Privacy Policy
VR777 is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our platform, why we collect it, how it is used and stored, and the rights you have over your own data.
Table of Contents
- 1. Introduction
- 2. Definitions
- 3. Data Controller
- 4. Data We Collect
- 5. How We Collect Data
- 6. Purposes & Legal Basis
- 7. Data Sharing
- 8. International Transfers
- 9. Data Retention
- 10. Your Rights
- 11. Cookies & Tracking
- 12. Security Measures
- 13. Minors
- 14. Third-Party Services
- 15. Policy Updates
- 16. Contact Us
Introduction
VR777 ("we", "us", "our", "the Platform", "the Operator") operates the online gaming and sports betting platform accessible at vr777.cam. In the course of providing our services — which include live casino games, slot games, and sports betting markets covering events such as the English Premier League (EPL), Liga Super Malaysia, UFC, and Formula 1 — we collect and process personal data about you as a registered user ("you", "the Player", "the User").
This Privacy Policy ("Policy") is intended to give you a clear and transparent account of: (a) the categories of personal data we collect; (b) the purposes for which we use that data; (c) the legal bases on which processing is carried out; (d) who we share your data with and under what circumstances; (e) how long we retain your data; and (f) the rights you hold in respect of your personal data and how to exercise them.
This Policy should be read alongside our Terms and Conditions, which govern your use of the VR777 platform and are incorporated herein by reference. By registering an account on vr777.cam or by continuing to use our services after this Policy has been updated, you acknowledge that you have read and understood its contents.
Note for Malaysian Users: Malaysia's Personal Data Protection Act 2010 (PDPA) establishes data protection obligations for certain classes of data processors operating within Malaysia. VR777 processes personal data in accordance with internationally recognised data protection standards and is committed to the principles of lawful, fair, and transparent processing regardless of the regulatory framework applicable in your country of residence.
Definitions
For the purposes of this Policy, the following terms shall bear the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, location data, and online identifiers. |
| "Processing" | Any operation performed on personal data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. In the context of this Policy, the Data Controller is VR777 operating through vr777.cam. |
| "Data Processor" | Any third party that processes personal data on behalf of and under the instruction of VR777, such as payment gateway providers, identity verification services, and analytics providers. |
| "KYC" | Know Your Customer — the mandatory identity and age verification process required of all Players prior to their first withdrawal, typically involving submission of government-issued identification and proof of address. |
| "Sensitive Data" | A subset of personal data afforded heightened protection, including but not limited to financial account details, government identification numbers (e.g., Malaysian MyKad number), and source of funds documentation. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose. |
Data Controller
VR777, operating through the domain vr777.cam, acts as the Data Controller in respect of all personal data collected from Players registered on the Platform. As Data Controller, VR777 determines the purposes for which personal data is collected and the manner in which it is processed.
VR777 operates under international online gaming licensing. The Platform's data processing activities are conducted in accordance with the standards imposed by its licensing jurisdiction and with reference to internationally recognised data protection frameworks. VR777 does not claim to be regulated by Bank Negara Malaysia or any Malaysian domestic financial regulator with respect to data processing activities.
For any queries, data access requests, or complaints regarding VR777's data processing activities, please refer to the contact details provided in Section 16 of this Policy.
Categories of Personal Data We Collect
VR777 collects personal data across several categories, as described in the table below. Collection occurs at various stages of your relationship with the Platform — from initial registration through ongoing use and financial transactions.
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued identification number (e.g., Malaysian MyKad number or passport number), copies of identification documents submitted for KYC purposes. |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam). |
| Financial Data | Payment method details (e-wallet identifiers for Touch 'n Go, Boost, GrabPay; bank account references for Maybank, CIMB, Public Bank, Hong Leong; USDT TRC20 wallet addresses), deposit and withdrawal transaction history, account balance records. |
| Gaming & Betting Activity | Game session history, bet placement records, wagering amounts and outcomes, bonus redemption history, sports betting market selections (including EPL, Liga Super Malaysia, UFC and other covered events). |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session timestamps, geolocation data (if permitted by your device settings), cookies and tracking identifiers. |
| Communications Data | Records of communications between you and VR777's support team (live chat transcripts, email correspondence), subject matter of your enquiries, support tickets raised and their resolution status. |
| Responsible Gambling Data | Deposit and loss limits set by you, self-exclusion requests and their durations, session reminder preferences, and any information you have voluntarily provided to our support team in connection with a responsible gambling concern. |
| Source of Funds Data | Documentation provided in support of anti-money-laundering (AML) obligations, including bank statements, payslips, or other financial records where required under enhanced due diligence procedures. |
VR777 does not collect or store full payment card numbers. Payment processing is handled by regulated third-party payment processors subject to their own data security obligations. Financial identifiers retained by VR777 are limited to those necessary to process transactions and comply with AML obligations.
