Flip7 Privacy Policy – Data Protection Commitment for Malaysian Players

This Privacy Policy is issued by flip7 ("we", "Platform") and applies to all registered members, website visitors, and any individual who interacts with the flip7 platform via its website, mobile app, or any other digital channel operated by flip7.

As an online entertainment platform serving Malaysian players, flip7 understands that trust is the foundation of our relationship with every member. That trust begins with transparency — we want you to know exactly what happens to your data when you use our platform. That is the primary purpose of this document.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy flip7. In the event of any inconsistency between these documents regarding data privacy, this Privacy Policy shall take precedence.

Flip7 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant regulations applicable to the operation of online entertainment platforms in Malaysia. We are committed to managing your data in accordance with internationally recognised data protection principles.

Flip7 collects your personal data through various means when you use our platform. The following are the categories of data we may collect:

A. Data You Provide Directly:

• Registration Data: Full name, phone number, email address, date of birth, and the password you create when registering your flip7 account.
• Identity Verification (KYC) Data: Copies of your identity document (MyKad) and any supporting documents requested for account verification and legal compliance purposes.
• Financial Data: Information relating to the payment methods you use — including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks. Note: flip7 does not store your full credit card number or complete bank account details — these are processed securely by licensed third-party payment processors.
• Communication Data: The content of your interactions with the flip7 customer support team via Live Chat or email, including complaints, enquiries, and feedback.

B. Data Collected Automatically:

• Usage Data: Records of games you have played on flip7, bets placed, wins and losses, deposit and withdrawal history, and general account activity.
• Technical Data: Your device's IP address, browser type, operating system, device model, language settings, and time zone.
• Cookie Data: Information collected via cookies and similar tracking technologies when you browse the flip7 platform (see Section 6 for more details).
• Location Data: General location information derived from your IP address for the purposes of regional verification and compliance.

Flip7 uses collected personal data solely for legitimate purposes directly related to delivering the platform's services to you. The primary uses are as follows:

• Account Management: To create, manage, and maintain your flip7 account – including the login process, identity verification, and account recovery.
• Financial Processing: To securely process your deposits and withdrawals via supported Malaysian local payment methods, and to maintain accurate transaction records.
• Gaming Services Provision: To ensure you can access and enjoy all games available at flip7 — from slots such as Gates of Olympus and Dragon Scroll to Live Casino — with a seamless, hassle-free experience.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, and other security breaches that could compromise the platform or other members.
• Legal Compliance: To fulfil the legal and regulatory obligations applicable to flip7, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements as mandated by law.
• Customer Support: To effectively handle your enquiries, complaints, and support requests through our 24/7 Malay-language support team.
• Service Communications: To send you important account-related notifications — including deposit/withdrawal confirmations, password changes, and critical security updates.
• Marketing (with Consent): To send you information about flip7 promotions, bonuses, and special offers that may interest you — but only where you have given consent to receive such marketing communications.
• Platform Improvements: To analyse aggregated platform usage patterns in order to help us improve the interface, technical performance, and overall experience on flip7.

Flip7 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

Flip7 does not sell, rent, or commercialise members' personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may need to share certain data with the following parties under limited and controlled circumstances:

• Licensed Payment Processors: Payment service providers (including Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX processors) that require certain transaction data to process your deposits and withdrawals. All these processors are subject to their own strict privacy policies and security standards.
• Game Providers: Game developers providing slots and Live Casino on the flip7 platform may receive the minimum technical data necessary to ensure games function correctly on your account.
• Authorities & Regulatory Bodies: flip7 may disclose member data to Malaysian government authorities, regulatory bodies, or law enforcement agencies when required by law, court order, or valid legal process.
• Technical Services: Third-party technical service providers (such as cloud computing and data hosting services) that assist flip7 in operating the platform infrastructure. All such providers are bound by strict confidentiality and data protection agreements.
• Business Transfers: In the event of a merger, acquisition, or transfer of flip7's assets, user data may be transferred to the new entity — in such circumstances, you will be notified in advance and this Privacy Policy will continue to apply.

In all cases where data is shared with third parties, flip7 ensures that the receiving parties have adequate data protection measures in place and that the data is used only for the stated purposes.

Data security is our number one priority at flip7. We continually invest in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, alteration, disclosure, or destruction.

