Privacy Policy

1 Introduction

pepsy777 ("the Company", "we", "us", or "our") operates the online casino and sports betting platform accessible at pepsy777.cam (hereinafter referred to as "the Platform" or "the Website"). The Company is committed to protecting the personal data of all individuals ("Users", "Players", or "you") who access or register on the Platform.

This Privacy Policy sets out the lawful basis on which we collect, process, store, disclose, and protect personal data in connection with your use of pepsy777. It has been drafted in accordance with applicable data protection principles and is intended to be transparent, specific, and easy to understand.

By creating an account on pepsy777, accessing the Platform, or using any of our services, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to request account closure.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3 Data Controller

The Data Controller for personal data processed in connection with the pepsy777 Platform is the Company operating pepsy777.cam. As Data Controller, we are responsible for determining how and why your personal data is used, and we are accountable for ensuring that processing activities are conducted lawfully, fairly, and transparently.

For any queries relating to the processing of your personal data, or to exercise any of the rights described in Section 12 of this Policy, please contact our Data Support team using the details provided in Section 15 (Contact Us) of this Privacy Policy.

4 Data We Collect

pepsy777 collects personal data only to the extent necessary to provide our services, comply with legal and regulatory obligations, and maintain the security and integrity of the Platform. We do not collect data beyond what is required for these purposes.

The categories of personal data we collect are as follows:

5 How We Collect Data

We collect personal data through the following primary channels:

• Direct submission: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or participate in promotions, you provide us with personal data directly.
• Automated technical collection: When you access the Platform, we automatically collect certain technical and usage data through cookies, web server logs, and similar technologies as described in Section 10.
• Payment provider data: When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks (BTC/USDT), the relevant payment provider may share transaction confirmation data with us to verify and complete the transaction.
• Third-party verification services: In connection with KYC and anti-money laundering compliance, we may receive data from identity verification service providers to cross-reference the information you have submitted.
• Publicly available sources: In limited circumstances, and solely for fraud prevention and compliance purposes, we may consult publicly available databases such as sanctions lists or politically exposed persons (PEP) registries.

6 Data Processing & Use

pepsy777 processes your personal data for the following specific purposes:

• Account management: To create, maintain, and administer your pepsy777 account, including processing registrations, updating account information, and managing login security.
• Payment processing: To process deposits and withdrawals in MYR via your selected payment method, including verification against your registered payment details to prevent third-party transactions.
• KYC and regulatory compliance: To verify your identity and age (21+) as required by applicable regulations, and to maintain records as required by anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other activities that violate our Terms and Conditions.
• Responsible gambling: To monitor your gaming behaviour for indicators of problem gambling, to administer self-exclusion requests and deposit limits, and to send responsible gambling communications where appropriate.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
• Marketing communications: Where you have given consent, to send you promotional offers, bonus notifications, and platform updates by email or other agreed channels. You may withdraw this consent at any time.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, security, and features of the pepsy777 Platform.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our Terms and Conditions.

7 Legal Basis for Processing

All processing of personal data by pepsy777 is conducted on one or more of the following lawful bases:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide the services you have registered to use on the Platform, including account administration, payment processing, and game access.
• Legal obligation: Processing that is necessary to comply with our legal and regulatory obligations, including KYC/AML verification requirements, record-keeping mandates, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out in pursuit of the Company's legitimate business interests — such as fraud prevention, security monitoring, and platform improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — for example, direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

8 Data Sharing

pepsy777 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only where necessary, with the following categories of recipient:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency payment gateway providers receive the minimum data necessary to process your requested transactions.
• KYC and identity verification providers: Third-party service providers who assist in identity verification and AML compliance screening receive the identity documents and information you submit during the KYC process.
• Technology and hosting providers: Infrastructure, cloud hosting, and platform technology partners who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities: We may disclose personal data to competent authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Legal, accounting, and auditing professionals who require access to certain data in the course of providing services to the Company, subject to professional confidentiality obligations.

All third-party Data Processors engaged by pepsy777 are required to process personal data only on our documented instructions, implement appropriate technical and organisational security measures, and not retain data beyond the period necessary for the specified purpose.

9 Data Retention

pepsy777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account relationship plus any mandatory regulatory retention period thereafter.
• Closed accounts: Following account closure, we retain transaction records, KYC documents, and communication logs for a minimum of five (5) years in compliance with AML regulatory requirements. This period may be extended where required by law or where data is subject to ongoing legal proceedings.
• Marketing data: Where processing is based on consent, marketing preferences and associated data are retained until consent is withdrawn, after which they are deleted or anonymised within a reasonable timeframe.
• Technical and usage data: Aggregated and anonymised usage data that cannot be linked to a specific individual may be retained indefinitely for platform analytics and improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with our internal data lifecycle management procedures.

10 Cookies & Tracking Technologies

pepsy777 uses cookies and similar tracking technologies to operate the Platform, maintain your session, personalise your experience, and gather analytics data. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your selected language or display settings — to provide a more personalised experience across sessions.
• Analytics Cookies: Used to collect anonymised data about how users interact with the Platform, including pages visited, session duration, and navigation paths. This data is used exclusively to improve Platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

Most web browsers allow you to manage cookies through the browser's settings. Disabling strictly necessary cookies may impair your ability to log in and use the Platform. For non-essential cookies, you may opt out at any time through your browser settings without affecting your access to the Platform.

11 Data Security

pepsy777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the pepsy777 Platform is encrypted using industry-standard SSL/TLS protocols, preventing interception by third parties.
• Access controls: Personal data is accessible only to authorised personnel who require it to perform their legitimate job functions. All staff with access to personal data are bound by confidentiality obligations.
• Secure storage: Personal data is stored on secured servers with restricted physical and logical access. KYC documents are stored in encrypted form with additional access controls.
• Fraud detection systems: Automated systems continuously monitor the Platform for suspicious activity, including unusual login patterns, payment anomalies, and potential account compromise.
• Incident response: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, the Company will notify affected individuals and relevant authorities in accordance with applicable legal obligations.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorised access to your account.

12 Your Rights

As a data subject, you have the following rights in respect of your personal data held by pepsy777. To exercise any of these rights, please contact our support team using the details in Section 15. We will respond to all verified requests within a reasonable timeframe.

Please note that certain rights may be subject to limitations where processing is required for legal compliance, fraud prevention, or other overriding legitimate purposes. We will inform you of any applicable limitations when responding to your request.

13 Minors & Age Policy

The pepsy777 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The collection of personal data from minors is strictly prohibited, and any account found to belong to a person under 21 will be immediately suspended and all associated data deleted or returned in accordance with applicable law.

As part of our KYC verification process, all players are required to submit a valid identity document confirming their age before withdrawals are processed. We take our obligation to prevent underage gambling seriously, and identity verification is a core part of our responsible gambling framework.

14 Amendments to This Policy

pepsy777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players by email or through a Platform notification.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to the updated terms. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your personal data.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights set out in Section 12, or have concerns about how your personal data is being processed, please contact the pepsy777 Data Support team through any of the following channels:

pepsy777 serves players throughout Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam. We are committed to handling all data enquiries with the same speed, transparency, and respect that we apply to every other aspect of our service. Your privacy matters to us, and we take every data-related communication seriously.