Tokyo777 Privacy Policy – Personal Data Protection for Malaysian Members

Introduction – Tokyo777's Privacy Commitment

This Privacy Policy explains how Tokyo777 ("we", "the platform") collects, uses, stores, and protects your personal data ("Member", "you") when you use our online gaming and entertainment platform at tokyo777.asia. This Policy applies to all services provided by Tokyo777, including account registration, deposits, withdrawals, gameplay, bonus programmes, and customer support communications.

Tokyo777 understands that your trust is the foundation of the relationship we build with our Malaysian member community. That trust is not freely given — it must be earned through consistent, transparent, and responsible handling of your personal data in every respect. That is why we have written this Privacy Policy in plain, easy-to-understand language rather than confusing legal jargon.

By registering a Tokyo777 account or using any of our services, you agree to the collection and use of your personal data as described in this policy. If you do not agree, you are advised not to use the Tokyo777 platform.

Personal Data Collected by Tokyo777

Tokyo777 collects your personal data through several channels: information you provide directly during registration and platform use, data automatically generated through your use of the platform, and in certain cases, information from legitimate third-party sources for identity verification purposes.

Data you provide directly including: full name, email address, Malaysian phone number, chosen username and password, date of birth, payment method information (Touch 'n Go eWallet, DuitNow, FPX account number, GrabPay, Boost or ShopeePay), and any additional information you provide when communicating with our support team.

Automatically generated data when you use the Tokyo777 platform, including: IP address, device information (device type, operating system, phone model), browser information, login and logout session data, in-platform navigation history, gaming and betting history, and usage data collected via cookies and analytics technologies.

For members undergoing the identity verification (KYC) process, Tokyo777 may collect copies of identification documents such as a Malaysian identity card (MyKad) or passport, as well as proof-of-address documents such as utility bills or bank statements from the past 3 months. These documents are only collected when required for legal compliance purposes and are not retained longer than necessary.

How We Use Your Personal Data

Tokyo777 uses the personal data collected solely for the following purposes. We do not use your data for any purpose beyond what is stated here without first obtaining additional consent from you:

• Service provision — enables you to register, log in, play, and make deposits and withdrawals on the Tokyo777 platform.
• Identity verification — confirming that you are a legitimate user aged 18 and above who meets all Tokyo777 membership eligibility requirements.
• Payment processing — enabling deposits via Touch 'n Go, DuitNow, FPX, GrabPay, Boost, or ShopeePay, and processing winnings withdrawals quickly and accurately.
• Customer support — allowing our team to identify you, understand the context of your issue, and provide more effective and relevant assistance.
• Security and fraud prevention — to detect and prevent unauthorised access, fraudulent activity, money laundering, and platform abuse.
• Legal Compliance — to comply with Malaysian legal requirements, including the AML (Anti-Money Laundering) and KYC obligations set by regulatory authorities.
• Platform improvement — to analyse usage patterns on an aggregate (not individual) basis in order to improve the overall Tokyo777 user experience.
• Marketing communications — to send you information about Tokyo777 bonuses, promotions, and special offers, subject to the notification preferences you have set.

Data Sharing with Third Parties

Tokyo777 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. However, there are limited situations in which Tokyo777 may share your data with third parties for legitimate and necessary reasons:

• Payment service providers — required payment information is shared with providers such as Touch 'n Go, DuitNow, FPX, GrabPay, Boost, and ShopeePay solely to process your transactions. These providers are governed by their own privacy policies and data protection agreements.
• Technology service providers — companies that provide the technical infrastructure, cloud computing services, analytics, and security tools used by Tokyo777, all subject to strict data processing agreements.
• Regulatory bodies and law enforcement authorities — when required by Malaysian law, a court order, or a regulatory body with lawful jurisdiction.
• Fraud prevention agencies — to verify identity, prevent fraud, and meet the AML requirements set out under Malaysian law.

In all of the above cases, Tokyo777 shares only the minimum data necessary for the specific purpose, and ensures that all third parties receiving your data are bound by confidentiality and data protection obligations equivalent to our own standards.

