Privacy Policy — spbu777

1 Introduction

spbu777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our online casino and sports betting platform at https://spbu777.cam. This Privacy Policy explains, in clear and plain English, how spbu777 collects, uses, stores, shares, and protects your personal data.

This Policy applies to all users of the spbu777 platform, including registered account holders, prospective players who visit the website without registering, and individuals who contact us via our support channels. It covers data collected through the website, our live chat system, payment processing interfaces, and any communications we send to you.

spbu777 operates under international licensing and adheres to internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability. We take these obligations seriously and have implemented technical and organisational measures to uphold them.

Players accessing spbu777 from Malaysia should note that Malaysia's Personal Data Protection Act 2010 (PDPA 2010) governs the processing of personal data for commercial transactions in Malaysia. While spbu777 operates under an international licensing jurisdiction, we are committed to upholding data handling standards consistent with the principles of the PDPA 2010 and other applicable international frameworks.

---

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, payment details, device identifiers, and IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, spbu777.
• "Data Processor" means any third party that processes personal data on behalf of spbu777 under a contractual data processing agreement.
• "User" or "Player" refers to any individual who accesses or uses the spbu777 Platform.
• "KYC Data" refers to identity and address verification documentation collected as part of the Know Your Customer process.
• "Transaction Data" refers to records of deposits, withdrawals, game wagers, and account credits associated with a Player's Account.
• "Cookies" refers to small text files placed on a User's device by the Platform to enable functionality, analytics, and session management.
• "Third-Party Payment Provider" refers to external payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency network providers.

---

3 Data Controller

spbu777 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, spbu777 determines the purposes for which personal data is collected and the manner in which it is processed. Where spbu777 engages third-party service providers to process data on its behalf, those providers act as Data Processors and are bound by written contractual obligations that restrict their use of personal data to the specific purposes for which they have been engaged.

The primary contact point for all data protection matters is our support team, reachable via live chat or at the email address listed in Section 16 of this Policy.

---

4 Personal Data We Collect

The categories of personal data collected by spbu777 vary depending on the nature of your interaction with the Platform. The following table summarises what we collect and why:

4.1 Sensitive Personal Data

spbu777 does not intentionally collect sensitive categories of personal data (such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless such data is volunteered by the User in the context of a support interaction or responsible gambling self-assessment. Any sensitive data received in this context is treated with heightened security controls and is not used for marketing or profiling purposes.

---

5 How We Collect Personal Data

spbu777 collects personal data through the following methods:

• Direct Collection: Data you provide voluntarily when registering an account, completing KYC verification, initiating a deposit or withdrawal, setting up responsible gambling controls, or contacting our support team.
• Automated Technical Collection: Data collected automatically by our platform systems when you access the website, including IP addresses, device identifiers, browser information, session data, and clickstream activity. This data is collected via server logs, cookies, and similar tracking technologies.
• Third-Party Payment Providers: Confirmation data from payment processors such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, confirming the status, amount, and reference of transactions. We do not receive or store full payment card numbers; payment data is processed directly by the relevant payment provider.
• Game Providers: Game performance and activity data from third-party game studios powering games available on the Platform, used for dispute resolution, technical troubleshooting, and compliance purposes.
• Fraud and Compliance Tools: Risk signals and verification data from third-party identity verification and anti-fraud service providers used as part of our KYC and anti-money-laundering compliance programme.

---

6 Purposes of Processing & Legal Basis

spbu777 processes personal data only for specific, legitimate purposes. For each purpose, we rely on one or more legal bases for processing as outlined below:

6.1 Account Management and Service Delivery

Purpose: Creating and managing your account, processing deposits and withdrawals, enabling gameplay, providing customer support, and maintaining your account settings. Legal basis: Performance of a contract (the agreement between you and spbu777 constituted by these Terms).

6.2 Identity Verification and KYC Compliance

Purpose: Verifying your identity and age, confirming ownership of payment methods, and meeting our obligations under anti-money-laundering (AML) and counter-terrorist financing (CTF) regulations applicable under our international operating licence. Legal basis: Legal obligation and legitimate interests (regulatory compliance, fraud prevention).

6.3 Fraud Prevention and Security

Purpose: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct. Monitoring account activity for suspicious patterns. Legal basis: Legitimate interests and legal obligation.

