Privacy Policy uu7 — Data Security Malaysian Members

1Privacy Policy Introduction & Scope

This Privacy Policy is issued by uu7 and applies to all individuals who register, browse, or use the uu7 platform in uu7.bar including the website, mobile app, and all related services we provide. By using any part of our platform, you give informed consent to the collection and processing of your personal data as described in this document.

This policy covers all personal data we collect directly from you during registration, identity verification, financial transactions, and daily platform use. It also includes data collected automatically through tracking technologies such as cookies and server logs when you browse our platform.

Uu7 acts as the Data Controller under PDPA 2010. This means we bear full responsibility for how your data is collected, processed, and stored. We do not delegate this responsibility to any third party without strict oversight and data processing agreements.

2Data We Collect

Uu7 only collects data that is genuinely necessary to operate the platform, process transactions, and fulfil regulatory requirements. We do not collect excessive or irrelevant data beyond the scope of the services we provide to you.

• Sensitive data such as identification card numbers is only collected when required for legally mandated KYC verification.
• We do not store credit or debit card numbers directly — payment data is processed through PCI-DSS certified payment providers.
• Data belonging to individuals under the age of 18 is not knowingly collected — accounts found to belong to minors will be terminated immediately.
• Medical or health data is not collected unless you voluntarily disclose it in the context of responsible gaming.

3Purpose of Personal Data Use

Every piece of data we collect has a clear and lawful purpose. uu7 does not use your data for purposes unrelated to platform operations or the services you have subscribed to. The following is a complete list of our data processing purposes:

• Account Management: Creating, verifying, managing, and protecting your member account.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Identity Verification (KYC): Verifying that you are the individual you claim to be as a member, in accordance with regulatory requirements.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Customer Support: Providing technical support and resolving your complaints or inquiries effectively.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and provide appropriate intervention.
• Marketing Communications: Sending promotional information and exclusive offers — you may unsubscribe at any time.
• Legal Compliance: Fulfilling reporting obligations and regulatory requirements set by the relevant authorities.
• Platform Improvements: Analyzing usage patterns to improve platform performance, interface, and overall user experience.

4Data Sharing & Disclosure to Third Parties

Uu7 does not sell, rent, or disclose your personal data to any third party for their own marketing purposes. However, there are certain situations where we need to share your data with trusted parties in order to deliver the services you use.

• Payment Providers: Transaction information is shared with certified payment providers such as FPX, DuitNow, and digital wallet providers to process your transactions.
• Gaming Service Providers: Certain wagering records are shared with the gaming platform providers we use to operate slot games, Live Casino, and other products.
• Identity Verification Providers: KYC documents are submitted to certified identity verification providers for verification purposes only.
• Regulatory Authority: Data is shared with government authorities or regulatory bodies when required by law or a valid court order.
• IT Service Providers: Technical infrastructure and hosting providers bound by strict confidentiality agreements and not permitted to use your data for their own purposes.

All third parties that receive your personal data from uu7 are bound by strict data processing agreements. They may only use that data for purposes specified by uu7 and must comply with the same or higher security standards that we apply ourselves.

5Data Security & Encryption

Uu7 continuously invests in the latest security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration, or destruction. Our approach to data security is multi-layered and comprehensive, covering technical, operational, and physical aspects.

• Data Encryption in Transit: All communications between your device and uu7 servers are encrypted using TLS 1.3 protocol with AES-256 encryption.
• Data Encryption at Rest: Sensitive data is stored in an encrypted state using industry-standard encryption algorithms — even if servers are compromised, the data cannot be read.
• Strict Access Controls: Access to systems containing personal data is restricted on a least-privilege basis — only staff who require the data to perform their duties are granted access.
• Two-Factor Authentication (2FA): All administrative access to internal systems requires two-factor authentication as an additional security layer.
• Regular Security Audits: Penetration testing and security audits are conducted periodically by independent third parties to identify and remediate vulnerabilities.
• Threat Detection System: A 24/7 real-time monitoring system tracks all suspicious activity and sends immediate alerts to our security team.
• Staff Training: All uu7 staff who handle personal data undergo regular data security and privacy training.

While we take all reasonable steps to protect your data, no system can guarantee 100% security. You also play an important role in protecting your account — make sure your password is strong, unique, and not shared with anyone.

6Your Rights as a Data Subject

Under the Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. uu7 fully respects these rights and provides accessible channels for you to exercise them without any discrimination or penalty.

• Right of Access: You have the right to obtain a copy of the personal data we hold about you, including information on how it is processed.
• Right to Rectification: You may request that we correct any personal data that is inaccurate, outdated, or incomplete in our records.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data — subject to applicable legal retention obligations.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
• Right to Restrict Processing: In certain situations, you may request that we restrict how we process your data while a dispute or complaint is being resolved.
• Right to Data Portability: You may request a copy of your data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.

7Cookies & Tracking Technologies

Uu7 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain login sessions, and analyse usage patterns for continuous improvement. Our use of cookies is limited to what is strictly necessary for platform functionality and internal analytics.

• Essential Cookies: Required for core platform functions such as session authentication, login security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymized information about how you use the platform to help us identify areas for improvement.
• Functional Cookies: Saving your preferences such as language, time zone, and display settings so you don't need to reset them each time you log in.
• Security Cookies: Used to detect suspicious activity, prevent CSRF attacks, and maintain the integrity of your session.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect platform functionality and your user experience. We do not use third-party cookies for targeted advertising purposes.

8Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how uu7 handles your personal data, please contact our Personal Data Protection Officer (DPO) through the official channels below. We are committed to addressing every privacy inquiry seriously and transparently.

If you are dissatisfied with how uu7 handles your privacy complaint, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the Personal Data Protection Department under the Ministry of Digital Malaysia, as the regulatory body responsible for enforcing PDPA 2010.