Club7 Privacy Policy

This Privacy Policy ("Policy") issued by Club7 ("the Company", "we", "us", "our") and applies to all personal data collected from individuals ("Players", "Users", "you", "your") who access, register on, or interact with the Club7 online gaming platform accessible at https://club7.cam and any associated services.

Club7 operates as an online casino and sports betting platform serving Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. As a platform that handles real-money transactions, identity documents, and sensitive gaming activity data, we take our data protection obligations with the utmost seriousness.

This Policy is designed to be transparent and accessible. It explains in clear terms what personal data we collect, why we collect it, how we use it, how long we keep it, and what rights you have over it. It should be read alongside our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" — Any information that directly or indirectly identifies a living individual, including name, identification number, contact details, financial information, and behavioural data.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — Club7, which determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — A third party that processes personal data on Club7's behalf, such as payment providers, KYC verification services, and hosting providers.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer verification — the process of confirming a Player's identity and age using documentary evidence.
• "Cookie" — A small text file placed on a Player's device to store session and preference information, as further described in Section 10.
• "Sensitive Data" — A subcategory of personal data requiring heightened protection, including financial records, identity documents, and data relating to responsible gambling interactions.

Club7 collects personal data across several categories, depending on your level of interaction with the platform. The table below provides a structured overview:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond identity document photographs required for KYC), or health data, except where voluntarily disclosed by a Player in the context of a responsible gambling interaction.

Club7 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

Information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our customer support team, respond to a survey, or participate in a promotion.

4.2 Automated Technical Collection

When you access the Club7 platform, our servers and analytics infrastructure automatically record technical data including your IP address, browser type and version, operating system, device type, pages visited, session duration, and referring URL. This data is collected through server logs and first-party cookies.

4.3 Payment Processors

When you transact via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or cryptocurrency networks, our payment processors share transaction confirmation data — including timestamps, amounts, and reference numbers — with Club7 for the purpose of crediting and reconciling your account balance. Full payment credentials are handled exclusively by the payment provider and are not stored on Club7 systems.

4.4 Third-Party KYC Providers

Club7 may engage licensed third-party identity verification services to assist with KYC processing. These services operate under contractual data processing agreements and are bound by the same data protection standards as Club7.

Club7 processes your personal data only where we have a valid lawful basis to do so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, KYC verification, processing deposits and withdrawals, game provision, and bonus administration.
• Legal Obligation: Processing required to comply with our obligations under applicable anti-money laundering (AML) regulations, gaming licencing conditions, and financial reporting requirements.
• Legitimate Interests: Processing necessary for Club7's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and improving our services — where these interests are not overridden by your data protection rights.
• Consent: Where you have provided explicit consent for a specific processing activity — such as receiving marketing communications or participating in optional analytics programmes. You may withdraw consent at any time.

Club7 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and managing your Club7 player account, including password management and session authentication.
• Identity Verification (KYC): Verifying your identity and age in compliance with applicable gaming regulations and AML requirements.
• Payment Processing: Processing deposits and withdrawal requests via FPX, DuitNow, e-wallets, and cryptocurrency networks.
• Game Provision: Operating game servers, recording bet outcomes, calculating and crediting winings, and maintaining accurate game histories.
• Regulatory Compliance: Fulfilling our obligations under applicable gaming licences, AML laws, and financial reporting requirements.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, preventing multi-accounting, identifying bonus abuse, and maintaining platform integrity.
• Responsible Gambling: Monitoring gaming patterns to identify at-risk behaviour, communicating responsible gambling interventions, and administering self-exclusion and limit-setting tools.
• Customer Support: Responding to enquiries, resolving complaints, and providing assistance in English, Bahasa Melayu, and Mandarin.
• Platform Improvement: Analysing aggregated technical and behavioural data to improve platform performance, user experience, and game selection.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.

