Privacy Policy — vape77

This Privacy Policy ("Policy") describes how vape77, accessible at vape77.cam ("the Platform", "we", "us", "our"), collects, processes, stores, and protects the personal data of individuals ("User", "Member", "you", "your") who register, access, or otherwise interact with any part of the vape77 online casino and sports betting platform.

vape77 operates as an online gaming platform serving Members across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. We are committed to safeguarding the privacy and personal data of our Members in accordance with applicable data protection principles and best practices.

By registering an account on vape77, visiting the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read together with our Terms & Conditions, which are incorporated by reference.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means vape77, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of vape77 pursuant to a written agreement.
• "Sensitive Personal Data" means personal data revealing financial information, identity document details, or any data category that carries heightened risk if disclosed.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "Cookies" means small text files placed on your device by the Platform for purposes including session management, analytics, and preference storage.

vape77 collects personal data in the categories described below. We collect only the data that is necessary and proportionate to the purposes set out in this Policy.

We collect personal data through the following primary channels:

4.1 Direct Provision by You

The majority of personal data we hold is provided directly by you during account registration, KYC submission, completion of payment transactions, or when you contact our support team via Live Chat, Telegram, or email.

4.2 Automated Collection

When you access the Platform, our systems automatically collect technical data including your IP address, device identifiers, browser characteristics, and session activity. This collection is essential for Platform security, fraud detection, and service delivery.

4.3 Third-Party Sources

We may receive data from third parties in limited circumstances, including identity verification providers used for KYC, payment processors (such as FPX, DuitNow, and bank transfer partners including Maybank, CIMB, Public Bank, and Hong Leong), and fraud prevention agencies. Data received from third parties is handled with the same care and protections as data collected directly.

vape77 processes your personal data only for defined, legitimate purposes. The following table sets out the primary purposes for which we process each category of data:

• Account Management: To create, maintain, and administer your vape77 account, including processing login authentication and account preference settings.
• Payment Processing: To facilitate deposits and withdrawals via Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong, and to maintain accurate financial records.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with our know-your-customer obligations and to prevent underage gambling and financial crime.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other unlawful activities on the Platform.
• Responsible Gambling: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits and cooling-off periods as requested by Members.
• Customer Support: To respond to and resolve queries, complaints, and disputes submitted through Live Chat, Telegram, or email.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, user experience, and game offering.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from authorised authorities.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.

vape77 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between vape77 and you as set out in our Terms & Conditions — including account creation, payment processing, and game access.
• Legitimate Interests: Processing is necessary for the legitimate interests of vape77 or third parties, including fraud prevention, Platform security, and service improvement, provided such interests are not overridden by your rights.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and regulatory reporting.
• Consent: For marketing communications and optional data processing activities, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

vape77 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial or marketing purposes. We share personal data only in the limited circumstances described below:

• Payment Processors: We share financial data with Malaysian payment service providers — including DuitNow operators, FPX network participants, and licensed e-wallet services — solely for the purpose of completing your requested transactions.
• Identity Verification Providers: We engage specialist KYC and identity verification services to assist in verifying your identity and age. These providers process your data under strict confidentiality obligations.
• Fraud Prevention Agencies: We may share relevant technical and identity data with fraud detection services to protect the Platform and its Members from financial crime.
• IT & Infrastructure Service Providers: Certain technical operations of the Platform are supported by third-party hosting, cloud storage, and cybersecurity providers. All such providers are bound by data processing agreements and are prohibited from using Member data for any purpose other than the contracted service.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to authorised regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent harm or illegal activity.
• Business Restructuring: In the event of a merger, acquisition, or sale of assets, Member data may be transferred as part of the transaction, subject to equivalent privacy protections being maintained.

vape77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and analyse usage patterns. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session tokens, login authentication cookies, and security cookies. These cannot be disabled without impacting Platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred currency display, and game lobby layout. Disabling these may reduce personalisation.
• Analytics Cookies: Help us understand how Members navigate and use the Platform by collecting aggregated, anonymised data on page visits, session duration, and feature usage. This data informs Platform improvements.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login locations or device changes.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. Continued use of the Platform following acknowledgement of this Policy constitutes consent to our use of the cookies described above.

vape77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with vape77 and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction & Financial Records: Retained for a minimum of seven (7) years following the transaction date to satisfy statutory financial record-keeping requirements.
• KYC & Identity Documents: Retained for the duration of your account and for at least five (5) years following account closure, or longer if required by applicable law.
• Support Communications: Retained for three (3) years following the closure of the relevant support interaction.
• Marketing Preferences & Consent Records: Retained for the period of the relevant marketing activity and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or archived in a manner that prevents identification of individual data subjects.

vape77 employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Multi-Factor Authentication: Account login is protected by optional two-factor authentication (2FA), which we strongly recommend all Members enable.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. vape77 staff undergo regular data protection training and are bound by confidentiality obligations.
• Data Minimisation: We collect and store only the data that is strictly necessary for the stated purposes. Data no longer required is securely deleted.
• Intrusion Detection: Our systems are continuously monitored for unauthorised access attempts, anomalous activity, and potential security breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, vape77 will notify affected Members without undue delay via the email address registered to their account, and will take immediate remedial action.

As a vape77 Member, you have the following rights with respect to the personal data we hold about you. You may exercise any of these rights at any time by contacting our support team via Live Chat or email.

To exercise any of the above rights, please contact us at [email protected] (plain text — not a link). We aim to respond to all verifiable requests within thirty (30) days. In some cases, we may require identity verification before processing a data rights request.

vape77 is strictly a platform for individuals aged 21 years and above. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory component of our KYC process, and accounts found to belong to individuals under the minimum age will be immediately suspended and all associated balances withheld pending investigation.

If you are a parent or guardian and have reason to believe that your child has provided personal data to vape77 without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete the relevant personal data and close the associated account.

In the course of operating the Platform and engaging service providers, personal data may be transferred to, stored, or processed in jurisdictions outside Malaysia. When such transfers occur, vape77 takes appropriate steps to ensure that equivalent levels of data protection are maintained, including the use of contractual data transfer mechanisms, selection of processors with certified security standards, and ongoing due diligence of international service providers.

We will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards to protect your rights and interests.

vape77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, we will notify registered Members via the email address associated with their account, or through a prominent notice displayed on the Platform upon login.

The effective date at the top of this Policy will always reflect the date of the most recent update. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the amended Policy, you must cease using the Platform and request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the vape77 data support team through any of the following channels:

• 24/7 Live Chat: Available directly on the Platform — fastest response channel.
• Telegram: Telegram Support Available (details accessible on the Platform).
• Email (plain text — not a link): [email protected]

For formal data rights requests (access, erasure, portability, etc.), we recommend submitting your request in writing via email to ensure a complete record is maintained. Please include your registered account email address and a brief description of your request. We aim to acknowledge all requests within five (5) working days and to resolve them within thirty (30) days, subject to identity verification where required.

For further information on your rights or responsible gambling tools available on vape77, please visit our Responsible Gambling page or our FAQ.