Privacy Policy

Lawas777 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at lawas777.cam. This Privacy Policy describes how Lawas777 collects, processes, stores, and protects personal data provided by or collected about users ("you", "the Player") who access or register on the Platform.

Lawas777 is an English-language platform designed for Malaysian players. As such, the data practices described in this Policy apply to all registered users, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other parts of Malaysia, as well as any users accessing the Platform from other permitted locations.

By creating an account on Lawas777 or by using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not access or use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, either directly (e.g., full name, email address) or indirectly (e.g., device identifier, IP address combined with other data).
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — Lawas777, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of Lawas777, under contractual obligation and in accordance with this Policy.
• "Consent" — a freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their Personal Data for stated purposes.
• "KYC Data" — identity verification documents and information collected as part of Know Your Customer compliance obligations, including government-issued identification and proof of address.
• "Cookies" — small text files placed on a user's device by the Platform for the purposes of session management, analytics, and performance optimisation.
• "Platform" — the Lawas777 website, mobile-optimised interface, and all associated gaming and betting services accessible at lawas777.cam.

Lawas777 collects Personal Data through several channels and in various contexts. The categories of data we collect are as follows:

3.1 Data You Provide Directly

• Full legal name, date of birth, and gender (collected at registration and KYC verification).
• Residential address, including postcode and city (used for identity verification and compliance).
• Email address and mobile phone number (used for account communication and two-factor authentication).
• Username and encrypted password.
• Government-issued identification documents (MyKad, Driver's Licence, or Passport) submitted as part of KYC.
• Payment method details necessary to process deposits and withdrawals — including bank account numbers (partial, not full), e-wallet identifiers (Touch 'n Go, Boost, GrabPay), and cryptocurrency wallet addresses where applicable.
• Self-reported responsible gambling preferences, including deposit limits and self-exclusion requests.
• Support enquiry content submitted via live chat or email communications.

3.2 Data Collected Automatically

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, and browser information.
• Session duration, pages visited, and navigation patterns within the Platform.
• Game activity logs, including bet amounts, game types played, session timestamps, and outcomes.
• Transaction logs for all deposits, withdrawals, and bonus credits.
• Cookie identifiers and similar tracking data as described in Section 8.

Lawas777 processes your Personal Data only for specific, legitimate purposes. The key processing activities are outlined below:

• Account creation and management: To register your account, maintain your player profile, and provide access to Platform services.
• Identity and age verification (KYC): To comply with our obligations to verify that all players are aged 21 or above and to confirm that identity information matches payment method ownership.
• Payment processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and supported cryptocurrency channels.
• Fraud prevention and security: To detect and investigate suspicious account activity, prevent financial crime, and protect the integrity of the Platform and its users.
• AML compliance: To meet Anti-Money Laundering obligations, including monitoring transaction patterns and reporting to relevant authorities where legally required.
• Responsible gambling monitoring: To identify indicators of problem gambling behaviour, apply player-requested limits, and support safe gaming practices across the Platform.
• Customer support: To respond to enquiries, resolve disputes, and maintain records of player interactions where required for compliance or service improvement.
• Platform improvement: To analyse usage data, optimise game performance, and improve the overall player experience through non-personalised analytics.
• Marketing communications: To send promotional offers, bonus notifications, and relevant product updates — only where you have given explicit consent and only until such consent is withdrawn.
• Legal compliance: To fulfil legal obligations arising under applicable data protection, gaming, and financial regulations.

Lawas777 relies on one or more of the following legal bases when processing your Personal Data:

• Contractual necessity: Processing required to fulfil the contract between you and Lawas777 — for example, processing your deposits or verifying your identity before enabling withdrawals.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responsible gambling standards.
• Legitimate interests: Processing carried out for purposes reasonably expected by the Player that do not override their fundamental privacy rights — including fraud detection, platform security, and service analytics.
• Consent: Processing based on your explicit agreement, such as receiving marketing communications or the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Lawas777 does not sell your Personal Data to third parties. We may share data with the following categories of recipients under strict contractual controls:

• Payment service providers: Malaysian payment processors (including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong Bank) receive the minimum data necessary to process your financial transactions.
• Identity verification providers: Third-party KYC service providers that process identity documents and perform age and address verification on our behalf.
• Game and technology providers: Licensed international game studios that deliver game content through our Platform receive anonymised session data necessary for game function and RNG audit purposes. These providers do not receive personally identifiable information.
• Fraud prevention and AML services: Specialist compliance and financial crime detection services that analyse transaction data to identify suspicious patterns.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, Lawas777 will disclose Personal Data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and insurers, subject to confidentiality obligations, where reasonably required for the operation of the business.

