Privacy Policy for paham777

This Privacy Policy ("Policy") describes how paham777 ("we", "us", "our", "the Platform") collects, uses, stores, and shares personal information in connection with your use of the website located at paham777.cam and all associated services, features, and functionality.

paham777 is an online casino and sports betting platform operated for the Malaysian market. Given the nature of our services — which include processing financial transactions, verifying player identities, and maintaining records in accordance with applicable obligations — the responsible handling of your personal data is a fundamental part of how we operate.

By registering for an Account or otherwise using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy forms part of our overall Terms and Conditions and should be read alongside them.

If you have any questions about this Policy or about how we handle your personal data, please refer to Section 16 (Contact Us) for the appropriate contact channels.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, or online identifiers.
• "Processing" means any operation performed on personal data, whether automated or manual, including collection, storage, use, disclosure, alteration, combination, or deletion.
• "Data Controller" refers to paham777, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of paham777, such as payment service providers or identity verification platforms.
• "Account" means the registered user account created by a Player on the paham777 Platform.
• "KYC" (Know Your Customer) means the identity and age verification process required to comply with anti-money laundering and responsible gambling obligations.
• "Cookie" means a small text file stored on your device by your web browser that enables the Platform to recognise your device and retain session or preference information.
• "Sensitive Data" means personal data that, by its nature, warrants a higher degree of protection, including identification document numbers, financial account details, and records relating to health or welfare.

paham777 collects personal data in the categories set out below. The specific data points collected may vary depending on the nature of your interaction with the Platform and the level of account verification completed.

We do not intentionally collect or process Sensitive Data beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health status unless explicitly required by a specific regulatory obligation.

paham777 collects personal data through the following channels and methods:

• Direct Submission: Information you provide during account registration, the KYC process, deposit and withdrawal requests, support communications, and feedback forms.
• Automated Collection: Technical and usage data collected automatically when you access or interact with the Platform, including through cookies, server logs, and session tracking technologies.
• Payment Processing: Financial data collected in conjunction with transactions processed through third-party payment providers including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, and Hong Leong Bank.
• Third-Party Verification: In some cases, identity verification data may be cross-referenced against third-party identity verification services to confirm the accuracy of information you have provided.
• Customer Support Interactions: Data shared during live chat sessions, email correspondence, or any other communication with the paham777 support team.

paham777 processes your personal data only where a valid legal basis exists. The applicable legal grounds for our processing activities are as follows:

• Contractual Necessity: Processing required to perform our contract with you, including operating your account, processing deposits and withdrawals, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification duties, and record-keeping mandates.
• Legitimate Interests: Processing carried out for our legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, service improvement, and responsible gambling monitoring.
• Consent: Where you have given your express consent to a specific processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting our support team.

paham777 uses your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your paham777 account, including authentication, balance management, and preferences.
• Transaction Processing: Processing deposits and withdrawals through your chosen payment method, reconciling transactions, and maintaining financial records in MYR.
• Identity & Age Verification: Verifying that you meet the minimum age requirement of 21 years, and confirming your identity in accordance with our KYC obligations.
• Regulatory Compliance: Fulfilling anti-money laundering obligations, reporting obligations, and any other legal requirements applicable to online gaming platform operators.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through our 24/7 live chat and email support channels.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, unauthorised account access, money laundering, and any other misuse of the Platform.
• Platform Improvement: Analysing aggregated usage data to improve game performance, payment flow, and overall user experience on the paham777 Platform.
• Responsible Gambling: Monitoring betting patterns to identify potential signs of problem gambling behaviour and to apply appropriate intervention tools such as deposit limits or self-exclusion.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. You may opt out at any time.

paham777 does not sell, rent, or trade your personal data. We may share your personal data in the following limited circumstances:

• Payment Service Providers: We share relevant financial data with payment processors (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB Bank, Public Bank, Hong Leong, and cryptocurrency gateway providers) solely for the purpose of processing your transactions. These parties are contractually bound to use your data only for that purpose.
• Identity Verification Partners: Where required for KYC compliance, we may share identity document data with vetted third-party verification service providers. Such providers operate under strict data processing agreements.
• IT Infrastructure and Cloud Providers: Our hosting, database, and technical service providers may process data on our behalf. All such providers are subject to data processor agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required by applicable law, a valid legal order, or where we have a good-faith belief that disclosure is necessary to prevent illegal activity or protect the safety of any person.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, personal data held by paham777 may be transferred to the acquiring entity, subject to equivalent privacy protections.

paham777 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain session state, and gather usage analytics. Cookies do not contain your full personal profile but may contain a session identifier that is linked to your account data on our servers.

