Privacy Policy Harum777 — Malaysia Member Data Protection

Harum777 collects various types of information from members for legitimate and transparent purposes. We only collect information that is genuinely necessary to operate the platform safely and efficiently. The following are the categories of data we may collect:

Personal Identity Information:

Financial Information:

Platform Usage Information:

We do not collect sensitive information such as biometric data, medical records, or credit card details directly. All financial transactions are processed through registered and certified third-party payment providers in Malaysia.

Harum777 collects your personal information through several transparent and lawful methods. We always inform you of the type of data being collected and its purpose at each point of collection:

• During account registration: When you register a new account at Harum777, you are required to complete a registration form asking for your name, Malaysian phone number, email address, and password. This information is needed to create and manage your account.
• Identity verification process (KYC): When you make your first withdrawal request or certain activities require verification, we ask for supporting documents such as a copy of your MyKad and bank statement. This is a standard legal compliance requirement in Malaysia's financial industry.
• During deposit and withdrawal transactions: Payment information is collected through our secure payment gateway when you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX.
• Automatic platform usage: Our systems automatically record activity logs, IP addresses, browser types, device information, and usage patterns for security and user experience improvement purposes.
• Customer support communications: When you contact the Harum777 support team via live chat, WhatsApp, or email, conversations may be recorded for training and service quality improvement purposes.

Harum777 uses the personal information we collect solely for legitimate, stated purposes. We do not use your data for any other purpose without first obtaining your consent:

You may withdraw your consent to receive marketing communications at any time by contacting our support team or clicking the "unsubscribe" link in our promotional emails. Withdrawing marketing consent does not affect the data processing required to operate your account.

Harum777 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, there are limited situations where we need to share your information with trusted third parties in order to deliver our services to you:

• Payment service providers: We share the necessary transaction details with payment gateway providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX/Maybank2u to process your deposits and withdrawals.
• Game software provider: Basic account information may be shared with our licensed game software providers to allow you to access slots, Live Casino, Poker, and Roulette games on our platform.
• Regulatory authorities and law enforcement: Harum777 will disclose the necessary information to Malaysian authorities where required by law, court order, or in the course of fraud and money laundering investigations.
• Analytics and security services: We use select third-party service providers for usage analytics and cybersecurity threat detection. These providers are bound by strict confidentiality agreements and are only permitted to process data for the specific purposes defined.

All third parties we work with are required to uphold data protection standards at least equivalent to our own. We do not share your data with entities outside Malaysia without adequate safeguards in place.

Harum777 invests seriously in security infrastructure to ensure your personal and financial data is always protected against unauthorised access, alteration, or disclosure. The following are the security layers we have in place:

• 256-bit SSL Encryption: All communications between your browser and harum777's servers are encrypted using TLS 1.3 with AES-256 encryption — the same standard used by Malaysia's major banks such as Maybank and CIMB.
• Firewall and intrusion detection system: Our infrastructure is protected by multi-layered firewalls and a real-time threat detection system operating 24 hours a day, 7 days a week.
• Internal access controls: Access to member data within the Harum777 organisation is strictly restricted on a need-to-know basis. Only authorised personnel may access members' personal data, and every instance of access is recorded in an audit log.
• Two-factor authentication (2FA): Our internal systems require 2FA for all administrative access. Members are also encouraged to enable 2FA on their accounts.
• Regular security audits: The harum777 platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.

Harum777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functions such as login sessions and language preferences. Without these cookies, the platform cannot function properly.
• Analytics cookies: Helps us understand how members use our platform, which pages are visited most frequently, and where users encounter difficulties. This data is used in aggregate form and does not directly identify individuals.
• Preference cookies: Saves your personal settings such as preferred language, display resolution, and favourite game selections to streamline your experience in future sessions.
• Security cookies: Used to verify your identity, prevent session fraud, and detect suspicious login attempts.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of the harum777 platform. For more information on managing cookies in popular browsers such as Chrome, Firefox, and Safari, please refer to the respective browser's help documentation.

As a Harum777 member and as a Malaysian citizen or resident, you have certain rights regarding your personal data under the Personal Data Protection Act 2010. Harum777 fully respects and upholds these rights:

To exercise any of the above rights, please contact our data protection team by email at privacy@harum777.my. We will respond to your request within 30 working days in accordance with PDPA 2010 requirements.

Harum777 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required under Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account is active and for 7 years after account closure, in line with Malaysian financial regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• KYC verification documents: Retained for 7 years after the business relationship ends.
• Customer support communication logs: Retained for 2 years from the date of communication.
• Log and security data: Retained for 12 months for security and fraud investigation purposes.

Once data is no longer needed and the mandatory retention period has expired, we will securely delete or anonymise it using methods that ensure it cannot be recovered.

The harum777 platform may contain links to third-party payment services such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay. Once you click on those links and leave the harum777 platform, our Privacy Policy no longer applies.

We encourage you to read the privacy policies of payment providers and other services you use alongside the Harum777 platform. Harum777 is not responsible for the privacy practices or content of those third-party websites.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Harum777 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Email: privacy@harum777.my
• General Support Email: support@harum777.my
• Live Chat: Available 24/7 on the Harum777 platform
• Response time: We respond within 3 working days for general enquiries and within 30 days for formal data rights requests.

Harum777 reserves the right to modify this Privacy Policy at any time. Any material changes will be communicated to you via your registered email or a prominent notice on our platform before the changes take effect. Your continued use of the harum777 platform after any amendments constitutes your acceptance of the revised policy.