Privacy Policy – dss777 Online Casino

1About This Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by dss777 in connection with your use of the dss777 platform accessible at dss777.app ("Platform"). References to "dss777", "we", "us", or "our" refer to the dss777 operating entity and its authorised data controllers.

By registering for an Account, accessing the Platform, or using any Gaming Services offered by dss777, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must refrain from using the Platform.

2Personal Data We Collect

dss777 collects the following categories of personal data from players and Platform visitors:

dss777 does not collect special categories of sensitive personal data (such as racial origin, health data, or biometric data) except where strictly required by applicable law or regulatory obligation.

3How We Collect Your Data

dss777 collects personal data through the following means:

• Direct Submission: Data you provide when registering an Account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including cookies, web beacons, server logs, and device fingerprinting. See Section 6 for full details on our cookie practices.
• Payment Providers: Transaction confirmation data and payment method verification signals received from our banking and e-wallet partners, including FPX, Maybank, CIMB, and Public Bank processing systems.
• Third-Party Verification Services: Identity and address verification data obtained from KYC service providers and fraud detection systems used to fulfil our regulatory obligations.
• Publicly Available Sources: Publicly accessible information used to verify identity or assess fraud risk where permitted by applicable law.

4Purpose and Legal Basis for Processing

dss777 processes your personal data only for legitimate purposes and on valid legal grounds. The following table summarises the primary purposes for which your data is processed:

• Account Management: To create, maintain, and administer your dss777 Account, verify your identity, and enable access to Gaming Services. Legal basis: contractual necessity.
• Transaction Processing: To process MYR deposits, withdrawals, and account adjustments via your chosen payment method. Legal basis: contractual necessity.
• Regulatory Compliance: To fulfil Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification obligations imposed by the applicable licensing authority. Legal basis: legal obligation.
• Responsible Gaming: To monitor gaming behaviour, enforce player-set limits and self-exclusion periods, and proactively identify problem gambling indicators. Legal basis: legitimate interests and legal obligation.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, and unauthorised access. Legal basis: legitimate interests.
• Customer Support: To respond to enquiries, resolve disputes, and maintain support records. Legal basis: contractual necessity and legitimate interests.
• Marketing Communications: To send promotional offers, bonus notifications, and news about dss777 to players who have opted in to receive such communications. Legal basis: consent (withdrawable at any time).
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the dss777 Platform experience. Legal basis: legitimate interests.

dss777 does not use your personal data for automated decision-making that produces significant legal effects, other than for fraud detection and age/identity verification purposes required by regulatory obligations.

5Data Sharing and Disclosure

dss777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your personal data may be shared with the following categories of recipient only to the extent strictly necessary:

• Payment Service Providers: Banks, FPX processors, and e-wallet operators (including Touch 'n Go eWallet and Boost) receive transactional data necessary to process your deposits and withdrawals.
• KYC and AML Verification Partners: Identity verification and fraud detection services receive identity and document data to fulfil our regulatory obligations.
• Game Software Providers: Casino game studios and live dealer operators receive anonymised or pseudonymised player identifiers necessary to deliver game sessions and maintain fair play records.
• Regulatory and Law Enforcement Authorities: dss777 may disclose personal data to the relevant licensing authority, Malaysian regulatory bodies, law enforcement agencies, or courts where required by applicable law, court order, or regulatory directive.
• Professional Advisors: Legal, audit, and compliance professionals bound by confidentiality obligations may access relevant data in the course of providing professional services to dss777.
• Service Providers: Technology vendors, cloud hosting providers, and customer support platforms that process data on behalf of dss777 under contractual data processing agreements that require them to maintain equivalent standards of data protection.

All third parties with whom dss777 shares personal data are required to handle that data in compliance with applicable data protection requirements and are prohibited from using it for any purpose other than the specific purpose for which it was disclosed.

