Privacy Policy — terbang777

Introduction

This Privacy Policy ("Policy") issued by terbang777, the operator of the online casino and sports betting platform accessible at terbang777.cam ("Platform"). It describes how terbang777 collects, uses, stores, shares, and protects personal data provided by or collected about users ("Members") in connection with their use of the Platform and its associated services.

terbang777 takes the privacy of its Members seriously. We process personal data only for defined, lawful purposes and take reasonable technical and organisational steps to protect that data against unauthorised access, disclosure, alteration, or destruction.

By registering an account, depositing funds, or otherwise accessing or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not create an account or continue using the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that directly or indirectly identifies a natural person, including name, email address, phone number, government identification number, financial account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, transmission, restriction, erasure, or destruction.
• "Data Controller" — terbang777, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of terbang777 under a data processing agreement (e.g., payment service providers, KYC verification providers, cloud infrastructure providers).
• "Member" or "You" — any registered user of the terbang777 Platform.
• "KYC" — Know Your Customer procedures, the identity and age verification processes required to confirm a Member's eligibility to use the Platform.
• "Cookies" — small text files placed on your device by the Platform to recognise your browser, retain session information, and collect usage analytics.
• "Sensitive Data" — a special category of Personal Data that requires heightened protection, including financial account information, government identity documents, and any data related to health or self-exclusion status where applicable.

Data We Collect

terbang777 collects the following categories of Personal Data in connection with your use of the Platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Residential address (including city, state, postcode — e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru)
• Email address and mobile phone number
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Documents

• Malaysian national identity card (MyKad) number and copy
• Passport (for non-MyKad holders)
• Proof of residential address (utility bill, bank statement not older than 3 months)
• Proof of payment method ownership (where required for withdrawal verification)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in MYR
• Payment method details (e-wallet identifiers for Touch'n Go eWallet, Boost, GrabPay; masked bank account numbers for Maybank, CIMB, Public Bank, Hong Leong, RHB; masked card numbers for Visa/Mastercard; cryptocurrency wallet addresses for USDT/BTC)
• Transaction timestamps, reference numbers, and processing status
• Account balance history and bonus credit records

3.4 Gaming & Betting Activity Data

• Game session records, betting history, and wagering amounts
• Sports betting selections, odds accepted, and settlement records
• Live casino session logs
• Bonus activation, wagering progress, and promotion redemption records

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and platform interaction logs
• Cookie identifiers and analytics data

3.6 Communications Data

• Live chat transcripts with our support team
• Email correspondence with terbang777
• Records of responsible gambling tool activations (deposit limits, self-exclusion requests)

How We Collect Your Data

terbang777 collects Personal Data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or interact with any feature of the Platform.
• Automatically: through cookies, web beacons, server logs, and analytics technologies when you access and navigate the Platform, regardless of whether you are logged in.
• From third-party service providers: identity verification agencies, payment processors, fraud detection services, and geolocation providers may share data with us as part of delivering their services on our behalf.
• From publicly available sources: where permitted and relevant to fraud prevention, regulatory compliance, or responsible gambling obligations, we may consult publicly available information or self-exclusion registers.

Purposes of Data Processing

The table below summarises the key purposes for which terbang777 processes your Personal Data:

Legal Basis for Processing

terbang777 processes your Personal Data one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered Member — including account setup, payment processing, and service delivery.
• Legal Obligation: We are required to process certain data to comply with applicable law — including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and responsible gambling mandates.
• Legitimate Interests: We may process data where it is in our legitimate business interests (and those interests are not overridden by your rights) — for example, fraud detection, platform security, and platform analytics.
• Consent: Where we rely on your consent — such as for optional promotional communications — you may withdraw that consent at any time by contacting support or updating your Account communication preferences.
• Vital Interests: In exceptional circumstances involving responsible gambling safeguards or the protection of a Member's wellbeing, we may process data on the basis that it is necessary to protect vital interests.

Data Sharing & Third Parties

terbang777 does not sell your Personal Data to third parties. We share data only where necessary and only with trusted service providers operating under binding data processing agreements or applicable legal obligations.

