Privacy Policy tri7bet — Personal Data Protection for Malaysian Players

Tri7bet is an online casino platform serving the entertainment needs of Malaysian players. In the course of our operations, we collect and process our members' personal data for specific, lawful purposes. We act as the "data controller" in this context — meaning we determine how and why your data is processed.

This Privacy Policy is drafted in compliance with and in the spirit of Personal Data Protection Act (PDPA) Malaysia 2010 — the primary Malaysian legislation governing the collection and use of personal data by private organisations. We are committed to ensuring that all data we collect is processed lawfully, fairly, and transparently.

This Privacy Policy applies to all information collected by tri7bet through:

• Member registration and account management process
• Use of the tri7bet gaming and betting platform
• Financial transactions including deposits and withdrawals
• Interactions with our customer support team
• Use of the tri7bet website and mobile app
• Participation in promotions, contests, or VIP programmes

Tri7bet only collects data that is necessary for legitimate purposes related to the operation of our platform. We do not collect excessive or irrelevant data. The following are the categories of data we collect and how we obtain them:

Data You Provide Directly

Automatically Collected Data

When you use the tri7bet platform, certain technical information is collected automatically through our servers and standard tracking technologies:

• Device & Technical Data: IP address, browser type and version, operating system, screen resolution, and device identifiers
• Usage Data: Pages visited, time spent in each section of the platform, games played, login frequency
• Transaction Data: Deposit, withdrawal, wagering, winnings, and loss history — all retained for audit and compliance purposes
• Location Data: General location based on IP address for security and geo-compliance purposes
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 6 for more details)

Tri7bet uses your personal data only for lawful purposes that have been clearly stated in advance. We will not process your data for any other purpose without first obtaining your consent, or without a valid legal basis. The specific purposes for which your data is used are as follows:

1. Platform Service Delivery

Your data is used to manage and maintain your account, process financial transactions such as deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and to give you access to all games and services available on tri7bet.

2. Identity Verification & Fraud Prevention

Some of your data — particularly identity and financial information — is used for the Know Your Customer (KYC) process, which is an industry-standard and legal requirement. This helps us prevent fraud, money laundering, and misuse of the platform by bad actors. Compliance with this process protects all tri7bet members, including you.

3. Account Security

Technical data such as IP addresses and device information is used to detect and prevent unauthorised access to your account. If suspicious activity is detected — such as login attempts from an unfamiliar location — our security systems will respond automatically to protect your account.

4. Service Communications

We use your contact information to send important account-related notices such as registration confirmations, transaction alerts, security reminders, and updates to terms or policies that require your attention. These service communications cannot be opted out of, as they are essential to the management of your account.

5. Marketing Communications (With Consent)

If you have given your consent, we may send you information about the latest promotions, bonuses, tournaments, or special campaigns from tri7bet. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting us at support@tri7bet.onl.

6. Platform Improvement

Aggregated usage data (not individual-level) helps tri7bet's technical and product teams understand how players use the platform, identify areas for improvement, and make data-driven decisions to enhance the overall experience for Malaysian players.

7. Legal Compliance

Tri7bet is obligated to retain transaction records and certain data for periods stipulated by Malaysian laws governing finance, taxation, and financial crime prevention. This is an unavoidable legal requirement.

tri7bet does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is an unconditional commitment that will not change.

However, in the course of operating the platform, we may need to share your data with certain parties in the following circumstances:

• Payment Service Providers: Payment method providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banking institutions receive the data necessary to process your transactions. These providers are subject to their own privacy policies and security standards.
• Game Software Providers: Third-party casino and game software providers may receive the technical data necessary to deliver games to you. This is typically limited to session identifiers and does not include your full identifying information.
• Technical Service Providers: Companies providing cloud infrastructure, hosting, cybersecurity, and analytics services may have limited access to data in the course of performing those services on our behalf. All such providers are bound by strict confidentiality agreements.
• Legal Authority: tri7bet may disclose your personal data to law enforcement authorities, regulatory bodies, or courts when required to do so under Malaysian law — including in the context of financial crime investigations or court orders.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, user data may form part of the transferred assets. We will notify you via email and a clear in-platform notice before any such transfer takes place.

