Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") issued by ur777 (hereinafter referred to as "ur777", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data relating to registered users, prospective users, and visitors (collectively "Users" or "you") of the ur777 platform accessible atur777.cam and any associated mobile applications or digital services.

ur777 operates Malaysia's champion-grade online sports betting and live casino platform, serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia. Our platform accepts transactions in Malaysian Ringgit (MYR) via locally recognised payment methods including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and select cryptocurrency networks.

We recognise that your personal data belongs to you, and we take our obligations as a data processor seriously. This Policy is written in plain, accessible English and is intended to give you a clear, complete understanding of how ur777 handles your information — not to obscure it in legal language.

The following terms carry the meanings ascribed below throughout this Policy:

• "Personal Data" — any information that directly or indirectly identifies a living individual, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — ur777, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of ur777 under written contractual obligations.
• "Platform" — the ur777 website at777.cam, including all subdomains and mobile-optimised interfaces.
• "Services" — all betting markets, casino games, promotional features, and support services provided through the Platform.
• "KYC" — Know Your Customer, the identity verification process ur777 uses to confirm User identity and age.
• "Cookies" — small text files stored on your device by your browser when you visit the Platform.

ur777 collects personal data in several categories depending on how you interact with the Platform. The following table summarises the categories and specific data types we may process:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond the facial image used solely for KYC liveness verification purposes.

ur777 collects personal data through the following means:

Direct Provision by You

You provide data directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotional campaign. This is the primary source of your identity and financial data.

Automated Technical Collection

When you visit or use the Platform, ur777's servers automatically record technical data including your IP address, browser type, device identifiers, and session activity. This data is collected via server logs, cookies, and similar tracking technologies, as described further in Section 9of this Policy.

Third-Party Sources

ur777 may receive data about you from third-party KYC verification providers, fraud detection services, payment processors (including FPX, DuitNow, and e-wallet operators such as Touch 'n Go and Boost), and responsible gambling databases where applicable. Such third-party data sharing is conducted under contractual data processing agreements.

ur777 processes your personal data strictly for the following defined purposes. We do not process your data for any purpose not listed below without obtaining your explicit consent in advance.

• Account Management: To create, maintain, verify, and administer your ur777 account, including processing your registration details and managing account security settings.
• Service Delivery: To provide sports betting, live casino, and related services, including processing bets, settling winnings, and delivering promotional rewards.
• Financial Processing: To process deposits in MYR via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong, and to process withdrawal requests to verified payment methods.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with applicable anti-money laundering and responsible gambling obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other harmful activities on the Platform.
• Regulatory Compliance: To fulfil ur777's legal obligations under applicable gaming regulations, anti-money laundering rules, and applicable data protection frameworks.
• Customer Support: To respond to your queries, complaints, and support requests submitted via live chat, email, or WhatsApp.
• Responsible Gambling: To monitor gambling activity for signs of problem gambling behaviour and, where appropriate, to apply self-exclusion measures or responsible gambling interventions in accordance with ourResponsible Gambling policy.
• Platform Improvement: To analyse aggregated, anonymised usage patterns in order to improve platform functionality, game selection, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or in-app messaging, where you have opted in to receive such communications. You may withdraw marketing consent at any time.

ur777 processes personal data under one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between ur777 and you (i.e., delivering the gambling and payment services you have subscribed to).
• Legal Obligation: Processing required to comply with applicable laws and regulations, including identity verification, anti-money laundering requirements, and responsible gambling obligations.
• Legitimate Interests: Processing necessary for ur777's legitimate business interests, including fraud prevention, platform security, and internal analytics, where these interests do not override your privacy rights.
• Consent: Processing activities where ur777 has obtained your prior, informed, and freely given consent, including marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ur777 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with third parties only in the following strictly defined circumstances:

• Payment Processors: ur777 shares necessary financial data with regulated payment service providers — including FPX operators, Touch 'n Go eWallet, DuitNow, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors — solely to process your deposit and withdrawal instructions.
• KYC & Identity Verification Partners: ur777 works with regulated KYC and fraud prevention service providers who process identity documents and verification data on our behalf under contractual data processing agreements.
• Regulatory Authorities: ur777 may disclose personal data to competent regulatory, governmental, or law enforcement authorities where required by applicable law or upon receipt of a valid legal order.
• Responsible Gambling Bodies: Where required, ur777 may share limited account information with responsible gambling support organisations self-exclusion schemes in connection with a User's self-exclusion request.
• Technology & Infrastructure Providers: ur777 uses third-party cloud hosting, analytics, and cybersecurity service providers who may access personal data solely to provide infrastructure services. All such providers are bound by contractual data processing agreements with ur777.

