1. Introduction
This Privacy Policy ("Policy") describes how sell777 ("sell777", "we", "us", "our") collects, uses, discloses, stores, and protects personal data obtained from members and visitors of the sell777 platform at sell777.net ("Platform").
By registering an account with sell777, accessing the Platform, or using any sell777 service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy forms part of the overall agreement between you and sell777 and should be read alongside our Terms & Conditions.
sell777 acts as the data controller in respect of personal data collected through the Platform. We are committed to handling your personal information responsibly and in accordance with applicable data protection laws and the requirements of our international gaming authority licence.
This Policy applies to all sell777 members, including those who access the Platform from Malaysia. Malaysian members should note that sell777's data practices are designed to meet international best-practice standards for data protection in the online gaming industry.
2. Personal Data We Collect
sell777 collects personal data that is necessary to provide our services, meet regulatory obligations, and maintain account security. The categories of personal data we collect include:
2.1 Identity and Registration Data
- Full legal name as it appears on your identity document;
- Date of birth and age verification information;
- Malaysian National Identity Card (MyKad) number or passport number;
- Nationality and country of residence;
- Gender (where provided at registration).
2.2 Contact Data
- Email address (primary method of account communication);
- Mobile telephone number (used for SMS verification and account security);
- Residential address (required for KYC verification and as required by licensing obligations).
2.3 Financial and Payment Data
- Payment method details (e-wallet registration information for Touch 'n Go eWallet, Boost, GrabPay; bank account details for FPX and DuitNow withdrawals);
- Transaction history — deposits, withdrawals, wager amounts, wins, and losses;
- USDT wallet address (where USDT TRC20 is used as a payment method).
sell777 does not store full credit or debit card numbers on its servers. Payment card data, where applicable, is processed through PCI-DSS compliant payment processors.
2.4 Account and Activity Data
- Username, account number, and login history;
- Game play records — game sessions, bet history, outcomes;
- Sportsbook wagering history;
- Bonus and promotion usage records;
- Customer support interaction records and correspondence.
2.5 Technical and Device Data
- IP address and approximate geolocation derived from IP;
- Device type, operating system, browser type and version;
- Session duration and navigation data on the Platform;
- Cookies and similar tracking technology data (see Section 7).
2.6 KYC Verification Documents
- Scanned copies or photographs of identity documents submitted for account verification;
- Selfie images submitted for liveness verification;
- Utility bills or bank statement headers submitted as proof of address.
3. How We Collect Personal Data
sell777 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to promotions;
- Automatically — through cookies, session tracking, server logs, and device fingerprinting technologies as you interact with the sell777 Platform;
- From third-party payment processors — transaction confirmation data and payment status information from e-wallet providers and bank payment gateways;
- From identity verification providers — verification outcomes and risk scores from third-party KYC and age verification services engaged by sell777;
- From fraud prevention services — risk signals and device intelligence data from third-party fraud detection partners.
4. Purposes of Processing
sell777 processes your personal data for the following purposes:
- Account administration — creating and managing your sell777 account, authenticating your identity at login, and maintaining account security;
- Service delivery — enabling access to casino games, sportsbook markets, slots, and all other Platform products;
- Payment processing — processing deposits and withdrawals via your chosen Malaysian payment method;
- Regulatory compliance — meeting Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification requirements under sell777's gaming licence;
- Fraud prevention and security — detecting and preventing fraudulent activity, account abuse, money laundering, and prohibited conduct;
- Responsible gaming — monitoring for indicators of problematic gambling behaviour and administering self-exclusion and limit-setting tools;
- Customer support — responding to enquiries, resolving disputes, and managing complaints;
- Marketing communications — sending promotional offers and bonus notifications to members who have opted in to marketing communications (opt-out available at any time);
- Platform improvement — analysing usage patterns to improve Platform performance, game selection, and user experience;
- Legal obligations — complying with applicable laws, regulatory orders, and legal proceedings.
5. Legal Basis for Processing
sell777 processes personal data on the following legal bases:
- Contractual necessity — processing required to fulfil our contractual obligations to you as a member, including account management, game access, and payment processing;
- Legal obligation — processing required to comply with AML regulations, KYC requirements, and gaming licence conditions;
- Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
- Consent — processing for direct marketing communications, where your explicit opt-in consent has been obtained.
6. Sharing and Disclosure of Personal Data
sell777 does not sell, rent, or trade your personal data to third-party marketers. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis:
- Gaming software providers — game studios and platform providers who require session data to deliver games (e.g., Evolution Gaming, Pragmatic Play, PG Soft). These providers are contractually bound to handle data securely and only for service delivery purposes;
- Payment processors — e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX payment gateway, and DuitNow service providers for transaction processing;
- KYC and identity verification services — third-party providers engaged to conduct age and identity verification;
- Fraud prevention providers — services that assist sell777 in detecting and preventing fraudulent or criminal activity on the Platform;
- Regulatory and licensing authorities — sell777's gaming licence authority may require access to member data as part of compliance oversight;
- Law enforcement and legal proceedings — where required by applicable law, court order, or formal regulatory request;
- Responsible gaming organisations — where a member is subject to a self-exclusion scheme that operates across multiple licensed operators.
sell777 will never proactively share your personal data with third parties for marketing purposes without your explicit consent. If you receive unsolicited marketing purportedly from sell777 via channels you did not authorise, please notify us immediately.
