Privacy Policy

pepsi77 operates the online gaming and sports betting platform accessible at pepsi77.asia ("the Platform"). In the context of this Privacy Policy, pepsi77 ("we", "us", "our", "the Company") acts as the data controller in respect of the personal data of Members and visitors.

We are committed to protecting the privacy and security of the personal data entrusted to us by our Members. This commitment is reflected in our data handling practices, our investment in technical security measures, and our policy of collecting only the data that is necessary for us to deliver our services safely and in compliance with applicable licensing requirements.

pepsi77 collects the following categories of personal data from Members and Platform visitors:

2.1 Identity Data:

• Full legal name as it appears on government-issued identification;
• Date of birth and age verification information;
• MyKad number (for Malaysian citizens) or passport number (for non-citizens), collected during KYC verification;
• Photographic copies of government-issued identification documents submitted for KYC;
• Selfie or liveness verification images where required for enhanced KYC.

2.2 Contact Data:

• Email address registered to your Account;
• Malaysian mobile telephone number;
• Residential address (where required for KYC or enhanced due diligence).

2.3 Account & Transaction Data:

• Username and account credentials (passwords are stored in hashed form only — never in plaintext);
• Deposit and withdrawal history, transaction amounts, dates, and payment method identifiers;
• Bonus and promotion history;
• Responsible gaming settings and self-exclusion status.

2.4 Gaming Data:

• Game play history, wager amounts, wins, losses, and session duration logs;
• Sports betting selections, bet types, stakes, and settlement records;
• Responsible gaming tool usage patterns (deposit limits applied, cooling-off periods activated, etc.).

2.5 Technical Data:

• IP address and geolocation data at time of access;
• Device type, operating system, browser type and version;
• Session timestamps, page navigation history within the Platform;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data:

• Records of live chat, email, and support ticket interactions between you and pepsi77 support;
• Feedback, complaints, and dispute records.

pepsi77 collects personal data through the following channels:

• Direct submission: information you provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and responsible gaming tool configuration;
• Automated collection: technical and usage data collected automatically when you visit or interact with the Platform, including via cookies, server logs, and analytics tools;
• Third-party sources: identity verification and fraud screening services that process or corroborate identity data submitted during KYC; payment processors who confirm transaction status; and geolocation service providers that validate your access location.

pepsi77 uses personal data for the following purposes:

• Account management: creating, maintaining, and securing your pepsi77 Account;
• Identity verification: fulfilling KYC requirements to verify your identity and age (21+) before processing withdrawals;
• Payment processing: facilitating deposits and withdrawals via your registered payment methods (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, and USDT);
• Service delivery: providing access to casino games, the sportsbook, promotional offers, and customer support;
• Legal and regulatory compliance: meeting anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming obligations under our applicable gaming licence;
• Fraud prevention and security: detecting, investigating, and preventing unauthorised access, fraudulent transactions, and abuse of Platform services;
• Responsible gaming: monitoring gaming patterns where necessary to identify potential problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion;
• Platform improvement: analysing aggregated usage data to improve Platform performance, game selection, and user experience;
• Communications: sending transactional communications (account confirmations, transaction receipts, security alerts) and, where you have provided consent, promotional communications about pepsi77 offers.

pepsi77 processes personal data on the following legal bases, consistent with applicable data protection principles:

• Contractual necessity: processing required to perform our obligations under the Member agreement, including account management, payment processing, and service delivery;
• Legal obligation: processing required to comply with AML, CTF, KYC, and responsible gaming requirements under applicable gaming licensing conditions;
• Legitimate interests: processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: processing for marketing communications, where your explicit opt-in consent has been obtained and can be withdrawn at any time.

pepsi77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share data only in the following circumstances and only to the extent necessary:

• Service providers: third-party vendors engaged to support Platform operations, including payment processors, KYC identity verification providers, cloud hosting providers, fraud detection services, and customer support platforms. All service providers are bound by data processing agreements requiring them to handle Member data in accordance with applicable data protection standards;
• Gaming software providers: game studios whose titles are hosted on the Platform may receive the minimum data necessary for game functionality and fairness auditing — typically an anonymised player identifier rather than personally identifiable information;
• Regulatory and law enforcement authorities: pepsi77 may disclose Member data to relevant gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by law, court order, or regulatory direction;
• Corporate transactions: in the event of a merger, acquisition, or sale of substantially all assets of pepsi77, Member data may be transferred to the acquiring entity, subject to equivalent data protection obligations;
• With your consent: for any other purpose where you have provided explicit written consent.

