Privacy Policy CC7 – Our Commitment to Protecting Your Data

01Introduction

This Privacy Policy ("Policy") is published by CC7 and applies to all users who access or use our platform at cc7.st as well as all related apps and services. We understand that your trust is our most valuable asset, and we are committed to protecting it.

As a platform operating in Malaysia, cc7 fully complies with the provisions of the Personal Data Protection Act 2010 (PDPA) and all regulations in force under it. This policy details the types of data we collect, the purposes for which it is used, how it is protected, and the rights you hold as a data subject.

By registering or continuing to use the CC7 platform, you consent to the processing of your personal data as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

02Data Collected

CC7 only collects data that is strictly necessary to provide a safe, fair, and legally compliant service. The following are the categories of data we collect:

Personal Identification Data:

• Full name, date of birth and gender
• National identity card (MyKad) or passport number
• Current residential address
• Registered mobile phone number
• Active email address

Financial Data:

• Bank account details for deposit and withdrawal purposes
• Deposit and withdrawal transaction history
• E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost)

Platform Usage Data:

• Wagering history and gaming activity
• IP address and device information used
• Login and logout session data
• Account settings and communication preferences

03How Your Data Is Used

CC7 uses your personal data solely for lawful and transparent purposes. Your data is used for the following:

• Account Management: Create, verify and manage your account on the cc7 platform.
• Transaction Processing: Process deposits, withdrawals and all financial transactions securely and accurately.
• KYC Verification: Fulfil anti-money laundering (AML) obligations and verify player identities in accordance with legal requirements.
• Platform Security: Detect and prevent fraud, unauthorised access and platform abuse.
• Customer Support: Provide technical assistance and effectively resolve your complaints or inquiries.
• Service Communications: Send important notifications regarding your account, policy updates and security information.
• Service Improvements: Analyse usage patterns to improve the overall gaming experience and platform performance.
• Legal Compliance: Meet reporting and compliance obligations required by the relevant authorities.

We do not use your data to make automated decisions that have legal or significant effects on you without appropriate human review.

04Disclosure to Third Parties

CC7 does not sell, rent, or trade your personal data to any third party. However, under certain limited circumstances, we may share your data with the following parties:

• Service Providers: Payment gateway providers, cloud computing providers and identity verification companies that help us operate the platform. All such providers are bound by strict confidentiality agreements.
• Statutory Authority: Government agencies, tax authorities, regulatory bodies, or law enforcement when required by law or court order.
• Gaming Software Providers: Game providers that require basic verification for game integrity purposes, subject to strict data processing agreements.

05Data Security

CC7 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• End-to-End Encryption: All data communications use TLS 1.3 protocol and 256-bit SSL encryption.
• Tiered Access Control: Only authorised personnel with a legitimate business need may access player personal data.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect any suspicious activity immediately.
• Security Audit: Penetration testing and independent security audits are conducted regularly by independent cybersecurity firms.
• Staff Training: All cc7 staff undergo comprehensive data protection training and sign confidentiality agreements.

In the event of a data breach that affects your rights and freedoms, cc7 will notify you and the relevant authorities within the timeframe prescribed by law, along with the remedial steps being taken.

06Cookies & Tracking Technologies

The cc7 platform uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security settings. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how users interact with the platform to help us improve it.
• Functional Cookies: Save your preferences such as language and display settings so you don't need to reconfigure them each time.
• Analytical Cookies: Used to understand platform usage patterns in an aggregated and anonymised manner for continuous improvement purposes.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the CC7 platform. Continued use of the platform is considered your consent to the use of cookies as described.

07Your Rights

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by CC7:

To exercise any of the above rights, please contact our privacy team via email at [email protected]. We will process your request within three (3) business days and provide a response within the timeframe prescribed by law.

08Data Retention Period

CC7 does not retain your personal data longer than necessary. Retention periods depend on the type of data and the purpose for which it is used:

• Active Account Data: Retained for the duration your account is active and for six (6) years after account closure to meet legal requirements.
• Financial Transaction Records: Retained for seven (7) years in accordance with Malaysia's financial and tax legal requirements.
• KYC Data: Retained for the period prescribed by applicable anti-money laundering regulations.
• System Logs: Retained for twelve (12) months for security and investigation purposes if required.
• Support Communications: Retained for two (2) years for reference and service improvement purposes.

Upon expiry of the designated retention period, your data will be securely deleted or anonymised in accordance with cc7's established procedures.

09Cross-Border Data Transfers

In operating a global platform, CC7 may need to transfer your personal data to servers or service providers located outside Malaysia. Every such transfer is carried out with careful safeguards:

• Data transfers are only carried out to countries or entities that offer a level of data protection equivalent to or higher than Malaysia's PDPA.
• Standard data transfer agreements are in place to ensure your data remains protected even after transfer.
• All third-party service providers that receive your data are required to comply with cc7's strict data processing directives.

10Policy Amendments

CC7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or service improvements. Any material changes will be communicated to you via:

• In-platform notifications at least seven (7) days before changes take effect
• Email notification to your registered email address
• Update the "Last Updated" date at the top of this document

Your continued use of the cc7 platform after any amendment takes effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically so you remain informed about how we protect your information.

11Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how cc7 handles your personal data, please contact our Data Protection Officer (DPO):

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the cc7 platform
• Response Time: Within 3 working days for all privacy inquiries

Privacy-related complaints must be submitted in writing, including your full name, account number, and detailed description of the complaint. If you are not satisfied with our response, you have the right to escalate your complaint to the Personal Data Protection Commissioner of Malaysia.

For frequently asked questions about privacy and account security, you may also refer to our FAQ which is updated regularly.