Privacy Policy
jack777 Data Protection Statement

This Privacy Policy ("Policy") is published by jack777 ("the Platform", "we", "us", "our"), the operator of the online gaming and sports betting website accessible at https://jack777.cam ("the Website"). This Policy describes how jack777 collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "User") who access or register on the Website.

jack777 operates in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality. We are committed to ensuring that your personal data is handled lawfully, fairly, and transparently.

This Policy applies to all personal data collected through the Website, including data collected during account registration, KYC verification, payment processing, customer support interactions, and general browsing activity on the Platform. It applies to all players, including those based in Malaysia, Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations.

The following definitions apply throughout this Privacy Policy:

jack777 collects personal data through multiple channels over the course of your relationship with the Platform. The categories of personal data we collect are as follows:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification — minimum age 21 years);
• Email address and, where provided, mobile telephone number;
• Residential address, including city, state, postcode, and country;
• Copies of identity documents submitted for KYC purposes (Malaysian MyKad, Passport, Driver's License);
• Proof of address documents (utility bills, bank statements dated within three months);
• Selfie photographs submitted as part of liveness verification.

3.2 Financial & Transaction Data

• Payment method identifiers used for deposits and withdrawals (e.g., Touch 'n Go eWallet account reference, Maybank2u account holder name, CIMB account details, DuitNow registered number, cryptocurrency wallet addresses);
• Transaction history, including deposit amounts in MYR, withdrawal requests, dates, and payment method used;
• Wagering history, game activity records, and account balance information;
• Bonus and promotional entitlement records.

3.3 Technical & Device Data

• IP address and approximate geolocation data derived therefrom;
• Device type, operating system, and browser version;
• Session duration, page views, navigation path, and interaction data;
• Cookie identifiers and similar tracking technologies (see Clause 10).

3.4 Communications Data

• Records of correspondence with our customer support team via Live Chat or email;
• Feedback, complaints, and dispute records.

jack777 processes personal data only where a lawful basis exists to do so. The legal bases upon which we rely are as follows:

jack777 uses personal data collected from players for the following specific purposes:

• Account Registration and Management: To create, maintain, and administer your Account on the Platform, including processing login credentials, account settings, and profile updates;
• Identity Verification (KYC): To verify your identity, age (minimum 21 years), and residential address in fulfilment of our licensing and anti-money laundering obligations;
• Payment Processing: To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and cryptocurrency channels, and to process withdrawal requests to your designated payment method;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multiple account creation, and other prohibited activities as defined in our Terms & Conditions;
• Responsible Gambling Monitoring: To identify behavioural patterns that may indicate problem gambling, to enforce self-exclusion arrangements, and to apply deposit limits and session time restrictions where requested or where mandated by our responsible gambling obligations;
• Customer Support: To respond to your inquiries, complaints, and support requests via Live Chat and email;
• Platform Analytics and Improvement: To analyse aggregate, anonymised usage data for the purpose of improving the platform's performance, game offerings, and user experience;
• Legal Compliance: To comply with applicable laws, respond to lawful orders from regulators and law enforcement bodies, and to enforce our contractual rights;
• Marketing Communications (Consent-Based): To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent. You may opt out at any time by contacting our support team.

jack777 does not sell, rent, or trade your personal data to third-party marketers under any circumstances. Personal data may be shared only in the following limited circumstances:

6.1 Service Providers (Data Processors)

jack777 engages third-party service providers to assist in the operation of the Platform. These providers are engaged under contractual data processing agreements and are permitted to use your personal data only for the specified purpose for which it was shared. Categories of service providers include: KYC identity verification providers, payment gateway operators (including those facilitating Malaysian payment methods such as DuitNow and FPX), cloud infrastructure and hosting providers, fraud detection and cybersecurity service providers, and game content providers operating under international gaming licences.

6.2 Regulatory and Legal Authorities

jack777 may disclose personal data to gaming licensing authorities, financial regulators, law enforcement agencies, or courts of competent jurisdiction where required to do so by law, court order, or regulatory directive. We will notify you of any such disclosure to the extent permitted by applicable law.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of jack777's business, personal data held on the Platform may form part of the transferred assets. In such cases, the successor entity would be bound by privacy obligations no less protective than those set out in this Policy.

jack777 operates with infrastructure and service providers located in multiple countries. As a result, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. Where such transfers occur, jack777 takes steps to ensure that appropriate safeguards are in place to protect the security and integrity of the transferred data.

Safeguards employed for international data transfers include contractual clauses that impose data protection obligations on recipient parties consistent with applicable international data protection standards, and selection of service providers operating within jurisdictions recognised as having adequate data protection frameworks.

Players who have questions about the specific safeguards applied to international data transfers relating to their personal data may contact our support team at the email address provided in Clause 14of this Policy.

jack777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that renders it irretrievable and non-attributable to any individual.

jack777 implements and maintains a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and our servers is protected using industry-standard 256-bit SSL/TLS encryption;
• Encryption at Rest: Personal data stored in our databases is encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control systems;
• Two-Factor Authentication (2FA): Available to all Players for account login and strongly recommended;
• Segregated Player Funds: Financial balances are held in accounts segregated from jack777's operating capital, reducing exposure in the event of a financial dispute;
• Regular Security Audits: The Platform and its infrastructure are subject to regular penetration testing and vulnerability assessments by independent security specialists;
• Incident Response: jack777 maintains a documented incident response procedure for data breaches, including notification obligations where applicable.

The jack777 Website uses cookies and similar tracking technologies to support Platform functionality, enhance user experience, and conduct analytical activities. By continuing to use the Website without disabling cookies in your browser settings, you consent to the placement of cookies as described in this Clause.

jack777 does not place third-party advertising cookies or share-derived data with advertising networks. You may manage or disable cookies at any time through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in to or use certain features of the Platform.

As a data subject, you hold the following rights in relation to the personal data that jack777 holds about you. These rights may be exercised at any time by submitting a request to our support team using the contact details in Clause 14.

jack777 will respond to all verified data subject requests within 30 calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. All requests must be submitted in writing to the email address in Clause 14. For security purposes, we may require identity verification before processing any request.

jack777 strictly prohibits access to the Platform by persons under the age of 21 years. The Platform is intended solely for adult entertainment and wagering purposes. jack777 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is conducted as mandatory step during the KYC process for all registered accounts. Where jack777 discovers or is notified that an Account is held by a person under 21 years of age, the Account will be immediately suspended, all relevant personal data will be deleted without undue delay, and any balance in the account will be held pending review and returned to the source payment method where technically feasible.

If you are a parent or guardian and believe that a minor in your care has registered an Account on jack777 or submitted personal data to the Platform, please contact our support team immediately at the email address provided in Clause 14. We will take prompt action upon receiving verified notification.

jack777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or our platform operations. Where material changes are made to this Policy, we will provide advance notice to registered Players via email or a prominent notice on the Website no less than seven (7) days prior to the amended Policy taking effect.

The effective date at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to remain informed about how jack777 protects your personal data. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which jack777 processes your personal data, please contact us using the details below. All contact information is provided as plain text only and is not a clickable link.

Data subject access requests, erasure requests, and other formal data rights requests should be submitted in writing to the email address above with the subject line "Data Rights Request — [Request Type]". jack777 will acknowledge all formal requests within five (5) business days and will action them within the timeframes set out in Clause 11.