6Cookies and Tracking Technologies

dss777 uses cookies and similar tracking technologies on the Platform to provide essential functionality, improve user experience, and gather analytics data. The following cookie categories are used:

• Strictly Necessary Cookies: Required for core Platform functionality including session management, login state, and security tokens. These cannot be disabled without impairing Platform usability.
• Functional Cookies: Store your preferences such as language settings, account display options, and responsible gaming tool configurations to personalise your dss777 experience.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors interact with the Platform to help dss777 improve performance and user experience. No personally identifiable information is transmitted through analytics cookies.
• Security Cookies: Support fraud detection and prevention by tracking device identifiers and session behaviour patterns to identify anomalous or unauthorised activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the dss777 Platform. dss777 does not use third-party advertising or cross-site tracking cookies.

7Data Retention

dss777 retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and KYC Data: Retained for the duration of the Account's active status plus a minimum of five (5) years following Account closure, in accordance with AML and gaming regulatory requirements.
• Transaction Records: All financial transaction records are retained for a minimum of seven (7) years following the transaction date.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction.
• Usage and Analytics Data: Aggregated usage data is retained for up to two (2) years. Raw session logs are deleted after ninety (90) days.
• Self-Exclusion Records: Records of self-exclusion requests and responsible gaming interventions are retained for a minimum of five (5) years to prevent inadvertent re-registration.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

8Security Measures

dss777 implements robust technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• AES-256 SSL/TLS encryption for all data transmitted between the Platform and your browser.
• Encrypted storage of all sensitive personal and financial data at rest using industry-standard encryption protocols.
• Strict access controls ensuring that only authorised personnel with a legitimate operational need can access personal data, governed by role-based permissions and audit logging.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication for internal systems that hold personal data.
• Incident response procedures to detect, assess, and notify affected parties in the event of a data breach, in accordance with applicable regulatory requirements.

Whilst dss777 takes all reasonable precautions to protect your data, no digital transmission or storage system is guaranteed to be completely secure. You are responsible for keeping your Account credentials confidential and for notifying dss777 immediately if you suspect any unauthorised access to your Account.

9Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data dss777 holds about you:

• Right of Access: You may request a copy of the personal data dss777 holds about you and information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your dss777 Account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that dss777 temporarily suspend processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your communication preferences within Account Settings.
• Right to Object: You may object to processing based on legitimate interests grounds, including direct marketing.

To exercise any of these rights, contact the dss777 support team via live chat or email. dss777 will respond to all valid requests within thirty (30) calendar days. Identity verification may be required before processing any data rights request.

10Children and Minors

The dss777 Platform is strictly intended for individuals aged 21 years and above. dss777 does not knowingly collect or process personal data belonging to persons under the age of 21. Any Account found to belong to a minor will be immediately suspended and all associated personal data deleted, subject to any overriding legal obligation to retain records relating to the access attempt.

If you have reason to believe that a minor has registered an Account on dss777 or has accessed the Platform, please contact our support team immediately so that appropriate action can be taken without delay.

11International Data Transfers

dss777 processes personal data primarily within the jurisdiction in which it is licensed and may transfer data to service providers operating in other jurisdictions for the purposes of Platform operation, KYC verification, fraud prevention, and technical infrastructure support.

Where personal data is transferred outside of its country of origin, dss777 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements incorporating standard data protection clauses, and assessments of the recipient jurisdiction's data protection standards. dss777 does not transfer personal data to jurisdictions that do not provide an adequate level of protection without implementing compensating safeguards.

12Updates to This Privacy Policy

dss777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be published at dss777.app/privacy-policy, and the "Last updated" date at the top of the page will be revised accordingly.

Where changes are material, dss777 will notify registered players by email to the address on record, or via an in-platform notification, at least seven (7) days before the updated Policy takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by dss777, please contact our Data Protection team through any of the following channels:

dss777 is committed to resolving all privacy-related enquiries promptly and fairly. We aim to respond to all formal data rights requests within thirty (30) calendar days of receipt of a valid, verified request.