CH777 Privacy Policy —
Member Personal Data Protection

Welcome to the ch777 Privacy Policy page. This document explains in detail how ch777 ("we", "Platform", or "ch777 Group") collects, processes, stores, and protects your personal information when you use our official website at ch777.vin, the CH777 mobile app, or any related services we offer.

This Privacy Policy applies to all users of our platform, including visitors without an account, registered members, and mobile app users. By continuing to use the CH777 platform, you give informed consent to the practices described in this document.

If you do not agree with any provision of this Privacy Policy, you are advised to discontinue use of the platform and contact us to close your account if applicable.

CH777 collects your personal information through three main channels: information you provide directly, information collected automatically during use, and information received from legitimate third-party sources.

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical information or religious beliefs unless required by law.

Every piece of information we collect has a clear and legitimate purpose. ch777 uses member personal data for the following purposes:

• Account Management — To create, verify, and manage your user account, including a secure login process.
• Transaction Processing — To process deposits, withdrawals, and any other financial transactions accurately and securely.
• Identity Verification (KYC) — To verify your identity in compliance with anti-money laundering (AML) legal requirements and other regulatory obligations.
• Customer Service — To respond to inquiries, complaints, and support requests you submit to us.
• Platform Security — To detect and prevent fraud, suspicious activity, and platform abuse.
• Product Improvement — To analyse usage patterns in order to improve the platform's interface, performance, and overall experience.
• Marketing Communications — To send information about promotions, bonuses, and special offers — only to members who have consented to receive such communications.
• Regulatory Compliance — To fulfil legal obligations and requirements from relevant regulatory authorities.

CH777 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where we need to share certain information:

• Payment Providers — Required transaction information is shared with licensed payment providers such as banks, FPX operators, and e-wallet platforms to process your deposits and withdrawals.
• Technical Service Providers — Third parties assisting us with platform technical operations (such as cloud services and security monitoring) are bound by strict confidentiality agreements.
• Regulatory Body and Law Enforcement — We may disclose information if required by court order, regulatory authority directive, or applicable legal obligation.
• KYC Service Providers — Trusted third-party identity verification service providers assist us in processing KYC documents securely and in compliance with AML regulations.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for specifically stated purposes.

CH777 uses cookies and similar tracking technologies to enhance the user experience, ensure login session security, and understand how members use our platform.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies — To store your personal settings such as preferred language, interface theme, and display preferences.
• Analytics Cookies — Helps us understand how users interact with the platform so we can make meaningful improvements.
• Security Cookies — To detect suspicious login attempts and protect your account from unauthorised access.

CH777 consistently invests in cutting-edge security infrastructure to protect members' personal data. The security measures we implement include:

• End-to-End Encryption — All data transmitted through the platform is protected with TLS 1.3 protocols and AES-256 encryption.
• Two-Factor Authentication (2FA) — An additional security layer for member accounts that choose to enable it.
• 24/7 Monitoring — Our cybersecurity team monitors platform activity around the clock to detect anomalies and threats.
• Regular Penetration Testing — Independent security audits are conducted periodically by third-party experts to identify and patch system vulnerabilities.
• Internal Access Controls — Only staff who require access to specific data within the scope of their duties are permitted to do so, with all access comprehensively logged.
• Secure Data Backup — Data is automatically backed up daily to a secure, separate location to ensure data recovery in the event of a system failure.

CH777 does not store your personal data indefinitely. Data retention periods are determined based on operational needs and applicable legal obligations:

• Active Account Data — Retained for as long as your account is active and for a period of 7 years after account closure, in line with financial legal requirements.
• Transaction Records — Retained for a minimum of 7 years to meet financial audit and anti-money laundering requirements.
• KYC Documents — Retained for the duration of the active account period plus 5 years after account closure.
• Security Logs — Retained for 12 months for security incident investigation purposes if required.
• Communication Data — Support tickets and communications are retained for 3 years for reference and service improvement purposes.

Upon expiry of the retention period, data will be securely deleted or anonymized in accordance with established procedures.

Under Malaysia's Personal Data Protection Act (PDPA) and international best practices, you have the following rights regarding your personal data held by CH777:

To exercise any of the above rights, please contact us via email at [email protected] or via the in-platform support centre. We will respond to your request within 14 business days.

CH777 takes child protection in the digital environment very seriously. Our platform is exclusively for users aged 18 and above and we do not intentionally collect personal data from minors.

Steps we take to protect minors include:

• Age verification requirement during new account registration.
• The KYC process requires valid identification documents to verify the applicant's age.
• Active monitoring to detect and close accounts registered by underage individuals.

If we discover that a child's data has been collected without the knowledge or consent of a parent or legal guardian, we will immediately delete that data and close the associated account. Parents with concerns may contact us at [email protected].

CH777 may update this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other relevant operational reasons.

When we make material changes to this policy:

• The "Updated" date at the top of this page will be changed.
• A clear notice will be displayed on the platform or sent via email to all registered members.
• For highly significant changes, we may require members to re-consent before they can continue using the platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist:

• Privacy Email: [email protected] — dedicated to personal data and privacy inquiries.
• General Support Email: [email protected] — for general account and platform inquiries.
• Live Chat: Available 24/7 directly within the platform for immediate response.
• FAQ: Review FAQ page for answers to common questions about privacy and security.