vape77 Privacy Policy

1. Introduction

vape77 ("vape77", "we", "us", "our") operates the online gaming platform accessible at vape77.app (the "Platform"). We are committed to protecting and respecting the privacy of every person who uses the vape77 Platform, whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or anywhere else in Malaysia. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this Policy carefully to understand our practices regarding your personal data and how we will treat it.

This Policy applies to all users of the vape77 Platform and should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, each of which is incorporated herein by reference. By accessing the vape77 Platform or creating an account, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy.

2. Data We Collect

vape77 collects personal data from you in the following categories:

• Identity Data: Full legal name, date of birth, gender, and a copy of government-issued identification documents submitted during Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile number, and residential address (including postcode and state within Malaysia).
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Boost wallet reference, bank account number for Maybank, CIMB, Public Bank, or Hong Leong Bank transfers), transaction records, deposit and withdrawal history, and wallet balances.
• Account Data: Username, encrypted password, account preferences, bonus and promotion history, gaming activity logs, bet records, and VIP tier status.
• Technical Data: IP address, browser type and version, device type and operating system, time zone, cookie identifiers, session identifiers, and page interaction data.
• Usage Data: Information about how you use the vape77 Platform, including pages visited, games played, session duration, search queries, and feature interactions.
• Communications Data: Records of correspondence between you and the vape77 customer support team, including live chat transcripts and email correspondence.

We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless legally required for identity verification purposes, in which case such data is handled with additional safeguards and deleted as soon as the verification purpose is fulfilled.

3. How We Use Your Data

vape77 uses your personal data for the following purposes:

• To create and administer your vape77 account, including identity verification and age verification (we strictly enforce the 21+ age requirement).
• To process deposits and withdrawals in MYR and to comply with anti-money laundering (AML) and know-your-customer (KYC) obligations.
• To provide access to the vape77 Platform, including all casino games, the sportsbook, and Mix Parlay betting features.
• To administer bonuses, free spins, promotions, and the VIP loyalty programme.
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct described in the Terms & Conditions.
• To provide customer support via live chat and email correspondence.
• To send you account-related service communications, including transaction confirmations, security alerts, and policy update notices.
• To send promotional communications (where you have consented to receive them, with an easy opt-out mechanism in every message).
• To carry out responsible gaming monitoring, including detection of problem gambling indicators, and to administer self-exclusion requests.
• To analyse Platform usage data for the purpose of improving our products and services.
• To comply with applicable legal and regulatory obligations.

4. Legal Basis for Processing

vape77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and vape77 — specifically, to operate your account, process transactions, and provide gaming services.
• Legal Obligation: Processing is necessary to comply with applicable laws, including AML regulations, KYC requirements, and responsible gaming obligations.
• Legitimate Interests: Processing is necessary for vape77's legitimate interests in operating a secure platform, preventing fraud, improving our services, and conducting business analytics — provided such interests are not overridden by your data protection rights.
• Consent: Where we send you promotional communications or use non-essential cookies, we do so only on the basis of your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.

5. Data Sharing & Disclosure

vape77 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Service Providers: Third-party vendors who perform services on our behalf, including payment processors (Touch n Go eWallet, Boost, banking partners), KYC verification providers, IT infrastructure providers, and customer support platforms. These parties are bound by data processing agreements and may only use your data for the specific purpose for which it was shared.
• Game Providers: Licensed casino game studios and sportsbook data providers whose products are integrated into the vape77 Platform. Only the minimum necessary data is shared (e.g., player session token and bet amount).
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, vape77 will disclose personal data to the relevant authority. We will notify you of such disclosure to the extent legally permitted.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of vape77's assets, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations set out in this Policy.

6. Cookies & Tracking Technologies

The vape77 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session state, prevent fraud, and analyse Platform usage. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Remember your preferences such as language settings, game lobby filter preferences, and display settings.
• Analytics Cookies: Collect anonymised information about how users interact with the Platform to help us improve the product experience. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content within the vape77 Platform. Used only with your consent, and you may withdraw consent at any time via your account settings.

You can manage your cookie preferences through the cookie settings available on the vape77 Platform. Withdrawing consent for non-essential cookies will not affect your ability to use core Platform features.

7. Data Retention

vape77 retains your personal data for as long as your account remains active and for a period of five (5) years thereafter, in order to comply with AML record-keeping obligations, to resolve disputes, and to enforce our Terms & Conditions. Financial transaction records are retained for a minimum of seven (7) years as required by applicable financial regulations. Where data is no longer required for any lawful purpose, it is securely deleted or anonymised. You may request earlier deletion of certain data categories by contacting vape77 support, subject to our ability to comply with overriding legal retention obligations.

8. Data Security

vape77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for administrative access to production systems, role-based access controls limiting employee access to personal data on a strict need-to-know basis, continuous intrusion detection and monitoring, regular penetration testing by independent security firms, and a formal incident response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, vape77 will notify you and the relevant authority within the timeframe required by applicable law.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by vape77:

• Right of Access: You may request a copy of all personal data vape77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that vape77 temporarily cease processing your data while a dispute is resolved.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the vape77 Data Protection team via the support email: [email protected]. We will respond to all verified requests within 30 days.

10. Children's Privacy

The vape77 Platform is strictly restricted to persons aged 21 years and over. vape77 does not knowingly collect personal data from persons under 21. If we become aware that a person under 21 has provided us with personal data, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has accessed the vape77 Platform, please contact our support team immediately. vape77 enforces a zero-tolerance policy regarding underage access to gambling services.

11. Third-Party Services & Links

The vape77 Platform may display links to third-party game providers, payment processors, and other service integrations. These third parties operate independently and have their own privacy policies, for which vape77 accepts no responsibility. We encourage you to review the privacy policy of any third-party service you access in connection with your use of the vape77 Platform. vape77's Privacy Policy applies solely to data processed directly by vape77.app.

12. Updates to This Privacy Policy

vape77 reserves the right to update this Privacy Policy at any time. Where material changes are made, we will notify registered users via email and/or a prominent in-platform notice prior to the changes taking effect. The current version of this Policy is always available at vape77.app/privacy-policy, and the effective date is displayed at the top of this page. Your continued use of the vape77 Platform after the updated Policy takes effect constitutes your acceptance of the changes.

For any questions about this Privacy Policy or how vape77 handles your personal data, please contact our support team via live chat within your account dashboard or by writing to [email protected].