6.4 Responsible Gambling and Player Protection

Purpose: Operating and enforcing deposit limits, self-exclusion requests, session limits, and other responsible gambling controls; monitoring for indicators of problem gambling behaviour; complying with responsible gambling obligations under our licence. Legal basis: Legal obligation and legitimate interests (player welfare).

6.5 Marketing Communications

Purpose: Sending promotional offers, bonus notifications, platform updates, and relevant communications to registered Players who have opted in to receive marketing. Legal basis: Consent (players may withdraw consent at any time through account settings or by contacting support).

6.6 Platform Improvement and Analytics

Purpose: Analysing usage patterns, game performance data, and platform behaviour to improve our products, services, and user experience. Legal basis: Legitimate interests (product improvement), using aggregated or pseudonymised data wherever possible.

6.7 Legal and Regulatory Compliance

Purpose: Responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction; maintaining records required under our licensing obligations. Legal basis: Legal obligation.

---

7 Data Sharing and Disclosure

spbu777 does not sell, rent, or trade your personal data with third parties for their own marketing purposes. We share personal data only as described below:

7.1 Third-Party Payment Processors

When you make a deposit or withdrawal, we share the minimum necessary data with your chosen payment provider (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or USDT network) to process the transaction. Each payment provider operates under its own privacy policy and data handling practices, which we encourage you to review.

7.2 Game and Technology Providers

To deliver games and platform functionality, we share necessary technical and account data with the game studios and software providers that power our platform. These providers are contractually prohibited from using data for any purpose other than providing services to spbu777.

7.3 Identity Verification and Fraud Prevention Services

We work with third-party identity verification and AML compliance service providers to process KYC documents and assess fraud risk. These providers process data on our behalf under strict contractual data processing agreements.

7.4 Regulatory and Law Enforcement Authorities

spbu777 may disclose personal data to licensing regulators, law enforcement authorities, or courts when required to do so by law, court order, or applicable regulatory requirement. We will, where lawfully permitted to do so, notify affected users of any such disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, restructure, or sale of all or part of spbu777's business, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

---

8 International Data Transfers

As spbu777 operates under an international licence and utilises globally distributed infrastructure, your personal data may be transferred to, stored in, and processed in countries outside of Malaysia. These countries may have data protection laws that differ from those applicable in Malaysia.

Where such transfers occur, spbu777 ensures that appropriate safeguards are in place, including contractual data processing agreements with receiving parties that reflect internationally recognised data protection standards. By using the spbu777 platform, you acknowledge and consent to such international transfers of your personal data as described in this Policy.

---

9 Data Retention

spbu777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following retention periods apply as a general guide:

• Account and Registration Data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, as required under our AML and licensing compliance obligations.
• KYC Identity Documents: Retained for a minimum of five (5) years after the end of the business relationship, in accordance with international AML standards.
• Transaction and Financial Data: Retained for a minimum of five (5) years following each transaction, for audit, compliance, and dispute resolution purposes.
• Communications and Support Records: Retained for three (3) years from the date of the last communication, unless a longer period is required for an ongoing dispute or legal matter.
• Technical and Device Data (Logs): Retained for twelve (12) months from collection, after which logs are either deleted or anonymised.
• Marketing Preferences: Retained until you withdraw consent or request deletion, with opt-out records retained indefinitely to prevent future unsolicited communications.
• Self-Exclusion Records: Retained permanently to ensure that self-exclusion commitments remain enforceable in perpetuity, including after the initial exclusion period has expired.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised in a way that makes re-identification impossible is no longer considered personal data and may be retained for statistical and analytical purposes indefinitely.

---

10 Security Measures

spbu777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the spbu777 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The HTTPS padlock visible in your browser's address bar confirms this encryption is active.
• Encrypted Data Storage: Sensitive data — including KYC documents, financial records, and account credentials — is stored in encrypted form on secured servers. Encryption keys are managed under strict access controls.
• Access Controls and Authentication: Access to internal systems containing personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion Detection and Monitoring: Our infrastructure is continuously monitored for unauthorised access attempts, anomalous activity, and potential security incidents.
• Regular Security Audits: We conduct periodic internal security reviews and engage third-party security professionals to conduct independent audits of our data handling and security practices.
• Staff Training: All personnel with access to personal data receive regular training on data protection obligations, security protocols, and incident response procedures.

---

11 Cookies & Tracking Technologies

spbu777 uses cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device when you visit our website. They serve a range of functions:

11.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They enable core features such as session management, secure login, and basic platform navigation. Essential cookies cannot be disabled without significantly affecting platform functionality.

11.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your chosen language, display preferences, and account-level configuration — to deliver a more personalised experience on subsequent visits.

11.3 Analytics Cookies

Analytics cookies help us understand how users interact with the platform — which pages are visited most, where users encounter difficulties, and how gameplay sessions progress. This data is used in aggregate and pseudonymised form to improve platform performance and user experience. We do not use analytics data to build individual user profiles for advertising purposes.

11.4 Managing Cookies

You may control and manage cookie settings through your browser's privacy settings. Most modern browsers allow you to block all cookies, accept only essential cookies, or review and delete cookies that have already been set. Please note that blocking essential cookies will impair your ability to use the spbu777 platform. Detailed instructions for managing cookies are available in the help documentation for your specific browser.

---

12 Your Data Protection Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by spbu777:

• Right of Access: You have the right to request a copy of the personal data we hold about you, including information about how it is used, where it is stored, and with whom it has been shared.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You may update basic account information directly through your Account settings, or contact our support team for more complex corrections.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that certain data must be retained under our regulatory and licensing obligations regardless of a deletion request.
• Right to Restriction of Processing: You have the right to request that we restrict processing of your data in certain circumstances — for example, while we investigate the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests where you believe your rights and freedoms override our legitimate interests. You may also object at any time to the use of your data for direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email (see Section 16). We will respond to all verified requests within 30 calendar days. For complex or multiple requests, this period may be extended by a further 30 days, in which case we will notify you of the extension within the initial 30-day period.

---

13 Minors & Age Policy

spbu777 strictly prohibits access and registration by individuals under the age of 21 years. We do not knowingly collect personal data from individuals under 21. Where we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete all personal data collected from that individual, and refund any deposits made (in accordance with our Terms and Conditions).

Age verification is conducted as a mandatory step in our KYC process. Providing false information about your age during registration is a serious breach of our Terms and Conditions and may have legal consequences.

If you are a parent or guardian and believe that your minor child may have registered an account on spbu777, please contact our support team immediately. We will take prompt action to investigate and close any such account.

---

14 Third-Party Services and External Links

The spbu777 platform integrates with third-party services including payment processors, game providers, and customer support technology providers. While these integrations are necessary to deliver our platform's functionality, each third-party service operates under its own privacy policy. spbu777 is not responsible for the data handling practices of third-party service providers beyond the contractual data processing obligations we impose on them.

spbu777 does not include links to external third-party websites for general browsing purposes. Where references to third-party payment brand names appear on our platform (for example, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, DuitNow, FPX, Public Bank, Hong Leong Connect), these are provided for informational and functional payment processing purposes only and do not constitute endorsement of those brands' data handling practices beyond our contractual arrangements with them.

---

15 Amendments to This Privacy Policy

spbu777 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform services. When material changes are made, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify registered Players via the email address associated with their Account or through an in-platform notification.

Your continued use of the spbu777 platform following any posted amendment to this Policy constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you should stop using the Platform and close your Account. We encourage you to review this page periodically to stay informed of how we handle your personal data.

---

16 Contact Us & Complaints

For all data protection, privacy, and PDPA-related enquiries — including requests to exercise your data rights, corrections to personal data, or concerns about data handling practices — please contact our team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, accessible through the Platform interface
• Subject Line for Data Requests: Please use the subject line "Data Privacy Request" or "PDPA Request" to ensure your enquiry is directed to the appropriate team member without delay

We take all privacy complaints seriously. Upon receiving a complaint, we will acknowledge it within 5 business days and aim to provide a full response within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate to the data protection authority in your jurisdiction. For Malaysian residents, the relevant authority is the Department of Personal Data Protection (PDPD) of Malaysia under the Ministry of Communications and Digital.

This Privacy Policy was last reviewed and updated on 1 January 2026. The most current version will always be available at https://spbu777.cam/privacy-policy.