Privacy Policy

This Privacy Policy ("Policy") is published by kafe777 ("we", "us", "our", "the Platform") and governs the collection, use, storage, disclosure, and protection of personal data relating to individuals ("Members", "Users", "you") who access or use the kafe777 platform at kafe777.cam.

kafe777 provides online sports betting, live casino, and slot gaming services primarily to players located in Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other regions across the country. In the course of operating these services, kafe777 necessarily collects and processes certain categories of personal data about its Members.

By registering an account on the kafe777 Platform or by continuing to use our services after any update to this Policy, you acknowledge that you have read and understood how your personal data is processed in accordance with the terms described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact our support team to arrange account closure.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data held by kafe777.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, combination, erasure, or destruction.
• "Data Controller" — kafe777, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" — any third party engaged by kafe777 to process Personal Data on its behalf, acting only on documented instructions from kafe777.
• "Member" / "User" — any individual who has registered and maintains an active account on the kafe777 Platform.
• "Sensitive Data" — a specific category of Personal Data that warrants heightened protection, including financial account information, identity documents, and data processed for KYC and anti-money laundering compliance.
• "Cookies" — small text files placed on your device by the Platform to store session preferences, authentication tokens, and analytics data.

kafe777 collects Personal Data across the following categories. We collect only the minimum data necessary for each stated purpose, and we do not retain data beyond the periods described in Section 9.

kafe777 collects Personal Data through the following means:

• Direct Provision: Data you provide voluntarily during account registration, identity verification (KYC), deposit and withdrawal requests, support interactions, promotional claim submissions, and referral programme participation.
• Automated Technologies: Technical Data and Usage Data collected automatically when you access the Platform, including via cookies, log files, and session tracking mechanisms as described in Section 8.
• Third-Party Sources: Personal Data received from authorised third-party service providers engaged by kafe777, including payment processors (e.g., FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong), fraud detection providers, and identity verification services, solely to the extent necessary for the purposes described in Section 5.
• Publicly Available Sources: In limited circumstances, kafe777 may supplement Member records with data from publicly available sources where this is lawfully permitted and proportionate to the purpose for which it is used, such as sanctions screening or adverse media checks in connection with anti-money laundering obligations.

kafe777 processes your Personal Data only for defined, documented purposes. The table below sets out each processing activity alongside the category of data involved and the purpose it serves.

kafe777 relies on the following legal bases to process your Personal Data, depending on the nature and purpose of the processing activity in question:

• Contractual Necessity: Processing required to perform our obligations under the Member account agreement with you — including account creation, payment processing, and provision of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering checks, age verification, and financial record-keeping obligations.
• Legitimate Interests: Processing carried out in pursuit of kafe777's legitimate business interests, including fraud prevention, platform security, system analytics, and improving the quality of our services, where such interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for specific processing activities — such as sending optional promotional communications — you may withdraw that consent at any time by contacting our support team or updating your account notification preferences.

kafe777 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances. We share Personal Data only in the following limited circumstances:

• Service Providers (Data Processors): Third-party companies engaged to provide services on our behalf, including payment processors (FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, cryptocurrency network providers), identity verification services, fraud prevention providers, IT infrastructure providers, and customer support platform operators. All Data Processors are contractually bound to process data solely on kafe777's documented instructions and to implement appropriate security measures.
• Legal and Regulatory Authorities: kafe777 may disclose Personal Data to competent authorities, courts, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction.
• Anti-Money Laundering Compliance: Where required under applicable anti-money laundering obligations, kafe777 may be required to report certain transactions or account activity to relevant financial intelligence units or regulatory bodies without prior notice to the Member concerned.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the kafe777 business, Personal Data held may form part of the transferred assets. Members will be notified via email or a prominent Platform notice prior to any such transfer, and the terms of this Policy will continue to apply to transferred data.
• With Your Consent: In any other circumstances not described above, kafe777 will only share your Personal Data with your explicit prior consent.

kafe777 uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, to enhance your experience, and to gather aggregate analytics data. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, security cookies, and cookies that remember your in-session preferences such as language settings. No Personal Data is collected by these cookies for marketing purposes.
• Performance & Analytics Cookies: These cookies collect aggregate, anonymised data about how Members interact with the Platform — such as which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used to improve Platform performance and user experience.
• Functional Cookies: These cookies allow the Platform to remember preferences you have set, such as your preferred deposit method or display settings, and to provide enhanced, personalised features.
• Session Cookies: Temporary cookies that exist only for the duration of your browser session and are deleted when you close your browser. These are used for core session management and security.

