protects your personal data. A history of Privacy Policy amendments is available on request via customer support.

If you have any questions, concerns, or requests regarding this Privacy Policy or how vr7 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the vr7 platform. Average response time is under 2 minutes for routine privacy inquiries.
• Email: support@vr7.site – For official privacy rights requests such as data access, correction or deletion, please email us with the subject line "Privacy Request" along with your account number.

Vr7's Malay-speaking support team will assist you promptly and professionally. All privacy rights requests will be processed and responded to within 14 business days of receipt.