Privacy Policy

This Privacy Policy (hereinafter "Policy") sets out the basis on which Danamax777 (hereinafter "Danamax777", "We", "Us", "Our", "the Platform") collects, processes, stores, and discloses personal data relating to individuals who access or use the services available at https://danamax777.cam (hereinafter "the Platform", "the Services").

Danamax777 operates as a digital gaming and sports betting platform serving players primarily across Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other cities throughout the country. We are committed to processing your personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation, including principles aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data privacy standards.

Please read this Policy carefully before registering an Account or providing any personal data to the Platform. By accessing or using the Platform's Services, You acknowledge that You have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and online identifiers.
• "Data Subject" means the individual to whom Personal Data relates — in this context, the Player or visitor of the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, Danamax777.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller pursuant to written instructions.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Cookies" means small data files placed on your device by a website that store information about your browsing session and preferences.
• "KYC" means Know Your Customer — the identity verification process required under anti-money laundering and responsible gambling obligations.

Danamax777 collects the following categories of personal data in connection with operating the Platform and providing the Services:

We collect personal data through the following channels and methods:

4.1 Direct Collection

Personal data provided directly by You when: registering an Account on the Platform; completing KYC verification; making deposits or requesting withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency; contacting our customer support team; participating in promotions; or responding to surveys or marketing communications.

4.2 Automated Collection

Technical and usage data collected automatically through your interaction with the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. This data is collected from the moment you access the Platform, regardless of whether you are a registered Account holder.

4.3 Third-Party Sources

We may receive personal data about You from third parties in limited circumstances, including: identity verification service providers conducting KYC checks; payment processors confirming transaction details; fraud detection and AML screening services; and analytics partners providing aggregated Platform usage data.

Danamax777 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between Danamax777 and the Player — specifically to provide access to the Platform, process deposits and withdrawals, and administer Account features.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC and AML requirements, age verification, record-keeping obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing is necessary for the legitimate interests of Danamax777, including fraud prevention, security monitoring, Platform improvement, and responsible gambling monitoring, provided these interests are not overridden by the Data Subject's rights and interests.
• Consent: Where no other legal basis applies, We will seek your explicit consent before processing, for example in relation to certain direct marketing communications. You have the right to withdraw consent at any time.

Danamax777 uses collected personal data for the following purposes:

• Registering and maintaining your Account on the Platform;
• Processing deposits and withdrawal requests via your chosen payment method (Touch 'n Go eWallet, DuitNow, FPX, bank transfer, or cryptocurrency);
• Verifying your identity and age (21+) through our KYC procedures;
• Detecting and preventing fraud, collusion, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions;
• Meeting our AML and Counter-Terrorism Financing (CTF) obligations;
• Providing customer support and resolving disputes;
• Administering bonuses, promotions, loyalty programmes, and birthday bonuses;
• Monitoring for responsible gambling indicators and administering player-requested restrictions;
• Sending transactional communications (account activity, withdrawal confirmations, security alerts);
• Sending promotional communications where You have opted in or where We have a legitimate interest to do so;
• Analysing Platform usage to improve the user experience, game catalogue, and technical performance;
• Complying with court orders, regulatory requests, or other lawful legal obligations.

Danamax777 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only for the purposes described in this Policy:

7.1 Service Providers (Data Processors)

Third-party vendors engaged to provide services on our behalf, including: payment processors and financial institutions (for deposit and withdrawal handling); identity verification and KYC service providers; fraud detection and AML screening services; cloud hosting and database infrastructure providers; customer support platform providers; and marketing analytics platforms (for aggregated, non-individually identifiable data only). All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering services to Danamax777.

7.2 Regulatory and Legal Authorities

We may disclose personal data to competent authorities, courts, or regulators where required by law, court order, or where We believe disclosure is necessary to protect our legal rights, prevent fraud, or comply with applicable regulatory obligations.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the Platform's assets, personal data may be transferred as part of that transaction. Affected Users will be notified in advance of any such transfer and of any consequential changes to this Policy.

Danamax777 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following standard retention periods apply:

• Active Account Data: Retained for the duration of the Account membership and for a minimum of five (5) years following account closure, to satisfy AML, KYC, and regulatory compliance obligations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of verification or the closure of the Account, whichever is later.
• Customer Support Records: Retained for up to three (3) years following the resolution of the relevant support interaction, unless longer retention is required due to an ongoing legal matter.
• Marketing Consent Records: Retained until the consent is withdrawn or the marketing purpose is no longer active.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Subject to applicable law and certain limited exceptions, You have the following rights in respect of the personal data we hold about You. To exercise any of these rights, please contact our support team via live chat or email as described in Section 15.

Danamax777 uses cookies and similar technologies (including web beacons, pixels, and local storage objects) to enhance your experience on the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymous statistical data about how visitors use the Platform, including pages visited, session durations, and error occurrences. This data helps us improve Platform performance.
• Functional Cookies: Store your preferences such as display settings, language preferences, and recently played games so the Platform can provide a personalised experience on subsequent visits.
• Responsible Gambling Cookies: Track session duration and in-session gaming activity to support the display of responsible gambling reality-check notifications configured by the Player.

You may manage cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Blocking analytics or functional cookies will not affect your ability to access core Services.

Danamax777 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest within our database infrastructure;
• Role-based access controls ensuring that personal data is accessible only to authorised personnel who require it to perform their job functions;
• Two-factor authentication (2FA) available for all Player Accounts and mandatory for internal staff systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Continuous automated monitoring for suspicious access patterns and intrusion attempts;
• Formal data breach response procedures, including notification protocols compliant with applicable regulatory requirements.

Notwithstanding the above, no data transmission over the internet can be guaranteed to be completely secure. Players are responsible for maintaining the security of their own Account credentials and devices.

The Platform is strictly restricted to individuals aged 21 years and above. Danamax777 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by or in relation to a person under the age of 21, we will take immediate steps to delete such data and close the associated Account.

If you have reason to believe that a person under the age of 21 has submitted personal data to the Platform, please contact our support team immediately via live chat so that we may investigate and take appropriate action.

In the course of providing the Services, personal data may be transferred to and processed in countries outside of Malaysia in connection with our use of third-party service providers (such as cloud infrastructure providers and payment processors) whose infrastructure is hosted in various international locations.

Where personal data is transferred internationally, Danamax777 ensures that appropriate safeguards are in place, which may include: contractual data processing agreements incorporating internationally recognised data protection clauses; transfer to countries recognised as providing an adequate level of data protection; or other lawful transfer mechanisms as applicable.

Danamax777 reserves the right to amend this Privacy Policy at any time. Material changes — such as new categories of data being collected, new uses of existing data, or changes to data sharing arrangements — will be communicated to registered Account holders by email or prominent in-platform notification at least 14 days prior to taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. We encourage You to review this Policy periodically. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. For data rights requests, please identify your query as a "Privacy / Data Request" at the start of the conversation to ensure routing to the appropriate team member.
• Email: [email protected] — Please include "Privacy Policy Query" in the subject line.

We aim to acknowledge all privacy-related contacts within five (5) business days and to resolve substantive queries within thirty (30) days.