Unik777 Privacy Policy – Member Personal Data Protection

Unik777 collects your personal information only when it is genuinely necessary to provide you with the best service. We do not collect excessive or irrelevant data. Generally, the information we collect falls into three main categories:

Information You Provide Directly:

• Full name, date of birth, and gender as stated in your official identification document.
• Email address, mobile phone number, and current residential address.
• Bank account or e-wallet details registered for deposit and withdrawal purposes.
• A copy of your identity document (MyKad or passport) submitted during the KYC process.
• Account passwords are stored in encrypted hash format — we do not store your password in plain text.

Automatically Collected Information:

• Your IP address, device type, operating system, and web browser version.
• Access log data including the dates, times, and pages you visit on the platform.
• Geolocation information (state or city) based on your IP address.
• Usage pattern data such as games played, session duration, and login frequency.

Information from Third Parties:

• Payment verification information from payment service providers integrated with our platform.
• Compliance data from authorised third-party KYC service providers.

Every piece of information we collect is used for a clear and legitimate purpose. unik777 does not use your data for any purpose unrelated to the services we provide. Below is a detailed breakdown of how your data is used:

For marketing communications in particular, you have the right to withdraw your consent at any time without affecting the smooth operation of unik777's core platform services. Any promotional messages you receive from us will include an option to unsubscribe.

Unik777 does not sell or disclose your personal data to any external party for marketing purposes. However, there are limited situations where we need to share your information with certain parties to enable the platform to operate properly and comply with applicable law:

• Payment Service Providers: Required transaction information is shared with payment processors integrated with our platform (such as DuitNow, Touch 'n Go, and Boost service providers) solely for the purpose of processing your financial transactions.
• KYC Service Providers: Identity documents are shared with authorised identity verification partners to ensure compliance with anti-money laundering regulations.
• Game Service Providers: Basic account information is shared with game software providers integrated with our platform to enable a seamless gaming experience.
• Authorities and Regulatory Bodies: unik777 will disclose the required information to law enforcement agencies or regulatory bodies when required to do so by law or a valid court order.
• Professional Advisors: Where required, limited information may be shared with our lawyers, accountants, or auditors who are bound by strict confidentiality obligations.

Unik777 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use the platform to help us identify technical issues and improve the user experience.
• Functional Cookies: Saving your preferences such as display settings and game preferences so you don't need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand overall platform usage patterns in aggregate and anonymised form for continuous improvement purposes.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the unik777 platform.

Unik777 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Retention periods are also determined by applicable legal and regulatory requirements, particularly those relating to financial records and anti-money laundering compliance.

Our data retention guidelines:

• Financial transaction data is retained for a minimum of 7 years in accordance with applicable legal requirements.
• Account activity logs are retained for 2 years from the date of activity.
• KYC documents are retained for the duration of the active account and 5 years after account closure.
• Customer support communication data is retained for 3 years.
• Marketing data and communication preferences are retained until you withdraw consent.

When your data is no longer needed and there is no legal obligation to retain it, unik777 will securely delete or anonymise it. You may request deletion of your personal data (subject to legal retention obligations) by contacting our privacy team.

As a unik777 member, you hold the following privacy rights, which we are committed to respecting and facilitating:

• Right to Access: You have the right to know what personal data we hold about you and to obtain a copy of it.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted from our systems.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain situations.
• Right to Object: You have the right to object to the processing of your data for specific purposes such as direct marketing.
• Right to Data Portability: You may request that your data be provided to you in a machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact the unik777 privacy team via live chat within the platform. We are committed to processing every request within 30 business days of receipt. In complex cases, this period may be extended to up to 60 days, and you will be notified in advance.

Unik777 implements a wide range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Our security approach encompasses multiple layers of protection:

• Data Encryption in Transit: All communications between your device and our servers are protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data such as payment information and KYC documents are stored in encrypted format using AES-256 algorithm.
• Role-Based Access Control: Only staff who require access to specific data to perform their duties are permitted to do so, based on the principle of least privilege.
• Two-Factor Authentication: All internal access to systems storing members' personal data requires two-factor authentication.
• Continuous Security Monitoring: Our SIEM (Security Information and Event Management) system monitors all system activity in real time to detect anomalies.
• Regular Penetration Testing: unik777 conducts regular security testing by independent third parties to identify and address any system vulnerabilities.
• Staff Training: All unik777 staff who handle personal data undergo regular privacy and security training.

Unik777 is a gaming platform designed exclusively for adults aged 21 and above. We do not knowingly collect, process, or store personal data from underage individuals.

The unik777 registration process includes strict age verification, including KYC document verification, to ensure that only eligible individuals can register and use our platform.

If we become aware that we have inadvertently collected personal data from someone below the required age limit, we will immediately take the following steps:

• Permanently deleting all personal data associated with the individual from our systems.
• Closing the associated account immediately.
• Returning any remaining fund balance via an appropriate method.

If you have reason to believe that someone under the required age has registered an account on unik777, please contact us immediately through our customer support channels.

Unik777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle your personal data.

Each amendment made will:

• Published on this page with a new "Updated" date.
• Communicated to all active members via an in-platform notice or email if the amendment involves material changes to your privacy rights.
• Effective immediately upon publication, unless a different effective date is stated.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the unik777 platform after any amendments are published will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the unik777 privacy team is here to help.

You may reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the unik777 platform — the fastest way to get a response.
• Email: [email protected] — for detailed enquiries or those requiring a written record.

For privacy rights requests such as data access, correction, or deletion, please clearly state the type of request and your account information so we can process it quickly and accurately. All requests will be acknowledged within 3 business days and resolved within 30 business days.