Privacy Policy — jack777 Platform

1.Introduction

jack777 ("jack777", "we", "us", "our") operates the online gaming platform accessible at jack777.win. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors to our website.

This Privacy Policy ("Policy") describes, in accordance with applicable data protection legislation, how we handle personal data in connection with the provision of our services. By accessing or using the jack777 Platform, you acknowledge that you have read and understood this Policy and you consent to the processing of your personal data as described herein. If you do not agree to this Policy, please do not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of the jack777 Platform.

2.Data Controller

For the purposes of applicable data protection law, jack777 is the data controller in respect of personal data collected through the Platform. As data controller, jack777 determines the purposes and means of processing your personal data. Where jack777 engages third-party service providers to process personal data on its behalf, those parties act as data processors and are bound by contractual obligations that meet applicable data protection standards.

Our designated data protection contact can be reached at [email protected]. You may address any data-related enquiries, requests, or complaints to this contact.

3.Personal Data We Collect

We collect the following categories of personal data in connection with your use of the jack777 Platform:

We do not collect or store full payment card numbers. Any card-related payment processing is handled directly by PCI-DSS compliant payment processors and is not transmitted to or stored on jack777 systems.

4.How We Collect Personal Data

jack777 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 9 below).
• Third-party sources: Data received from identity verification service providers, payment processors, fraud detection services, and, where applicable, publicly available sources for AML/KYC compliance purposes.
• Behavioural observation: Gameplay and wagering data generated by your activity on the Platform, including interaction with games, frequency of play, session length, and cashier activity.

5.Purpose and Legal Basis for Processing

jack777 processes personal data only where a lawful basis exists under applicable data protection legislation. The following table summarises our primary processing purposes and the corresponding legal bases:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your data protection rights. You may object to processing based on legitimate interests by contacting us as detailed in Section 15.

6.Disclosure of Personal Data

jack777 does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients, strictly to the extent necessary for the stated purposes:

• Payment processors and e-wallet providers: Including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency network processors, for the purpose of executing financial transactions.
• Identity verification and KYC service providers: For the purpose of verifying your identity and complying with AML obligations.
• Game software providers: Game providers may receive anonymised or pseudonymised gameplay data for the purpose of maintaining game integrity and resolving disputes.
• Fraud prevention and cybersecurity service providers: For the purpose of detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction — including financial intelligence units as required by AML legislation.
• Professional advisers: Including legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• Group companies and successors: In the event of a merger, acquisition, or corporate restructuring, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by jack777 are required to process personal data only in accordance with jack777's instructions and to implement appropriate technical and organisational security measures.

7.International Data Transfers

jack777 operates on a global technical infrastructure. Accordingly, your personal data may be transferred to, and processed in, countries outside of Malaysia. Where such transfers occur to jurisdictions that do not provide a level of data protection equivalent to that in Malaysia, jack777 will implement appropriate safeguards, which may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or other recognised transfer mechanisms.

By using the jack777 Platform, you acknowledge and consent to the international transfer of your personal data in accordance with this Policy.

8.Data Retention

jack777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. As a general principle:

• Account data and transaction records are retained for a minimum of 5 years following account closure or the last transaction, in accordance with applicable AML record-keeping requirements.
• KYC verification documents are retained for the period required by relevant financial regulatory obligations.
• Customer support communications are retained for up to 3 years following resolution of the relevant matter.
• Marketing preference records are retained until you withdraw your consent or update your preferences.
• Technical and log data is typically retained for 12 months for security and operational purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jack777's data disposal procedures.

9.Cookies & Tracking Technologies

jack777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser. We use the following categories of cookies:

• Strictly necessary cookies: Essential for Platform operation, including session authentication, security, and load balancing. These cannot be disabled.
• Functional cookies: Enable personalised features such as language preferences, layout settings, and remembered login state.
• Analytical cookies: Used to collect anonymised statistical information about Platform usage — including pages visited, session duration, and error rates — to improve the Platform experience.
• Security cookies: Used for fraud detection, bot prevention, and platform integrity monitoring.

jack777 does not deploy third-party advertising or behavioural targeting cookies. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair Platform functionality.

10.Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by jack777:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jack777's legal retention obligations.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to us.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us as described in Section 15. jack777 will respond to verified requests within 30 days. We may require proof of identity before processing a data rights request. Please note that some rights are subject to exceptions and may not apply in all circumstances, particularly where processing is required for legal compliance or AML obligations.

11.Children's Privacy

The jack777 Platform is strictly for adults. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate parental or guardian verification, we will take immediate steps to delete such data and close the associated account. Parents and guardians are encouraged to use appropriate parental control software to prevent underage access to online gambling platforms.

If you believe that a minor has provided personal data to jack777, please contact us immediately at [email protected].

12.Security Measures

jack777 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data fields at rest;
• Access controls and role-based permission systems limiting data access to authorised personnel only;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for internal system access;
• Staff training on data protection and information security obligations.

While jack777 takes all reasonable measures to protect your personal data, no method of electronic transmission or storage is entirely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jack777 will notify you and the relevant regulatory authority in accordance with applicable breach notification requirements.

13.Third-Party Links

The jack777 Platform may, from time to time, contain links or references to third-party services, including game providers and payment processors. This Policy applies solely to data collected and processed by jack777. jack777 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third party you interact with through or in connection with the Platform.

14.Updates to This Policy

jack777 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via a notice displayed upon their next login to the Platform, and the revised Policy will be published at jack777.win/privacy-policy with an updated effective date. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you must cease using the Platform and may request account closure by contacting customer support.

15.Contact & Complaints

For all data protection enquiries, access requests, or complaints, please contact jack777's data protection team through the live chat facility available on the Platform, or by email at [email protected]. Please include "Privacy" in your subject line and provide sufficient detail for us to identify your account and address your request.

If you are not satisfied with our handling of your data protection concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.