Privacy Policy
At cv777, protecting your personal data is a fundamental responsibility — not an afterthought. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold as a player on our platform.
Last Updated: 1 January 2026Privacy at a Glance
These cards summarise the core principles of how cv777 handles your data. They complement, but do not replace, the full policy text below.
Data Is Encrypted
All personal data transmitted between your device and cv777's servers is protected with 256-bit SSL/TLS encryption. Data stored on our servers is encrypted at rest using industry-standard protocols.
We Never Sell Your Data
cv777 does not sell, rent, or trade your personal information to third-party marketing organisations. Your data is used exclusively to deliver, maintain, and improve the cv777 service and to comply with our licensing obligations.
Purpose-Limited Collection
We collect only the personal data we genuinely need — no more. Each category of data we collect has a clearly defined purpose as set out in this policy, and we do not retain data beyond the period necessary for that purpose.
You Control Your Data
You have the right to access, correct, and request deletion of your personal data. You can also withdraw consent for marketing communications at any time via your account settings or by contacting our support team.
KYC Data Handled Securely
Identity verification documents submitted for KYC purposes are handled with the highest level of security. Documents are used solely for identity and age verification and are stored only as long as required by our licensing conditions.
Transparent Third-Party Sharing
Where we share data with third parties — such as payment processors, game studio providers, and regulatory authorities — we identify those categories clearly in this policy and ensure appropriate data protection agreements are in place.
1. Introduction
This Privacy Policy ("Policy") describes how cv777 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data in connection with the operation of the online casino and sports betting platform available at cv777.casa.
cv777 takes the privacy of its players seriously. This Policy has been drafted to meet internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework and the data governance requirements of our applicable gaming licence jurisdiction. While Malaysia's Personal Data Protection Act 2010 (PDPA) applies principally to data processors operating commercially in Malaysia, cv777 voluntarily aligns its data practices with equivalent protections as a matter of principle.
By registering an account on cv777 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
2. Definitions
For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information that identifies or can reasonably identify a living individual, either directly or in combination with other data.
- "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, cv777.
- "Data Processor" means any third party that processes personal data on behalf of cv777 pursuant to written instructions.
- "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by a data subject to the processing of their personal data.
- "KYC Data" means identity and age verification documents and information submitted by a Player in connection with cv777's Know Your Customer obligations.
- "Cookies" means small text files placed on a user's device by a website to store session information, preferences, or tracking data.
- "Player" / "you" means any registered user of the cv777 Platform.
3. Data Controller
cv777 acts as the Data Controller in respect of all personal data collected from Players who use the cv777 Platform. As Data Controller, cv777 is responsible for determining the purposes for which and the manner in which personal data is processed.
cv777 operates under an internationally recognised gaming licence issued by an offshore licensing jurisdiction. The Platform is not owned, operated, or regulated by any Malaysian government authority, and cv777 does not claim endorsement by or affiliation with any Malaysian regulatory agency, including Bank Negara Malaysia.
All enquiries relating to the processing of personal data — including requests to exercise your data rights — should be directed to: [email protected].
4. Personal Data We Collect
4.1 Data You Provide Directly
We collect the following categories of personal data that you provide to us voluntarily during registration, account management, KYC verification, and use of our services:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Account registration, age verification (21+), KYC |
| Contact Data | Email address, mobile number | Account communication, security alerts, support |
| Address Data | Residential address, city, postcode, country | KYC verification, fraud prevention |
| Identity Documents | MyKad, passport, driving licence, proof of address | KYC compliance, age verification |
| Financial Data | Payment method details, transaction history, wallet identifiers | Deposits, withdrawals, anti-money-laundering compliance |
| Account Credentials | Username, encrypted password | Account security and authentication |
| Communication Records | Support chat logs, email correspondence | Customer service quality and dispute resolution |
4.2 Data Collected Automatically
When you access the cv777 Platform, we automatically collect certain technical and behavioural data, including:
- IP address and approximate geolocation;
- Device type, operating system, and browser version;
- Session duration, pages visited, and features accessed;
- Betting and gaming activity, including game selections, wager amounts, and outcomes;
- Cookie and tracking data (see Section 10).
4.3 Data from Third Parties
We may receive personal data about you from third-party sources, including identity verification service providers, payment processors, fraud detection services, and game studio providers. In all cases, such third parties represent to us that they have a lawful basis for sharing your data with us.