How We Collect Personal Data
VR777 collects personal data through the following mechanisms:
- Direct Submission: Information you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, setting responsible gambling limits, or contacting our support team.
- Automated Technical Collection: Data automatically recorded when you access and interact with the Platform, including IP address, device identifiers, browser type, session logs, and gameplay or betting activity data. This collection occurs through server logs, cookies, and similar tracking technologies described in Section 11.
- Third-Party Sources: Identity verification and fraud prevention data from KYC service providers; transaction verification data from payment processors including those facilitating DuitNow, FPX, and e-wallet transactions; and risk-screening data from AML compliance service providers.
- Inferred Data: Analytical inferences drawn from your platform activity, such as responsible gambling risk indicators derived from your wagering patterns, deposit frequency, and session durations.
Purposes of Processing & Legal Basis
VR777 processes personal data only where a lawful basis exists. The following table sets out the primary purposes of processing and the legal basis applicable to each:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract — necessary to establish and maintain your account and provide the services you have requested. |
| Processing deposits and withdrawals (MYR via Touch 'n Go, Boost, Maybank, CIMB, FPX, etc.) | Performance of a contract — necessary to execute financial transactions on your account. |
| KYC identity and age verification | Legal obligation — required under applicable gaming licensing conditions and AML/CTF compliance obligations. |
| Anti-money laundering and fraud prevention screening | Legal obligation and legitimate interests — compliance with international AML standards and protection of VR777 and its users from financial crime. |
| Responsible gambling monitoring and intervention | Legitimate interests — identifying at-risk player behaviour and fulfilling our duty of care obligations under our gaming licence. |
| Customer support and complaint handling | Performance of a contract and legitimate interests — resolving your queries and improving our service quality. |
| Platform analytics and product improvement | Legitimate interests — understanding how Players use the Platform to improve product features and user experience. |
| Promotional communications (where you have opted in) | Consent — sent only where you have expressly opted in to receive marketing communications. Withdrawable at any time. |
| Legal compliance and regulatory reporting | Legal obligation — compliance with applicable licensing conditions and reporting obligations. |
Data Sharing & Disclosure
VR777 does not sell your personal data to any third party for commercial purposes. Personal data is shared with external parties only in the circumstances set out below, and only to the extent necessary for the stated purpose:
7.1 Service Providers (Data Processors)
VR777 engages third-party service providers to assist with specific operational functions. These providers process personal data on VR777's behalf and are bound by contractual data processing agreements that restrict their use of your data to the stated purpose only. Categories of processors include:
- Payment processors: Facilitating transactions via Touch 'n Go, Boost, GrabPay, DuitNow, FPX (Maybank / CIMB / Public Bank / Hong Leong), and USDT TRC20 cryptocurrency networks.
- KYC and identity verification providers: Processing identity documents and cross-referencing against sanctions and PEP (Politically Exposed Person) databases.
- AML compliance and fraud screening services: Analysing transaction patterns against known typologies of financial crime.
- Platform analytics and performance monitoring providers: Collecting aggregated technical data to support platform stability and user experience improvements.
- Customer support infrastructure providers: Hosting live chat systems and support ticket management tools.
7.2 Legal and Regulatory Disclosure
VR777 may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or in connection with the investigation or prevention of fraud, money laundering, or other criminal activity. Such disclosures are made without prior notice to the affected individual where legally required.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving VR777, personal data held by the Platform may be transferred to the successor entity as part of that transaction. Affected individuals will be notified of any such transfer and the applicable privacy terms of the successor entity in advance where practicable.
International Data Transfers
VR777 operates as an international platform and may process or store your personal data in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction. In all cases, VR777 takes appropriate safeguards to ensure that cross-border data transfers are conducted in accordance with applicable data protection standards.
Where personal data is transferred to a third-party service provider located outside the country of processing, VR777 requires such providers to comply with contractual data protection obligations that reflect internationally recognised standards for data security and confidentiality.
If you are a Malaysian resident, your data may be processed on servers located outside Malaysia. By using the VR777 platform, you consent to the processing and storage of your personal data in international jurisdictions as described in this Policy.
Data Retention
VR777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulatory obligation, or legitimate business interest. The following general retention guidelines apply:
- Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following permanent account closure, to satisfy AML record-keeping obligations and to respond to any regulatory enquiries arising from your account activity.
- Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard AML and financial record-keeping obligations.
- KYC documentation: Retained for the period of your account activity plus a minimum of five (5) years post-closure.
- Support communications: Retained for three (3) years from the date of the communication, unless a specific matter requires longer retention for legal or compliance purposes.
- Technical and analytics data: Typically retained in identifiable form for up to twelve (12) months, after which data may be retained in anonymised or aggregated form for analytical purposes indefinitely.
- Marketing preference data: Retained until you withdraw your consent to receive marketing communications, at which point preferences are updated and you are removed from active marketing lists promptly.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.
Your Rights as a Data Subject
Subject to applicable law and the legal basis on which your personal data is processed, you hold the following rights in respect of your personal data held by VR777. To exercise any of these rights, please contact us using the details in Section 16.
Right of Access
You have the right to request a copy of the personal data VR777 holds about you, along with information about how it is being processed.
Right to Rectification
You may request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right is subject to VR777's overriding legal obligations to retain certain records.
Right to Restrict Processing
You may request that VR777 restrict the processing of your data in certain situations, such as where you contest its accuracy or the lawfulness of processing.
Right to Data Portability
Where processing is based on consent or contract, you may request a copy of your data in a structured, commonly used, machine-readable format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless compelling overriding grounds exist.
VR777 will respond to all valid data subject requests within thirty (30) calendar days of receipt. We may require verification of your identity before processing a request. Some rights may be limited where VR777 is required to retain data for legal, regulatory, or contractual obligations — in such cases, we will explain the specific limitation that applies.
10.1 Withdrawal of Consent
Where processing is based on your consent (for example, receiving promotional communications), you may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent for marketing communications, contact our support team or use the unsubscribe mechanism included in any marketing email you receive from VR777.
Cookies & Tracking Technologies
VR777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser. They allow us to recognise returning users, maintain secure login sessions, remember your preferences, and analyse Platform usage patterns.
11.1 Categories of Cookies Used
- Strictly Necessary Cookies: Essential for the Platform to function correctly, including maintaining your authenticated session, remembering your login state, and processing transactions. These cannot be disabled without materially impairing Platform functionality.
- Functional Cookies: Used to remember your preferences and settings, such as language selection, preferred display settings, and responsible gambling tool configurations you have set on your account.
- Analytical Cookies: Collect anonymised or pseudonymised data about how Players interact with the Platform — pages visited, features used, session duration — to inform product improvements. VR777 uses reputable analytics providers subject to data processing agreements.
- Security Cookies: Assist in detecting and preventing fraudulent activity, including identifying anomalous login behaviour, unusual transaction patterns, and multi-account indicators.
11.2 Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. VR777's Platform does not currently alter its data collection practices in response to DNT signals, as no industry-wide standard for interpreting DNT has been established. This Policy provides full transparency about our tracking activities in lieu of DNT support.
Security Measures
VR777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and vr777.cam is encrypted in transit using industry-standard TLS protocols.
- Encrypted Data Storage: Sensitive data fields, including identification numbers and financial account references, are stored in encrypted form at rest.
- Access Controls: Personal data is accessible only to authorised VR777 personnel who require it to perform their specific functions. Access is governed by role-based permissions and logged for audit purposes.
- Two-Factor Authentication (2FA): Available for all Player accounts and strongly recommended. Internal system access by VR777 staff requires multi-factor authentication.
- Regular Security Audits: VR777's systems undergo periodic independent security assessments to identify and remediate vulnerabilities.
- Incident Response Procedures: In the event of a personal data breach, VR777 will take immediate steps to contain the breach, assess its scope and impact, notify affected individuals and relevant authorities where required, and implement corrective measures.
Your Responsibility: You are responsible for maintaining the security of your account credentials. Never share your VR777 username or password with any third party. VR777 will never ask for your password through any communication channel. If you believe your account has been compromised, contact our 24/7 support team immediately via live chat.
Minors & Age Restriction
VR777's services are strictly intended for individuals aged 21 years and above. VR777 does not knowingly collect, process, or store personal data from individuals under the age of 21. If VR777 becomes aware that personal data has been submitted by or on behalf of an individual under 21, the relevant account will be immediately suspended pending investigation, all associated data will be deleted following any required regulatory notification, and any funds deposited will be returned through the original payment method where possible.
If you are a parent or guardian and believe that a minor has registered an account on VR777, please contact our support team immediately via live chat or by emailing [email protected] (plain text — not a clickable link) so that we can take prompt action.
Age verification is a core component of VR777's KYC process. All Players are required to verify their age and identity before the first withdrawal is processed. VR777 reserves the right to request age verification documentation at any time during a Player's account lifecycle.
Third-Party Services & Links
The VR777 platform may contain references to or integrations with third-party services, including payment gateways (such as Touch 'n Go, Boost, GrabPay, DuitNow, FPX providers) and game content providers. Where you interact with these third-party services through VR777, their own privacy policies and data handling practices apply. VR777 is not responsible for the data practices of third-party services and recommends that you review their privacy policies independently.
Third-party game content providers may collect limited technical data (such as session identifiers) for the purpose of delivering their game content within the VR777 platform. Such providers are contractually required to use that data only for the stated purpose and not to engage in independent marketing or profiling of VR777 Players.
Policy Updates & Amendments
VR777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. Where a material change is made, we will provide notice to registered Players via email or a prominent on-site notification prior to the change taking effect. The updated Policy will be published at vr777.cam/privacy-policy with a revised effective date.
Your continued use of the VR777 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We recommend reviewing this page periodically to stay informed about how we protect your personal data.
Contact Us
If you wish to exercise any of your data subject rights described in Section 10, submit a data access or deletion request, raise a privacy concern, or seek clarification on any aspect of this Privacy Policy, please contact VR777 through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, through the on-site chat interface at vr777.cam. Live chat is the fastest method for account-related queries including data requests.
- Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide your registered account details and a description of your request. We aim to acknowledge all email privacy requests within 3 business days and to resolve them within 30 calendar days.
Our support team is Malaysia-aware and familiar with the local context of players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. All privacy requests are handled in English and treated with strict confidentiality.
Our Privacy Commitments at a Glance
Your Data Stays Yours
VR777 never sells your personal data to third parties for commercial purposes. Data is shared only with service providers necessary to operate the Platform and with authorities where legally required.
Bank-Grade Encryption
All data transmitted to and from vr777.cam is encrypted with 256-bit SSL/TLS. Sensitive stored data fields are encrypted at rest. Your financial details are never stored in plain text.
21+ Age Verified
No account is permitted to transact without completing KYC. Age verification protects minors and ensures every active account belongs to an eligible adult aged 21 or above.
Minimal Data Collection
We collect only what is necessary to provide our services, meet legal obligations, and keep the Platform secure. We do not build advertising profiles or sell behavioural data.
Clear Rights, Easy Requests
Access, rectify, or delete your data by contacting our 24/7 support team. Data subject requests are handled within 30 days. No bureaucratic runaround — just a simple live chat or email.
Malaysian Payment Privacy
Deposit details for Touch 'n Go, Boost, Maybank, CIMB, and other Malaysian methods are processed by regulated payment providers under their own strict data security obligations.
Questions About Your Privacy?
Our support team is available around the clock to handle data enquiries, privacy requests, and any questions about how VR777 handles your personal information. For players aged 21 and above only.
Play responsibly. For players aged 21 and above only. VR777 is an international online gaming platform. Players are responsible for ensuring compliance with their local laws.