7.1 What Are Cookies. Cookies are small text files stored on your device when you visit the pepsi77 Platform. They allow the Platform to recognise your device across sessions and to deliver a consistent, personalised experience.

7.2 Types of Cookies Used by pepsi77:

• Strictly necessary cookies: essential for core Platform functionality including login session management, security tokens, and language preference storage. These cannot be disabled without breaking core Platform functions;
• Performance and analytics cookies: collect anonymised data about how visitors use the Platform — which pages are visited most frequently, where users encounter errors, and how users navigate between sections. This data is used solely for Platform improvement;
• Functional cookies: remember your preferences such as display settings, notification preferences, and responsible gaming configurations to personalise your experience;
• Security cookies: support fraud detection and account security functions, including identifying suspicious login attempts from new devices or IP addresses.

7.3 Cookie Management. You may adjust your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies will impair core Platform functionality including the ability to stay logged in. pepsi77 does not use cookies for cross-site advertising tracking or to share behavioural data with external advertising platforms.

pepsi77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active accounts: personal data associated with an active pepsi77 Account is retained for the duration of the Account's active status;
• Closed accounts: following voluntary Account closure, transaction records, KYC documentation, and gameplay logs are retained for a minimum of five (5) years to comply with AML and gaming licence record-keeping requirements. This retention period may be extended where an account was subject to suspicious activity investigation or dispute;
• Self-excluded accounts: records of self-exclusion are retained for the duration of the exclusion period and for a minimum of five (5) years thereafter, to prevent re-registration in breach of the exclusion;
• Support and communications data: retained for a minimum of two (2) years following the last interaction, or longer where the interaction is related to a dispute or legal claim;
• Technical and log data: typically retained for twelve (12) months, unless required longer for security investigation purposes.

Where data is no longer required to be retained, pepsi77 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.

pepsi77 implements a layered approach to data security, including the following technical and organisational measures:

• 256-bit SSL/TLS encryption for all data in transit between your device and Platform servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• One-way cryptographic hashing of all Member passwords — no staff member can retrieve your plaintext password;
• Role-based access controls limiting internal data access to personnel with a legitimate business need;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• Automated monitoring for suspicious access patterns, including brute force login attempts and unusual transaction activity;
• Two-factor authentication (2FA) via SMS OTP available to all Members — pepsi77 strongly recommends enabling 2FA from Account Settings.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a material risk to Member privacy, pepsi77 will notify affected Members and relevant regulatory authorities in accordance with applicable notification obligations.

Subject to applicable data protection law and any overriding legal retention obligations, pepsi77 Members have the following rights in respect of their personal data:

• Right of access: you may request a copy of the personal data pepsi77 holds about you;
• Right to rectification: you may request correction of inaccurate or incomplete personal data. Some data fields can be updated directly within your Account settings; others require identity verification and support assistance;
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and no overriding legal retention obligation applies. Note that transaction records, KYC data, and gambling history are subject to mandatory regulatory retention periods (see Section 8) and cannot be deleted during those periods;
• Right to restrict processing: in certain circumstances, you may request that pepsi77 limit the processing of your data while a dispute or correction request is resolved;
• Right to data portability: you may request a copy of your personal data in a structured, commonly used machine-readable format where technically feasible;
• Right to withdraw consent: where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: you may object to processing based on legitimate interests grounds, including profiling for marketing purposes.

To exercise any of these rights, contact pepsi77 support via 24/7 live chat or in writing to [email protected]. Identity verification may be required before processing your request. pepsi77 will respond within thirty (30) days of receipt, or notify you of any extension required.

The pepsi77 Platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect, use, or store personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of an individual under 21, that data will be deleted and the associated Account suspended immediately.

If you are a parent or guardian and believe that your child has accessed or registered on the pepsi77 Platform, please contact support immediately at [email protected]. We take underage access seriously and will take prompt action.

pepsi77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or our services. Where changes are material, pepsi77 will notify active Members by email or via a Platform notification prior to the changes taking effect. The updated Policy will be published on this page with a revised "Last Updated" date.

Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by pepsi77, please contact us through the following channels:

• Live Chat: 24/7 live chat support accessible from any page on pepsi77.asia;
• Email: [email protected] (plain text — not a clickable link);
• Response Time: we aim to acknowledge all privacy-related enquiries within three (3) business days and to resolve them within thirty (30) days.

For escalated data protection concerns that cannot be resolved through our internal process, you may refer the matter to the relevant data protection or gaming regulatory authority under whose jurisdiction pepsi77 operates.