Club7 Privacy Policy – Data Protection & Members' Personal Information

Welcome to the club7 Privacy Policy page. This document is provided to give all members, prospective members, and website visitors a clear and transparent understanding of how club7 handles your personal information. We believe privacy is a fundamental right of every individual, and we take this responsibility very seriously.

This Privacy Policy applies to all services provided under the club7 brand, including the main website at club7.vu, the mobile app, online games, sports betting services, Live Casino, Slots, Fish Shooting Games and all related communication and customer support channels. By using any club7 service, you agree to be bound by the terms set out in this document.

Club7 acts as the data controller for all personal information collected through our platform. This means we are fully responsible for how your information is collected, stored, processed and protected. In fulfilling this responsibility, we comply with all provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices relating to user data protection.

Club7 only collects data necessary to provide a quality, secure and responsible service to our members. The following are the categories of data we may collect:

We never collect sensitive personal data such as medical information, political affiliations, or religious beliefs unless required by law or to fulfil specific compliance obligations. Data collected is always proportionate to the service you are using.

The data we collect is used responsibly and solely for the stated purposes. club7 uses your personal information for the following purposes:

• Account Management: Creating, verifying, and managing your member account, including KYC and age verification processes.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Customer support: Answering enquiries, resolving complaints, and providing the technical assistance you need.
• Platform security: Detecting and preventing fraud, money laundering, and any suspicious or unlawful activity.
• Legal compliance: Meeting the reporting and compliance obligations required under applicable Malaysian law.
• Service improvement: Analysing usage patterns to enhance the gaming experience and overall service quality.
• Marketing communications: Sending promotional information, bonus offers, and platform updates — only with your consent.
• Responsible gaming: Monitoring wagering patterns to identify members who may need assistance and support.

Club7 does not sell, rent or disclose members' personal data to third parties for marketing purposes without your explicit consent. However, there are certain situations where we need to share information with carefully selected parties:

• Payment service providers: DuitNow, FPX, partner banks and e-wallet processors used to process your deposit and withdrawal transactions — all are certified and trusted entities.
• Game service providers: Game developers and providers supplying casino, slots, and sports betting content on the club7 platform.
• Technical service providers: Hosting, cybersecurity, and data analytics companies that help club7 operate the platform safely and efficiently.
• Statutory bodies and law enforcement agencies: Where required by law, court order, or direction from a legitimate regulatory authority.
• Anti-fraud agencies: For background checks, identity verification, and financial crime prevention in line with AML/KYC compliance requirements.

All third parties with whom we share data are bound by strict data confidentiality agreements and are only permitted to use that information for the specified purposes. club7 ensures that every service partner adheres to data protection standards equal to or exceeding our own.

The security of your personal data is club7's top priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against cyber threats, unauthorised access, and data loss.

• 256-bit SSL Encryption: All communications between your device and club7's servers are secured with the highest industry-standard encryption.
• Layered access control: Only authorised club7 staff with a legitimate business need may access member personal data.
• 24/7 monitoring: Our cybersecurity team monitors systems continuously around the clock to detect and respond to any threats promptly.
• Secure data backup: Member data is regularly backed up to secure, isolated storage locations to ensure data availability even in the event of technical disruptions.
• Two-factor authentication (2FA): 2FA is available for all member accounts as an additional security layer during login.
• Regular security audits: club7 conducts regular vulnerability assessments and penetration testing by independent security experts.

While club7 takes all reasonable measures to protect your data, we would like to remind you that no system is entirely free from risk. You also play an important role in keeping your account secure – always use a strong password, never share your login credentials with anyone, and make sure you log out of your account after each session.

Club7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us remember your preferences and make the platform more responsive to your needs.

• Essential cookies: Required for core platform functions such as login, session verification and security. These cookies cannot be disabled.
• Preference cookies: Saving your preferences such as language, display settings, and game configurations for a more personalised experience.
• Analytics cookies: Helping us understand how members use the platform so we can make meaningful improvements.
• Performance cookies: Collecting platform performance data to identify and resolve technical issues more quickly.

You can manage or disable cookies at any time through your browser settings. However, disabling essential cookies may affect the functionality of the club7 platform. For the best experience, we recommend allowing at least essential and preference cookies.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights, which club7 is fully committed to upholding:

• Right of access: You have the right to request and receive a copy of all personal data we hold about you.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate, incomplete or outdated.
• Right to erasure: You may request that your personal data be deleted when it is no longer needed for the original purpose of collection, subject to legal obligations.
• Right to restrict processing: You may request that we restrict how we process your data in certain circumstances.
• Right to object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where the processing of your data is based on consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the club7 data protection team via email at [email protected]. We will process your request within 21 working days as required by the PDPA.

Club7 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active and for any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legal requirements.
• KYC records and identity verification: Retained for a minimum of 5 years from the date of the last transaction as stipulated by compliance regulations.
• Support communication records: Retained for 3 years for reference purposes and resolution of any disputes that may arise.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

When data is no longer needed and there is no legal obligation to retain it, club7 will securely delete or destroy it using methods that ensure the data cannot be recovered.

Club7 enforces a strict age restriction policy — our platform is exclusively for individuals aged 18 and above. We do not knowingly collect, store or process any personal data from individuals under the age of 18.

If we discover that personal data of a child or minor has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who believe their child may have registered on the club7 platform are urged to contact us immediately through the available support channels.

Club7 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our operational practices, legal requirements or the latest developments in data protection. All changes will take effect immediately upon publication on this page.

For changes considered material or significant to how we process your data, club7 will endeavour to provide reasonable notice via email or in-platform notification before the changes take effect. The latest update date will always be displayed at the top of this page for your reference.

Your continued use of the club7 platform after any updates are published will be considered your acceptance of the revised Privacy Policy. If you disagree with any changes, you have the right to close your account and request the deletion of your personal data from our systems.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to reach us through the following channels: