Vape77 Privacy Policy – Member Personal Data Protection

1Introduction and Scope of Privacy Policy

Vape77 ("we", "Platform", or "website") respects the privacy of every individual who uses our services. This privacy policy has been drafted to clearly and transparently explain how we manage your personal information — from how it is collected to how it is protected and how it can be deleted at any time upon your request.

This document applies to all your interactions with vape77, including registering an account, making deposits, claiming bonuses, playing games, contacting our customer support team, and any other use of our platform whether via the website or mobile app.

This policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices for online user data protection. We continually review and update this policy to ensure it remains aligned with current legal and technological developments.

2Types of Personal Data We Collect

We only collect data that is strictly necessary to provide you with a safe, seamless, and high-quality service. Below are the categories of data collected along with the specific purpose of each:

We do not collect data considered sensitive beyond the scope of platform operational requirements, such as your health information, religious beliefs, or political views.

3How We Collect Your Information

Your personal data is collected through various channels directly related to your use of the vape77 platform:

• During account registration — you provide identity and contact information directly through our registration form.
• During the KYC process — you upload identity verification documents such as an identification card, passport, or driving licence at our request.
• During financial transactions — bank account information is collected when you register a payment method for deposit and withdrawal purposes.
• Automatically via technology — IP address, browser data, and device information are collected automatically when you access our platform.
• Through cookies and tracking technologies — we use session cookies and preference cookies to enhance your browsing experience.
• Through customer support interactions — live chat conversation records and emails are retained for reference and service improvement purposes.
• From authorised third-party sources — in certain cases, we may receive information from identity verification providers or anti-fraud bodies for security purposes.

4Purposes for Using Your Personal Data

Every piece of information we collect is used for legitimate purposes directly related to the delivery of vape77 platform services. Below are the primary purposes for which your data is used:

• Account management — creating, verifying, and maintaining your account so you can access all platform features seamlessly.
• Transaction processing — ensuring all deposits and withdrawals are processed efficiently, securely, and accurately to the correct account.
• Legal compliance — fulfilling KYC, AML (Anti-Money Laundering), and reporting requirements mandated by the relevant authorities.
• Platform security — detecting and preventing fraud, unauthorised access, cyberattacks, and system abuse.
• Service communications — sending important account notices, security updates, and transaction information.
• Marketing and promotions — with your consent, to send promotional offers, bonuses, and the latest vape77 news that may interest you.
• Continuous improvement — analysing usage patterns to improve platform quality, user interface, and overall experience.
• Customer support — providing effective and personalized support based on your account history and previous interactions.

5Data Sharing with Third Parties

Vape77 does not sell or trade member personal data to any third party for commercial purposes. However, in the course of operating the platform, we may need to share certain information with the following parties on a limited and controlled basis:

• Payment service providers — payment gateways and partner banks receive the financial data necessary to process your transactions securely.
• Game software providers — third-party game providers that supply games on our platform receive the player ID and session data required to operate the games.
• Identity verification services — recognized third-party KYC providers assist us in verifying member identities in accordance with compliance requirements.
• Regulatory authorities and law enforcement agencies — we may be required to disclose information to authorities when mandated by law or court order.
• Professional advisors — lawyers, auditors, and consultants who are bound by strict professional confidentiality obligations.

All third parties we work with are required to comply with data protection standards equal to or higher than our own. Legally binding data processing agreements are in place with each of our third-party partners.

6Data Security Measures

The security of your personal data is vape77's highest priority. We implement a multi-layered approach to data protection, combining the latest technology with rigorous internal procedures:

• 256-bit SSL Encryption — all data transmitted between your device and our servers is encrypted using the latest TLS 1.3 protocol.
• Data encryption at rest — sensitive information such as bank details and identification documents is encrypted in our database using AES-256 standards.
• Two-factor authentication (2FA) — 2FA is available for all member accounts to add an extra layer of protection against unauthorized access.
• 24/7 Monitoring — our security monitoring system operates around the clock to detect suspicious or unusual activity.
• Regular penetration testing — we conduct regular security testing through independent cybersecurity firms to identify and close any vulnerabilities.
• Internal access controls — staff may only access data required for their specific duties, with all access recorded and audited.
• Incident response plan — we maintain structured incident response procedures to ensure any data breach is addressed swiftly and effectively.

7Use of Cookies and Tracking Technologies

The vape77 platform uses cookies and similar tracking technologies to enhance user experience, ensure session security, and understand platform usage patterns. Below are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login session verification and form security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies — collecting information on how users interact with the platform to help us identify technical issues and improve overall performance.
• Functional Cookies — saving your preferences such as language, display settings, and game choices so you don't have to reconfigure them every visit.
• Analytics Cookies — helping us understand platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your gaming experience. For more information on managing cookies, refer to your web browser's help guide.

8Data Retention Period

Vape77 retains your personal data for as long as your account is active and for the required period after account closure, depending on the type of data and applicable legal requirements:

• Active account data — retained for the duration of your active account on the vape77 platform.
• Financial transaction data — retained for a minimum of 7 years after the transaction date, in line with Malaysia's financial and tax legal requirements.
• KYC Documents — retained for a minimum of 5 years after account closure to meet AML compliance requirements.
• Support communication records — retained for 3 years for reference and dispute resolution purposes.
• Technical data and logs — retained for 12 months for security and digital forensics purposes.
• Marketing data — retained until you withdraw consent or request deletion, whichever comes first.

Once the designated retention period has lapsed, your data will be securely deleted or permanently anonymised so that it can no longer be linked to your identity.

9Your Rights as a Data Owner

As a vape77 member and owner of your personal data, you hold the following rights, which we fully respect:

10Children's Data Protection

Vape77 is an entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process any personal data from underage individuals.

Our age verification system is designed to detect and prevent registration by underage individuals. Should we find that a minor's personal data has been collected without our knowledge, we will take immediate action to delete all such information and close the account in question.

If you are a parent or guardian who becomes aware that your child has registered on our platform, please contact us immediately through our customer support channels so that appropriate remedial action can be taken without delay.

11Cross-Border Data Transfers

In operating our global platform, your personal data may need to be transferred to or accessed from countries outside Malaysia. This occurs primarily in the following contexts:

• Cloud infrastructure providers that store data in data centres across multiple international locations.
• International game providers that require session data to operate games.
• Customer support service providers that may operate across multiple time zones.

In all cases of cross-border data transfers, vape77 ensures that a level of data protection equivalent to Malaysia's PDPA standards is maintained through legally binding data transfer agreements, standard contractual clauses, or other recognised protection mechanisms.

12Changes to This Privacy Policy

Vape77 reserves the right to update or modify this privacy policy at any time to reflect changes in our practices, legal requirements, or technological developments. Whenever we make a material change, we will:

• Displaying a new "Updated" date at the top of this page.
• Send notifications to you via your registered email and/or in-account notifications.
• For particularly significant changes, we may request your renewed consent before those changes take effect on your account.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the vape77 platform after any changes take effect will be considered your acceptance of the updated terms.

13Contact Us for Privacy Enquiries

If you have any enquiries, concerns, or complaints regarding this privacy policy or how we handle your personal data, our privacy team is ready to assist. We are committed to addressing all enquiries seriously and within a reasonable timeframe.

You can reach us through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on our platform.
• Response time: We aim to respond to all enquiries within 3 business days and to resolve formal requests within 30 business days.