Privacy Policy — Retro777

1 Introduction

This Privacy Policy ("Policy") is issued by retro777 ("retro777", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at retro777.cam. This Policy explains how we collect, process, store, protect, and share the personal data of individuals ("you", "the User", or "the Player") who access or use the retro777 platform, whether through the website, mobile-optimised interface, or any related services.

retro777 is committed to handling all personal data in accordance with applicable data protection legislation and internationally recognised privacy principles. We operate with transparency regarding our data practices and empower players to make informed decisions about their personal information.

This Policy should be read alongside retro777's Terms & Conditions and Responsible Gambling Policy, which together form the complete legal framework governing your use of the platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means retro777, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of retro777 pursuant to a written data processing agreement.
• "Consent" means any freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data.
• "KYC" means Know Your Customer — the mandatory identity and address verification process applicable to all retro777 accounts prior to withdrawal processing.
• "Cookies" means small data files stored on a User's device by the retro777 platform for the purposes of session management, analytics, and personalisation.
• "Sensitive Personal Data" means categories of data requiring enhanced protection, including identification document details, financial account information, and data relating to vulnerable individuals.

3 Personal Data We Collect

retro777 collects the following categories of personal data from players and platform users:

4 How We Collect Your Data

retro777 collects personal data through the following channels and mechanisms:

• Direct Collection: Information you provide voluntarily during account registration, KYC document submission, deposit/withdrawal requests, support interactions, and promotional opt-ins.
• Automated Collection: Technical data collected automatically when you interact with the retro777 platform, including via cookies, web beacons, server logs, and session-tracking technologies.
• Payment Providers: Transaction confirmation data received from Malaysian payment processors including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, and GrabPay, as required to process and verify deposits and withdrawals.
• Identity Verification Services: Data received from third-party KYC and identity verification partners engaged to authenticate player identities and screen against sanctions, PEP (Politically Exposed Persons), and adverse media lists.
• Fraud Prevention Services: Risk signals and device fingerprinting data from third-party fraud detection partners used to protect platform integrity.
• Third-Party Analytics Platforms: Aggregated and pseudonymised behavioural analytics data generated through the use of analytics tools deployed on the platform.

5 Legal Basis for Processing

retro777 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary for the performance of your contract with retro777 — including account operation, game delivery, transaction processing, and bonus administration.
• Legal Obligation: Processing is required to comply with applicable laws and regulatory obligations, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and KYC verification mandates imposed by our licensing authority.
• Legitimate Interests: Processing is necessary for retro777's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing is based on your freely given, specific, and informed consent — primarily in the context of optional marketing communications and non-essential cookie deployment. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 How We Use Your Personal Data

retro777 uses personal data collected from players for the following purposes:

• Creating, managing, and maintaining your retro777 player account.
• Processing deposits and withdrawals in MYR via supported Malaysian payment methods.
• Verifying your identity and age (21+) in compliance with our KYC obligations.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• Personalising your gaming experience — including game recommendations, sports market suggestions relevant to your activity (e.g., Liga Super Malaysia, EPL), and relevant promotional offers.
• Administering promotional bonuses, VIP tier benefits, and loyalty programme rewards.
• Monitoring gaming activity for responsible gambling purposes, including flagging patterns that may indicate problem gambling behaviour.
• Providing customer support via live chat, email, and other communication channels.
• Sending account-related communications — including transaction confirmations, security alerts, and service updates.
• Sending marketing communications where you have opted in, and managing your communication preferences.
• Improving platform performance, user experience, and game offerings based on aggregated usage data and analytics.
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from regulatory authorities.

