SVIP7 Privacy Policy —
How We Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") is issued by SVIP7 ("the Company", "We", "Us", "Our"), the operator of the online gaming and sports betting platform accessible atsvip7.click and its associated subdomains and mobile applications (collectively, the "Platform").

This Policy describes how SVIP7 collects, uses, stores, shares, and protects personal data relating to individuals who access or use our Platform, including registered Members, visitors to our website, and persons who interact with our customer support team.

SVIP7 is committed to protecting the privacy and personal data of all individuals whose information we process. We handle personal data in accordance with applicable data protection legislation and in line with internationally recognised data privacy standards.

This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the SVIP7 Platform more broadly.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including names, identification numbers, location data, email addresses, IP addresses, and any other data that could reasonably be used to identify an individual.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, the Data Controller is SVIP7.
• "Data Processor" — any third party that processes Personal Data on behalf of SVIP7 under a contractual arrangement, such as payment service providers or IT infrastructure suppliers.
• "Member" / "You" — any individual who has registered an Account on the SVIP7 Platform.
• "KYC Data" — identity verification documents and related information collected as part of the Know Your Customer process, including copies of government-issued identification and proof of address.
• "Cookies" — small text files placed on your device by the Platform to enable certain technical functions, analytical tracking, and session management.
• "Sensitive Personal Data" — a subset of Personal Data afforded enhanced protection, including financial account information, identification document numbers, and data revealing health status relevant to responsible gambling assessments.

3 Personal Data We Collect

SVIP7 collects only the personal data that is reasonably necessary for the purposes described in this Policy. The categories of data we collect include:

We do not collect payment card numbers (PAN), CV codes, or full bank account numbers directly. Payment processing is handled by our regulated third-party payment service providers, including integrations with Malaysian payment networks such as DuitNow, FPX, Touch 'n Go eWallet, and Boost.

4 How We Collect Personal Data

SVIP7 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawal requests, contact our support team, or update your account profile.
• Automatically through the Platform: Technical data such as IP address, device identifiers, and session logs are collected automatically each time you access the Platform, through standard web server logs and analytics tools.
• Through Cookies and Similar Technologies: Session cookies, persistent cookies, and similar tracking technologies are used to maintain your logged-in session, remember preferences, and analyse usage patterns. See Section 10 for full details.
• From Third-Party Verification Services: In the course of KYC processing, SVIP7 may use third-party identity verification service providers to validate the authenticity of submitted documents and cross-reference identity information against available databases.
• From Payment Service Providers: Confirmation and status data relating to deposit and withdrawal transactions processed through Malaysian payment networks and e-wallet providers.

5 Data Processing & Purpose of Use

SVIP7 processes your personal data for the following purposes. Each processing activity is grounded in a lawful basis as described in Section 6.

• Account Administration: To create, maintain, and manage your Member Account, including processing login authentication, password resets, and account preference settings.
• Identity Verification (KYC): To verify your identity, age, and residential address in fulfilment of our anti-money laundering (AML) and counter-financing of terrorism (CFT) compliance obligations.
• Transaction Processing: To process deposits and withdrawal requests via Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank internet banking, and cryptocurrency networks.
• Platform Operations & Security: To detect, prevent, and investigate fraud, account abuse, money laundering, and other prohibited conduct. To maintain the technical stability and security of the Platform.
• Regulatory Compliance: To fulfil legally mandated reporting and record-keeping obligations, including cooperation with regulatory authorities and financial intelligence units as required by law.
• Customer Support: To respond to enquiries, resolve disputes, investigate complaints, and provide assistance through our live chat, email, and other support channels in English, Bahasa Melayu, and Mandarin Chinese.
• Responsible Gambling: To monitor gaming activity for patterns associated with problem gambling, administer deposit limits, self-exclusion orders, and cooling-off periods, and to proactively contact members where concerns are identified.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the functionality, design, and content of the Platform.
• Communications: To send transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have provided consent, promotional communications about relevant offers.

6 Legal Basis for Processing

SVIP7 processes personal data on the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between SVIP7 and you as a Member — including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CFT obligations, regulatory reporting requirements, and tax record-keeping mandates.
• Legitimate Interests: Processing undertaken to pursue SVIP7's legitimate business interests, where these interests are not overridden by your rights and interests. This includes fraud prevention, platform security, IT infrastructure management, and internal analytics.
• Consent: Processing based on your specific, informed, and freely given consent — primarily for marketing communications and certain non-essential cookie deployments. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

