Privacy Policy

This Privacy Policy ("Policy") issued by Pepsi77 ("Pepsi77", "we", "us", or "our") and applies to all personal data collected, processed, stored, and used in connection with your use of the website accessible at pepsi77.cam and any associated services, features, or products operated by Pepsi77 (collectively, the "Platform").

Pepsi77 is committed to protecting the privacy and personal data of all Members, visitors, and users of the Platform. This Policy sets out the basis on which we collect and process personal data about you, the purposes for which it is used, how long it is retained, and the rights you hold in relation to your personal information.

By registering an account on pepsi77.cam, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that can identify you as natural person, directly or indirectly — including your name, identity card number, email address, IP address, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means Pepsi77, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of Pepsi77under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process Pepsi77 uses to verify Member age, identity, and source of funds in compliance with applicable obligations.
• "Cookie" means a small text file placed on your device by the Platform for the purposes of recognising your device, personalising content, and collecting analytical data.

Pepsi77 collects the following categories of personal data, depending on your level of interaction with the Platform:

The majority of personal data we hold is provided directly by you when you create an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotional offer. We may also collect data when you complete surveys or provide feedback.

When you access or use the Platform, we automatically collect technical data including your IP address, device identifiers, browser type, operating system, pages visited, time spent on the Platform, and referring URLs. This information is collected through server logs, cookies, pixel tags, and similar tracking technologies.

In some circumstances, Pepsi77 may receive personal data from third parties, including payment processors (such as our integrated DuitNow, FPX, Touch 'n Go eWallet, Boost, and bank transfer partners), identity verification service providers, fraud detection and anti-money laundering compliance providers, and where applicable, marketing and analytics partners acting under data processing agreements with us.

Pepsi77 processes your personal data for the following specific purposes:

• Account Management: To create, maintain, and administer your Pepsi77 Member account, including login authentication and account security;
• Identity & Age Verification (KYC): To verify your identity and confirm that you are aged 21 or above before you can make deposits or withdrawals;
• Payment Processing: To process deposits in MYR via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and withdrawal requests to verified accounts;
• Service Delivery: To operate and improve the Platform, including live dealer games, sports betting markets (EPL, Liga Super Malaysia, UFC, and others), slots, and all other gaming products;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, bonus abuse, and other prohibited activities;
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations;
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance via live chat, email, and other support channels;
• Marketing & Promotions: To send you personalised promotional offers, bonus notifications, and platform updates — where you have consented to receive such communications;
• Platform Analytics: To analyse usage patterns, improve user experience, and develop new features based on aggregated and anonymised behavioural data;
• Responsible Gambling: To monitor betting patterns and implement responsible gambling interventions, including deposit limits, self-exclusion tools, and problem gambling alerts.

Pepsi77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract represented by our Terms & Conditions — including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, anti-money laundering checks, and data retention requirements;
• Legitimate Interests: Processing carried out in pursuit of Pepsi77's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — particularly in relation to marketing communications. You may withdraw your consent at any time by contacting our support team or updating your account notification preferences.

Pepsi77 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may, however, share your personal data with the following categories of recipients under appropriate data protection safeguards:

• Payment Processors: Malaysian payment infrastructure partners (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank) to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and age verification service providers acting as Data Processors on our behalf under written data processing agreements;
• Fraud & Compliance Partners: Anti-fraud, anti-money laundering, and regulatory compliance service providers who assist us in detecting and preventing financial crime;
• Technology Infrastructure Providers: Hosting, content delivery, cloud storage, and cybersecurity service providers who maintain the technical infrastructure of the Platform;
• Regulatory Authorities: Government authorities, law enforcement agencies, or regulatory bodies where disclosure is required by applicable law, court order, or lawful regulatory request;
• Professional Advisers: Legal counsel, auditors, and financial advisers bound by professional confidentiality obligations where disclosure is necessary for the conduct of our business.

Some of Pepsi77's technology infrastructure providers and service partners operate outside Malaysia. Where personal data is transferred to recipients located in other countries, Pepsi77 ensures that appropriate safeguards are in place prior to any such transfer — including contractual data protection clauses that meet internationally recognised standards.

Where personal data is transferred to jurisdictions that may not provide the same level of data protection as Malaysia, Pepsi77 will implement supplementary technical and organisational measures — such as encryption in transit and at rest — to maintain an equivalent level of protection for your personal information.

Pepsi77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods generally apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction & Financial Data: Retained for a minimum of seven (7) years from the date of transaction to comply with applicable financial record-keeping obligations;
• Gaming & Betting History: Retained for a minimum of three (3) years to support dispute resolution and responsible gambling monitoring;
• Support Communications: Retained for two (2) years from the date of last communication;
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents identification of any individual.

Pepsi77 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit pepsi77.cam. They help us remember your preferences, maintain your session, and collect analytical data.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform — including session management, login authentication, and fraud prevention. These cannot be disabled without impacting core Platform functionality;
• Performance & Analytics Cookies: Collect anonymised data on how visitors use the Platform (pages visited, time on site, error messages) to help us improve functionality and user experience;
• Functional Cookies: Remember your preferences — such as language selection, preferred game categories, and display settings — to personalise your experience;
• Marketing Cookies: Used (where you have consented) to deliver relevant promotional content and measure the effectiveness of our marketing campaigns.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some Platform features.

Subject to applicable law, you have the following rights in relation to your personal data held by Pepsi77. To exercise any of these rights, submit a written request to our support team at [email protected]. We will respond within thirty (30) calendar days of receiving your request and may require identity verification before processing certain requests.

• Right of Access: The right to request a copy of all personal data Pepsi77 holds about you, together with information about how it is being processed;
• Right to Rectification: The right to have any inaccurate or incomplete personal data corrected or updated;
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Restriction: The right to request that we limit the processing of your personal data in certain circumstances, such as while dispute is under investigation;
• Right to Data Portability: The right to receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Pepsi77 services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data relating to persons under the age of 21. Our registration process includes mandatory age verification checks as part of our KYC procedures.

If Pepsi77 becomes aware that personal data has been collected from a person under the age of 21 — whether through fraudulent misrepresentation of age or otherwise — we will immediately suspend the associated account, delete all personal data relating to that individual, and process the return of any deposited funds to the payment source, subject to verification.

If you believe that a person under 21 years of age has registered an account on the Pepsi77 platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

Pepsi77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data in transit between your device and our servers;
• AES-256 encryption for personal and financial data stored in our databases;
• Two-factor authentication (2FA) available for Member accounts;
• Role-based access controls ensuring that staff can only access data necessary for their specific job functions;
• Regular third-party penetration testing and vulnerability assessments of our Platform infrastructure;
• Continuous monitoring of network traffic for anomalous activity and potential security incidents;
• Formal data breach response procedures, including notification obligations where a breach is likely to affect your rights and freedoms.

Whilst Pepsi77 takes every reasonable precaution to protect your personal data, no method of electronic transmission or storage is completely secure. You play an important role in protecting your own data by using a strong, unique password for your Pepsi77 account and by keeping your login credentials confidential.

Pepsi77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending an email notification to your registered email address.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how Pepsi77 protects your personal data. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Pepsi77 processes your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — marked "Privacy Request" in the subject line for fastest routing
• Live Chat: Available 24/7 at pepsi77.cam — average response time 3–5 minutes
• Support Languages: English, Bahasa Melayu, and Mandarin (中文)

Pepsi77 takes all privacy complaints seriously and will acknowledge receipt of your query within two (2) business days. A full response will be provided within thirty (30) calendar days, or earlier where possible. For complex requests, we will notify you if additional time is required and provide an estimated resolution date.