Club7 does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share your data only in the following limited and controlled circumstances:

• Payment Processors: Data necessary to complete financial transactions is shared with our FPX, DuitNow, e-wallet (Touch 'n Go, Boost, GrabPay), and banking partners (Maybank, CIMB, Public Bank, Hong Leong) strictly for payment processing purposes.
• KYC & Identity Verification Providers: Identity documents and verification data may be shared with licensed third-party KYC service providers operating under contractual data processing agreements.
• Game Studio Partners: Anonymised or pseudonymised game session data may be shared with our licensed game studio partners for the purpose of RNG auditing and game performance reporting.
• Regulatory Authorities: Club7 will disclose personal data to gaming regulatory bodies, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where legally required or where we are under a regulatory obligation to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants may have limited access to personal data in the context of specific legal, regulatory, or audit engagements, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of Club7's business or assets, personal data may be transferred to a successor entity, subject to equivalent data protection obligations.

Club7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Our standard retention periods are as follows:

Upon expiry of applicable retention periods, personal data is securely deleted, anonymised, or pseudonymised such that it can no longer be linked to an identifiable individual. Anonymised data may be retained for statistical and platform improvement purposes without time limit.

Club7 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Layer Security: All data transmitted between your device and Club7 servers is protected by TLS 1.3 (256-bit AES encryption), ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): Player accounts are protected by optional two-factor authentication. We strongly recommend all players activate 2FA.
• Access Controls: Access to personal data within Club7 is restricted on a strict need-to-know basis. Internal access logs are maintained and reviewed regularly.
• Firewall & Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems.
• Regular Security Audits: Club7 conducts periodic penetration testing and security audits conducted by independent third-party specialists.
• Staff Training: All Club7 personnel who handle personal data are trained in data protection principles and our internal security policies.

Club7 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse aggregate usage patterns. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing identifiers. These cookies cannot be disabled without materially impairing your ability to use the platform.
• Functional Cookies: Used to remember your language preference, display settings, and recent activity to provide a personalised experience. These cookies persist between sessions.
• Analytics Cookies: First-party analytics cookies that collect aggregated, anonymised data about how players use the platform — pages visited, session duration, and feature usage. This data is used to improve the Club7 experience. Individual user data is not shared with third-party analytics services.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and brute-force login attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality. For full details on managing browser cookies, consult your browser's help documentation.

As a player on the Club7 platform, you hold the following rights with respect to your personal data. All requests are processed within30 calendar days of receipt, free of charge:

To exercise any of the above rights, please contact our Data Protection team via live chat on the platform or in writing to [email protected]. Please include sufficient identifying information for us to verify your identity before processing your request.

Club7 strictly prohibits access to and use of its platform by persons under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

All account registrations are subject to age verification as part of our KYC process. Where Club7 becomes aware or reasonably suspects that personal data has been collected from a person under 21, the relevant account will be immediately suspended, collected data will be reviewed, and any funds in the account will be handled in accordance with our Terms and applicable regulations.

Club7 operates internationally and some of our service providers, including game studio partners, hosting infrastructure providers, and KYC technology vendors, may process personal data in jurisdictions outside of Malaysia.

Where personal data is transferred internationally, Club7 ensures that appropriate safeguards are in place to protect the data, including:

• Transfers only to jurisdictions recognised as providing an adequate level of data protection
• Execution of contractual data processing agreements incorporating standard data protection clauses
• Technical and organisational security measures equivalent to those applied within Club7's own systems

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our support team.

Club7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements.

Material changes — those that materially affect your rights or the way we use your personal data — will be communicated to registered players via email or a prominent on-platform notification at least 14 days before taking effect.

Non-material changes (such as typographical corrections or clarifications that do not change the substance of our processing activities) may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Club7 platform following any update to this Policy constitutes acceptance of the revised terms. If you do not accept a material amendment, you are entitled to close your account and request deletion of your personal data in accordance with Section 11 above.

If you have any questions, concerns, or requests regarding this Privacy Policy or Club7's data processing practices, please contact our Data Protection and Compliance team through the following channels:

For responsible gambling support and self-exclusion requests, please visit our Responsible Gambling page. For general platform questions, our FAQ page covers the most common enquiries. Full platform usage terms are set out in our Terms & Conditions.