SVIP7 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Service Providers: We share necessary transaction data with regulated payment processors to facilitate deposits and withdrawals. In Malaysia, this includes integrations with DuitNow, FPX, and e-wallet platforms. These providers process data as Data Processors under contractual data protection agreements.
• Identity Verification Providers: KYC documents and identity data may be shared with licensed third-party identity verification service providers engaged to assist with document authentication.
• Regulatory and Law Enforcement Authorities: SVIP7 will disclose personal data to relevant authorities where required to do so by applicable law, court order, or regulatory directive — including Bank Negara Malaysia's Financial Intelligence and Enforcement Department (FIED) in respect of AML/CFT obligations.
• Responsible Gambling Organisations: Where a Member has applied for self-exclusion, relevant data may be shared with responsible gambling registries or cross-operator exclusion schemes as applicable.
• IT Infrastructure and Cloud Service Providers: Data is stored on servers operated by our contracted hosting providers, which are bound by strict data processing agreements and security standards.
• Group Companies: SVIP7 may share data with affiliated entities within the same corporate group for the purposes of internal administration, compliance oversight, and fraud prevention.

8 Data Retention

SVIP7 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active Member Account, and to comply with applicable legal retention obligations.

Our standard retention guidelines are as follows:

• Active Account Data: Retained for the duration of your active membership with SVIP7.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure, in accordance with AML/CFT legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years following the transaction date, in compliance with financial record-keeping obligations.
• Customer Support Communications: Retained for a period of 3 years following the closure of the relevant support case.
• Technical Logs (IP address, session data): Retained for a rolling period of 12 months, after which they are anonymised or deleted.
• Marketing Consent Records: Retained until withdrawn by you, plus an additional 3 years to demonstrate compliance with consent obligations.

Following the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in manner that prevents re-identification.

9 Data Security

SVIP7 implements a comprehensive suite of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the SVIP7 Platform is encrypted using256-bit SSL/TLS encryption, enforced across all connections.
• At-Rest Encryption: Sensitive data stored on SVIP7's servers, including KYC documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data by SVIP7 employees and contractors is strictly role-based and limited to individuals who require it for their specific professional function. All access is logged and auditable.
• Two-Factor Authentication: SVIP7 supports and encourages Members to enable two-factor authentication (2FA) on their accounts to provide an additional layer of login security.
• Penetration Testing & Security Audits: The Platform and its supporting infrastructure are subject to periodic security assessments, including third-party penetration testing.
• Incident Response: SVIP7 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify affected Members and relevant regulatory authorities within the legally required timeframe.

10 Cookies & Tracking Technologies

The SVIP7 Platform uses cookies and similar technologies to provide essential functionality, improve your experience, and support our security and analytics operations. The types of cookies we deploy are as follows:

SVIP7 does not deploy third-party advertising or behavioural tracking cookies. We do not permit third-party advertising networks to place cookies on our Platform for the purpose of tracking your activity for their own advertising purposes.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may prevent certain Platform features from functioning correctly.

11 Your Rights as a Data Subject

Subject to applicable data protection law and certain legal exceptions, you have the following rights in relation to your personal data held by SVIP7. These rights may be exercised by contacting our support team as described in Section 15.

12 Minors & Age Restriction

The SVIP7 Platform is strictly intended for use by adults aged21 years and above. SVIP7 does not knowingly collect personal data from any person under the age of 21.

If SVIP7 becomes aware that personal data has been collected from a minor — whether through account registration or otherwise — we will immediately suspend the associated account, delete the personal data in question, and refuse to process any transactions relating to that account.

If you believe that a minor may have accessed the Platform or provided their personal data to SVIP7, please contact our support team immediately so that we can investigate and take appropriate action.

13 International Data Transfers

SVIP7 operates an international platform and may store or process personal data on servers located outside of Malaysia. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Malaysia's Personal Data Protection Act 2010 (PDPA), SVIP7 ensures that appropriate safeguards are in place.

These safeguards include contractual data protection clauses with all Data Processors and third-party service providers engaged by SVIP7, requiring them to handle your personal data in a manner consistent with our obligations under this Policy and applicable data protection law.

Where you are Malaysian resident, SVIP7 handles your personal data with due regard to the PDPA and any relevant guidelines issued by the Department of Personal Data Protection (JPDP) Malaysia.

14 Amendments to This Policy

SVIP7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform operations. Material changes will be communicated to Members via in-platform notification or email. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Your continued use of the SVIP7 Platform following notification of a material change constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we handle your personal data.

If any amendment materially changes the basis on which we process personal data for which we relied upon your prior consent, we will seek fresh consent from you before the amendment takes effect in respect of that processing.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how SVIP7 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 through the Platform (fastest response, average under 5 minutes).
• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week,365 days a year.
• Languages Supported: English, Bahasa Melayu, and Mandarin Chinese.

All data rights requests will be handled by our dedicated Data Privacy team. We aim to acknowledge all requests within 48 hours and provide a substantive response within 30 calendar days. Where additional time is required for complex requests, we will notify you in advance.

For responsible gambling related matters, including self-exclusion requests and deposit limit modifications, please visit our dedicatedResponsible Gambling page.