OFFICIAL DOCUMENT

Privacy Policy Mahjong 777 – Malaysian Player Data Protection

At Mahjong 777, your privacy is more than a legal obligation — it is part of our commitment to the trust you place in us. This Privacy Policy clearly explains what data we collect, how it is used, who can access it, and what rights you have as the owner of that data.

Last updated: 1 January 2026 Bahasa Melayu (ms-MY) Malaysia
Contents of This Policy
Data We Collect
How We Use Your Data
Data Recipients
Security & Storage
Your Rights as a User
Cookies & Tracking Technologies

Data Protection Summary at Mahjong 777

Six core principles that shape how we manage the personal data of every Malaysian player on our platform.

256-bit SSL Encryption at All Times

All data transmitted between your device and Mahjong 777 servers is protected with 256-bit SSL encryption — the same security technology used by Malaysia's major banking institutions such as Maybank and CIMB. No sensitive data is transmitted in unprotected plain text.

SSL 256-bit
We Do Not Sell Your Data

Mahjong 777 has never sold, rented, or transferred player personal data to advertisers, marketing companies, or any commercial third party for purposes unrelated to our services — and we never will. Your data belongs to you, not to us.

No Data Selling
Secure & Limited Data Storage

Your personal data is stored on secured servers with strict access controls. Only staff with a legitimate operational need are permitted to access player data. All access is automatically audited and logged to detect any unauthorised use.

Restricted Access
You Are in Control of Your Own Data

As a Mahjong 777 player, you have the right to access, correct, download, and delete your personal data at any time. We provide a straightforward and transparent process for you to exercise these rights without unnecessary hassle.

Full User Rights
Compliance with Malaysia's Personal Data Protection Act

Mahjong 777's Privacy Policy is built with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) in mind. We operate in accordance with the data protection principles established under Malaysian law to ensure that the rights of local players are fully upheld.

Malaysia PDPA 2010
Prompt Data Breach Notification

In the event of any data security breach affecting your personal information, Mahjong 777 is committed to notifying affected players within a reasonable timeframe via email or an in-platform notice, along with the steps being taken to address the situation.

Instant Notifications

Why Does Mahjong 777 Take Malaysian Players' Data Protection Seriously?

When you register an account at Mahjong 777, you are placing your trust in us — not only to safeguard your money, but to handle your personal information with the utmost care. This is something we take very seriously. In the online casino space, many platforms are not transparent about how they manage user data. We believe in a different approach — transparency is the foundation of long-term trust.

When you play slots, live baccarat, or place bets on EPL matches and the Malaysia Super League at Mahjong 777, you leave a digital footprint — your name, phone number, email address, device information, gameplay patterns, and financial transactions. All of this is personal data protected under Malaysia's Personal Data Protection Act 2010 (PDPA). We respect this law, and beyond that — we respect you as an individual with rights over your own personal information.

This Privacy Policy is written in plain, easy-to-understand language, not the complex legal jargon typically designed to confuse readers. We want you to clearly understand what data we collect, why it is needed, how long it is kept, and what choices you have. This is not a document we hide in the website footer — it is important information we actively encourage every member to read.

Our Privacy Commitment
  • Data is collected only for legitimate, clearly stated purposes
  • No sale or transfer of data to third-party advertisers
  • 256-bit SSL encryption protects all transactions and data
  • Players may request access to, correction of, or deletion of their data at any time
  • Compliance with Malaysia's Personal Data Protection Act 2010
  • Data is not retained beyond the period required
Have a Privacy Question?

Reach our team via email or live chat for any questions about your data.

support@mahjong777.best FAQs

Important Note: This Privacy Policy applies to all users of the Mahjong 777 platform, including website visitors, registered members, and former members whose records remain in our system. By using our platform, you agree to the data protection practices described in this document. This document should be read together with Terms & Conditions us.

1

Introduction

Mahjong 777 ("we", "platform", or "Mahjong777") is an online casino and Sports Betting platform operator running at mahjong777.best. We act as the data controller for the personal information you provide to us or that we collect while you use the platform.

This Privacy Policy explains in detail how Mahjong 777 collects, uses, stores, protects, and discloses the personal information of Malaysian players who use our services. It also outlines your rights under Malaysia's Personal Data Protection Act 2010 (PDPA) and how you can exercise those rights.

We encourage you to read this document carefully. If anything is unclear or you would like further clarification on any section, please do not hesitate to reach out to our team via support@mahjong777.best.