5. Legal Basis for Processing
cv777 processes personal data on the following legal bases, consistent with internationally recognised data protection frameworks:
- 5.1Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide you with access to the cv777 Platform, process your deposits and withdrawals, and deliver gaming services.
- 5.2Legal Obligation: Processing is required to comply with our anti-money-laundering, KYC, licensing, and regulatory reporting obligations under applicable laws.
- 5.3Legitimate Interests: Processing is necessary for our legitimate interests, including fraud prevention, platform security, service improvement, and responsible gambling monitoring, where those interests are not overridden by your data protection rights.
- 5.4Consent: For optional processing activities such as marketing communications and certain analytics, we rely on your express consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. How We Use Your Personal Data
cv777 uses the personal data we collect for the following specific purposes:
- To create and manage your player account;
- To verify your identity, age (21+ requirement), and eligibility to use the Platform;
- To process deposits and withdrawals via your chosen payment method — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT;
- To deliver, personalise, and improve the cv777 gaming and betting experience;
- To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct;
- To monitor and enforce responsible gambling obligations, including reviewing patterns consistent with problem gambling and reaching out to players who may be at risk;
- To comply with our obligations under our gaming licence, including mandatory regulatory reporting;
- To communicate with you about your account, transactions, security alerts, policy updates, and — where you have consented — promotional offers;
- To analyse platform usage and improve our product, content, and user experience.
7. Third-Party Disclosure
cv777 does not sell your personal data to third parties. We may, however, share your personal data with the following categories of third parties in the circumstances described below:
- Payment Processors: We share necessary financial data with payment service providers — including DuitNow operators, FPX, e-wallet platforms, and cryptocurrency processing services — to facilitate deposits and withdrawals.
- Identity Verification Providers: KYC documents and identity data are shared with licensed third-party verification services as required for age verification and anti-money-laundering compliance.
- Game Studio Providers: Your gameplay data (but not your full identity or financial data) is shared with licensed game studio partners to enable game delivery, RTP calculation, and integrity monitoring.
- Fraud Prevention & Security: We may share data with fraud detection services, cybersecurity providers, and law enforcement authorities where required to investigate suspected criminal activity.
- Regulatory & Licensing Authorities: We disclose data to our licensing authority and, where legally required, to other regulatory bodies, in fulfilment of our compliance obligations.
- Professional Advisers: Legal, accounting, and audit firms engaged by cv777 may access personal data to the extent required to provide their professional services, subject to confidentiality obligations.
All third-party processors engaged by cv777 are required to process personal data solely on our documented instructions and to implement appropriate technical and organisational security measures.
8. International Data Transfers
As an internationally operated platform, cv777 may transfer personal data to servers and processing facilities located outside Malaysia, including in the jurisdiction where our gaming licence is held. Such transfers may involve jurisdictions that do not provide data protection standards equivalent to those recognised in Malaysia's PDPA or the European GDPR framework.
Where such transfers take place, cv777 implements appropriate safeguards to ensure that your personal data receives adequate protection, including the use of contractual data protection clauses between cv777 and any overseas processor, and the adoption of technical security measures appropriate to the sensitivity of the data being transferred.
9. Data Retention
cv777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. Our standard retention periods are as follows:
- Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money-laundering regulatory requirements.
- Transaction records: Retained for a minimum of five (5) years following each transaction, as required for financial compliance and auditing purposes.
- KYC documents: Retained for the period required by our licensing jurisdiction, typically five (5) years following the conclusion of the customer relationship.
- Communication records: Support correspondence and chat logs retained for two (2) years following the last interaction.
- Marketing consent records: Retained for three (3) years following withdrawal of consent or account closure, whichever is later.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data destruction procedures.
10. Cookies & Tracking Technologies
cv777 uses cookies and similar tracking technologies on its website and mobile interfaces. Cookies are small text files stored on your device when you visit our Platform. They serve a range of functions, including maintaining your login session, remembering your preferences, and enabling us to analyse Platform usage.
Types of Cookies We Use
- Essential Cookies: Necessary for the Platform to function correctly. These cannot be disabled without affecting your ability to use core features such as login, deposits, and game play. No consent is required for essential cookies.
- Analytics Cookies: Used to collect aggregated data about how players use the Platform. This helps us understand which features are most popular and where improvements can be made. These cookies require your consent.
- Preference Cookies: Store settings such as language preferences, display options, and betting interface configuration. These require your consent.
