Privacy Policy Triton7 — Our Commitment to Protecting the Personal Data of Malaysian Members

1. Introduction

Triton7 (operated under the domain triton7.best) respects the privacy of every individual who interacts with our platform. This Privacy Policy is written to explain clearly and transparently how we collect, use, store, and protect your personal data when you use the triton7 online casino and Sports Betting platform.

This Privacy Policy applies to all users of the triton7 platform — including registered members, prospective members browsing the site without registering, and anyone who contacts our support team. It forms part of your agreement with triton7 and should be read alongside our Terms & Conditions.

By using the triton7 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account if applicable.

2. Data We Collect

Triton7 collects two main categories of data — information you provide directly to us, and data collected automatically while you use the platform. Below is a detailed breakdown:

Data You Provide Directly:

• Registration information — full name, email address, Malaysian phone number, date of birth, and account password.
• Identity verification information (KYC) — a copy of your MyKad or Malaysian passport, a verification selfie, and in some cases proof of address such as a recent utility bill.
• Payment information — e-wallet account numbers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or bank details for withdrawal purposes. triton7 does not directly store credit card numbers or card details.
• Support communications — the contents of correspondence between you and the triton7 support team via live chat or email.
• Feedback and surveys — any feedback you voluntarily share about your experience on triton7.

Automatically Collected Data:

• Technical data — your IP address, web browser type and version, device operating system, and screen resolution.
• Usage data — pages you visit on triton7, time spent on each page, games played, total bets placed, and transaction history.
• Session data — login time, logout time, active session duration, and in-platform activity.
• Cookie data — information stored via cookies and similar tracking technologies (see Section 8 for further details).
• Approximate location data — geographic location based on your IP address, for region verification and compliance purposes.

3. How We Collect Your Data

Triton7 collects your personal data through several channels:

• Registration form — when you create a new account at triton7.
• KYC Process — when you submit identity verification documents prior to your first withdrawal.
• Financial transactions — when you make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, or ShopeePay, or when you submit a withdrawal request.
• Platform usage — automatically when you log in, play games, place bets, or browse any section of the triton7 platform.
• Communication with Support — when you contact our support team via live chat or email.
• Cookies and similar technologies — automatically when you visit the triton7 website (see Section 8).
• Authorised third parties — in certain cases, we may receive information from third-party identity verification providers used in our KYC process, or from anti-fraud data providers.

4. How We Use Your Data

Triton7 uses your personal data solely for the purposes listed below. We will not use your data for any other purpose without your consent:

If you have previously consented to receive marketing communications and wish to withdraw that consent, you may do so at any time by clicking the "Unsubscribe" link in any marketing email you receive from triton7, or by contacting our support team directly.

5. Data Sharing

Triton7 does not sell your personal data. However, in certain limited circumstances, we may need to share your data with the following parties:

• Payment service providers — payment gateways for Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay require certain transaction data to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Identity verification service providers — third-party KYC providers that assist in verifying your identity documents. This data is shared solely for verification purposes and is not retained by these providers once the KYC process is complete.
• Licensed game providers — game providers such as Evolution Gaming, Pragmatic Play, and others may receive minimal technical data (such as session IDs) required to deliver games properly. They do not receive your personal identity information.
• Government and regulatory authorities — where required by Malaysian law or a valid court order, triton7 will disclose the necessary data to the relevant authorities.
• Professional advisors — lawyers, accountants, or auditors bound by professional confidentiality obligations, in cases where their services are required.

6. Data Security

Triton7 invests heavily in data security because we know you trust us with your personal information. Here are the technical and organisational security measures we have in place:

• 256-bit SSL encryption for all communications between your browser and triton7's servers — ensuring your data cannot be intercepted while in transit.
• Static data encryption — sensitive data stored in our databases, including identity information and payment details, is encrypted using modern encryption algorithms.
• Role-based access control — only staff who require access to specific data in order to carry out their duties are permitted to do so. All access is logged and audited regularly.
• Regular security audits — triton7 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• 24/7 monitoring — an automated monitoring system runs continuously to detect suspicious activity, unauthorised access attempts, and anomalies in data traffic.
• Staff Training — all triton7 staff who handle member data receive regular data protection training.
• Incident response plan — triton7 has established incident response procedures in place to contain and minimise the impact of any potential data breach.

