Planet777 Privacy Policy

1. Introduction

This Privacy Policy applies to all personal data collected by Planet777 in connection with the operation of its online casino, live dealer tables, slot games, sports betting markets, payment processing, customer support, marketing communications, and related digital services.

Throughout this document, references to "Planet777", "we", "us", or "our" mean the entity responsible for the Planet777 platform. References to "you", "your", "player", or "member" mean the individual whose personal data is being processed.

This Privacy Policy should be read together with the Planet777 Terms & Conditions and Responsible Gambling information. Where there is a conflict between this document and any other policy, this Privacy Policy will govern with respect to personal data matters.

Planet777 may update this policy when changes to operations, technology, applicable laws, or regulatory requirements make an amendment necessary. Material changes will be notified through a platform notice or direct communication where reasonably practicable. The effective date at the top of this page will be updated accordingly.

2. Definitions

The following terms are used throughout this Privacy Policy with these meanings:

• Personal Data — any information that identifies or could reasonably be used to identify a living individual, such as a name, identification number, contact details, IP address, or payment account reference.
• Processing — any operation performed on personal data, including collection, recording, storage, use, transfer, or deletion.
• Data Controller — the entity that determines the purposes and means of processing personal data. Planet777 acts as the Data Controller in respect of the data described in this policy.
• Data Processor — a third party that processes personal data on behalf of Planet777, such as a payment gateway, identity verification service, or fraud prevention provider.
• Consent — a freely given, specific, informed, and unambiguous indication of the player's agreement to the processing of their personal data for a stated purpose.
• Sensitive Data — a subcategory of personal data requiring additional protection, which may include financial information, identity documents, and self-exclusion status related to responsible gambling.

3. Personal Data We Collect

Planet777 may collect the following categories of personal data, depending on how you interact with the platform:

3.1 Registration and Account Information

When you create a Planet777 account, we collect your full name, date of birth, residential address, email address, and a username. This information is used to create and maintain your account and verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification Documents

Where required for compliance with applicable regulations or to process a withdrawal above certain thresholds, Planet777 may request a copy of a government-issued identity document, proof of residential address, and proof of payment method ownership. These documents are used solely for verification and are not retained longer than necessary.

3.3 Financial and Payment Data

When you make a deposit or request a withdrawal, we collect transaction records including amount, currency (MYR), timestamp, payment method reference, and outcome. We may receive partial card or account identifiers from payment processors such as FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and DuitNow. Planet777 does not store full payment credentials on its own servers.

3.4 Gameplay and Betting Records

We maintain records of wagers placed, games accessed, session durations, wins and losses, and bonus redemptions. This data is used for account management, dispute resolution, responsible gambling monitoring, and security analysis.

3.5 Technical and Device Data

When you access Planet777, we automatically collect your IP address, browser type and version, operating system, device type, session identifiers, and general geolocation derived from your IP address. This data is used for platform security, fraud detection, and service improvement.

3.6 Customer Support Communications

When you contact Planet777 support through live chat, email, or any other channel, we retain the content of those communications, including your messages, the date and time of contact, and any attachments or screenshots you provide. These records support service quality, dispute resolution, and staff training.

3.7 Marketing Preferences

Where you have consented to receive marketing communications, we retain a record of that consent and the preference settings you have applied. You may amend or withdraw consent at any time through the contact details provided in this policy.

4. How We Use Your Personal Data

The table below sets out the primary purposes for which Planet777 processes personal data, the lawful basis relied upon in each case, and whether retention is a contractual or regulatory requirement.

5. Sharing of Personal Data

Planet777 does not sell, rent, or trade personal data to third parties for their own marketing purposes. We may share personal data with the following categories of recipients where it is necessary and appropriate:

• Payment Processors and Banking Partners: including FPX gateway operators, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and other participating Malaysian financial institutions — solely for the purpose of processing your deposit or withdrawal transactions.
• Identity Verification and KYC Providers: third-party services used to verify identity documents and address records in connection with account verification or withdrawal processing.
• Fraud Prevention and Security Services: providers that analyse transactional and behavioural signals to detect suspicious activity, account misuse, or money laundering patterns.
• IT Infrastructure and Cloud Service Providers: hosting, database, and security infrastructure partners that process data on behalf of Planet777 under contractual data-processing agreements.
• Customer Support Technology Providers: live chat platforms and ticketing systems that facilitate support interactions, bound by appropriate confidentiality obligations.
• Regulatory Authorities and Law Enforcement: Planet777 may disclose personal data to a competent authority where required by applicable law, court order, or a legitimate investigative request we are legally obliged to comply with.

All third-party service providers engaged by Planet777 to process personal data are required to maintain appropriate security standards and to process data only for the specific purposes authorised by Planet777.

6. Cookies and Tracking Technologies

Planet777 uses cookies and similar technologies to operate the platform reliably, improve user experience, and conduct security checks. The principal categories of cookies deployed are:

• Strictly Necessary Cookies: required for core platform functionality including login session management, account authentication, and security checks. These cannot be disabled without impairing the platform.
• Functional Cookies: used to remember your preferences such as language settings, display options, and recent game selections between sessions.
• Analytics Cookies: used to collect aggregated information about how players navigate and interact with Planet777, which helps us improve platform performance and game placement. Data is processed in anonymised or aggregated form where possible.
• Security and Fraud Prevention Cookies: used to identify and flag unusual session behaviour, bot activity, and account takeover attempts.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality or performance of the Planet777 platform.