2

Data We Collect

Mahjong 777 collects several categories of data from players, depending on how you interact with our platform.

Data you provide directly:

  • Full name as shown on your identification document
  • Active email address
  • Malaysian mobile phone number
  • Date of birth (for age verification)
  • Payment method information (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) — we store payment method identifiers, not full account numbers
  • Identity document (MyKad or passport) when KYC verification is required
  • Any information you provide when contacting our support team

Data collected automatically when you use the platform:

  • IP address and geographic location information (city/state) derived from it
  • Device type, operating system, and web browser version
  • Session data — pages visited, access times, session duration, and navigation patterns
  • Gaming information — games played, bet amounts, wins, losses, and transaction history
  • Cookie data and similar tracking technologies (see Section 8)

Minimum Collection Principle: Mahjong 777 only collects data that is strictly necessary for the stated purposes. We do not collect personal information that is excessive or irrelevant to the services we provide.

Data Category Example Required For
Identity Name, date of birth, MyKad Registration, KYC, and age verification
Contact Email, phone number Communications, OTP, important notices
Finance EWallet identifiers, transaction records Deposits, withdrawals, AML
Technical IP, device, browser Security and fraud prevention
Usage Game history, sessions Personalise experience, responsible gambling

3

How We Use Your Data

Mahjong 777 uses your personal data solely for the following purposes:

  • Account management: Creating, verifying, and managing your player account, including the login process and OTP verification.
  • Transaction processing: Securely and accurately processes deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
  • Service provision: Lets you play slots, live baccarat, fishing games, roulette, bet on sports, and access all features of the Mahjong 777 platform.
  • Security & fraud prevention: Detecting and preventing fraud, money laundering, multi-account use, and other security violations.
  • Customer support: Addressing your enquiries, complaints, and support requests effectively.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.
  • Service communications: Sending important notices about your account, changes to terms, security issues, and platform updates.
  • Marketing (with your consent): Sending information about Mahjong 777 promotions, bonuses, and special offers — only where you have given consent to receive such marketing communications.
  • Legal compliance: Complying with applicable legal obligations, including AML requirements and lawful requests from authorities.
  • Analytics & improvements: Understanding how users interact with the platform to improve user experience, technical performance, and game offerings.

Mahjong 777 does not use your data for automated decision-making with significant effect without human involvement in the process. If you have concerns about any decision made regarding your account, you have the right to request a review by our staff.


4

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), Mahjong 777 has a valid legal basis for processing your personal data. The basis we rely on depends on the purpose of the processing:

  • Contract fulfilment: Processing required to deliver the services you request — account registration, deposit processing, withdrawal of winnings, and access to games.
  • Legitimate interest: Processing for fraud prevention, platform security, internal analytics, and service improvement, where our legitimate interests are balanced against your privacy rights.
  • Legal obligation: Processing required to comply with applicable Malaysian law, including AML, KYC requirements, and lawful requests from authorities.
  • Consent: For marketing communications and the use of non-essential cookies, we require your explicit consent. You may withdraw this consent at any time.

5

Sharing Data with Third Parties

Mahjong 777 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. We only share data in the following limited and necessary situations:

  • Game providers: Providers such as Pragmatic Play, Evolution Gaming, and PG Soft may receive the minimum technical data required to enable gameplay (for example, a session ID). They are bound by strict confidentiality agreements with Mahjong 777.
  • Payment processors: To process your deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, the required transaction data is shared with the relevant payment processor. This information is used solely for the purpose of processing those transactions.
  • Technical service providers: Companies that provide technical services to Mahjong 777 — such as server hosting, platform analytics, and customer support tools — may access your personal data as third-party data processors. All such providers are bound by strict data processing agreements.
  • Legal authorities: Mahjong 777 will disclose information to the police, tax authorities, courts, or other regulatory bodies when required to do so by valid Malaysian law or court order.
  • Business transfer: If Mahjong 777 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that business transaction. You will be notified before your data becomes subject to a different privacy policy.

Contractual Protection: All third parties that receive data from Mahjong 777 are contractually required to protect that information to a security standard no lower than our own. They are not permitted to use your data for any purpose outside the scope of their contract with us.