While we take all reasonable measures to protect your data, no system is 100% secure. You also play an important role in keeping your account safe — use a strong password, do not share your login credentials, and enable two-factor authentication where available.

7. Data Retention Period

Triton7 does not retain your personal data for longer than necessary. Retention periods vary depending on the type of data and applicable legal requirements:

• Active account data — retained for as long as your account is active on triton7. Once you close your account, basic data will be deleted within 90 days unless there is a legal requirement to retain it for longer.
• Financial transaction records — retained for a minimum of 7 years from the transaction date to meet financial and anti-money laundering legal requirements in force in Malaysia.
• KYC documents — retained for a minimum of 5 years after the business relationship ends, in line with compliance requirements.
• Support communication logs — retained for 2 years from the date of your last interaction.
• Technical and security logs — retained for 1 year for the purpose of security incident investigations where required.
• Anonymised analytics data — fully anonymised data (where no individual can be identified) may be retained indefinitely for research and platform improvement purposes.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered.

8. Cookies and Tracking Technologies

Triton7 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:

• Essential cookies (required) — cookies required for the platform's core functions, such as maintaining your login session, storing language preferences, and ensuring session security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — collects information about how you use the platform (pages visited, time spent, errors encountered) in aggregate and anonymised form. This information helps us improve the platform.
• Functional cookies — allows the platform to remember your preferences (such as display size and game settings) to deliver a more personalised experience.
• Security cookies — used to detect and prevent fraudulent activity, bots, and unauthorised access.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the triton7 platform and your overall user experience.

9. Your Rights

As a triton7 member, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team via live chat or email at support@triton7.best:

Triton7 is committed to processing data rights requests within the stipulated timeframe. Should any unavoidable delay arise, we will notify you and provide a reasonable explanation.

10. Children's Data

The triton7 platform is strictly for individuals aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18.

All registrations go through an age verification process. Should we discover that data has been collected from a minor, we will delete that data immediately and close the account in question. Parents or guardians who become aware that their child has registered a triton7 account should contact us immediately at support@triton7.best for prompt action.

11. International Data Transfers

In operating the triton7 platform, some data may be processed or stored by our service providers operating outside Malaysia. This includes cloud infrastructure providers and international gaming service providers.

When such data transfers occur, triton7 ensures that:

• Data transfers are only carried out to countries or organisations that provide a level of data protection equivalent to or higher than Malaysia's standards.
• Legally binding data processing agreements are signed with all recipient parties to ensure your data remains protected.
• Transfers are made solely for the stated purposes required by platform operations.

Triton7 ensures that all international data transfers are carried out in full compliance with applicable data protection laws and do not compromise your privacy rights as our Malaysian member.

12. Changes to the Privacy Policy

Triton7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered members to inform them of the changes.
• Displaying a clear notice on the platform's main page for at least 14 days before the changes take effect, unless the changes are required immediately for legal or security reasons.

Your continued use of the triton7 platform after an updated Privacy Policy takes effect will be considered your acceptance of those changes. If you do not agree with the updated version, please contact us to close your account before the changes take effect.

We encourage you to review this page regularly — at least once every six months — to stay informed of how we handle your data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how triton7 handles your personal data, we're here to help through the following channels:

• Live Chat — available directly within the triton7 platform, 24 hours a day, 7 days a week. This is the fastest way to get an immediate response.
• Email — send your enquiry to support@triton7.best. Our typical response time is within 24 business hours.

For data rights requests (access, rectification, deletion), please include the following information in your enquiry to help us process it more efficiently:

• Full name as registered on your triton7 account.
• Registered email address.
• Type of request (e.g. data access request, data deletion).
• Additional details where applicable.