USJ7 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

This Privacy Policy is issued by the USJ7 ("we", "platform" or "USJ7") and applies to all users and members who access or use the website, services, games and any content provided under the USJ7. We understand that trust is the foundation of our relationship with every member, and one of the most important ways to maintain that trust is to be transparent about how we handle your personal information.

This Privacy Policy is drafted in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and sets out the principles, procedures and rights relating to the processing of members' personal data USJ7. It covers all information we collect through the website, mobile application (if applicable), email, customer support, and other communication channels associated with USJ7.

We have written this policy in plain, straightforward language so that you, as a Malaysian user, can clearly understand what happens to your data without needing a legal expert to interpret every word. If any section is unclear, the customer support team at USJ7 is always available to provide further clarification.

USJ7 collects your personal information through several means — directly when you register and use the platform, automatically through website technology, and in some cases from legitimate third-party sources. The following are the categories of information we collect:

Registration & Identity Information:

• Full name as stated in your official identification document.
• A Malaysian-registered mobile phone number.
• An active, reachable email address.
• Date of birth for age verification purposes (18 years and above).
• A government-issued ID (MyKad or passport) when KYC verification is required.
• Account passwords in encrypted form — we do not store your password in plain text.

Financial & Transaction Information:

• Payment method details used — including Touch 'n Go e-wallet number, GrabPay, DuitNow, Boost, ShopeePay, or bank name for FPX (Maybank2u, CIMB Clicks).
• Deposit and withdrawal history within the account USJ7 yours.
• Gaming transaction history, including bets placed and winnings received.

Platform & Technical Usage Information:

• The IP address of the device used to access USJ7.
• Device type, operating system, and web browser version.
• Session data including pages visited, time spent, and actions taken within the platform.
• General geolocation information (state or city) derived from your IP address.
• Cookie data and similar tracking technology data.

USJ7 uses collected personal information solely for legitimate purposes that are limited to the operational needs of the platform. We do not use your data for purposes unrelated to the services you use. The following are the primary purposes for which your data is used at USJ7:

• Account Management: Creating, maintaining and protecting your account USJ7 you, including identity verification and password management.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX, as well as managing withdrawals of winnings to your account.
• Service Delivery: Providing access to all games and services on the platform USJ7, including slots, live casino, table games and more.
• Customer Support: Handling enquiries, complaints and support requests submitted to the USJ7.
• Security & Compliance: Detecting and preventing fraud, money laundering and platform abuse; fulfilling legal and licensing compliance requirements.
• Marketing (with consent): Sending information about promotions, bonuses and the latest offers USJ7 to members who have given their consent to receive marketing communications.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience, platform speed, and the range of games offered.

USJ7 does not sell, rent, or trade members' personal information to any third party for commercial purposes. However, in the course of operating the platform, USJ7 may need to share certain information with the following categories of parties, solely to enable the service to function properly:

• Payment Service Providers: Transaction information that must be shared with e-wallet providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) and banks (Maybank, CIMB) to process your deposits and withdrawals.
• Game Providers: Game session information required by the relevant licensed game software provider to deliver the game to you and ensure RNG fairness.
• Technical Service Providers: Server infrastructure providers, cloud services and cybersecurity tools that help USJ7 operate the platform securely and reliably. All such providers are bound by strict data confidentiality agreements.
• Legal Authorities: When required by Malaysian law, court order, or a legitimate request from the relevant law enforcement authority.

All third parties that USJ7 we work with are bound by data protection agreements that require them to handle your information to a standard no lower than our own. We conduct regular reviews of all third-party relationships to ensure ongoing compliance with our privacy standards.

USJ7 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or accidental destruction. The key security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and USJ7 encrypted using SSL/TLS protocol with 256-bit keys — the same level of security used by leading banks in Malaysia.
• Stored Data Encryption: Sensitive data stored in the database USJ7, including passwords and financial information, are encrypted using robust encryption algorithms.
• Two-Factor Authentication (2FA): Two-factor authentication is available for all accounts USJ7 to add an extra layer of security.
• 24-Hour Security Monitoring: An automated threat detection system monitors platform activity around the clock to identify and respond to any suspicious behaviour.
• Strict Access Controls: Only staff USJ7 with a legitimate work requirement are granted access to members' personal data, and all such access is logged and audited.
• Regular Security Audits: USJ7 conducts regular penetration testing and security audits carried out by independent cybersecurity experts.

Like most modern websites, USJ7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our website.

USJ7 uses several categories of cookies:

• Essential Cookies: These cookies are essential for the platform's core functions — such as maintaining your login session and processing transactions securely. They cannot be declined, as the platform cannot operate properly without them.
• Functional Cookies: Allows the platform to remember your preferences such as language, game settings, and other information that helps us deliver a more personalised experience for you at USJ7.
• Analytical Cookies: Helping us understand how members use the platform USJ7 in aggregate — which pages are visited most, how long play sessions last, and so on. This information is used to improve the platform, not to identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, including unauthorised attempts to access member accounts.

You can manage cookie settings through your web browser. Please note, however, that disabling certain cookies may affect the functionality of the platform. USJ7. For the best experience, we recommend enabling necessary and functional cookies while using the platform.

USJ7 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. Retention periods vary by data type:

• Active Account Data: Retained for as long as your account remains active at USJ7 and for a reasonable period following account closure to address any claims or disputes that may arise.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements pertaining to financial records and anti-money laundering compliance.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Customer Support Communication Data: Retained for 2 years from the date of the last interaction for reference and service improvement purposes.
• Marketing Data: Retained until you withdraw your consent or close your account at USJ7.

When your data is no longer needed and there is no legal requirement to retain it, USJ7 will securely delete it using methods that ensure the data cannot be recovered by any party.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by USJ7. We fully respect these rights and provide a straightforward process for you to exercise them:

To exercise any of the rights above, please contact the Privacy Officer at USJ7 via email [email protected] with the subject line "Privacy Rights Request" and clearly state the right you wish to exercise along with your account details. We will respond within 21 business days.

Services USJ7 is intended for individuals aged 18 and above only. USJ7 does not knowingly collect any personal information from individuals under the age of 18. If you are a parent or guardian and believe that your underage child has provided personal information to USJ7, please contact us immediately at [email protected].

Should we become aware that we have inadvertently collected personal information from an individual under the age of 18, we will take appropriate steps to delete that information from our records and close the relevant account as promptly as possible.

USJ7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, updated legal requirements, or changes to platform services. Whenever this Privacy Policy is amended in a material way, we will notify members via:

• A prominent notice on the website's main page USJ7.
• An email sent to the address registered to your account (for significant changes).
• An in-platform pop-up notification the first time you log in after an amendment takes effect.

The "Last Updated" date shown at the top of this document will always reflect the date of the most recent amendment. We recommend reviewing this Privacy Policy periodically. Your continued use of the USJ7 after any amendments take effect will be considered acceptance of the updated terms.

If you have any questions, concerns or complaints regarding how USJ7 handles your personal data, or if you wish to exercise any of the privacy rights outlined in this policy, please contact our Privacy Officer through the following channels:

• Email: [email protected] (Subject: Data Privacy Enquiry)
• Live Chat: Available on the platform USJ7, 24 hours a day, 7 days a week.

Our team will acknowledge receipt of your enquiry within 2 business days and endeavour to provide a full response within 14 business days. For more complex requests such as data access or erasure requests, the full response period may take up to 21 business days in accordance with Malaysia's PDPA provisions.