Privacy Policy mio777 — Player Personal Data Protection

To provide a safe, fair, and high-quality service to all members, mio777 collects several categories of personal information. All data collection is carried out transparently and in accordance with legitimate requirements.

Account Registration Information:

• Full name as stated on your identity document
• National identity card number (MyKad) or passport number
• Date of birth for age verification (18+)
• Active email address used for account communications
• A valid Malaysian mobile phone number
• Username and account password (stored in encrypted form)

Financial and Transaction Information:

• Bank account number or digital wallet details used for deposits and withdrawals
• Deposit, withdrawal, and wagering transaction history within the platform
• Records of bonuses received and wagering requirements fulfilled

Technical and Usage Information:

• IP address and approximate location derived from IP
• Device type, operating system, and web browser used
• Activity logs within the platform include login times, games played, and session duration
• Cookie data and similar tracking technologies

Every piece of information collected by mio777 is used for clear and legitimate purposes. We never use your data beyond the scope stated below without prior notice.

For marketing purposes such as promotional emails and exclusive offers, we will only contact you if you have given explicit consent during registration. You may withdraw this consent at any time through your account settings.

Mio777 processes your personal data on a solid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). There are three key bases we rely on:

• Contract Fulfilment: Data processing is necessary to provide the platform services you registered for — including account management, payment processing, and customer support.
• Legitimate Interest: mio777 has a legitimate interest in processing data for the purposes of platform security, fraud prevention, and service quality improvement.
• Legal Obligation Compliance: Certain data processing is mandatory under Malaysian law, including KYC requirements and anti-money laundering reporting (AMLA 2001).

Mio777 upholds a strict data-sharing policy. We do not sell or rent your personal data to any party. However, there are a limited number of situations where we may need to share your information:

• Trusted Service Providers: Technical partners who assist in operating the platform, such as payment processors (FPX, Touch 'n Go eWallet, GrabPay, DuitNow) and cloud service providers. All such providers are bound by strict confidentiality agreements.
• Statutory Authorities: When required by Malaysian law — including by the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or a competent court — mio777 will disclose the information lawfully required.
• Fraud Prevention: In very limited cases, we may share information with other gaming platforms or security service providers to detect and prevent organised fraudulent activity.
• Business Transfer: If mio777 undergoes a merger, acquisition, or asset transfer, user data may be transferred to the new entity — you will be notified in advance should this occur.

In all data-sharing situations described above, mio777 ensures that recipients are bound by data protection obligations equivalent to our own standards.

Mio777 uses cookies and similar technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting anonymous statistical data on how players use the platform — frequently visited pages, time spent, and more. This data helps us improve the platform.
• Functional Cookies: Saving your personal preferences such as language, currency, and display settings so you do not need to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand aggregated usage patterns for product development and service improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the overall functionality of the mio777 platform.

Mio777 only retains your personal data for as long as it is needed for the purposes stated in this privacy policy or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active on the mio777 platform.
• Data After Account Closure: KYC records and financial transaction history are retained for a minimum of 7 years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• Security Logs: Activity logs and security data are retained for 2 years for investigation purposes if required.
• Marketing Data: If you withdraw your marketing consent, the relevant data will be deleted within 30 business days.

Once the retention period expires, your data will be securely deleted using industry-approved methods to ensure it cannot be recovered by any party.

Under Malaysia's PDPA and mio777's commitment to player privacy, you have the following rights regarding your personal data:

Protecting your personal data is mio777's top priority. We continuously invest in the latest security technologies and processes to ensure your data remains protected at all times.

Technical security measures we implement:

• 256-bit SSL/TLS encryption for all data transmissions between your device and mio777 servers
• Passwords are stored as cryptographic hashes — mio777 staff cannot view your original password
• Two-factor authentication (2FA) is available for an additional layer of security on your account
• Round-the-clock system monitoring by an internal cybersecurity team
• Network segregation between systems containing sensitive data and public-facing systems
• Security testing (penetration testing) is conducted regularly by qualified third parties

Organisational security measures:

• Access to players' personal data is restricted to staff who genuinely need it on a least-privilege basis
• All staff who handle personal data are required to sign a confidentiality agreement
• Privacy and security awareness training is conducted regularly for all mio777 staff
• A clear incident response procedure to address any data breaches swiftly and effectively

The mio777 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from children or individuals under the age of 18.

All new players are required to verify their age during the registration process. Further KYC verification may be requested at any time to ensure compliance with this age requirement. If we find that personal data has been collected from a person under the age of 18, we will immediately delete that data and close the account.

If you are a parent or guardian and believe your underage child has registered an account on mio777, please contact our support team immediately at [email protected] so that appropriate action can be taken promptly.

Mio777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in legislation, business practices, or the technology we use. All changes made will be accompanied by the latest update date at the top of this document.

For material changes that affect your privacy rights, we will:

• Sending a notification to your registered email at least 14 days before changes take effect
• Displaying clear notification banners within the mio777 platform
• Requesting your renewed consent if changes involve data processing purposes that differ from those you previously agreed to

Continued use of the mio777 platform after the effective date of any policy changes will be considered your acceptance of the updated policy. You are advised to review this page periodically.