6

Data Security

Mahjong 777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Data encryption in transit: All communications between your browser and Mahjong 777 servers are secured with TLS 1.3 protocol using 256-bit SSL encryption.
  • Data encryption at rest: Sensitive data stored in our databases — including identity and financial information — is kept in encrypted form.
  • Role-based access control: Mahjong 777 staff may only access data relevant to their job responsibilities. Access rights are reviewed on a regular basis.
  • Two-factor authentication (2FA): Staff accounts with access to user data are required to use 2FA.
  • Continuous security monitoring: Our systems are monitored 24/7 to detect suspicious or abnormal activity.
  • Regular security testing: We conduct regular penetration testing and security audits carried out by independent third parties.
  • Incident response plan: We have clear procedures in place for handling and responding to data security breaches.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and report any suspicious activity to us immediately.


7

Data Retention Period

Mahjong 777 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. Our general data retention guidelines are as follows:

  • Active account data: Data is retained for the duration your account remains active, plus 7 years after account closure, in line with Malaysia's financial record-keeping requirements under applicable law.
  • Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's tax and AML legal requirements.
  • Security and activity logs: Retained for 2 years for security and fraud investigation purposes.
  • Customer support records: Retained for 3 years after the relevant support case is closed.
  • KYC records: Retained for 7 years after the business relationship ends, in line with AML requirements.
  • Cookie data: Depends on the cookie type — from session-only to a maximum of 2 years (see Clause 8).

Once the retention period expires, data will be fully deleted or anonymised so that it can no longer be linked back to you personally. Anonymised data used for aggregate analytics purposes is not subject to this retention policy, as it no longer constitutes personal data.


8

Cookies & Tracking Technologies

The Mahjong 777 website uses cookies and similar technologies to enhance user experience, ensure platform security, and understand how our platform is used. The following are the types of cookies we use:

  • Essential cookies: Required for core platform functions such as login session authentication, form security, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate. No consent is required for this type.
  • Performance & analytics cookies: Collects information about how visitors use our platform — the most frequently visited pages, time spent on each page, and any error messages encountered. This data is used in aggregate form to improve the platform. Requires your consent.
  • Functional cookies: Remembers your preferences such as language settings, display theme, and game preferences to deliver a more personalised experience. Requires your consent.
  • Security cookies: Used to detect and prevent suspicious activity, protect your account from unauthorised access, and help us identify fraud attempts.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the platform. For more information, refer to the help documentation for your browser (Chrome, Firefox, Safari, or others).

Mahjong 777 does not use third-party cookies for targeted advertising from external ad networks. Your behavioural data on our platform is not shared with advertising platforms or social media networks for marketing purposes.


9

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data held by Mahjong 777. These rights may be exercised by contacting us via support@mahjong777.best.

Your Privacy Rights at Mahjong 777

As a Malaysian player, you have the following rights regarding the personal data we hold. All requests are processed within 30 working days.

Right of Access

You have the right to obtain a copy of the personal data we hold about you. This includes transaction history, account activity logs, and profile information. Contact us and we will provide a data report within 30 days.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You may update certain information directly in your account settings, or contact support for more significant corrections.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data ("right to be forgotten"). This right is subject to our legal record-keeping obligations — we are unable to delete financial records that are required by law to be retained.

Right to Restriction of Processing

You may request that we restrict the processing of your data under certain circumstances — for example, while you are disputing the accuracy of your data, or where processing is unlawful but you prefer restriction over deletion.

Right to Data Portability

You have the right to receive the personal data you provided to us in a machine-readable format (such as CSV or JSON), and to transfer it to another service provider if you wish. These requests are typically processed within 30 days.

Right to Object

You may object to the processing of your data carried out on the basis of our legitimate interests, including the use of your data for marketing communications. To unsubscribe from marketing communications, click the "unsubscribe" link in any marketing email or contact us directly.

How to Exercise Your Rights: Submit a written request to support@mahjong777.best with the subject line "PDPA Privacy Rights Request", specifying the right you wish to exercise and any relevant details. We will verify your identity before processing the request and will respond within 30 days. For requests that are complex or numerous, we may require up to 60 days and will notify you accordingly.

10

Protection of Children's Data

The Mahjong 777 platform is intended for individuals aged 18 and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

If you believe a child under the age of 18 has registered an account on Mahjong 777 or has provided us with their personal data without parental or guardian knowledge, please contact us immediately at support@mahjong777.best. We will investigate and delete the data immediately upon confirmation.

If a user is found to have registered an account while under the age of 18, the account will be closed immediately, all balances and winnings will be voided, and all associated data will be deleted or anonymised in accordance with applicable legal requirements.


