Privacy Policy —
How draja777 Handles Your Data

1 Introduction

draja777 ("we", "us", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all individuals who access, register with, or interact with the draja777 platform at draja777.cam ("the Platform").

This Privacy Policy ("Policy") describes how draja777 collects, uses, stores, shares, and protects personal data relating to registered players and site visitors ("you", "the Data Subject"). It also sets out the rights available to you in respect of your personal data and the mechanisms by which you may exercise those rights.

By registering an account on draja777, making a deposit, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and behavioural data.
• "Data Controller" refers to draja777, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" refers to any third party that processes personal data on behalf of draja777 under a contractual arrangement, such as payment processors or KYC service providers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "KYC" means Know Your Customer — the identity and address verification process carried out by draja777 prior to authorising player withdrawals.
• "Cookies" means small data files placed on your device by the Platform to facilitate functionality and analytics.
• "MYR" means Malaysian Ringgit, the currency in which all draja777 transactions are denominated.

3 Personal Data We Collect

draja777 collects the following categories of personal data from players and site visitors:

3.1 Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Email address
• Mobile phone number
• Username and encrypted account password
• Country and city of residence

3.2 Identity Verification (KYC) Data

• Copy of Malaysian identity card (MyKad / IC), Driver's Licence, or Passport
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months)
• Selfie photograph of the player holding their identity document

3.3 Financial Data

• Payment method identifiers (e.g., masked bank account numbers, Touch 'n Go eWallet reference IDs, DuitNow identifiers)
• Transaction records — deposit and withdrawal amounts, dates, and payment method used
• Account balance history

draja777 does not store full payment card numbers, CVV codes, or online banking passwords. All payment processing is handled by certified third-party payment processors operating their own data security standards.

3.4 Gameplay and Activity Data

• Game session history, wager amounts, and game outcomes
• Sports betting activity — markets accessed, bets placed, and results
• Bonus usage history and promotion participation records
• Responsible gambling tool settings (deposit limits, self-exclusion status, cool-off periods)

3.5 Technical and Device Data

• IP address and approximate geolocation at time of login
• Browser type and version
• Operating system and device type
• Session duration and page-visit logs

3.6 Communication Data

• Support chat transcripts and email correspondence
• Player feedback and complaint records
• Marketing communication preferences and opt-in records

4 How We Collect Your Data

draja777 collects personal data through the following means:

• Directly from you — during account registration, identity verification (KYC), deposits and withdrawals, bonus claims, support interactions, and any form submission on the Platform.
• Automatically — through cookies, server logs, session tracking, and similar technologies when you browse or use the Platform.
• From third-party service providers — including KYC verification partners, payment processors (e.g., providers supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank), and fraud prevention services, who may share relevant data with us pursuant to their own data processing arrangements.

5 How We Use Your Personal Data

draja777 processes your personal data for the following purposes:

6 Legal Basis for Processing

draja777 processes your personal data on the following legal bases:

• Contractual necessity — processing required to create and manage your account, process transactions, and deliver the services you have contracted for.
• Legal obligation — processing required to comply with applicable anti-money laundering, KYC, age verification, and other regulatory requirements.
• Legitimate interests — processing conducted for fraud prevention, platform security, and internal analytics that do not override your fundamental privacy rights.
• Consent — where you have freely given specific and informed consent, such as opting in to receive promotional communications from draja777. You may withdraw this consent at any time.

7 Data Sharing & Disclosure

draja777 does not sell your personal data to any third party for commercial purposes. We may disclose your personal data to the following categories of recipients in the circumstances described below:

7.1 Payment Service Providers

Personal and financial data is shared with certified payment processing partners to facilitate MYR deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and other supported payment channels. These processors are contractually bound to process data solely for the purpose of completing your transactions.

7.2 Identity Verification Partners

KYC documentation is shared with authorised identity verification service providers who assist draja777 in confirming player identity and age. These providers operate under strict data confidentiality obligations.

7.3 Regulatory and Law Enforcement Authorities

draja777 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law where we are legally required to do so or where such disclosure is necessary to investigate suspected fraud, money laundering, or other criminal activity.

7.4 Technology and Infrastructure Providers

Certain technical service providers — including hosting, security, and analytics providers — may process limited personal data on our behalf as Data Processors under written agreements that restrict their use of your data to the purposes specified by draja777.

8 Cookies & Tracking Technologies

The draja777 Platform uses cookies and similar tracking technologies to enable core functionality, improve user experience, and gather anonymised analytics about platform performance.

8.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality including session management and security. These cannot be disabled without impairing your ability to use the Platform.
• Performance Cookies: Used to collect anonymised data about how players navigate the Platform, enabling us to identify and fix usability issues.
• Functionality Cookies: Used to remember your preferences (e.g., language, game history) to personalise your experience across sessions.
• Analytics Cookies: Used to track aggregate platform usage patterns. Data collected through analytics cookies does not identify you as an individual.

8.2 Managing Cookies

You may configure your browser settings to reject non-essential cookies at any time. Note that disabling certain cookies may affect the functionality of the Platform. For full instructions on managing cookies in your browser, refer to your browser's help documentation.

9 Data Retention

draja777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account data — retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• KYC documents — retained for a minimum of five (5) years from the date of verification, as required by applicable compliance frameworks.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Support communication records — retained for three (3) years from the date of the interaction.
• Marketing consent records — retained for the duration of your account, and for a period of three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with draja777's internal data disposal procedures.

10 Data Security Measures

draja777 implements technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all Platform pages and API communications
• Encrypted storage of sensitive personal data and KYC documents at rest
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Automated fraud detection and account anomaly monitoring systems
• Regular security assessments and penetration testing of the Platform infrastructure
• Optional two-factor authentication (2FA) for all registered player accounts

11 Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by draja777. To exercise any of these rights, please contact our support team via live chat or email:

draja777 will acknowledge all data subject requests within five (5) business days and will endeavour to provide a substantive response within thirty (30) days. Where a request is particularly complex or voluminous, we may extend this period by a further thirty (30) days and will inform you accordingly.

Please note that certain data subject rights may be limited where draja777 is required to retain or process data to comply with a legal obligation — for example, KYC records maintained to satisfy anti-money laundering requirements.

12 Minors & Age Restriction

The draja777 Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. All players are required to verify their age as part of the KYC process before any withdrawal is authorised.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation at registration or by any other means — we will suspend the relevant account immediately, delete all associated personal data to the extent permitted by law, and take such further action as is appropriate in the circumstances.

13 Third-Party Services & Links

The draja777 Platform may reference third-party services including payment providers, game studio platforms, and support tool providers. Where you interact with a third-party service in connection with your use of draja777 — for example, by completing a payment via DuitNow, FPX, or Touch 'n Go eWallet — that service will process your data in accordance with its own privacy policy.

draja777 is not responsible for the data handling practices of third-party services. We recommend that you review the privacy policies of any third-party service provider with which you interact in connection with your draja777 account.

14 Changes to This Privacy Policy

draja777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The revised Policy will be published on this page with an updated effective date.

Where changes are material, we will endeavour to notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect. Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how draja777 handles your personal data, you may contact us through the following channels:

• Privacy Enquiries — Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available on the Platform from 8 AM to 2 AM MYT, seven days a week. Average response time under three minutes.
• Subject Line: Please use the subject line "Privacy Request — [Your Account Username]" when emailing us for data-related enquiries to ensure your request is routed to the correct team.

We are committed to resolving all privacy concerns promptly and fairly. If you remain unsatisfied following our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.