7. Data Retention

Planet777 retains personal data for as long as your account is active and for a further period required by applicable legal, regulatory, financial compliance, and anti-money-laundering obligations. The general retention framework is as follows:

• Active Account Data: retained for the lifetime of the account and until a verified closure or deletion request is processed.
• Transaction and Payment Records: retained for a minimum of five years following the relevant transaction to satisfy financial compliance requirements.
• Identity Verification Documents: retained for a minimum of five years following account closure or the date of the last relevant transaction, whichever is later.
• Customer Support Records: retained for three years unless a related dispute remains open, in which case records are retained until the matter is resolved.
• Self-Exclusion and Responsible Gambling Records: retained for the duration of the exclusion period and a reasonable period thereafter to prevent circumvention.
• Marketing Consent Records: retained for the period during which consent is active, and for a further period to demonstrate compliance in the event of a complaint.

At the end of the applicable retention period, personal data is securely deleted or anonymised.

8. Your Rights as a Data Subject

Subject to applicable law and our legal obligations, you may exercise the following rights in relation to your personal data held by Planet777:

• Right of Access: you may request a copy of the personal data Planet777 holds about you, together with information about how it is being used.
• Right to Rectification: you may request correction of inaccurate or incomplete personal data. Account details such as address and contact information may be updated directly through your account settings or via support.
• Right to Erasure: in certain circumstances, you may request deletion of your personal data. This right is subject to any overriding legal obligation that requires us to retain records, such as financial compliance or anti-money-laundering laws.
• Right to Restriction: you may request that Planet777 restricts the processing of your data while a query or objection is under review.
• Right to Object: you may object to processing of your data where we rely on legitimate interests as the lawful basis, particularly in relation to direct marketing.
• Right to Withdraw Consent: where processing is based on your consent — for example, receiving promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: where technically feasible and legally applicable, you may request that data you have provided to Planet777 be transferred in a structured, commonly used, machine-readable format.

To exercise any of the above rights, contact the Planet777 support team using the plain-text email address displayed in the footer of this page. We may ask you to verify your identity before processing a data rights request. We aim to respond to valid requests within a reasonable timeframe consistent with applicable obligations.

9. Data Security

Planet777 implements and maintains a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Planet777 platform;
• encryption of sensitive data fields at rest within our database infrastructure;
• strict access controls ensuring that only authorised personnel with a business need may access production data;
• multi-factor authentication requirements for administrative access to platform systems;
• regular security reviews, vulnerability assessments, and access log audits; and
• contractual security obligations imposed on all third-party data processors.

While Planet777 applies substantial security measures, no internet-connected service can guarantee absolute security. You play an important role in protecting your account by maintaining a strong, unique password and not sharing your credentials with any other person.

If you suspect unauthorised access to your Planet777 account, contact support immediately using the plain-text details in the footer. We will investigate promptly and take appropriate steps to protect your account.

10. Responsible Gambling and Personal Data

Planet777 is committed to providing a safe gambling environment exclusively for eligible adults aged 21 and above. In connection with this commitment, we process certain personal data for responsible gambling purposes, including:

• monitoring deposit patterns, session durations, and betting behaviour to identify indicators of potential gambling-related harm;
• maintaining records of deposit limits, loss limits, cooling-off periods, and self-exclusion requests that you have set or requested;
• enforcing self-exclusion by checking registration attempts against active exclusion records; and
• communicating responsible gambling information and support resources where appropriate.

Processing in this context is based on our legitimate interest in player welfare and, where applicable, compliance with legal obligations. Responsible gambling data is handled with particular sensitivity. It will not be used for marketing purposes and will be retained for a period sufficient to prevent circumvention of any active self-exclusion.

Further information about responsible gambling tools available to Planet777 players, including self-exclusion, deposit limits, and support contacts, can be found on the Planet777 Responsible Gambling page.

11. Persons Under the Minimum Age

Planet777 is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons below the minimum age. Age verification is conducted at the point of registration and, where appropriate, during further KYC checks.

If we become aware that personal data has been submitted by a person below the minimum age, we will take prompt steps to close the account and delete the associated data. If you believe a minor has accessed or registered on Planet777, please contact support using the plain-text address in the footer.

12. International Data Transfers

In operating the Planet777 platform for Malaysian players, some personal data may be transferred to or accessed by systems and personnel located outside Malaysia, for example in connection with cloud hosting infrastructure, fraud prevention services, or international payment processing networks.

Where such transfers occur, Planet777 takes reasonable steps to ensure that appropriate contractual safeguards, security controls, and data-processing agreements are in place to maintain a standard of protection materially equivalent to that which applies within Malaysia. We will not transfer personal data to a jurisdiction with substantially inadequate data protection standards without implementing appropriate protective measures.

13. Contact Us and Privacy Enquiries

If you have a question about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how Planet777 has handled your personal data, please contact our support team using the plain-text email address displayed in the footer of this website.

Please include your registered username, a brief description of your enquiry, and, where relevant, the specific data or processing activity to which it relates. We may ask you to verify your identity before we can discuss or action account-specific data.

Support is available 24 hours a day, 7 days a week. We aim to acknowledge enquiries promptly and to provide a substantive response within a reasonable timeframe, taking into account the nature and complexity of the request.

If you are not satisfied with our handling of a data-related complaint, you retain the right to seek further recourse through applicable regulatory channels or dispute mechanisms available to you in Malaysia.