ur777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status, plus a reasonable period thereafter to handle any post-closure queries, disputes, or regulatory inquiries.
• KYC & Identity Documents: Retained for a minimum period as required under applicable anti-money laundering regulations, typically five (5) years from the date of last account activity, unless a longer period is mandated.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years to satisfy regulatory requirements applicable to financial service providers.
• Support Communications: Live chat transcripts and email records are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Technical Logs: Server and access logs containing IP addresses and session data are retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in manner that renders re-identification impossible. Anonymised, aggregated data may be retained indefinitely for platform analytics purposes.

ur777 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and gather aggregated analytical data. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as your login session, security token validation, and language preference retention. You cannot opt out of strictly necessary cookies without disabling the Platform entirely.

Functional Cookies

Functional cookies remember your preferences — such as your chosen currency display (MYR), preferred sports markets (e.g., Liga Super Malaysia or EPL), and interface settings — to deliver a personalised experience between sessions.

Analytical Cookies

ur777 uses aggregated, anonymised analytics cookies to understand how users navigate the Platform, which pages generate the most engagement, and where technical errors occur. This data helps us improve the Platform. No individual user is identified through analytical cookies.

You may manage cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary ones may impair certain Platform features. ur777 does not use third-party advertising cookies or cross-site tracking pixels for targeted advertising purposes.

Subject to applicable data protection law, you have the following rights in relation to the personal data that ur777 holds about you. To exercise any of these rights, please contact us via the details in Section 15 of this Policy.

ur777 implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, accidental loss, alteration, and unlawful disclosure. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ur777's servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in our databases — including financial details and identity documents — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): ur777 offers 2FA on all accounts, adding second verification layer to protect against unauthorised login attempts.
• Access Controls: Access to systems containing personal data is restricted to authorised ur777 personnel on a strict need-to-know basis. All access events are logged and auditable.
• Fraud Monitoring: Automated and manual fraud monitoring systems operate continuously to detect unusual account activity, suspicious transaction patterns, and potential account takeover attempts.
• Penetration Testing: ur777's systems are subject to periodic security assessments and penetration testing by independent security professionals.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a high risk to your rights, ur777 will notify affected Users without undue delay in accordance with applicable regulatory obligations.

ur777's Services are strictly available to individuals aged21 years and above. ur777 does not knowingly collect personal data from minors. If we become aware that a User is under the age of 21, we will suspend the account immediately, void any associated transactions, and securely delete the personal data collected, subject to any mandatory legal retention obligations.

ur777 employs age verification checks at the point of registration and as part of the KYC process. Where ur777 has reasonable grounds to suspect that a User may be under 21, we will request documentary proof of age before allowing any deposits, bets, or withdrawals to proceed.

ur777 operates internationally and may transfer your personal data to service providers or infrastructure partners located outside Malaysia. Such transfers may occur where ur777's cloud hosting, KYC verification, or fraud detection partners operate data centres in other jurisdictions.

Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to Malaysia, ur777 will implement appropriate safeguards — including contractual clauses that impose data protection obligations equivalent to those applicable in Malaysia — to ensure that your data remains protected to the same standard as if it had not left Malaysia.

ur777 will not transfer personal data to any jurisdiction that ur777 considers to present an unacceptable risk to User privacy, and ur777 performs due diligence on all third-party data processors prior to engagement.

ur777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the Services we provide. The date on which this Policy was most recently updated is displayed prominently at the top of this document.

Where amendments are material — meaning they significantly affect your rights or how your data is processed — ur777 will notify you via the email address registered to your account, or through a prominent notice on the Platform, prior to the changes taking effect.

Your continued use of the Platform following the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you should cease using ur777 and may request account closure in accordance with the Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how ur777 has handled your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the ur777 Platform
• WhatsApp: WhatsApp support is available — see the Platform for details
• Languages: English, Bahasa Melayu, and Mandarin Chinese

ur777's support team operates with an average live chat response time of 3–5 minutes. Email queries relating to data rights will receive an initial acknowledgement within two (2) business days. We serve players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.

Complaints

If you are not satisfied with our response to a data rights request or privacy complaint, you have the right to escalate the matter to the applicable supervisory authority or regulatory body under ur777's operating framework. ur777 will cooperate fully with any such authority in connection with a legitimate complaint or investigation.