Privacy Policy sma777

Sma777 cares about the privacy of every player using our platform. We understand that your trust is our most valuable asset, and that trust can only be built when you know exactly how your information is handled.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. This document explains the types of data we collect, the purposes of collection, how it is stored securely, and your rights as the owner of that data.

We may update this Privacy Policy from time to time in response to changes in law, technology, or sma777 platform operations. The latest update date is always displayed at the top of this document for your reference.

Sma777 collects your personal data through several channels depending on how you interact with our platform. The following are the categories of data we collect:

Data You Provide Directly

• Identity information: Full name, date of birth, MyKad number or passport number.
• Contact information: Email address, mobile number, residential address.
• Account information: Username, encrypted password, security preferences.
• Financial information: Bank account number, e-wallet details (TNG, DuitNow) for deposit and withdrawal purposes.
• Verification documents: MyKad copy, passport, and utility bill required for the KYC process.

Automatically Collected Data

• Technical data: IP address, device type, operating system, browser version.
• Usage data: Pages visited, session duration, games played, betting patterns.
• Location data: General location based on IP address for geo-compliance purposes.
• Cookie data: Session cookies, preference cookies and analytics cookies (further details in Section 6).

Sma777 uses your personal data for lawful and specific purposes only. We do not use your data beyond the scope stated below without obtaining additional consent from you:

You may withdraw consent for marketing communications at any time through your account settings or by contacting our customer support team. Withdrawing consent does not affect the validity of any data processing carried out prior to the withdrawal.

Sma777 is committed to not selling or transferring your personal data to third parties for independent marketing purposes. However, there are limited situations where we need to share your data with certain parties:

• Payment service providers: Banking institutions and e-wallet providers that process your financial transactions. They receive only the data necessary to process the relevant transaction.
• Game software providers: Companies that supply gaming platforms to sma777 may receive non-personally identifiable usage data for technical purposes.
• Statutory authorities: Law enforcement agencies, tax authorities, or regulatory bodies when required by applicable Malaysian law.
• Third-party service providers: Analytics companies, identity verification services, and technical infrastructure providers bound by strict confidentiality agreements.

Sma777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Our key security measures include:

• Encryption in transit: TLS 1.3 protocol and 256-bit SSL certificates ensure all data transmitted between your device and our servers is fully encrypted.
• Encryption at rest: Sensitive data such as financial information and verification documents are stored in encrypted format within protected databases.
• Two-factor authentication (2FA): Players are encouraged and staff are required to use 2FA for account access.
• Active monitoring: 24/7 monitoring systems detect unusual activity and security threats in real time.
• Tiered access control: The principle of least privilege ensures staff can only access the data needed for their specific duties.
• Staff training: All staff undergo regular data security and privacy training.

In the event of a data security incident involving your personal data, sma777 will notify you within the timeframe required by applicable law, along with the steps taken and to be taken to address the incident.

Sma777 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and ensure the security of your session. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences such as language, time zone and display theme to make your experience smoother on future visits.
• Analytics Cookies: Helps us understand how players use the platform — most visited pages, exit points and navigation patterns — for improvement purposes.
• Security Cookies: Detects suspicious login attempts and potentially harmful activity to protect your account.

You can manage or block cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the sma777 platform and your overall gaming experience.

As an sma777 player and owner of your personal data, you have the following rights under applicable data protection laws. All requests relating to these rights are processed within 14 working days:

Sma777 is a platform exclusively for individuals aged 18 and above only. We do not intentionally collect, store, or process personal data of individuals under 18 years of age.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. Our rigorous KYC process is specifically designed to identify and prevent the registration of minors.

In operating the sma777 platform, your personal data may be processed or stored on servers located outside Malaysia. When this occurs, we ensure that such data transfers are protected by safeguards equivalent to Malaysia's PDPA.

The protection mechanisms we use for cross-border data transfers include:

• Standard data processing agreements compliant with international data protection requirements.
• Use of service providers holding recognised security certifications such as ISO 27001.
• Data protection impact assessment (DPIA) prior to any large-scale data transfer.

Sma777 will not transfer your personal data to jurisdictions that do not have an adequate level of data protection without first obtaining your consent or applying appropriate protective mechanisms.

Sma777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. Any amendments made will:

• Published on this page with a clear update date at the top of the document.
• Registered players will be notified via in-platform notifications and/or email if amendments are material or significantly affect your rights.
• Effective 14 days after the notification is sent, giving you sufficient time to review the changes.

We recommend checking this page regularly to stay informed about how your personal data is handled. Continued use of the sma777 platform after any amendments take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how sma777 handles your personal data, do not hesitate to contact us. Our Data Protection Officer (DPO) team is ready to assist you:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon within the sma777 platform.
• Response Time: Within 2 working days for privacy inquiries; immediately via live chat.

For complaints that cannot be resolved internally, you have the right to submit a complaint to Malaysia's Personal Data Protection Department (PDPD) or the relevant regulatory authority in your jurisdiction.