11

Privacy Policy Amendments

Mahjong 777 reserves the right to update or amend this Privacy Policy at any time. When we make significant changes, we will provide appropriate notice through:

  • A prominent notice on the platform's homepage for at least 30 days before the changes take effect.
  • Email to the address registered to your account for significant amendments that affect your privacy rights.
  • Updates the "Last Updated" date at the top of this page.

We encourage you to review this page periodically. Your continued use of the platform after any amendments take effect will be deemed as your acceptance of the revised Privacy Policy. If you do not agree with any amendments, you may close your account by contacting our support team.


12

Contact the Mahjong 777 Privacy Officer

If you have any questions, concerns, or complaints about how Mahjong 777 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

  • Privacy Email: support@mahjong777.best — include "Privacy Enquiry / PDPA" in your email subject line to help us respond faster.
  • Live Chat: Available 24/7 via the chat icon on the platform for general privacy enquiries.
  • Frequently Asked Questions: Page FAQs we include answers to common questions about privacy and data security.

Our Bahasa Malaysia-proficient team will respond to privacy-related enquiries within 2 business days. For formal requests under Malaysia's PDPA (data access, correction, or deletion), we will process and respond within 30 days.

This Privacy Policy document is version 2.1, effective from 1 January 2026. This version supersedes all previously published versions of the Mahjong 777 Privacy Policy. The original Bahasa Melayu version shall be the definitive version in the event of any dispute over interpretation.

FAQ – Mahjong 777 Privacy Policy

The questions Malaysian players ask most often about how we handle their personal data.

Mahjong 777 does not sell or transfer your personal data to third parties for their own commercial purposes. We only share data in three limited situations: with game providers (Pragmatic Play, Evolution Gaming, PG Soft, and others) to enable gameplay, with payment processors (Touch 'n Go, GrabPay, FPX) to process your transactions, and with legal authorities when required by a valid court order or Malaysian law. All these third parties are contractually bound to protect your data.

Yes, you have the right to request deletion of your personal data under Malaysia's PDPA. However, this right has its limitations. We are unable to delete financial records that Malaysian law requires us to retain for 7 years — this includes records of deposits, withdrawals, and winnings. We also cannot delete data needed to resolve ongoing complaints or investigations. Other data not subject to these legal requirements may be deleted upon your request. Submit your request to support@mahjong777.best with the subject line "PDPA Data Deletion Request" and we will process it within 30 days.

Apabila anda menutup akaun Mahjong 777, kami akan menghentikan pemprosesan aktif data anda untuk tujuan perkhidmatan. Walau bagaimanapun, rekod akaun dan transaksi kewangan akan disimpan selama 7 tahun selepas penutupan akaun selaras dengan keperluan undang-undang Malaysia, khususnya keperluan penyimpanan rekod kewangan dan AML. Selepas tempoh penyimpanan mandatori ini berakhir, data akan dipadam atau dijadikan tanpa nama sepenuhnya. Maklumat pemasaran dan keutamaan anda akan dihentikan penggunaannya serta-merta selepas penutupan akaun.

Your gameplay information — including games played, bet amounts, and session patterns — is used primarily for three purposes. First, to enable platform functionality such as displaying your game history and surfacing relevant game recommendations. Second, for our responsible gambling programme — we monitor gameplay patterns to identify signs of problem gambling and offer timely, appropriate support. Third, for aggregate analytics that help us improve the platform — this data is processed in anonymised form and is never linked back to your personal identity. We do not use your gameplay data to build marketing profiles or sell it to third parties.

Mahjong 777 takes the protection of financial information extremely seriously. We do not store full eWallet or online banking account numbers. What we retain are encrypted identifiers that enable future transaction processing. All transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed through secure channels provided by licensed payment processors. Transaction data is transmitted in encrypted form using SSL 256-bit. Mahjong 777 staff cannot view your full bank or eWallet account numbers — they can only see the information needed to process your support request.
777

Your Data is Safe with Mahjong 777 — Join Today

We have been transparent about how we protect your personal data. Your trust is our priority — from account security to how we handle your data openly and honestly. Register for free today and enjoy a safe, fair, and rewarding experience alongside more than 500,000 Malaysian players.

Deposit via Touch 'n Go, GrabPay, Boost, DuitNow or FPX. Minimum RM10. All transactions in Malaysian Ringgit (MYR). Players must be 18 years of age or older.

Bahasa Melayu