Svip7 Privacy Policy — Member Personal Data Protection

1 Introduction

Welcome to the svip7 Privacy Policy page. We understand that trusting a platform with your personal information is a significant decision. That is why we take your privacy very seriously and are committed to handling every piece of information you provide with full responsibility and strict security.

Svip7 operates as a trusted online entertainment platform in Malaysia. In the course of providing our services, we collect certain information from members to enable the platform to function properly, ensure account security, and deliver a more personalised experience for every user.

This Privacy Policy clearly outlines the types of data we collect, the purposes for collection, how we protect it, who we may share it with, and your rights as the data owner. We encourage you to read this document in full before using the svip7 platform.

2 Personal Data We Collect

Svip7 collects information from you in several ways — directly when you register and use the platform, and automatically through industry-standard tracking technologies. Below is a summary of the types of data involved:

We do not collect sensitive data such as medical records, religious beliefs or political views. All financial data collected is used solely to process transactions and comply with anti-money laundering (AML) regulatory requirements.

3 How We Use Your Data

The data we collect is used for clear and legitimate purposes. svip7 does not use your data for purposes unrelated to platform operations without first obtaining your consent. The following are the primary purposes for which your personal data is used:

• Account management: Creating, verifying and managing your member account, including login, password resets and profile updates.
• Transaction processing: Processing deposits, withdrawals and any financial transactions related to your account quickly and accurately.
• Identity verification (KYC): Complying with anti-money laundering (AML) legal requirements and ensuring the platform is only used by individuals who meet the applicable age and eligibility criteria.
• Platform security: Detecting and preventing fraud, unauthorised access, bonus abuse and suspicious activity using automated monitoring systems.
• Customer support: Providing accurate and effective assistance when you contact the svip7 support team via live chat or email.
• Experience personalisation: Personalising game recommendations, bonus offers and promotional content based on your preferences and gaming habits.
• Platform communications: Sending important account notifications, policy updates, promotional offers and security information via email or in-app notifications.
• Legal compliance: Maintaining records required to fulfil legal obligations, regulatory requirements and court orders where applicable.

We adhere to the principle of data minimisation — meaning we only process data that is strictly necessary to achieve the purposes stated above. You will be notified in advance of any new use not listed in this policy.

4 Information Sharing & Disclosure

Svip7 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in the course of operating the platform securely and in compliance with the law, there are limited circumstances in which your data may be shared with certain parties:

• Payment service providers: Payment gateway providers, banks and e-wallet operators that process your financial transactions. They are bound by strict confidentiality agreements and only receive the minimum data necessary to process transactions.
• Game solution providers: Gaming software providers that supply game content on the svip7 platform may receive the minimum technical data required to ensure games function correctly.
• Cloud services and infrastructure: Cloud computing service providers that store and process our platform data under data processing agreements compliant with international standards.
• Regulatory authority: Law enforcement bodies, courts, or authorised government agencies when svip7 is required to do so under applicable Malaysian law.
• Identity verification services: Third-party KYC service providers that assist with identity document verification and AML blacklist screening.

5 Data Security & Protection Measures

The security of your personal data is svip7's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always protected against cyber threats, unauthorised access and data breaches. The key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your browser and the svip7 servers is encrypted using TLS 1.3 protocol with 256-bit encryption — the same standard used by major banking institutions in Malaysia.
• Two-Factor Authentication (2FA): We support and encourage the use of 2FA for all accounts, adding an extra layer of security that prevents unauthorised access even if your password is compromised.
• Automated threat detection system: The svip7 platform operates a 24/7 monitoring system that detects suspicious login patterns, unauthorised access attempts, and fraudulent activity in real time.
• Internal access controls: Only authorised staff who require access to data to perform their duties are permitted to view member personal information. Such access is logged and audited on a regular basis.
• Regular security testing: svip7 conducts regular penetration testing and security audits by independent cybersecurity firms to identify and address system vulnerabilities.
• Secure password storage: Passwords are stored using cryptographic hashing (bcrypt) — we do not store your password in plain text and cannot view it.

6 Cookies & Tracking Technologies

Svip7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the svip7 platform and your overall user experience. Analytics cookies can be disabled without impacting core platform functionality.

Svip7 does not use cross-site tracking technology and does not share analytics data with third-party advertisers.

7 Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. svip7 respects and facilitates the exercise of these rights:

To submit any request relating to the rights above, please contact the svip7 privacy team by email at [email protected] or via the platform's live chat. We will process your request within 14 business days. Requests may require identity verification before being processed to protect the security of your account.

8 Data Retention Period

Svip7 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law. The following are data retention period guidelines by category:

• Active account data: Retained for the duration your account is active and for two years after the account is closed or becomes inactive.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for five (5) years after the business relationship ends, as required by AML/CFT regulations.
• Support communication logs: Retained for three (3) years for dispute resolution and service improvement purposes.
• Technical log data: Retained for 90 days, then automatically deleted or anonymised.
• Marketing data (with consent): Retained until you withdraw consent or close your account, whichever comes first.

When data is no longer needed and there is no legal requirement to retain it, svip7 will securely delete or anonymise it using methods that ensure it cannot be recovered.

9 Child Protection

Svip7 is an online entertainment platform designed exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

All prospective members are required to verify their age during the registration process and may be asked to submit age verification documents during the KYC process. Should svip7 determine that an underage individual has registered an account, we will:

• Closing the account in question immediately.
• Deleting all personal data collected from that user.
• Refunding any deposits made, upon completion of identity verification by the parent or legal guardian.

10 Privacy Policy Amendments

Svip7 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

• Material amendments will be notified to members via their registered email or in-platform notification at least 7 days before taking effect.
• Minor amendments such as text corrections or clarifications that do not affect your fundamental rights may take effect immediately.
• The "Updated" date at the top of this page indicates the date the last amendment was made.
• Continued use of the svip7 platform after the effective date of any amendment is considered acceptance of the updated policy.

We encourage you to review this page from time to time to ensure you always understand how we handle your personal data.

11 Contact Our Privacy Officer

If you have any questions, concerns, or complaints regarding svip7's Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our privacy team is here to help:

• Privacy Email: [email protected] — please state "Privacy Enquiry" in your email subject line.
• Live Chat: Available 24/7 via the svip7 platform — the fastest way to get a response.
• Response Time: General privacy enquiries are expected to be answered within 3 business days; data rights requests within 14 business days.

If you are not satisfied with how we handle your privacy complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner under PDPA 2010.