Pepsi77 Privacy Policy – Data Protection & Personal Information

1Information We Collect

Pepsi77 collects various categories of information when you interact with our platform. This collection is done directly from you, automatically through platform usage, or occasionally through trusted third parties such as identity verification providers and payment processors.

Personal Information You Provide Directly:

• Full name as per valid identity card or passport.
• Date of birth — to verify that you are aged 18 and above.
• Active email address used for account communications.
• Mobile number for two-factor authentication (2FA) and notifications.
• Full residential address including postcode and state.
• Payment method details such as bank account number or e-wallet name — not your payment password.
• Identity verification (KYC) documents such as photos of your ID card, passport, or driver's license, along with proof of address.

Information Collected Automatically:

• IP address and general geographic location for security and legal compliance purposes.
• Device type, operating system, and the type and version of your web browser.
• Login timestamps, gaming session duration, pages visited, and in-platform actions.
• Gaming behavior data — game types played, total bets, wins, and losses.

2How We Use Your Information

Every piece of information we collect is used for legitimate, necessary, and relevant purposes related to the operation of the pepsi77 platform. We do not use your data beyond the purposes stated below without first obtaining your consent:

For marketing and promotional communications, you may withdraw your consent at any time via your account settings or by contacting our support team. Withdrawing marketing consent does not affect your core account services.

3Sharing Information with Third Parties

Pepsi77 does not sell your personal information to any third party. However, in operating a secure and legally compliant platform, we may share certain information with the following categories of third parties to the extent necessary only:

• Payment Service Provider — Payment processors, partner banks, and e-wallet providers that help us process your deposits and withdrawals. They only receive the data necessary to complete those transactions.
• Identity Verification (KYC) Provider — Third-party verification companies that assist us in validating the authenticity of your identity documents to meet compliance requirements.
• Analytics Service Provider — Analytics platforms that help us understand platform usage patterns in aggregated, anonymised form so we can continuously improve the user experience.
• Third-Party Game Provider — Game software providers that supply casino games, fish shooting games, and other games on our platform. Data sharing is limited to the session information required for the games to function.
• Regulatory Authorities & Law Enforcement — pepsi77 will disclose information to the relevant authorities when required by law or court order, including in financial crime investigations.

4Data Security & Encryption

Pepsi77 continuously invests in the latest cybersecurity infrastructure to keep your personal and financial information secure. The following are the key protection layers we employ:

• 256-bit SSL/TLS Encryption — All communications between your device and pepsi77's servers are encrypted using 256-bit SSL/TLS protocol. This means data in transit cannot be read by any third party, even if they successfully intercept the traffic.
• Encrypted Data Storage — Personal data stored in our databases is encrypted using AES-256 standards. Your password is never stored in plain text — only an irreversible hash is retained.
• Two-Factor Authentication (2FA) — pepsi77 fully supports 2FA via SMS OTP and authenticator apps. We strongly encourage all players to enable this feature to add an extra layer of protection to their account.
• 24/7 Activity Monitoring — Our systems continuously monitor all login activity and transactions to detect any unusual patterns that may indicate an unauthorised access attempt.
• Secure Server Infrastructure — pepsi77's servers are hosted in certified data centres compliant with ISO 27001 standards, protected by multi-layered firewalls and intrusion detection systems.
• Regular Data Backups — Your data is regularly backed up to a separate, secure location, ensuring service continuity even in the event of an unexpected technical incident.

5Cookie Policy

Pepsi77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

You can manage your cookie settings through your web browser settings at any time. Please note that disabling essential cookies may affect the basic functionality of our platform. For more information on managing cookies, refer to your web browser's help guide.

6Your Rights Over Personal Data

As a registered pepsi77 user, you have certain rights under Malaysia's Personal Data Protection Act (PDPA) 2010 regarding the personal information we hold. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact our data protection team via the support email or the platform's live chat. We will process your request within the timeframe required by applicable law. In some cases, we may require additional identity verification before processing your request to ensure the security of your data.

7Data Retention Period

Pepsi77 retains your personal information only for as long as necessary for the purposes stated in this Privacy Policy, or as required by law. The table below shows the general retention period for each data category:

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8Cross-Border Data Transfers

In the course of operating a global platform, your personal information may be transferred to, stored on, or processed by servers located outside Malaysia. Whenever such a transfer occurs, Pepsi77 ensures protection equivalent to Malaysia's PDPA standards is in place through mechanisms such as:

• Legally binding data processing agreements (DPA) with all overseas partners.
• Use of recognised Standard Contractual Clauses (SCC) for international data transfers.
• Ensuring that the recipient country has an adequate or equivalent level of data protection.
• Data encryption in transit using the latest TLS protocols for all cross-border transfers.

9Privacy Policy Changes

Pepsi77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, latest legal requirements, or new platform features introduced. When significant changes are made, we will:

• Sending a notification to your registered email at least 14 days before the changes take effect.
• Displaying a clear notice on the platform's home page and when you log in for the first time after the changes take effect.
• Maintaining an archive of previous Privacy Policy versions that users may request for reference if needed.

Continued use of the pepsi77 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, please contact us to close your account before the effective date.

For any enquiries, concerns, or to exercise your privacy rights, please contact our Data Protection Officer by email at [email protected]. We are committed to responding to all privacy inquiries within 5 business days.