7.1 Categories of Third-Party Recipients

• Payment Service Providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX banking infrastructure, Visa/Mastercard networks, and cryptocurrency processing services receive transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services may process your identity documents on our behalf to confirm your age (21+) and identity in compliance with applicable regulations.
• Fraud Detection & Risk Management Services: Specialised providers may receive device, IP, and behavioural data to assist in identifying and preventing fraudulent account activity and money laundering.
• Cloud Infrastructure & Hosting Providers: Our platform is hosted on secure cloud infrastructure. Hosting providers operate under strict data processing agreements and have no independent right to access your data.
• Game Studio Providers: Live casino and slot game providers receive session and game-play data necessary to operate certified fair-play games. Game providers do not receive your full identity or financial information.
• Regulatory Authorities & Law Enforcement: Where required by law, applicable regulation, court order, or lawful request from a government or law enforcement authority, terbang777 will disclose Personal Data as required.

Data Retention

terbang777 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as needed to resolve disputes and enforce our agreements. General retention guidelines are as follows:

• Active account data: Retained for the duration of your Account membership and for minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with applicable regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years for financial compliance and audit purposes.
• Support communications: Retained for up to two (2) years following resolution of the underlying query or dispute.
• Analytics and session data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes, or in identifiable form for up to twelve (12) months.
• Self-exclusion records: Retained for the duration of the exclusion period plus a reasonable period thereafter to prevent re-registration in breach of the self-exclusion.

Where Personal Data is no longer required for any lawful purpose, we will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

Data Security

terbang777 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and the terbang777 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Encryption at rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to Personal Data within our organisation is restricted on a need-to-know basis. Staff with access to Member data are bound by confidentiality obligations and receive regular data protection training.
• Password security: Member passwords are stored in hashed form using industry-standard cryptographic algorithms. terbang777 never stores passwords in plaintext.
• Fraud monitoring: Automated and manual monitoring systems review account activity for signs of unauthorised access, unusual transaction patterns, or suspicious behaviour.
• Penetration testing: We conduct periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in our platform infrastructure.

Cookies & Tracking Technologies

terbang777 uses cookies and similar tracking technologies on the Platform to enhance user experience, maintain session state, analyse platform performance, and support fraud prevention activities.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences, language settings, and saved options to improve your experience across sessions.
• Analytics Cookies: Collect anonymised data about how Members interact with the Platform — including pages visited, time spent, and navigation paths — to help us improve the Platform.
• Security & Fraud Prevention Cookies: Help us detect and prevent fraudulent activity, including detecting automated bot traffic and verifying that transactions originate from legitimate Member devices.

10.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or access certain features. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

International Data Transfers

Due to the international nature of certain technology and service providers used by terbang777 — including cloud infrastructure, game studios, and payment processing networks — your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia.

Where such transfers occur, terbang777 takes appropriate steps to ensure that your Personal Data receives an equivalent level of protection as it would under applicable data protection standards. These steps may include the use of standard contractual clauses, adequacy decisions, or other approved transfer mechanisms as applicable.

Your Data Rights

As a Member of terbang777, you hold the following rights in relation to your Personal Data, subject to applicable law and any overiding legal obligations that terbang777 may be required to fulfil:

• Right of Access: You may request a copy of the Personal Data terbang777 holds about you, along with information about how that data is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Members may update certain account details directly through the Account settings panel.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request deletion of your Personal Data. Note that retention obligations under AML and KYC regulations may limit our ability to fully comply with erasure requests for defined periods.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where it is based on our legitimate interests. We will assess whether our legitimate interests are overridden by your rights in each case.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact our support team at [email protected]. We will respond to verified requests within a reasonable timeframe consistent with applicable legal requirements.

Children & Minors

The terbang777 Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. If you are under 21, you must not attempt to register an account or use any part of the Platform.

If terbang777 becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account, including forfeiture of any funds deposited by an underage user.

If you believe that a minor has registered an account on the Platform, please contact us immediately at [email protected].

Amendments to This Policy

terbang777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify active Members via their registered email address or through a notification in the Account dashboard.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the terbang777 data support team through any of the following channels:

Our support team is available every day of the year and can communicate in English and Bahasa Malaysia. For formal data subject access requests, please include your full registered name, Account username, and a description of the data you are requesting or the right you wish to exercise.