7 Data Sharing & Disclosure

retro777 does not sell, rent, or trade your personal data to third parties. We may share personal data only in the following circumstances, and only to the extent strictly necessary:

• Payment Service Providers: We share transaction data with Malaysian payment processors (DuitNow, FPX, e-wallet operators, and banking institutions) to facilitate deposits and withdrawals.
• KYC and Identity Verification Partners: We share identity documents and personal details with licensed KYC service providers for the purposes of identity and age verification.
• Fraud Prevention and Security Partners: Technical and behavioural data may be shared with fraud detection services for the purpose of safeguarding platform integrity and protecting players.
• Game Software Providers: Limited gameplay data is shared with our licensed game studios and software providers to enable game delivery and resolve technical disputes.
• Regulatory and Law Enforcement Authorities: We will disclose personal data where required to do so by law, court order, or at the direction of our licensing regulator. We may also disclose data where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Business Successors: In the event of a merger, acquisition, or restructuring of retro777, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

8 International Data Transfers

retro777 is an internationally operated platform. As a result, your personal data may be transferred to, stored, or processed in jurisdictions outside Malaysia, including in countries where our servers, game providers, or third-party service partners are located.

Where personal data is transferred internationally, retro777 ensures that adequate safeguards are in place to protect the data in accordance with applicable data protection standards. Such safeguards may include standard contractual clauses, binding corporate rules, or reliance on the recipient jurisdiction's adequacy status where applicable.

By using the retro777 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section.

9 Data Retention

retro777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, in compliance with AML and KYC record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of the relevant transaction, in compliance with financial record-keeping obligations.
• Gaming Activity Data: Retained for five (5) years from the date of the relevant gaming session or wager.
• Support and Communication Data: Retained for three (3) years from the date of the relevant interaction, or longer where the communication relates to an unresolved dispute or regulatory matter.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring purposes, unless retained for longer in connection with a fraud or security investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with retro777's internal data destruction procedures.

10 Cookies & Tracking Technologies

retro777 uses cookies and similar technologies (including web beacons and local storage) to operate the platform effectively and enhance your user experience. The types of cookies deployed on the retro777 platform are as follows:

• Strictly Necessary Cookies: Essential for the basic operation of the platform, including session management, login authentication, and security token maintenance. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Performance and Analytics Cookies: Used to collect anonymised data about how users interact with the retro777 platform, including pages visited, time spent, and navigation paths. This data helps us identify areas for improvement.
• Functional Cookies: Used to remember your preferences, such as language setting, preferred game categories, and display options, to provide a more personalised experience.
• Marketing and Targeting Cookies: Deployed only where you have provided explicit consent, these cookies are used to deliver promotional content relevant to your gaming interests and to measure the effectiveness of our marketing campaigns.

11 Security Measures

retro777 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and retro777's servers.
• Encryption of sensitive personal data fields at rest within our database infrastructure.
• Multi-factor authentication options for player accounts and mandatory strong authentication for all administrative access.
• Role-based access controls ensuring that employee access to personal data is restricted strictly to what is required in the performance of their role.
• Regular independent security audits and penetration testing of platform infrastructure.
• 24/7 security monitoring with automated anomaly detection and incident response procedures.
• Segregation of player funds from operational accounts.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own login credentials. In the event of a data security incident that is likely to affect your rights and freedoms, retro777 will notify you in accordance with applicable breach notification obligations.

12 Your Rights as a Data Subject

Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data processed by retro777:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is subject to our legal and regulatory retention obligations, which may override erasure requests in some cases.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest its accuracy or have objected to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

13 Children's Privacy — 21+ Platform

retro777 is an adult entertainment platform. Access to the platform is strictly limited to individuals aged 21 years and above. retro777 does not knowingly collect, process, or store personal data from any person under the age of 21.

Where retro777 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete such data and close the associated account. All winnings associated with an underage account will be forfeited.

14 Amendments to This Policy

retro777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. When material changes are made, we will notify registered players via email and/or a prominent on-platform notice prior to the changes taking effect, where reasonably practicable.

The most current version of this Privacy Policy will always be accessible at retro777.cam/privacy-policy and will display the date of the most recent revision. Your continued use of the retro777 platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this Policy periodically to stay informed of any changes.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by retro777, please do not hesitate to contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the retro777 platform
• Primary Support Hours: 08:00 – 02:00 MYT (Malaysia Time, UTC+8)
• Support Languages: English, Bahasa Melayu, and Mandarin

For data subject rights requests — including access, rectification, portability, erasure, or objection — please contact us via email with the subject line "Data Subject Request" and include your full registered name and account email address to allow us to verify your identity before processing your request.