- Security Cookies: Used to detect and prevent fraudulent or automated access to the Platform. These are considered essential and do not require separate consent.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the cv777 Platform. For Malaysian users accessing the Platform via mobile, cookie equivalents (such as device identifiers and local storage) operate in a similar manner.
11. Your Data Rights
Subject to applicable law and the nature of the data held, you have the following rights in respect of your personal data processed by cv777. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.
Data Rights Available to You
These rights apply to your personal data held by cv777 and can be exercised by contacting [email protected].
Right of Access
You have the right to request a copy of the personal data cv777 holds about you, along with information about how it is being processed.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data held about you. Account profile corrections can also be made directly within your account settings.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. Note that we may be required to retain certain data for legal, regulatory, or fraud-prevention purposes even after account closure.
Right to Restrict Processing
You may ask us to restrict the processing of your personal data in specific circumstances — for example, while a data accuracy dispute is being investigated.
Right to Data Portability
Where processing is based on your consent or a contract, and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Right to Withdraw Consent
Where processing is based on your consent — such as marketing emails — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right Regarding Automated Decisions
If cv777 uses fully automated processes to make decisions about you that have significant effects, you have the right to request human review of such decisions.
Right to Lodge a Complaint
If you believe your data rights have not been respected, you may lodge a complaint with cv777's data privacy contact directly, or with the supervisory authority of the applicable jurisdiction.
12. Children & Minors
cv777 is strictly an adult platform for users aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of our mandatory KYC process at the point of registration.
If cv777 becomes aware that personal data has been collected from a person under 21 years of age — whether through misrepresentation at registration or by any other means — we will immediately close the associated account, void any balances or bonuses, and securely delete all personal data collected in connection with that account.
If you believe a minor may have accessed the cv777 Platform using falsified information, please contact us immediately at [email protected] so that we can take prompt action.
13. Data Security
cv777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and cv777's servers is encrypted using 256-bit SSL/TLS protocols.
- Encryption at rest: Sensitive data stored on cv777's servers, including financial records and KYC documents, is encrypted using AES-256 or equivalent standards.
- Access controls: Access to personal data within cv777's organisation is restricted to personnel who require it to perform their job functions, on a strict need-to-know basis. All access is logged and audited.
- Two-factor authentication: Player accounts support two-factor authentication (2FA) to provide an additional layer of security against unauthorised access.
- Penetration testing: cv777's technical infrastructure undergoes regular security assessments, including independent penetration testing, to identify and remediate vulnerabilities.
- Incident response: cv777 maintains a formal data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and relevant regulatory authorities within the timeframe required by applicable law.
14. Policy Amendments
cv777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the structure of our business. Where a material change is made to this Policy, we will provide notice to registered Players via the email address associated with their account and/or via a prominent notice on the Platform.
The revised Policy will take effect from the date stated in the amendment notice. Your continued use of the cv777 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and close your account by contacting our support team.
We recommend that you review this Privacy Policy periodically to stay informed of how cv777 protects and handles your personal data. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
15. Contact & Complaints
If you have any questions, concerns, or complaints about this Privacy Policy or about the way cv777 processes your personal data, please contact our privacy support team using the details below. We are committed to responding to all data-related enquiries within 30 days of receipt.
Email: [email protected] (plain text — not a clickable link)
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response time: Within 30 days for formal data rights requests; within 1 hour for general support enquiries.
Live Chat: Available 24/7 via your account dashboard for immediate assistance.
If you are not satisfied with cv777's response to your privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your situation.
This Privacy Policy was last updated on 1 January 2026. The current version supersedes all prior versions of cv777's Privacy Policy.
Also Worth Reading
Terms & Conditions
The full legal agreement governing your use of cv777 — covering account eligibility, deposits, withdrawals, bonus terms, prohibited conduct, and governing law.
Read Terms & Conditions →Responsible Gambling
Learn about the tools available to help you stay in control of your gambling — deposit limits, session timers, self-exclusion, and support resources for Malaysian players who need help.
Read Responsible Gambling →Frequently Asked Questions
Quick answers to the most common questions about cv777 — accounts, deposits, withdrawals, bonuses, and platform features, all written clearly for Malaysian players.
Visit FAQ →Your Data Is Safe at cv777
We are committed to transparency, security, and giving you full control over your personal information. If you have questions about your data or want to exercise your rights, our support team is available around the clock to assist every Malaysian player.