Privacy Policy

This Privacy Policy (the "Policy") describes how Pepsi777 (hereinafter referred to as "Pepsi777", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at pepsi777.cam (the "Platform"), collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Platform (each a "User", "you", or "your").

Pepsi777 is committed to protecting the privacy and personal data of all Users in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and, where applicable, internationally recognised data protection principles. This Policy sets out your rights in relation to your personal data and how you may exercise those rights.

By accessing the Platform, registering for an Account, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read together with our Terms and Conditions, which are available at /terms-conditions.

For the purposes of this Policy, the following terms shall bear the meanings ascribed to them below:

Pepsi777 collects Personal Data from Users through multiple channels and at various stages of the User relationship. The categories of Personal Data we collect, together with the context in which they are gathered, are set out below.

3.1 Data Provided Directly by You

3.2 Data Collected Automatically

Pepsi777 processes your Personal Data only for specific, legitimate purposes. We do not process Personal Data in a manner that is incompatible with the purposes for which it was originally collected. Our processing purposes are:

4.1 Account Management and Service Delivery

We use your Identity Data, Contact Data, and Financial Data to create and manage your Account, process deposits and withdrawals via your chosen payment method (including Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and supported cryptocurrencies), and deliver the gaming and sports betting services you have requested.

4.2 Identity Verification and Regulatory Compliance

KYC verification is a legal obligation under applicable anti-money laundering regulations and our responsible gambling framework. We process Identity Data and Verification Documents to confirm your age (minimum 21 years), identity, and payment method ownership before activating full Account functionality.

4.3 Fraud Prevention and Platform Security

We analyse Technical Data, Usage Data, and Financial Data to detect and prevent fraudulent activity, money laundering, duplicate account creation, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions. This processing is necessary for the legitimate interests of Pepsi777 and the protection of our User community.

4.4 Customer Support

Communications Data is processed to respond to your enquiries, resolve disputes, and provide technical assistance. Support interactions via live chat, WhatsApp (10am–2am MYT), and email are recorded for quality assurance and training purposes.

4.5 Responsible Gambling Monitoring

Usage Data and Financial Data are monitored to identify patterns of behaviour that may indicate problem gambling, in accordance with our responsible gambling obligations. Where such patterns are identified, we may proactively contact you, apply account restrictions, or provide information about support resources including Talian Kasih 15999.

4.6 Marketing Communications

With your prior consent, we may use your Contact Data to send you promotional offers, bonus notifications, and platform updates. You may withdraw your consent to marketing communications at any time by updating your Account preferences or contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing prior to withdrawal.

4.7 Platform Improvement and Analytics

Aggregated and pseudonymised Usage Data and Cookie Data are processed to analyse Platform performance, improve user experience, and inform product development. This analysis does not result in decisions that directly affect individual Users.

Pepsi777 processes your Personal Data on the following legal grounds, consistent with the requirements of the PDPA and applicable data protection principles:

• Contractual Necessity: Processing required to perform the agreement between you and Pepsi777 (i.e., providing gaming and betting services, processing deposits and withdrawals, managing your Account).
• Legal Obligation: Processing required to comply with applicable laws, including KYC and anti-money laundering obligations, responsible gambling regulations, and lawful regulatory requests.
• Legitimate Interests: Processing necessary for the legitimate interests of Pepsi777 where those interests are not overridden by your data protection rights — including fraud prevention, platform security, and service improvement.
• Consent: Processing based on your explicit, freely given consent — primarily for marketing communications and optional analytics features. You may withdraw consent at any time without prejudice to any prior processing.

Pepsi777 does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We may disclose your Personal Data to the following categories of recipients in the circumstances described:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary Financial Data with our approved payment partners — including Malaysian banking platforms (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect), instant transfer systems (DuitNow, FPX), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), and cryptocurrency processing services. These providers act as Data Processors under written agreements and are prohibited from using your data for any purpose other than processing your transactions.

6.2 Identity Verification Partners

To fulfil our KYC obligations, we may share Identity Data and Verification Documents with third-party identity verification service providers operating under data processing agreements. These providers do not retain your documents beyond the period required to complete verification.

6.3 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or in connection with legal proceedings. Any such disclosure will be limited to the data strictly necessary to satisfy the legal requirement.

6.4 Technology and Infrastructure Providers

We engage technology providers for cloud hosting, cybersecurity, analytics, and customer support platform operations. These providers process Personal Data as Data Processors on our behalf and are contractually bound to confidentiality and data security obligations consistent with this Policy.