All third-party Data Processors engaged by Lawas777 are bound by contractual data processing agreements that require them to implement appropriate security measures and to process Personal Data only in accordance with our instructions.

Lawas777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The general retention schedule is as follows:

Upon account closure, Lawas777 will archive your Personal Data in a restricted access environment for the applicable retention period, after which it will be securely deleted or anonymised.

Lawas777 uses cookies and similar technologies to ensure the Platform functions correctly, to maintain your session between pages, and to gather anonymous data about Platform usage. We do not deploy third-party advertising networks or behavioural tracking cookies.

The types of cookies we use are described below:

• Strictly Necessary Cookies: Essential for Platform operation. These include session authentication tokens, CSRF protection cookies, and server-side session identifiers. These cookies cannot be disabled without disrupting core Platform functionality.
• Performance & Analytics Cookies: Used to understand how Players navigate the Platform — including which pages are most visited, session durations, and error occurrences. Data collected is aggregated and anonymised. Consent is requested before these cookies are placed.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and last-logged-in status. These improve your experience but are not essential to Platform function.

You may manage cookie preferences through your browser settings or via the cookie consent management tool presented on your first visit to the Platform. Please be aware that disabling strictly necessary cookies will impair your ability to use the Platform.

Lawas777 implements industry-standard technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for data at rest across all databases containing Personal Data.
• TLS 1.2/1.3 encryption for all data transmitted between your device and the Platform (HTTPS enforced site-wide).
• Two-factor authentication (2FA) options available for player accounts.
• Strict access control policies limiting employee access to Personal Data on a need-to-know basis.
• Regular security audits and penetration testing of Platform infrastructure.
• Incident response procedures including Player notification protocols in the event of a data breach where legally required.

Subject to applicable data protection legislation and certain legal exceptions, you have the following rights in relation to your Personal Data held by Lawas777:

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will acknowledge your request within five (5) business days and respond in full within 30 calendar days. In complex cases, this period may be extended by a further 60 days, of which you will be notified.

Lawas777 is strictly an adults-only platform. Access to and registration on the Platform is permitted only for individuals who are aged 21 years or above. We do not knowingly collect Personal Data from individuals under the age of 21.

As part of our KYC process, all players are required to submit proof of age before withdrawal functions are enabled. Where Lawas777 discovers or has reasonable grounds to believe that a registered Player is under the age of 21, the account will be immediately suspended, all activity voids will be reviewed, and any deposited funds will be returned via the original payment method following identity confirmation.

If you believe a minor has accessed the Platform using false age information, please notify our support team immediately via live chat so that we may take appropriate action without delay.

In the course of providing our services, your Personal Data may be transferred to and processed in countries other than Malaysia where our third-party service providers (including KYC providers, payment processors, and cloud infrastructure providers) operate. Such transfers are conducted only under appropriate safeguards, which may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Transfers to jurisdictions recognised as providing an adequate level of data protection.
• Data processing agreements incorporating binding obligations on the recipient to protect your Personal Data in accordance with applicable law.

By using the Lawas777 Platform, you acknowledge that your Personal Data may be transferred and processed internationally as described above. Such transfers are necessary for the delivery of the services you have requested.

The Lawas777 Platform does not include links to external third-party websites as a matter of deliberate policy. However, certain payment confirmation pages — for example, those displayed by your bank or e-wallet provider (such as Maybank, CIMB, Touch 'n Go, or Boost) when you authorise a transaction — are operated by those third parties and are subject to their own privacy policies.

Lawas777 is not responsible for the privacy practices or content of third-party services accessed in connection with payment processing. We encourage you to review the privacy policies of any external service you use in connection with your Lawas777 account.

Lawas777 reserves the right to amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered Players via in-platform notification or email prior to the changes taking effect.

Your continued use of the Platform following notification of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the Lawas777 Data Protection team through the following channels:

• Live Chat: Available 24/7 via the in-platform chat function. Please reference "Privacy Request" in your opening message. Average response time under 2 minutes.
• Email: [email protected] — for formal written data rights requests, please include "Data Privacy Request" in the subject line along with your registered account username. Allow up to 5 business days for acknowledgement and up to 30 calendar days for a substantive response.