You may configure your browser settings to block or delete cookies at any time. However, disabling Strictly Necessary Cookies may impair the functionality of the Platform and your ability to access certain features, including account login and payment processing.

kafe777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account membership and for a period of no less than five (5) years following permanent account closure, to comply with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the termination of the Member relationship, or such longer period as may be required by applicable law.
• Support and Communications Records: Retained for two (2) years from the date of the most recent interaction, or longer if the communication is relevant to an active dispute or investigation.
• Marketing Preference Data: Retained until you withdraw consent or opt out of marketing communications, at which point it is updated to record your opt-out preference.
• Analytics and Technical Data: Retained in aggregate, anonymised form for up to twenty-four (24) months for the purpose of Platform performance analysis and improvement.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with kafe777's internal data destruction procedures.

kafe777 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL (Transport Layer Security) encryption for all data transmitted between your device and the kafe777 Platform;
• Encryption of sensitive data at rest, including KYC documents and financial account information stored in our systems;
• Two-factor authentication (2FA) available to all Members for enhanced account access security;
• Role-based access controls limiting internal access to Personal Data to staff who require it for legitimate, documented business purposes;
• Continuous monitoring of Platform systems for security incidents, intrusion attempts, and anomalous activity;
• Regular security assessments and penetration testing conducted by qualified security professionals;
• Formal data breach response procedures, including notification obligations to affected Members and relevant authorities in accordance with applicable law.

Subject to applicable law and kafe777's legal obligations, you hold the following rights in respect of the Personal Data we process about you. To exercise any of these rights, please contact our support team via the channels described in Section 15.

kafe777 will respond to all valid rights requests within thirty (30) calendar days of receipt. In complex or high-volume cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it. Where a request is manifestly unfounded or excessive, kafe777 reserves the right to charge a reasonable administrative fee or decline to process the request, providing written reasons in either case.

The kafe777 Platform may, in limited circumstances, contain references or links to third-party websites, services, or resources that are not operated or controlled by kafe777. This Privacy Policy applies solely to Personal Data collected and processed by kafe777 through the kafe777 Platform.

kafe777 accepts no responsibility or liability for the privacy practices, security measures, or content of any third-party websites or services you may access through or in connection with the Platform. We recommend that you review the privacy policies of any third-party services you use independently of kafe777.

kafe777 is a gambling platform strictly intended for adults. Access to all features and services — including registration, betting, live casino, and slot games — is restricted to individuals aged 21 years and above.

kafe777 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been provided by a person who is under 21, we will take immediate steps to delete such data from our systems and close the associated account.

If you are a parent or guardian and believe that a person under 21 in your care has provided Personal Data to kafe777, please contact our support team immediately via live chat or at the email address provided in Section 15 so that we can investigate and take appropriate action.

kafe777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes are significant, provide notice to Members via email to the registered address on your account or via a prominent notice on the Platform.

Your continued use of the kafe777 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes made to this Policy, you should discontinue use of the Platform and contact our support team to arrange account closure in accordance with the Terms & Conditions.

We encourage Members to review this page periodically to stay informed of how we manage and protect your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the Personal Data kafe777 holds about you, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the kafe777 website. Our support agents can escalate data-related queries to the appropriate team. Average first-response time is under 90 seconds.
• Email (plain text — not a clickable link):
  [email protected]

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. kafe777 may ask for additional information to verify your identity before processing any data access, rectification, or erasure request.

For information about our Terms & Conditions, please visit the Terms & Conditions page. For responsible gambling tools and support resources, please visit our Responsible Gambling page.