Privacy Policy apa7th – Personal Data Protection for Malaysian Online Casino Players

Apa7th collects several categories of information when you register and use our platform. Understanding the types of information we collect is important so you can make informed decisions about your use of the apa7th platform. The following are the main categories of information we collect:

Every piece of information collected by apa7th is used for specific, legitimate purposes. We do not use your data for anything beyond what is stated below without your prior written consent:

• Identity Verification & Account Security: To verify that you are the legitimate owner of your apa7th account and to protect it from unauthorised access by others.
• Financial Transaction Processing: To accurately and securely process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, and other supported payment methods.
• Gaming Service Delivery: To give you full access to all games available at apa7th — from Asia-themed slots and Live Casino to table games.
• Fraud Detection & Prevention: To identify, investigate, and prevent fraudulent activity, money laundering, and any other unlawful activity involving the apa7th platform.
• Legal Compliance: To fulfil apa7th's obligations under applicable Malaysian law, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Responsible Gambling: To monitor members' gameplay patterns and identify early signs of problem gambling so that apa7th can offer timely and appropriate assistance.
• Platform Improvements: To analyse aggregated usage data in order to improve the user experience, optimise platform performance, and introduce relevant new features.
• Service Communications: To send important account-related notices, transaction updates, changes to terms, or policy updates via email or SMS.
• Marketing Communications (with consent): To keep you informed about apa7th bonuses, promotions, and exclusive offers — but only if you have given your consent to receive marketing communications during registration or through your account settings.

Apa7th does not share members' personal information with third parties for marketing or commercial purposes without the member's explicit written consent. However, in the course of operating the platform, apa7th may need to share certain data with the following categories of third parties in limited and controlled circumstances:

• Payment Service Providers: Transaction information required for processing is shared with payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX banking institutions solely for the purpose of processing deposits and withdrawals. These providers are bound by strict confidentiality agreements and their own industry security standards.
• Technology Service Providers: Technology companies providing infrastructure, hosting, and technical support services to apa7th may have limited access to data necessary to deliver their services. All such providers are bound by strict data processing agreements.
• Game Developers: Technical data required to maintain gaming session continuity may be shared with game developers operating games on the apa7th platform. No personally identifiable information is shared for this purpose.
• Legal Authority: apa7th will disclose member information to Malaysian law enforcement authorities or regulatory bodies when required to do so by a valid court order or legal provision. In all such cases, apa7th will disclose only the minimum information required by the relevant order.

Apa7th continually invests in the latest security infrastructure to ensure every member's personal data is stored safely and protected against all threats. The key security measures we have in place are as follows:

• Advanced Data Encryption: All personal data stored in apa7th's databases is encrypted using industry-standard encryption protocols. Data in transit is protected by SSL/TLS 256-bit encryption at all times.
• Multi-Layer Access Controls: Access to member data is restricted to authorised personnel only and is governed by a multi-layered access control system with two-factor authentication required for all staff handling sensitive data.
• 24/7 Security Monitoring: apa7th's automated security monitoring system operates around the clock to detect and raise alerts on any suspicious activity or unauthorised access attempts targeting our servers and databases.
• Regular Security Audits: apa7th undergoes comprehensive security audits conducted by independent third parties on a regular basis to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: apa7th has a comprehensive security incident response plan in place. In the event of a data breach, apa7th will notify affected members within the timeframe required under applicable Malaysian law and take immediate remedial action.

Your personal data is stored on servers located in data centres that comply with strict physical and digital security standards. While apa7th takes all reasonable measures to protect your data, you also play an important role in your account's security — by ensuring your password is strong, unique, and not shared with anyone.

Apa7th uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their respective purposes:

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the apa7th platform. For more information on how to manage cookies in your browser, please refer to your web browser's help documentation.

As an apa7th member and as an individual whose personal data is processed by apa7th, you are entitled to rights guaranteed under applicable Malaysian data protection law. apa7th is committed to respecting and facilitating the exercise of all these rights:

To exercise any of the rights above, please contact the apa7th support team via 24/7 live chat or by email at [email protected]. apa7th will acknowledge receipt of your request within 3 business days and resolve it within the timeframe stipulated by applicable law.

Member financial information receives special attention at apa7th given the sensitivity of this data. We apply stricter security measures to protect financial details than we do for general personal data.

Apa7th accepts deposits and processes withdrawals through a range of local Malaysian digital payment methods:

• Apa7th does not store full credit or debit card numbers in our systems. Card transactions are processed through PCI-DSS certified payment gateways that handle sensitive information without it ever coming into direct contact with apa7th's servers.
• Digital payment account details — such as a registered Touch 'n Go eWallet or DuitNow account — are stored in encrypted form and used solely for processing withdrawals back to the same account.
• For withdrawals exceeding RM10,000, apa7th conducts additional AML compliance checks that may require supplementary verification documents. This is a legal requirement imposed on all financial institutions in Malaysia.
• Financial transaction records are retained for the period required under applicable Malaysian financial laws and cannot be deleted upon member request during the mandatory retention period.

Apa7th retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Retention periods vary by data type:

• Active Account Data: For as long as your account remains active with apa7th, your basic account data (name, email, phone number) will be retained to allow continued access to the platform.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements, even after account closure. This is a non-negotiable legal obligation.
• Gaming Activity Data: Retained for 3 years from the date of activity for dispute resolution and game fairness audit purposes.
• Support Communication Records: Retained for 2 years from the date of communication for quality control purposes and dispute resolution reference.
• Technical Data (Server Logs): Retained for 90 days for security and technical troubleshooting purposes, then automatically deleted.

Once the designated retention period has elapsed or the data is no longer required, apa7th will securely delete or anonymise the data in question to ensure it cannot be recovered or misused. For accounts closed at a member's request, data not subject to legal retention requirements will be deleted within 30 days of the account closure date.

Apa7th reserves the right to update or modify this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or technological developments. Any material changes to this Privacy Policy will be communicated to members through the following channels:

• A notice prominently displayed on this Privacy Policy page, with an updated revision date.
• An email notification to the registered email address on your account, at least 14 days before material changes take effect.
• A pop-up notice in your apa7th account panel upon your next login after the changes take effect.

Continued use of the apa7th platform after a revised Privacy Policy comes into effect will be considered acceptance of the updated terms. If you do not agree with any of the changes, you have the right to close your account and request deletion of your data in accordance with the procedures set out in Sections 6 and 8 of this document.

If you have any questions, concerns, or complaints regarding apa7th's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our trained team is ready to assist you:

• 24/7 Live Chat: The fastest way to get a response. Click the live chat icon within the apa7th platform to connect with our support team in Bahasa Malaysia within minutes.
• Email: Send your privacy enquiry to [email protected]. We are committed to responding to all privacy-related emails within 3 business days.
• Account Panel: Most data-related requests — such as updating personal information or managing cookie preferences — can be handled directly through your apa7th account panel without needing to contact support.

Apa7th takes every privacy-related complaint seriously. If you are not satisfied with apa7th's response to your privacy concern, you have the right to escalate the matter to the relevant data protection authority in Malaysia in accordance with applicable Malaysian law.

Thank you for trusting apa7th with your personal data. Your trust is the foundation of our relationship, and we are committed to always being worthy of it through responsible, transparent, and effective privacy practices.