Pepsi777 uses Cookies and similar tracking technologies to operate certain Platform functions, enhance user experience, and gather aggregated analytics. The categories of Cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for Platform operation, including session management, authentication, and security. These Cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and Account options. Disabling these may reduce the personalisation of your experience.
• Analytical Cookies: Used to collect aggregated, pseudonymised data about how Users interact with the Platform, which pages are visited most, and how long sessions last. This data helps us improve the Platform.
• Responsible Gambling Cookies: Used to maintain your session time records and responsible gambling tool settings (deposit limits, session reminders) as configured in your Account.

You may manage Cookie preferences through your browser settings. Please note that disabling certain categories of Cookies may affect Platform functionality. Continued use of the Platform without adjusting your Cookie settings constitutes acceptance of our use of Cookies as described in this section.

Pepsi777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting obligations.

• Account Data and Transaction Records: Retained for a minimum of seven (7) years following Account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following Account closure or the conclusion of any related regulatory proceeding.
• Customer Support Communications: Retained for three (3) years following resolution of the relevant support interaction, unless retained longer in connection with a legal claim.
• Analytical and Cookie Data: Pseudonymised analytical data is retained for a maximum of twenty-four (24) months, after which it is aggregated and de-identified.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with Pepsi777's data destruction procedures.

Pepsi777 implements technical and organisational security measures proportionate to the nature and sensitivity of the Personal Data we process. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser or device and our servers is encrypted using 256-bit TLS/SSL encryption.
• Encryption at Rest: Sensitive Personal Data, including financial information and KYC documents, is encrypted in our data storage systems.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to Personal Data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: Our infrastructure is monitored continuously for unauthorised access attempts, anomalous activity, and potential security breaches.
• Two-Factor Authentication: Available for all User Accounts to provide an additional layer of protection against unauthorised access.

Notwithstanding these measures, no transmission of data over the internet can be guaranteed as fully secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately in the event of any suspected unauthorised access to your Account.

Subject to applicable law, you have the following rights in relation to the Personal Data that Pepsi777 holds about you. You may exercise any of these rights by contacting us through the channels set out in Section 14.

Pepsi777 operates infrastructure that may be hosted in data centres located outside of Malaysia. Where Personal Data is transferred to jurisdictions that do not offer a level of data protection equivalent to the PDPA, we implement appropriate safeguards to ensure that your data remains protected to the standards described in this Policy.

Safeguards for international transfers include: contractual data processing agreements incorporating standard data protection clauses, ensuring that recipient entities maintain security standards equivalent to those we apply internally, and limiting the categories of data transferred to what is strictly necessary for the service purpose.

You may request information about the specific safeguards applicable to any international transfer of your Personal Data by contacting us at the details provided in Section 14.

The Platform is strictly intended for adults aged 21 years and above. Pepsi777 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Registrations identified as belonging to minors are closed immediately and all associated data is deleted without delay, subject only to any obligations under applicable law to retain records of the attempted access.

Age verification is conducted as part of the KYC process and we reserve the right to request documentary proof of age at any stage of the User relationship. If you believe that a minor may be using the Platform or has registered using your identity, please contact our support team immediately so that the Account may be reviewed and closed.

Pepsi777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer.

Where changes are material — meaning they significantly affect how we process your Personal Data or alter your rights — we will provide advance notice of no fewer than fourteen (14) days via a prominent notice on the Platform and, where practicable, by email to your registered address.

The version number and effective date displayed at the top of this Policy indicate the currently operative version. We recommend that you review this Policy periodically to stay informed of our data practices. Your continued use of the Platform following any revision constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact Pepsi777 through any of the following channels:

• Email (Data Protection Enquiries): [email protected] (Plain text only — this address is not a clickable link.)
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time: 3–5 minutes.
• WhatsApp: Available 10am – 2am Malaysian Standard Time (MYT). Agents available in English, Bahasa Melayu, and Mandarin.

When submitting a data subject request, please identify yourself clearly and describe the nature of your request with sufficient specificity to allow us to locate the relevant Personal Data and action your request appropriately. We may request proof of identity before actioning any request affecting Personal Data.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that Pepsi777 has processed your Personal Data in a manner inconsistent with applicable data protection law. We encourage you to contact us first so that we may attempt to resolve the matter directly.