• 256-bit SSL Encryption: All communications between your device and flip7's servers are encrypted using 256-bit SSL/TLS protocols — the same standard used by Malaysia's leading financial institutions. You can verify this by looking for the padlock icon in your browser's address bar.
• Encrypted Data Storage: Sensitive data stored in flip7's databases – including identity verification information and financial records – is encrypted at rest for an additional layer of protection.
• Strict Access Controls: Only flip7 staff with a legitimate business need are permitted to access user data. All access is logged and monitored, and staff are bound by confidentiality agreements.
• Continuous Threat Monitoring: flip7's IT security team monitors the platform's systems 24/7 using intrusion detection and anomaly monitoring tools to detect and respond to any security threats as swiftly as possible.
• Regular Security Audits: flip7 conducts regular security audits and independent penetration testing to identify and address any system vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): flip7 encourages all members to enable two-factor authentication on their accounts as an added layer of security that protects against unauthorised access, even if a password is compromised.

While flip7 takes all reasonable security measures, no system can guarantee 100% absolute security. In the event of any security incident affecting your data, flip7 is committed to notifying you promptly in accordance with applicable legal requirements and taking appropriate remedial action.

Flip7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functionality — including staying logged in, secure sessions, and access to protected areas of the platform. These cookies cannot be disabled as they are essential to flip7's basic operation.
• Performance & Analytics Cookies: Helps us understand how members use the flip7 platform — which pages are visited most frequently, how long play sessions last, and where any technical issues occur. This information is used in aggregated form to improve the platform.
• Functional Cookies: Remembers your preferences — such as your chosen language, display settings, and login details (if you opt to save them) — so you don't have to reconfigure everything each time you use the platform.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser. Used to maintain session continuity while you play on flip7.

How to Manage Cookies: You may configure your browser settings to block or delete cookies. However, disabling certain cookies may affect the functionality of the flip7 platform and your gaming experience. Please refer to your browser's documentation for guidance on managing cookies.

Flip7 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian laws and regulations.

• Active Account Data: For as long as your flip7 account remains active, we retain all data associated with your account and gaming activity to ensure continuity and security of service.
• Financial Transaction Data: Records of deposit, withdrawal, and financial history transactions are retained for a minimum of 7 years from the date of each transaction, in line with Malaysia's financial compliance and tax legislation requirements.
• Identity Verification (KYC) Data: Identity verification documents are retained for a minimum of 5 years after account closure, in line with anti-money laundering legal requirements.
• Data Following Account Closure: When you close your flip7 account, we will delete or anonymise your personal data within 30 days, except for data that must be retained for legal compliance purposes as outlined above.
• Log & Security Data: Security and technical logs are retained for the period necessary for fraud detection, dispute resolution, and security auditing purposes – typically not exceeding 2 years.

Once the retention period expires, your data will be securely deleted or converted into anonymised format that cannot be linked back to you personally.

As a flip7 member and data subject under Malaysia's PDPA, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. flip7 will process data access requests within 14 business days.
• Right to Rectification: If any of your data is inaccurate, outdated, or incomplete, you have the right to request that flip7 correct it. For basic details such as your phone number and email address, you can update these directly in your account settings.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances – for example, when the data is no longer needed for its original purpose, or when you withdraw your given consent. This right is subject to applicable legal data retention obligations.
• Right to Object to Marketing: You may object to the use of your data for direct marketing purposes at any time by clicking the "unsubscribe" link in our promotional emails or by contacting the flip7 support team.
• Right to Withdraw Consent: For data processed based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you believe that flip7 has violated your privacy rights, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant authority.

To exercise any of the rights above, please contact us via Live Chat within the platform or by email at [email protected]. Please include your full name, registered email address, and a description of your request. We will respond within 14 business days.

Flip7 takes the protection of minors extremely seriously. This platform is exclusively for users aged 18 years and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

During the registration and account verification process, flip7 conducts age checks to ensure that only adults who meet the minimum age requirement can register and use the platform. We also employ continuous detection systems to identify any signs of underage usage.

Should flip7 discover that personal data has been collected from a minor without knowledge, the account in question will be closed immediately and all associated data deleted accordingly. Parents or guardians who believe their child has registered a flip7 account without authorisation should contact us promptly at [email protected].

Flip7 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, applicable legislation, or platform improvements. Whenever a material change occurs, we will:

• Updating the "Last Updated" date at the top of this document.
• Notifying registered members via email or in-platform notifications at least 7 days before the amendment takes effect.
• In the event of significant amendments, we may request that you reconfirm your consent.

Continued use of the flip7 platform after the effective date of any amendment constitutes acceptance of the revised policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

Contact Us: For any enquiries, concerns, or requests relating to this Privacy Policy, your personal data, or your rights as a data subject, please contact the flip7 Privacy team via:

• Live Chat within the flip7 platform (available 24/7)
• Email: [email protected]

Our Malay-speaking team is ready to assist you within 2 to 5 minutes via Live Chat, or within 24 business hours for email enquiries.