grab777 Privacy Policy

Effective Date: 1 January 2026  |  Last Updated: 1 June 2026  |  Platform: grab777 (https://grab777.club)

1. Introduction

grab777 ("we", "us", "our", "Company") operates the online gaming platform accessible at https://grab777.club and is committed to protecting the privacy and personal data of all players and visitors ("you", "your", "Player"). This Privacy Policy ("Policy") describes how grab777 collects, uses, stores, discloses, and protects personal data in connection with the use of the grab777 platform by players across Malaysia — including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Kota Kinabalu, and all other locations.

This Policy is to be read together with the grab777 Terms and Conditions. By registering a grab777 account or using any feature of the platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle personal data as described herein, you should not use the grab777 platform.

2. Personal Data We Collect

grab777 collects personal data through different channels and interactions. The categories of data collected are set out in the table below:

grab777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where required for age and identity verification purposes under applicable AML regulations.

3. How We Use Your Personal Data

grab777 uses the personal data described above for the following purposes:

• Account management: To register your player account, authenticate your identity at login, and maintain your account in good standing on the grab777 platform.
• Transaction processing: To process MYR deposits, withdrawals, and refunds via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other supported payment methods.
• Regulatory compliance: To fulfil Know Your Customer (KYC), Anti-Money Laundering (AML), and counter-terrorism financing (CTF) obligations as required under applicable licensing and regulatory frameworks.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, to administer self-exclusion requests and deposit limit settings, and to fulfil our duty of care obligations.
• Platform security: To detect and prevent fraud, cheating, collusion, multi-accounting, and other prohibited conduct as defined in the grab777 Terms and Conditions.
• Service improvement: To analyse platform usage patterns and improve the grab777 gaming experience, including game selection, interface design, and performance optimisation.
• Communications: To send transactional emails (deposit confirmations, withdrawal notifications, security alerts), and where you have consented, promotional communications about grab777 offers.

4. Legal Basis for Processing

grab777 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the grab777 Terms and Conditions, including account management, payment processing, and game operation.
• Legal obligation: Processing required for AML/KYC compliance, age verification, and regulatory reporting.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications. You may withdraw consent at any time by updating your communication preferences in account settings or by contacting grab777 support.

5. Data Sharing and Disclosure

grab777 does not sell or rent your personal data to third parties for their marketing purposes. We may share personal data with the following categories of recipients, strictly for the purposes set out in this Policy:

• Payment service providers: eWallet operators, banking partners, and cryptocurrency payment processors, for the purpose of processing deposits and withdrawals on your grab777 account.
• Identity verification providers: Third-party KYC and AML compliance services for identity and age verification.
• Game technology providers: Game studios and platform technology vendors who operate games on the grab777 platform, who process limited gameplay data for the operation of those games.
• Regulatory and licensing authorities: Where required by our licensing obligations or upon lawful request from a competent authority.
• Legal and professional advisors: Where necessary for the pursuit or defence of legal claims.

All third-party data processors engaged by grab777 are required to process personal data only in accordance with grab777's instructions and to maintain appropriate technical and organisational security measures.

6. Cookies and Tracking Technologies

The grab777 platform uses cookies and similar tracking technologies to ensure the proper functioning of the website, to maintain your session state, and to collect anonymised usage analytics. The categories of cookies used are:

• Essential cookies: Required for the grab777 platform to function. These include session authentication tokens and security cookies. These cannot be disabled without preventing you from using the platform.
• Analytics cookies: Used to collect anonymised data about how players interact with grab777 pages — which games are visited most, how long sessions last, and similar aggregate metrics. This data helps us improve the platform.
• Preference cookies: Used to remember your language and display preferences across sessions on the grab777 platform.

You may configure your browser to reject non-essential cookies. Rejecting analytics or preference cookies will not prevent you from accessing grab777, but certain convenience features may not function as expected. grab777 does not use cross-site tracking cookies or third-party advertising cookies.

7. Data Retention

grab777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction data: Retained for a minimum of 5 years following account closure, in accordance with AML regulatory requirements.
• Identity verification documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable law.
• Support communications: Retained for 2 years from the date of last interaction, unless the content relates to a live dispute or regulatory investigation.
• Technical and usage data: Retained in anonymised aggregated form for up to 3 years for analytics purposes. Raw session logs are deleted within 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with grab777's data disposal procedures.

8. Security Measures

grab777 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and grab777 servers.
• Encrypted storage of passwords using one-way hashing algorithms. grab777 staff cannot retrieve your password in plaintext.
• Access controls restricting personal data access to authorised personnel on a need-to-know basis.
• Regular security audits and penetration testing of the grab777 platform infrastructure.
• Two-factor authentication (2FA) available to all players as an additional account security layer.

Notwithstanding the above, no digital platform can guarantee absolute security. In the event of a data security incident affecting your personal data, grab777 will notify affected players in accordance with applicable regulatory requirements.

9. Your Data Protection Rights

As a grab777 player, you have the following rights in relation to your personal data, subject to applicable law and grab777's legal obligations:

• Right of access: You may request a copy of the personal data grab777 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations (e.g., AML retention requirements).
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, subject to compelling legitimate grounds override.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact grab777 support via live chat or email at [email protected]. We will respond to valid requests within 30 days. Identity verification may be required before processing a data subject request.

10. Children and Minors

grab777 strictly prohibits access to persons under 21 years of age. We do not knowingly collect personal data from individuals under the age of 21. If grab777 becomes aware that personal data has been collected from a minor, that account will be immediately closed, all data associated with the account will be deleted (subject to AML retention obligations where deposits were made), and any deposits will be returned to the verified payment source. Parents or guardians who believe a minor has registered a grab777 account should contact support immediately.

11. International Data Transfers

The grab777 platform is operated by an entity licenced under international gaming authority standards. As a result, personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with platform operations, game technology services, or payment processing. Where such transfers occur, grab777 ensures that appropriate safeguards are in place — including contractual data processing agreements — to protect your personal data to a standard no less than that afforded by this Policy.

12. Changes to This Policy

grab777 may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, or platform operations. When material changes are made, we will notify players via the email address registered to their account and by posting a notice on the grab777 website. The revised Policy will take effect on the date specified in the update notice. Continued use of the grab777 platform following that date constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by grab777, please contact us through the following channels:

• Live Chat: Available 24/7 from within your grab777 account
• Email: [email protected]

This Privacy Policy was last reviewed and updated on 1 June 2026 and applies to all grab777 players across Malaysia and all other supported jurisdictions.