Tri7bet invests seriously in security infrastructure to ensure your personal and financial data is consistently protected against unauthorised access, loss, destruction, or improper disclosure. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption: All data transferred between your device and tri7bet's servers is encrypted using SSL/TLS protocol with 256-bit key length — the same standard used by leading financial institutions worldwide.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and passwords, is stored in encrypted form or as an irreversible hash.
• Internal Access Controls: Access to member personal data within tri7bet is restricted to staff who require it to perform their duties, and is subject to continuous monitoring.
• Two-Factor Authentication (2FA): Available to all member accounts as an added layer of protection, and mandatory for all internal access by tri7bet staff.
• Regular Security Audits: Our infrastructure and software undergo regular independent penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• 24-Hour Monitoring: Automated monitoring systems operate around the clock to detect and respond to suspicious activity or unauthorised access attempts.
• Incident Response Plan: tri7bet has clear procedures in place to handle any data breach. Should a breach occur that affects your data, we will notify you within 72 hours of becoming aware of it.

Tri7bet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

Necessary Cookies

These cookies are essential for the platform's core functionality and cannot be disabled. They include login session cookies, security tokens, and basic interface preferences. Without them, many platform functions will not work correctly.

Performance & Analytics Cookies

These cookies collect information about how you use the platform — pages visited, time spent, and any errors encountered. The data is used in aggregated form to improve platform performance and functionality. None of the information collected identifies you personally.

Functional Cookies

These cookies allow the platform to remember your preferences, such as language settings, display options, and login details (if you choose "remember me"). They help personalise your experience on tri7bet.

Managing Cookies

You can manage and control cookies through your browser settings. Most browsers allow you to view, delete, or block cookies. Please note, however, that blocking all cookies may affect certain tri7bet platform features and your overall gaming experience.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject have the following rights regarding personal data held by tri7bet. We are committed to facilitating the exercise of these rights in a practical and straightforward manner:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Data access requests can be submitted by email to support@tri7bet.onl and will be processed within 21 working days.
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. You can update much of your account information directly from your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. However, this right may be limited by our legal obligations to retain certain records (such as financial transaction records) for periods prescribed by law.
• Right to Restrict Processing: You have the right to request that we restrict how we use your data under certain circumstances — for example, while you are verifying its accuracy or considering withdrawing your consent.
• Right to Object to Marketing: You may opt out of marketing communications from tri7bet at any time by updating your communication preferences in your account or by sending us an email.
• Right to Lodge a Complaint: If you believe that tri7bet has processed your data unlawfully, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Tri7bet does not retain your personal data longer than necessary for the purposes outlined in this Privacy Policy, or longer than required under Malaysian law. Retention periods vary depending on the type of data and applicable requirements:

• Active Account Data: While your account is active, we retain all relevant data for operational purposes. Following account closure, data is archived and deleted according to the schedule below.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in accordance with Malaysian financial and tax legislation. This is a legal obligation that cannot be waived.
• Support Communication Records: Retained for 3 years for quality control purposes and the resolution of any disputes that may arise.
• Marketing Data: If you withdraw consent to receive marketing communications, the relevant data will be deleted or anonymised within 30 days.
• Technical Data & Logs: System logs and technical data are generally retained for 12 months for security and technical troubleshooting purposes.

Once the retention period has lapsed, your personal data will be securely deleted or permanently anonymised so that it can no longer be linked back to you as an individual.

Tri7bet is strictly prohibited for use by anyone under the age of 18. We do not knowingly collect or process personal data from minors.

Should we discover that a person under the age of 18 has registered an account on tri7bet — whether or not their parent or guardian was aware — we will:

• Closing the account immediately
• Delete all associated personal data as promptly as possible
• Refunding any deposits made (following the necessary investigation)
• Forfeiture of any winnings obtained

We encourage parents and guardians to monitor their children's internet usage and to use appropriate parental control software. If you suspect that a minor has registered on tri7bet, please contact us immediately at support@tri7bet.onl.

Tri7bet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legislation, or business operations.

When we make material changes to this Privacy Policy, we will notify you via:

• An email to your registered email address at least 14 days before the changes take effect
• A prominent notice on the tri7bet platform homepage
• Updates are reflected on the "Last Updated" date at the top of this page

Continued use of the tri7bet platform after any changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or how tri7bet handles your personal data, please do not hesitate to reach out. We are committed to responding accurately and satisfactorily to every privacy enquiry.