7. Cookies and Tracking Technologies
sell777 uses cookies and similar tracking technologies on the Platform for the following purposes:
7.1 Essential Cookies
Strictly necessary for the Platform to function — these cookies enable your sell777 login session to persist, maintain your wallet state across page navigations, and ensure Platform security features operate correctly. These cookies cannot be disabled without disrupting Platform functionality.
7.2 Analytics Cookies
Used to collect aggregated, anonymised data about how members navigate the Platform — page views, session duration, game category preferences, and device types. This data helps sell777 improve Platform performance and user experience. Analytics data is not linked to individual identifiable accounts for reporting purposes.
7.3 Fraud Detection Cookies
Device fingerprinting and session consistency cookies used to detect unusual login patterns, account sharing, and fraudulent multi-account activity. These are necessary for Platform security and operate as a legitimate interest basis.
You may manage cookie preferences through your browser settings. Disabling non-essential cookies does not affect your access to sell777 gaming products, though some personalisation features may be limited.
8. Data Retention
sell777 retains personal data for as long as is necessary for the purposes for which it was collected, and as required by our gaming licence obligations. The following general retention periods apply:
- Account and identity data — retained for the duration of your membership and for a minimum of five (5) years following account closure, as required by AML regulations applicable under our gaming licence;
- Transaction records — retained for a minimum of five (5) years from the date of each transaction;
- KYC documents — retained for the period required by applicable regulatory guidance, typically five (5) years from account closure;
- Customer support records — retained for three (3) years from the date of the last interaction;
- Marketing data — retained until you withdraw consent or object to processing, at which point marketing records are promptly updated.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
9. Data Security
sell777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and sell777's servers;
- Encrypted storage of sensitive data at rest, including identity document scans and payment details;
- Access controls limiting internal access to personal data on a strict need-to-know basis;
- Two-factor authentication requirements for staff accessing production systems;
- Regular security assessments and penetration testing of Platform infrastructure;
- Incident response procedures for data breach notification and remediation.
While sell777 takes reasonable steps to protect your data, no method of transmission over the internet is entirely secure. You play an important role in account security by maintaining the confidentiality of your sell777 login credentials and enabling two-factor authentication.
10. Your Data Rights
As a sell777 member, you have the following rights in respect of your personal data. To exercise any of these rights, contact sell777 support at the details in Section 14:
- Right of Access — you may request a copy of the personal data sell777 holds about you;
- Right of Rectification — you may request correction of inaccurate or incomplete personal data;
- Right of Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sell777's regulatory retention obligations;
- Right to Restrict Processing — you may request that sell777 restrict processing of your personal data in certain circumstances;
- Right to Object — you may object to processing of your personal data carried out on the basis of legitimate interests;
- Right to Withdraw Consent — where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing;
- Right to Data Portability — you may request that sell777 provide your personal data in a structured, commonly used, machine-readable format.
sell777 will respond to data rights requests within thirty (30) days. Where a request is complex or numerous, this period may be extended to sixty (60) days, with notification provided.
Please note that sell777's ability to delete or erase data may be limited where retention is required by gaming licence conditions, AML obligations, or legal proceedings. In such cases, we will explain the limitation in our response to your request.
11. Children's Privacy
The sell777 Platform and all associated gaming services are strictly intended for adults aged 21 and above. sell777 does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the KYC process for all members.
If sell777 discovers that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, the data will be securely deleted to the extent permitted by applicable law, and any funds associated with the underage account will be handled in accordance with regulatory guidance.
If you are a parent or guardian and believe that a minor has created a sell777 account, please contact our support team immediately at the details provided in Section 14.
12. International Data Transfers
sell777's gaming platform infrastructure may involve the transfer of personal data to servers or processors located outside Malaysia. Where such transfers occur, sell777 ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure that your personal data receives a level of protection equivalent to that required by applicable data protection standards.
Game studio providers, KYC verification services, and fraud prevention partners engaged by sell777 may be based in various jurisdictions. All third-party processors are subject to data processing agreements that bind them to confidentiality, security, and use-limitation obligations consistent with this Policy.
13. Changes to This Privacy Policy
sell777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, or applicable legal requirements. Where amendments are material, sell777 will notify members via a Platform notification or by email to your registered address at least seven (7) days prior to the amended Policy taking effect.
Continued use of the sell777 Platform after the effective date of an amended Policy constitutes your acceptance of the revised terms. The current version of this Policy, including its effective date, is always accessible at sell777.net/privacy-policy.
14. Contact and Data Enquiries
For any questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact sell777 via the following:
Support Email: [email protected] (plain text — not a clickable link)
Subject Line: Please use "Privacy Policy Enquiry" or "Data Rights Request" in your subject line to ensure prompt routing.
Response Time: Data rights requests within 30 days; general privacy enquiries within 5 business days.
Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays.
sell777 takes data protection enquiries seriously. All requests are handled by our compliance team and treated with strict confidentiality.