Goat777 Privacy Policy – Personal Data Protection for Malaysian Players

Goat777 is an online betting platform operating under the domain goat777.best, offering Sports Betting, Live Casino, e-sports and lottery services to users in Malaysia. Within the context of this Privacy Policy, "goat777", "we" or "the platform" refers to the entity that operates this platform and is responsible for the processing of its members' personal data.

We understand that privacy is more than a legal obligation — it is the foundation of trust. Players who register with goat777 entrust us with their personal information, and we take that responsibility very seriously. This Privacy Policy is written in clear, plain language because we believe you have the right to know exactly what happens to your data.

Goat777 complies with, and remains committed to, the principles of Malaysia's Personal Data Protection Act 2010 (PDPA 2010), which encompasses seven core data protection principles: the general principle, the notice and choice principle, the disclosure principle, the security principle, the retention principle, the data integrity principle, the access principle, and the principle prohibiting the transfer of data outside Malaysia without adequate protection.

Goat777 collects your personal data through various means depending on how you interact with our platform. The following are the main categories of data we collect:

Data you provide directly:

• Identity – full name, date of birth, MyKad number (for the KYC process)
• Contact – email address, active Malaysian phone number
• Security – password (stored in hashed form, not readable), security questions
• Finance – payment method details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) used for deposits and withdrawals

Data collected automatically while you use the platform:

• Device – device type, operating system, browser version, screen resolution
• Location – IP address, estimated geographic location based on IP (not precise GPS location)
• Activity – login history, bets placed, games played, session duration, clicks and navigation within the platform
• Transactions – complete deposit and withdrawal history, dates and times, amounts and payment methods

We may also receive data about you from third parties, such as identity verification service providers during the KYC process, or fraud prevention service providers we engage to protect the platform and all its users.

Goat777 uses your personal data exclusively for the following purposes related to the delivery and improvement of platform services:

• Account management – creating and managing your goat777 account, processing registration and login, and recovering your account when needed.
• Identity verification (KYC) – verifying your identity to comply with legal requirements and to prevent fraud, money laundering, and access by underage individuals.
• Payment processing – processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as handling withdrawal payouts to your account.
• Betting service provision – enabling you to place bets on football, cricket, e-sports, baccarat, lottery, and all other services available on the goat777 platform.
• Security and fraud prevention – detect suspicious account activity, prevent unauthorised access and safeguard your funds.
• Customer support – resolving enquiries, complaints, and support requests you submit to the goat777 support team.
• Marketing communications – sending you information about promotions, bonuses, and new offers, subject to your consent, which may be withdrawn at any time.
• Legal compliance – to comply with applicable Malaysian legal requirements, including PDPA 2010 and anti-money laundering reporting obligations.
• Platform improvement – analysing usage patterns to identify technical issues and improve the overall user experience.

Every instance of personal data processing carried out by goat777 has a valid legal basis under PDPA 2010. The following outlines the bases we rely on for the various types of processing we perform:

• Contract fulfilment – processing required to deliver the services you have requested, such as handling deposits and withdrawals, managing your account, and verifying bets. Without this processing, we are unable to provide you with goat777 services.
• Legal obligation – processing required to comply with applicable Malaysian law, including KYC requirements under anti-money laundering legislation and reporting obligations set by regulatory authorities.
• Legitimate interests – processing for platform security, fraud prevention and service improvement purposes, where our legitimate interests do not override your fundamental rights.
• Consent – processing for marketing communications purposes, consent for which you may withdraw at any time through your account settings or by contacting the goat777 support team.

Where we rely on consent as the basis for processing, you always have the right to withdraw that consent. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal, nor will it prevent us from continuing to process your data on other legal grounds.

Goat777 does not sell your personal data. However, in the course of operating the platform, we may share your data with selected third parties in the following circumstances:

• Payment service providers – Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX providers receive only the transaction information needed to process your deposits and withdrawals. Such sharing is kept to the minimum necessary to complete each transaction.
• KYC service providers – accredited third-party identity verification companies may process your identification documents for verification purposes. All such providers are bound by strict data protection agreements.
• Technology service providers – companies that provide the cloud infrastructure, hosting, and technical services required to operate the goat777 platform. They act as data processors under our instruction and are not permitted to use your data for their own purposes.
• Legal authorities – goat777 will disclose the required data to the police, courts or regulatory bodies when required to do so under Malaysian law, or when goat777 believes such disclosure is necessary to prevent crime or protect someone's safety.

All third parties we work with in data processing are bound by confidentiality and data protection obligations that meet or exceed the standards we uphold. We conduct periodic reviews of our service providers to ensure ongoing compliance.

