Privacy Policy — peppsi77

peppsi77 ("we", "us", "our") operates the online casino and sports betting platform accessible at peppsi77.cam (the "Platform"). We are the data controller responsible for the personal information we collect about you in connection with your use of our services.

This Privacy Policy applies to all users of the Platform, including visitors, registered members, and any individual whose personal data we process in connection with our services. It explains in clear, plain terms what information we collect, why we collect it, how we use it, with whom we share it, and what choices you have regarding your own data.

peppsi77 is committed to protecting your personal data in accordance with applicable data protection laws and international best practices. We process personal data only where we have a valid legal basis to do so, and we take reasonable technical and organisational measures to safeguard the personal information entrusted to us by our Malaysian and international players.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — a person who can be identified directly or indirectly by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, peppsi77.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of peppsi77 under a contractual arrangement.
• "User" / "You" means any individual who accesses or uses the Platform, whether as a registered member or a visitor.
• "Account" means the registered personal account held by a User on the Platform.
• "KYC" means Know Your Customer — the mandatory identity verification process required to confirm a User's identity, age, and residential address.
• "Cookies" means small data files placed on your device by websites to track browsing activity, preferences, and session information.

peppsi77 collects several categories of personal data in connection with the operation of the Platform. The categories below represent information that may be collected, depending on the nature of your interaction with our services:

We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) except where strictly required for regulatory compliance, in which case we will seek your explicit consent in advance.

peppsi77 collects personal data through the following channels:

• Direct interactions: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, participating in promotions, or contacting our support team.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform, via cookies, log files, and similar tracking technologies.
• Third-party payment processors: Transaction data shared with us by payment service providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank when you make a deposit or request a withdrawal.
• Identity verification providers: Confirmation data returned by third-party KYC verification services that we engage to verify the authenticity of identity documents you submit.
• Fraud prevention services: Data received from fraud detection and anti-money laundering (AML) screening providers as part of our compliance obligations.

We process your personal data for the following purposes. We will only use your data where we have a valid legal basis to do so, as outlined in Section 6 below.

• Account registration and management: To create, maintain, and administer your peppsi77 Account, including verifying your identity and age (21+ requirement) through our KYC process.
• Service delivery: To provide access to our casino games, sports betting markets, live dealer services, and all associated features of the Platform.
• Payments and transactions: To process deposits and withdrawals via your chosen Supported Payment Methods and maintain accurate transaction records.
• Regulatory compliance: To fulfil our anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gambling obligations under applicable laws and our operating licence conditions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, security breaches, and abuse of the Platform.
• Customer support: To respond to your enquiries, process complaints, and provide technical assistance through our 24/7 support channels.
• Personalisation: To tailor your gaming experience, including relevant game recommendations and personalised promotional offers where you have given consent.
• Marketing communications: To send you promotional offers, bonus notifications, and Platform updates where you have provided explicit consent and not subsequently withdrawn it.
• Analytics and improvement: To analyse how users interact with the Platform in order to improve performance, user experience, and product features.
• Responsible gambling: To monitor gaming behaviour, enforce deposit limits and self-exclusion requests, and identify users who may need support.

peppsi77 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations under the User Agreement with you — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, CTF, and responsible gambling regulatory requirements.
• Legitimate interests: Processing conducted in pursuit of peppsi77's legitimate business interests — such as fraud prevention, platform security, and service analytics — where those interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, informed consent — including direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

peppsi77 does not sell, rent, or trade your personal data to any third party. We may share your information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality agreements:

• Payment processors: Banks and e-wallet providers (including Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, and DuitNow/FPX operators) to facilitate your deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers engaged to verify the authenticity of identity documents and confirm user age and residency.
• Fraud prevention and AML providers: Specialist compliance and screening services used to detect suspicious activity and fulfil our anti-money laundering obligations.
• Game providers: Licensed game developers and studios whose games are hosted on the Platform, where technical interaction data is shared to enable gameplay and resolve disputes.
• IT and hosting providers: Cloud infrastructure and data hosting services operating under strict data processing agreements on our behalf.
• Regulatory authorities: Competent regulatory, licensing, or law enforcement authorities where we are legally obligated to disclose information, such as in response to a court order or regulatory investigation.
• Professional advisers: Legal counsel, auditors, and accountants bound by confidentiality obligations, where disclosure is necessary for professional advice or compliance purposes.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC documentation: Retained for a minimum of five (5) years following the closure of your Account, in accordance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction for tax, audit, and regulatory compliance purposes.
• Customer support communications: Retained for a period of three (3) years from the date of last interaction, unless a longer period is required in connection with an ongoing dispute or regulatory matter.
• Technical and usage data: Typically retained for up to twenty-four (24) months from the date of collection, subject to anonymisation for aggregated analytics purposes thereafter.
• Marketing consent records: Retained for the duration of your consent and for a period of two (2) years following withdrawal of consent, for compliance audit purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

peppsi77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third-party specialists.
• Multi-factor authentication requirements for staff accessing internal systems containing personal data.
• Formal incident response procedures covering the detection, containment, and notification of data security incidents.

While we take all reasonable precautions, no method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable legal requirements.

peppsi77 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and deliver personalised content where you have given consent. The following categories of cookies may be used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, processing transactions securely, and applying your security preferences. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform, enabling us to identify and fix issues and improve the overall user experience.
• Functionality Cookies: Used to remember your preferences — such as language settings, previously visited games, and display configurations — to personalise your experience.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content based on your interests and activity. These are only placed where you have given explicit consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may limit the functionality of the Platform. Your cookie consent choices will be recorded and honoured in accordance with this Policy.

Subject to applicable data protection law, you have the following rights in respect of your personal data held by peppsi77:

• Right of Access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account information directly through your Account settings at any time.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: The right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: The right to object to processing carried out on the basis of our legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

To exercise any of your rights, please contact our support team as set out in Section 15 below. We will acknowledge your request within five (5) business days and endeavour to respond fully within thirty (30) calendar days. In complex cases we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it.

The Platform is strictly for adults aged 21 years and above. peppsi77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. As part of our KYC process, all registered users are required to provide identity documentation confirming their date of birth and that they meet the minimum age requirement.

If we become aware that personal data has been inadvertently collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you have reason to believe that a minor has registered on our Platform or provided personal data without authorisation, please contact us immediately at the details provided in Section 15.

In order to operate the Platform and provide our services, your personal data may be transferred to and processed in countries outside of Malaysia. These transfers may occur when we engage Data Processors such as cloud hosting providers, KYC service providers, or game studios based in other jurisdictions.

Where such transfers occur, peppsi77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. Such safeguards may include contractual data processing agreements incorporating standard contractual clauses, or transfers to entities in jurisdictions recognised as providing adequate data protection standards.

peppsi77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational circumstances. Material changes will be communicated to registered users via email notification or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the effective date of any amendment signifies your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the Platform and may request closure of your Account.

If you have any questions, concerns, or requests regarding this Privacy Policy or how peppsi77 handles your personal data, please contact our Data Protection team using the details below:

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For Malaysian residents, the relevant authority is the Department of Personal Data Protection (PDPD) under the Personal Data Protection Act 2010 (PDPA).