The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated information about how users interact with the Platform, including pages visited, games accessed, and session duration. This data is used to improve Platform performance.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and recently played games.
• Security Cookies: Used to detect and prevent fraudulent login attempts and suspicious account activity.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your experience of the Platform. Strictly necessary cookies cannot be disabled without impacting core Platform functionality.

paham777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active account, plus a minimum period of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction histories are retained for a minimum of seven (7) years following the date of the transaction, in accordance with financial record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Communications Records: Support correspondence and live chat transcripts are retained for a period of two (2) years unless a specific dispute or legal hold requires longer retention.
• Technical and Usage Data: Generally retained for twelve (12) months for analytics purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is either permanently deleted or irreversibly anonymised so that it can no longer be associated with any individual.

paham777 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the paham777 servers.
• Encryption at rest for sensitive data fields stored in our databases, including identity document references and financial account identifiers.
• Role-based access controls ensuring that employee access to personal data is limited to those who require it to perform their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for internal systems that store or process personal data.
• Incident response procedures governing the detection, assessment, and notification of data security incidents.

While we take all reasonable steps to secure your personal data, no online transmission or storage system is completely impenetrable. We encourage you to maintain the security of your own account credentials and to contact us immediately if you suspect any unauthorised access to your account.

As a user of the paham777 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via the channels described in Section 16.

We will respond to all valid data rights requests within a reasonable timeframe. In some cases, we may need to verify your identity before actioning a request. Where we are unable to comply with a request, we will provide a written explanation of the reason.

paham777 is strictly an adults-only platform. Our services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 21. Our minimum age policy is strictly enforced through account registration controls and KYC identity verification.

If we discover or are notified that personal data has been collected from a user who is under 21 years of age, we will immediately suspend the associated Account, void any related transactions, and delete the personal data of the underage individual from our systems as promptly as practicable.

Parents and guardians who believe their child has registered on the paham777 Platform should contact our support team immediately via the channels in Section 16.

paham777 operates primarily for the Malaysian market, and our core data processing infrastructure is designed with Malaysian users in mind. However, some of our technology service providers and payment processing partners may process data in jurisdictions outside Malaysia as part of their global infrastructure.

Where personal data is transferred outside of Malaysia, paham777 ensures that appropriate safeguards are in place, including:

• Transferring data only to jurisdictions that maintain adequate data protection standards, or
• Implementing contractual safeguards with receiving parties, such as standard contractual clauses or data processing agreements that impose equivalent data protection obligations.

You may request information about the international transfer arrangements applicable to your personal data by contacting us at the details provided in Section 16.

The paham777 Platform may from time to time contain references or links to third-party payment service providers or technology partners for the purpose of facilitating transactions. These third parties operate independently of paham777 and have their own privacy policies governing how they handle personal data.

paham777 has no responsibility or liability for the privacy practices, content, or security of third-party services. We encourage you to review the privacy policy of any third-party service you interact with as part of using paham777, particularly payment platforms such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and bank FPX portals (Maybank, CIMB Bank, Public Bank, Hong Leong Bank).

paham777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. For significant changes that materially affect how we use your personal data, we will endeavour to notify you via your registered email address or through a prominent notice on the Platform.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of those changes. We recommend that you review this Policy periodically to remain informed of how we protect your data.

If you do not agree with any changes to this Policy, you should cease using the Platform and contact our support team to request account closure and data deletion where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the paham777 Data & Privacy team through the following channels:

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. This is our fastest response channel and is the preferred method for account-specific data enquiries.
• Email: [email protected] — For written data rights requests, please include "Data Rights Request" in your subject line and provide your registered username and Account ID to help us identify your record.

We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within a reasonable period thereafter, subject to any verification requirements. Our support team serves players across Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and Bangsar.