Privacy Policy

pepsi77 ("pepsi77", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at pepsi77.one ("the Platform"). This Privacy Policy has been prepared in accordance with the data protection obligations applicable under pepsi77's international gaming authority licence and the data protection framework applicable to our licensed jurisdiction.

This Privacy Policy applies to all personal data collected from or about Members, prospective Members, and visitors to pepsi77.one, regardless of whether they access the Platform from Malaysia or any other location. It applies across all pepsi77 products including the Sportsbook, Live Casino, Slots, Lottery Magnum, and all account management functions.

By registering an Account on pepsi77 or by continuing to use the Platform after the effective date of this policy, you acknowledge that you have read, understood, and consented to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of the Platform and may request closure of your Account.

For the purposes of applicable data protection law, pepsi77 is the data controller in respect of personal data collected through the Platform. As data controller, pepsi77 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing activities comply with applicable legal obligations.

pepsi77 may engage third-party data processors — including payment service providers, KYC verification services, and game software providers — who process personal data on our behalf under documented data processing agreements. Such processors are contractually bound to process data only on pepsi77's documented instructions and in compliance with applicable data protection law.

pepsi77 collects the following categories of personal data in connection with your use of the Platform:

pepsi77 does not collect or process special categories of personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where required by its AML or KYC obligations under applicable law.

pepsi77 collects personal data through the following means:

• Direct provision: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies and similar tracking technologies (see Section 10);
• Third-party sources: Identity and address verification data received from licensed KYC service providers; fraud screening data from anti-fraud service providers; and payment confirmation data from payment processors including Touch 'n Go eWallet, Boost, DuitNow, and banking partners.

pepsi77 processes your personal data for the following purposes:

• Account registration, verification, and ongoing administration;
• Processing deposits, withdrawals, and all financial transactions in MYR;
• Delivering the Services, including Sportsbook, Live Casino, Slots, and Lottery Magnum products;
• Conducting KYC, anti-money laundering (AML), and fraud prevention activities as required by pepsi77's licensing obligations;
• Calculating and awarding bonuses, promotions, and VIP programme benefits;
• Providing customer support and responding to enquiries and complaints;
• Sending transactional communications relating to your Account, including security alerts and transaction confirmations;
• Sending marketing communications where you have consented, or where permitted under the applicable legitimate interests basis;
• Complying with legal, regulatory, and licensing obligations, including reporting to relevant authorities where required;
• Analysing Platform usage to improve user experience, security, and operational performance;
• Enforcing pepsi77's Terms & Conditions and protecting against fraud, abuse, and prohibited conduct.

pepsi77 relies on the following legal bases for processing personal data:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the pepsi77 Terms & Conditions, including account administration and transaction processing;
• Legal obligation: Processing required to comply with applicable laws and our gaming authority licensing conditions, including AML, KYC, and regulatory reporting obligations;
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform analytics, and direct marketing to existing Members (subject to your right to object);
• Consent: Processing for marketing communications to prospective Members or in circumstances where consent is required under applicable law.

pepsi77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. pepsi77 may disclose your personal data to the following categories of recipients:

• Payment processors: Touch 'n Go eWallet, Boost, DuitNow, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency payment processors, for transaction processing purposes;
• KYC and identity verification providers: Licensed third-party services used to verify identity documents and conduct address verification checks;
• Fraud prevention and AML services: Third-party services used to screen for fraud, money laundering, and prohibited activity;
• Game software providers: Certified game providers who require access to account session data for the delivery of their gaming products;
• Regulatory and law enforcement authorities: Where pepsi77 is required to disclose information by its licensing authority, a court order, or applicable law;
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by pepsi77 under obligations of confidentiality.

All third-party processors engaged by pepsi77 are subject to appropriate contractual safeguards and are required to process personal data only for specified, documented purposes.

The pepsi77 Platform serves Members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other locations. Some of pepsi77's service providers and processors are located outside Malaysia, which may involve transfers of personal data across international borders.

Where personal data is transferred internationally, pepsi77 ensures that appropriate safeguards are in place, including contractual data transfer agreements equivalent to those required under applicable data protection law. pepsi77 will not transfer personal data to recipients in jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards.

pepsi77 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the Member's Account and for a minimum of five (5) years following Account closure, as required by AML and gaming licensing obligations;
• Transaction data: Retained for a minimum of five (5) years following the date of the transaction;
• Customer support communications: Retained for three (3) years from the date of last interaction;
• Technical and usage data: Retained for up to twelve (12) months from collection for operational and security analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pepsi77's data disposal procedures.

pepsi77 uses cookies and similar technologies to enable Platform functionality, maintain your logged-in session, analyse usage patterns, and support security monitoring. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly, including session authentication and security tokens. Cannot be disabled without impairing Platform functionality;
• Analytical cookies: Used to collect anonymised data on Platform usage patterns to support performance improvements. Data collected is aggregated and not linked to individual identities;
• Functional cookies: Retain your preferences such as language settings and display options across sessions.

You may configure your browser to decline cookies; however, doing so may affect the functionality of the pepsi77 Platform, including the ability to maintain your login session. pepsi77 does not use third-party advertising or tracking cookies for behavioural advertising purposes.

Subject to applicable law and the conditions of pepsi77's licensing obligations, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data pepsi77 holds about you;
• Right of rectification: You may request correction of inaccurate or incomplete personal data;
• Right of erasure: You may request deletion of your personal data where processing is no longer necessary and no overriding legal obligation requires retention;
• Right to restrict processing: You may request that pepsi77 limit the processing of your personal data in certain circumstances;
• Right to data portability: You may request a machine-readable copy of personal data you have provided to pepsi77, where technically feasible;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact pepsi77 via live chat or email (see Section 15). pepsi77 will respond to all valid requests within thirty (30) days. In some cases, pepsi77 may be required to retain certain data notwithstanding an erasure request, where retention is required by its AML or gaming licensing obligations.

The pepsi77 Platform is strictly for individuals aged 21 years and above. pepsi77 does not knowingly collect personal data from any person under the age of 21. If pepsi77 discovers that personal data has been submitted by a person under 21, that data will be deleted and the associated Account will be immediately terminated.

If you believe that a person under 21 has registered an Account on pepsi77 or provided personal data to the Platform, please contact pepsi77 support immediately so that appropriate action can be taken.

pepsi77 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end SSL/TLS encryption across all Platform sessions and data transmissions;
• Password hashing using industry-standard cryptographic algorithms — pepsi77 never stores passwords in plain text;
• Two-factor authentication availability for all Member accounts;
• Restricted internal access to personal data on a documented need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Segregated storage of Member financial data from operational systems.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. pepsi77 will notify affected Members and relevant authorities in the event of a data breach that is likely to result in a risk to individual rights, in accordance with applicable notification obligations.

pepsi77 reserves the right to update or amend this Privacy Policy at any time. Where a change is material, pepsi77 will provide advance notice to Members via their registered email address or a prominent Platform notification, prior to the change taking effect. The "Last updated" date at the top of this page will be revised accordingly.

Your continued use of the pepsi77 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept a material change, you should close your Account before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or pepsi77's data processing practices, please contact us via:

• Live Chat: Available 24/7 through the Platform at pepsi77.one
• Email: support@pepsi77.one (plain text — not a clickable link)

pepsi77 is committed to addressing all privacy-related enquiries promptly and to providing a substantive response within fourteen (14) calendar days of receipt. Formal data subject requests will be handled in accordance with applicable legal timeframes.