Goat777 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website. We use three main types of cookies:

• Essential Cookies (Required) – required for core platform functions such as maintaining your login session, saving language preferences and ensuring security features operate correctly. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies (Optional) – helps us understand how users interact with the platform – the most visited pages, time spent in each section, and common navigation paths. This data is analysed in aggregate and does not directly identify individuals.
• Preference Cookies (Optional) – saving your personal preferences such as display layout, favourite sports selections, and notification settings so you do not need to reconfigure them each time you log in.

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to use certain features of the goat777 platform. For guidance on managing cookies in different browsers, please refer to the help documentation for your browser.

Goat777 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or unauthorised disclosure:

• Data encryption in transit – all communications between your device and goat777's servers are protected with TLS/SSL 256-bit, the industry standard for online communication security.
• Data encryption at rest – sensitive data such as payment details and identity information is stored in encrypted form within our databases.
• Hashed passwords – your password is never stored in plain text. We use strong hashing algorithms with random salts to protect your password.
• Two-factor authentication (2FA) – available for all goat777 accounts and strongly recommended to be enabled for added protection.
• 24/7 Security Monitoring – an intrusion and anomaly detection system operating around the clock to identify and respond to security threats in real time.
• Internal access controls – only goat777 staff who require access to specific data to carry out their authorised duties are permitted to do so, based on the principle of least-privilege access.
• Regular security audits – goat777 conducts regular security reviews and testing to identify and address any potential vulnerabilities.

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. In the event of a data breach involving your personal data, goat777 will notify you via email within a reasonable timeframe and take appropriate remedial action in accordance with the requirements of PDPA 2010.

Goat777 retains your personal data for as long as necessary to fulfil the original purpose for which it was collected, or to meet applicable legal requirements. The following are retention guidelines for key data categories:

• Active account data – retained for the duration your account is active and for 5 years following account closure, to meet audit and legal compliance requirements.
• Financial transaction records – retained for 7 years in accordance with Malaysian legal requirements relating to financial record-keeping and anti-money laundering.
• KYC documents – retained for 5 years after the business relationship ends, in accordance with Malaysia's anti-money laundering legal requirements.
• Security and activity logs – retained for 2 years for fraud detection and dispute resolution purposes.
• Customer support communication data – retained for 3 years for training, quality improvement, and the resolution of any disputes that may arise at a later stage.
• Analytics cookie data – aggregated data is retained for 13 months; individual session data is deleted after 90 days.

In certain circumstances, data may need to be retained beyond the periods stated above if goat777 is involved in an ongoing legal investigation, an unresolved dispute, or is required to do so by a court order or relevant authority.

As a data subject under Malaysia's PDPA 2010, you have the following rights in relation to the personal data processed by goat777:

To exercise any of the rights above, please submit a written request to support@goat777.best with the subject line "Data Rights Request", along with your full name, goat777 account number and the specific right you wish to exercise. We may require additional identity verification before processing your request in order to protect the security of your account.

Given that the goat777 platform involves financial transactions, we apply a stricter and more cautious approach to managing financial data than we do with general personal information.

When you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks, RHB Online Banking), goat777 does not store your full e-wallet or bank account details. We only retain transaction confirmations, reference numbers, and payment status. Sensitive details such as your full account number, PIN, or e-wallet password never pass through or are stored in goat777's systems — they are processed directly by the relevant payment service provider in a secure, certified environment.

Goat777 also conducts continuous transaction monitoring to detect patterns indicative of money laundering or the use of illegally obtained funds. This is a legal obligation we take seriously and one that ultimately protects all users of our platform. If our systems identify a suspicious transaction, withdrawals may be temporarily suspended while an investigation is carried out, and you will be notified via email.

Goat777 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in the platform and services we offer. Any changes to this Privacy Policy will be communicated to you via:

• An in-platform notification will appear the first time you log in after an update takes effect.
• An email to the address registered on your goat777 account, for significant changes.
• Update the "Last Updated" date at the top of this document.

For significant changes involving new uses of your data or your rights as a data subject, goat777 will provide at least 14 days' notice before the changes take effect. You have the right to close your account if you do not agree with the changes.

We encourage you to review this Privacy Policy page periodically so you remain informed about how we protect your data. Continued use of the goat777 platform after an updated Privacy Policy takes effect will be considered acceptance of the revised terms.

If you have any questions, concerns or complaints regarding how goat777 handles your personal data, there are several channels available to you:

• Privacy Email – support@goat777.best with the subject line "Privacy Enquiry" or "Privacy Complaint". We are committed to responding to all privacy-related enquiries within 5 business days.
• Live Chat – for privacy enquiries that do not require in-depth identity verification, you may reach the goat777 support team via Live Chat, available 24/7 within the platform.

For complaints that cannot be resolved through the channels above, you have the right to escalate your complaint to the Department of Personal Data Protection (JPDP) Malaysia, the relevant regulatory authority under PDPA 2010.

We value the trust you place in goat777 by using our platform. Our commitment to your privacy and data protection is unwavering and will never be compromised for any business purpose.