Privacy Policy 8777 — Member Data Protection and Personal Information

8777 ("we", "Platform") values the privacy of every member who entrusts us with their personal information. This Privacy Policy ("Policy") describes our practices for collecting, storing, using, and protecting the information you provide when using the 8777.ad website and 8777 mobile app.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. By understanding this Privacy Policy, you can make more informed decisions about the information you share with us.

This Policy applies to all registered 8777 members, visitors to our website, and any individual who interacts with our platform in any capacity. If you are using the platform on behalf of another individual, you are responsible for ensuring that individual has read and understood this Policy.

8777 collects various types of personal information from you depending on how you interact with our platform. Below is a summary of the data categories we collect:

8777 uses your personal information only for lawful and necessary purposes. We do not use your data beyond what is required to deliver the services you registered for. The following are the primary purposes for which your data is used:

• Account management — creating, verifying, and maintaining your member account on the 8777 platform.
• Transaction processing — processing deposits, withdrawals, and all financial transactions carried out through the platform.
• Identity verification — conducting KYC processes required by law to prevent fraud and money laundering.
• Customer Support — responding to enquiries, resolving technical issues, and addressing complaints submitted.
• Platform security — detecting and preventing fraudulent activity, account misuse, and other security threats.
• Legal compliance — fulfilling reporting obligations to relevant authorities in accordance with applicable law.
• Marketing communications — sending promotional offers, bonus notifications, and platform updates, subject to your communication preferences.
• Service improvement — analysing usage patterns to improve platform functionality and the overall user experience.

We only process your data on a lawful basis, namely: performance of a contract, compliance with a legal obligation, legitimate business interests, or your explicit and withdrawable consent.

8777 does not sell, rent, or trade members' personal information to any third party for their own benefit. However, there are limited situations where we need to share your data with certain parties:

• Payment service providers — payment gateway providers, banks, and e-wallet companies that process your financial transactions in accordance with operational requirements.
• Technology service providers — companies providing cloud computing infrastructure, data analytics, and other technical services that support our platform operations.
• Identity verification agencies — third parties that assist us in conducting KYC checks and document verification securely.
• Authorities and regulatory bodies — when required by law, court order, or direction from a relevant regulatory authority.
• VIP programme partners — limited information to facilitate the provision of 8777 VIP programme benefits and rewards, subject to strict confidentiality agreements.

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption for all data transmitted between your browser and our servers.
• At-rest encryption for all sensitive information stored in our databases.
• Role-based access controls ensuring that only authorised staff can access members' personal data.
• Round-the-clock intrusion detection and real-time threat monitoring systems.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Privacy and data security training programme for all 8777 staff who handle personal data.
• Two-factor authentication (2FA) for access to internal systems containing sensitive member data.

While we make every effort to protect your data, no security system can guarantee absolute 100% protection. If you suspect your account has been accessed without authorisation, please contact our support team immediately.

The 8777 platform uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic and maintain login session security. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

• Essential Cookies — required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies — collecting information on how visitors use our website to help us improve platform performance and navigation.
• Functional Cookies — remembering your preferences such as language, display settings, and login details to provide a more personalised experience.
• Analytics Cookies — used to understand aggregated usage patterns for the purpose of improving our services.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the 8777 platform.

Under the Personal Data Protection Act 2010 and the privacy principles we uphold, you have the following rights regarding your personal data held by 8777:

8777 retains your personal data only for as long as necessary to fulfil the original purpose of collection and related legal obligations. Retention periods vary by data category:

• Active account data — retained for the duration of your active account and up to 7 years after account closure for audit and legal compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with anti-money laundering legislation in Malaysia.
• KYC Documents — retained for the duration of the active account and 5 years after account closure.
• Technical and security logs — retained for 12 months for security incident investigation purposes.
• Support communication records — retained for 3 years to allow historical case reference when needed.

Upon expiry of the retention period, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered. The deletion process is carried out on a regular schedule as determined by our data management team.

The 8777 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If you are under 18, please stop using our platform immediately.

If we find that we have inadvertently collected information from a minor, we will take immediate steps to delete that information and close the account in question. Parents or guardians who discover their child has registered on our platform without permission are encouraged to contact us immediately.

8777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements in how we protect your information. Any material changes will be communicated to you via:

• An in-platform notification will appear upon your next login.
• A notification email sent to your registered email address.
• An update to the "Last Updated" date at the top of this document.

Continued use of the 8777 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the platform
• FAQ Page: Visit our FAQ section for privacy-related frequently asked questions

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests involving data access or deletion, the response period is up to 21 business days in accordance with the PDPA 2010.