SMA777 Privacy Policy – Personal Data Protection for Malaysian Players

SMA777 respects the privacy of every member who entrusts us with their personal information. This Privacy Policy has been drawn up to fulfil our obligations under applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA), and to ensure you have a full understanding of your rights regarding the personal data we hold.

This Policy applies to all users of the platform SMA777 — whether you are visiting our website for the first time, registering an account, making a deposit via Touch 'n Go eWallet or DuitNow, playing slots, baccarat, poker, cricket or any other game, or getting in touch with our support team. In short, this policy applies whenever you interact with sma777 in any way.

We encourage you to read this document carefully. It is written in plain, easy-to-understand language — not confusing legal jargon — so you know exactly what happens to your data when you use the platform SMA777.

SMA777 collects personal data from you through various means, depending on the nature of your interaction with the platform. The following are the categories of data we may collect:

A. Data You Provide Directly

This is information you provide directly when interacting with SMA777:

B. Automatically Collected Data

When you use the sma777 platform, our systems automatically record the following technical information for security and service improvement purposes:

C. Financial Transaction Data

For every financial transaction carried out on the platform — whether it's a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u, CIMB Clicks), or a withdrawal of winnings — we record transaction details such as the amount, payment method, timestamp and transaction status. However, we do not store credit or debit card details directly on our servers — payment processing is handled entirely through certified, secure payment gateways.

D. Communication Data

When you contact the sma777 support team via Live Chat, email or Telegram, we record the content of those communications for reference, complaint resolution and service quality improvement purposes. These records are stored securely and accessible only to authorised personnel.

SMA777 uses the personal data collected solely for legitimate and transparent purposes. The following is a complete list of the purposes for which your data is used:

• Account Management: Creating, verifying and maintaining your member account, including the identity verification (KYC) process required prior to large withdrawals or when prompted by our security policy.
• Financial Transaction Processing: Processes your deposits and withdrawals securely and accurately through your chosen Malaysian local payment method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX.
• Gaming Services Provision: Delivering all games available on sma777 correctly, including slots, live baccarat, poker, Malaysia Super League and EPL football betting, cricket, badminton, e-sports and Live Casino.
• Service Communications: Sending you important account notifications, transaction updates, security alerts and relevant technical information.
• VIP Programme & Promotions: Managing your eligibility within the sma777 VIP Rewards programme, ensuring cashback, bonuses and rewards are accurately and automatically credited to qualifying members.
• Fraud Detection & Security: Identifying and preventing fraudulent activity, money laundering, bot usage or any conduct that violates the platform's Terms & Conditions.
• Platform Enhancement: Analysing usage patterns in aggregate (not at an individual level) to improve the overall user experience, platform speed and service quality.
• Legal Compliance: To fulfill applicable legal and regulatory obligations, including lawful requests from competent authorities.
• Customer Support: Enables SMA777's support team to assist you effectively whenever you reach out with any queries or issues.

SMA777 does not sell, rent, or disclose members' personal data to third parties for marketing purposes. However, there are limited circumstances where certain data may be shared with trusted third parties to ensure the platform operates smoothly and securely:

• Payment Service Providers: Payment gateways and transaction processors that enable you to make deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX. These providers receive only the minimum data necessary to process transactions and are bound by strict confidentiality agreements.
• Game Software Providers: Game providers such as Pragmatic Play, NetEnt, and others may receive anonymized game session data for statistical and technical maintenance purposes. No personally identifiable information is shared directly with these providers.
• Cloud & Infrastructure Service Providers: Hosting and cloud service providers that securely store sma777 platform data. All such providers are bound by strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal Authorities: SMA777 may disclose members' personal data to security authorities, regulatory bodies or competent courts when required to do so under applicable Malaysian law — for example, in cases involving financial crime investigations or valid court orders.

In all of the data-sharing situations described above, SMA777 ensuring that any party receiving data is subject to data protection obligations that are equivalent to or more stringent than our own.

SMA777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your browser and SMA777's servers is encrypted using the latest TLS (Transport Layer Security) protocol. This means that even if someone were to intercept your data traffic, they would not be able to read its contents.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including identification information, bank account details and transaction records — is encrypted using robust encryption standards at rest.
• Internal Access Controls: Only SMA777 staff with a specific operational need to access certain data are granted permission to do so. A role-based access control (RBAC) system ensures no staff member has access beyond what is required for their role.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect unusual access patterns, intrusion attempts and suspicious activity. Any anomalies are immediately flagged for investigation by our security team.
• Regular Security Audits: sma777 conducts regular internal and external security audits to identify and address any potential vulnerabilities in our systems.
• Staff Training: All SMA777 staff who handle personal data undergo regular data protection training and are bound by strict confidentiality obligations under their employment agreements.

Data Retention Period

Sma777 retains your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. As a general guide:

• Active account data — retained for as long as your account remains active and up to 7 years after account closure for financial record-keeping and legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian financial record-keeping requirements.
• Communication logs with the support team — retained for 3 years for reference and dispute resolution purposes.
• Session data and technical logs — retained for 12 months for security and fraud detection purposes.

SMA777 use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our platform. They help us recognise your device on subsequent visits and personalise your experience.

Types of cookies we use:

• Session Cookies: Temporary cookies that expire when you close your browser. They are essential for keeping you logged in during your gaming session and ensuring transactions run smoothly.
• Preference Cookies: Saves your preferences — such as language, display settings and game preferences — so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand how members use the SMA777 platform — which pages are visited most frequently, how long typical sessions last, and which areas of the platform need improvement. This data is collected in aggregate and does not identify individuals.
• Security Cookie: Used to detect suspicious activity and help protect your account from unauthorized access.

You can manage or delete cookies through your web browser settings. Please note, however, that disabling or blocking certain cookies may affect the functionality and user experience of the platform SMA777, including the possibility that you may need to log in again each time you access the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and data protection best practices, you have the following rights regarding the personal data that SMA777 hold about you. We respect and facilitate the exercise of all these rights:

SMA777 strictly prohibits registration and use of the platform by individuals under 18 years of age. Our platform — including all games, financial transactions and other interactions — is intended exclusively for legally eligible adults.

We do not intentionally collect any personal data from children or individuals under the age of 18. The sma777 registration process requires date of birth verification, and we conduct additional age checks during the identity verification (KYC) process. Should we discover that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question.

SMA777 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, technological requirements, legal obligations or new regulatory directives. Each new version will be published on this page with a clearly indicated update date.

When material changes are made to this Privacy Policy, we will notify you through:

• Email notification to the address registered on your account at least 7 days before the changes take effect.
• An in-platform notification will appear the next time you log in after an update.
• Announcement on the sma777 homepage for a set period following any update.

If you continue using the sma777 platform after any Privacy Policy changes take effect, this will be considered your acceptance of the updated policy. If you do not agree with the changes made, you may close your account before they come into effect by contacting our support team.

If you have any questions, concerns or complaints regarding the way SMA777 handles your personal data, we encourage you to reach out to us directly. Our team will respond with full attention and within a reasonable timeframe.

You may also contact us to:

• Request further information about our privacy practices.
• Reporting any concerns regarding data breaches or inappropriate use of data.
• Exercising any of your privacy rights as outlined in Section 7 above.
• Grant or withdraw consent for specific data processing purposes.
• Request clarification on any part of this Privacy Policy that you do not understand.

All privacy-related communications should be addressed to the SMA777 Data Privacy Officer via email support@sma777.biz with a subject line beginning with "DATA PRIVACY:" to ensure it is promptly routed to the responsible staff.