Api777 Privacy Policy – Personal Data Protection for Malaysian Users

Api777 collects various types of personal information from Malaysian users for the purpose of providing safe and responsible online sports betting and entertainment services. The information we collect falls into two main categories:

Information you provide directly:

• Full name as stated on your Malaysian identity card (MyKad)
• National identification card (IC) number or passport number for age verification purposes
• An active Malaysian mobile number
• A valid and active email address
• Date of birth to verify age eligibility (18 years and above)
• Current residential address in Malaysia
• Payment method details used (Touch 'n Go account name, GrabPay, DuitNow, or bank name for FPX)
• Identity verification documents when required (MyKad copy, utility bill, bank statement)

Automatically collected information:

• The IP address of the device you use to access api777
• Device type, operating system, and web browser version
• Platform activity logs, including matches viewed, markets browsed, and bets placed
• The time and date of each login session to your api777 account
• Cookie and session data that help us recognise you when you return to the platform
• General location information based on IP address (excludes GPS or precise location data)

We only collect information that is strictly necessary to provide api777's services and meet our legal obligations. We do not collect sensitive information such as biometric data or users' medical information.

Api777 uses collected personal information solely for the following legitimate and agreed purposes:

• Account management: Creating, verifying, and maintaining your api777 user account
• Identity verification: Verifying that you meet the minimum age requirement of 18 and confirming your real identity to prevent fraud
• Transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as managing your winnings withdrawals
• Service provision: Gives you access to all api777 platform features, including EPL football and Malaysia Super League betting, esports, poker, and virtual sports
• Service communications: Sending important notifications about your account, transactions, promotions you have subscribed to, and policy updates
• Platform improvement: Analysing aggregated usage patterns to improve the overall api777 user experience
• Legal compliance: Complying with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and other regulatory obligations, including anti-money laundering (AML) prevention measures
• Responsible betting: Monitoring betting patterns to identify users who may need responsible gambling support

Api777 does not use your personal data for any purpose beyond those listed above without first obtaining your additional consent.

Api777 invests seriously in cybersecurity infrastructure to ensure the personal data of all Malaysian users remains protected at all times. The security measures we employ include:

• 256-bit SSL encryption for all data transmitted between users' devices and api777's servers
• Passwords are stored using a one-way hashing algorithm that cannot be decrypted
• Server infrastructure protected by multi-layered firewalls and intrusion detection systems
• Strict internal access controls — only api777 staff who require access for their specific job functions are permitted to view user data
• Regular security audits conducted by independent third parties to identify and address any vulnerabilities
• Two-factor authentication (2FA) is available for all user accounts as an added layer of security
• Encrypted backup systems that are regularly tested to ensure continuity of service

Your personal data is retained for as long as your account remains active and for the required period following account closure to meet legal and regulatory obligations. Once the mandatory retention period has lapsed, your data will be securely deleted or anonymised.

Api777 does not sell, rent, or disclose users' personal information to third parties for marketing purposes. However, there are limited situations in which we may need to share information with certain parties:

• Payment service providers: Payment gateways that process Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions receive only the minimum information necessary to complete your transaction. These providers are bound by strict confidentiality agreements.
• Regulatory authority: api777 may be required to disclose user information to relevant Malaysian authorities if ordered by a court or as necessary for legal compliance, including under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Technology service providers: Companies that provide hosting, analytics, and security services to api777 may process your personal data as part of their services. All such providers are carefully vetted and bound by data processing agreements that comply with the PDPA.
• In the event of a merger or acquisition: If api777 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. Users will be notified in advance should this situation arise.

In all of the above situations, api777 ensures that any party receiving user information upholds security and privacy standards equivalent to our own. We will not disclose user information to foreign parties without a legal requirement or user consent.

Api777 uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates smoothly. The types of cookies used include:

• Essential session cookies: Required to allow you to log in, maintain an active session, and use core api777 platform features such as placing football bets or accessing your account. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saving your preferences — such as display language, personal settings and your favourite teams or leagues — so you don't have to reconfigure them each time you use api777.
• Analytics cookies: Collects information on how you use the api777 platform — pages visited, session duration, and features used — to help us understand usage patterns and improve the platform. This data is collected in aggregate form and does not identify you individually.
• Security cookies: Used to detect and prevent fraudulent activity, manage sessions securely and verify user identity throughout each active session.

You can manage your cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality of the api777 platform. For more information on managing cookies in popular browsers, refer to the help documentation for Chrome, Firefox, Safari or Edge.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and api777's commitment to user privacy, you have the following rights regarding your personal data:

• Right to access: You have the right to request a copy of the personal data we hold about you at any time
• Right to rectification: If any information we hold about you is inaccurate or out of date, you have the right to request a correction at no charge
• Right to erasure: Under certain circumstances, you may request that we delete your personal data, subject to applicable legal retention obligations.
• Right to object to processing: You may object to the use of your data for specific purposes, particularly in relation to direct marketing communications
• Right to withdraw consent: You may withdraw consent for specific data processing at any time, although this may affect our ability to provide certain services
• Right to lodge a complaint: If you believe that api777 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, please contact the api777 support team via live chat or email at support@api777.best, clearly stating your request. We will process your request within 30 calendar days and notify you of the action taken.

The security of your financial information is among api777's highest priorities. Here is how we handle your payment-related data:

• Api777 does not store your full bank account number, credit/debit card number, or e-wallet PIN in our systems.
• All deposit and withdrawal transactions are processed through certified payment gateways that comply with PCI DSS security standards
• Your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) details are processed directly by their respective providers through a secure interface.
• Your transaction history on api777 is stored securely and accessible to you via the transaction history section in your account dashboard
• Any suspicious transaction activity will trigger api777's automated alert system, and our team will contact you for verification.

All transactions on api777 are conducted in Malaysian Ringgit (MYR). The minimum deposit is RM20 and the minimum withdrawal is RM50. Records of all deposits and withdrawals are retained for the period required under Malaysian law for audit and compliance purposes.