Tokyo777 Data Security Measures

Tokyo777 continuously invests in the latest cybersecurity infrastructure to ensure every member's personal data is protected to the highest standard. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption for all connections between your device and Tokyo777's servers — data transmitted between you and the platform is always encrypted and cannot be read by third parties.
• Stored data encryption — sensitive data such as payment information and passwords is stored in encrypted form within our databases, not as plain text.
• Tiered Access Control — only Tokyo777 staff who require access to specific data to carry out their authorised duties are permitted to do so, and every instance of access is logged for audit purposes.
• 24/7 security monitoring — a continuously operating threat detection system that identifies and responds to any suspicious activity or intrusion attempts.
• Independent security audits — periodic security assessments conducted by independent parties to identify vulnerabilities and ensure our systems remain robust.
• Two-factor authentication (2FA) — available as an additional layer of protection for Tokyo777 members who want enhanced account security.

While Tokyo777 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. If you suspect any data breach or misuse, please contact us immediately at support@tokyo777.asia so we can take prompt action.

Data Retention & Deletion

Tokyo777 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or for the period required by Malaysian law. Our data retention policy is as follows:

• Active account data — retained for the duration your account remains active at Tokyo777 and for up to 7 years after account closure, in order to meet the financial record-keeping and audit requirements mandated by law.
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysia's AML and accounting legal requirements. These records are essential for fraud investigations and regulatory compliance.
• Activity and security logs — retained for 2 years for security audit and dispute resolution purposes.
• KYC documents — retained for the period required under Malaysia's AML legislation, generally not exceeding 7 years after the business relationship ends.
• Support communication data — retained for 2 years to help our support team deliver better service and to facilitate complaint resolution.

Once the retention period expires, or upon your request for data deletion (subject to legal requirements that override this right), Tokyo777 will delete or anonymise your data in a secure and irreversible manner.

Platform Cookies & Tracking Technologies

Tokyo777 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. Below is an explanation of the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect core Tokyo777 platform functions, such as the ability to log in or maintain your session. For optional cookies such as analytics cookies, disabling them will not impact your use of the platform.

Your Personal Data Rights

As a Tokyo777 member based in Malaysia, you have the following rights regarding your personal data, in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia:

• Right to Access — you have the right to request and receive a copy of the personal data that Tokyo777 holds about you.
• Right to Rectification — you have the right to request the correction of any personal data that is inaccurate or incomplete in our records.
• Right to Withdraw Consent — you may withdraw your consent to data processing for specific purposes (such as marketing communications) at any time.
• Right to Erasure — under certain circumstances, you may request the deletion of your personal data, subject to legal requirements that may override this right.
• Right to Restrict Processing — under certain circumstances, you may request that Tokyo777 restrict the way we process your data.
• Right to Lodge a Complaint — you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated.

To exercise any of the above rights, you may contact the Tokyo777 support team by email at support@tokyo777.asia with the subject line "Privacy Rights Request". We will respond to your request within 14 working days and resolve it within a reasonable timeframe. Identity verification may be required before we process requests relating to data access or deletion.

Protection of Children's Data

Tokyo777 is a gaming platform that intended for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. Tokyo777's registration process requires age verification, and we take reasonable steps to prevent underage individuals from registering.

If we discover that we have inadvertently collected personal data from someone under the age of 18, we will immediately take the following steps: (a) delete the data from our records as quickly as possible; (b) close the account in question; and (c) return any deposits made through an appropriate method. Parents or guardians who suspect their child has registered with Tokyo777 are advised to contact us immediately at support@tokyo777.asia.

Changes to This Privacy Policy

Tokyo777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, new legal requirements, or feedback from our member community. The "Updated" date at the top of this policy will always reflect the date of the most recent version.

For any material changes to how we collect, use, or disclose your personal data, Tokyo777 is committed to giving all members clear notice of at least 14 days before the changes take effect. This notice will be sent by email to the address registered on your account and via in-platform notifications.

Your continued use of the Tokyo777 platform after an updated Privacy Policy takes effect will be considered acceptance of those changes. If you disagree with any changes made, you have the right to close your account and withdraw any eligible balance before the changes come into effect.

Data Protection Officer & Contact Us

Tokyo777 has appointed a Data Protection Officer responsible for ensuring our platform complies with all applicable data protection requirements and serving as the point of contact for all privacy-related enquiries.

For any enquiries, concerns, or requests relating to this Privacy Policy or Tokyo777's handling of your personal data, you can contact us via:

• Email: support@tokyo777.asia (Subject: Privacy Enquiry)
• Live chat: Available 24/7 within the Tokyo777 platform
• Response time: Under 5 minutes (live chat), 24 working hours (email)

We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to refer your complaint to the Department of Personal Data Protection Malaysia, which is responsible for overseeing PDPA compliance in the country.