Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by Tokyo777 ("we", "us", "our", "the Company", "the Platform") and applies to all personal data collected from individuals ("you", "Player", "User") who access or use the Tokyo777 website, mobile interface, applications, and related services (collectively, "the Service").

Tokyo777 acts as the data controller in respect of personal information collected through the Service. We are responsible for deciding the purposes and means by which your personal data is processed, and we are committed to handling that data lawfully, fairly, and transparently.

This Policy should be read alongside our Terms and Conditions and Responsible Gambling Policy. By registering an account or continuing to use the Service, you acknowledge that you have read and understood this Privacy Policy.

If you have questions about any aspect of this Policy or wish to exercise your data rights, please contact our support team using the details in Section 16.

2. Definitions

The following terms are used throughout this Policy with the meanings defined below:

3. Personal Data We Collect

Tokyo777 collects personal data across several categories, depending on how you interact with the Service. The categories of data we may hold are described in the table below:

We do not knowingly collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or data concerning sexual orientation, except where strictly required for responsible gambling or regulatory compliance purposes and only with appropriate safeguards in place.

4. How Personal Data Is Collected

We collect your personal data through the following means:

• Directly from you: When you complete the account registration form, submit KYC documentation, make a deposit or withdrawal, contact our support team, or respond to a promotion or survey.
• Automatically during use: Technical and usage data is collected automatically when you visit the platform, via cookies, server logs, and analytics tools. This includes your IP address, device information, and browsing behaviour on our site.
• From payment processors: When you initiate a financial transaction via Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, 7-Eleven Cliqq, or USDT TRC20, our payment processors may pass transaction-related data back to us for reconciliation and fraud prevention purposes.
• From identity verification services: Third-party KYC providers may supply verification results or flag discrepancies as part of our compliance obligations.
• From publicly available sources: We may supplement your data with information from public databases where required for fraud prevention, anti-money-laundering compliance, or sanctions screening purposes.

5. Purposes of Data Processing

Tokyo777 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which we process your data are:

• Account creation and management: To register your account, authenticate your identity, and maintain your player profile throughout your time with us.
• Service delivery: To provide access to games, process bets, distribute winnings, and deliver all features of the Tokyo777 platform.
• Financial transaction processing: To process deposits and withdrawals via your chosen payment method (including e-wallets, bank transfers, and cryptocurrency), and to maintain accurate financial records.
• KYC and regulatory compliance: To verify your identity and age (21+ requirement), conduct anti-money-laundering checks, comply with our licensing obligations, and respond to regulatory requests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, cheating, collusion, and other forms of abuse on the platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance in English, Bahasa Melayu, and Mandarin.
• Responsible gambling: To monitor gaming behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to comply with responsible gambling obligations.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent. You may opt out at any time.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, conduct A/B testing, and improve the overall player experience on Tokyo777.
• Legal compliance: To fulfil our obligations under applicable laws, respond to lawful requests from government authorities, and enforce our Terms and Conditions.

6. Legal Basis for Processing

Tokyo777 relies on the following legal grounds to process your personal data lawfully:

• Contractual necessity: Processing required to perform the contract we have with you — for example, processing your deposits, delivering game access, and managing your account.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC/AML obligations, responsible gambling rules, and licensing conditions.
• Legitimate interests: Processing that is necessary for our legitimate business interests — such as fraud prevention, platform security, and improving the Service — provided that such interests are not overridden by your rights and freedoms.
• Consent: Processing that you have explicitly agreed to, such as receiving marketing communications. You have the right to withdraw consent at any time, and doing so will not affect the lawfulness of processing carried out before withdrawal.

7. Cookies & Tracking Technologies

Tokyo777 uses cookies and similar tracking technologies on our platform. A cookie is a small text file stored on your device when you visit a website. We use cookies for the following purposes:

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Tokyo777 platform, including your ability to log in or maintain a game session.

8. Data Sharing & Disclosure

Tokyo777 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary:

• Payment processors: Your financial information is shared with our authorised payment service providers (including those facilitating Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, CIMB, Maybank, and Hong Leong transactions) solely for the purpose of processing deposits and withdrawals.
• Identity verification providers: KYC data may be processed by authorised third-party identity verification specialists who assist us in meeting our regulatory obligations.
• Game content providers: Certain technical data (such as Player ID and session tokens) is shared with our licensed game software providers to enable game delivery. These providers do not receive your identity or financial details.
• Legal and regulatory authorities: We may disclose personal data to government agencies, law enforcement authorities, regulators, or courts where required by applicable law, a lawful court order, or in connection with an investigation into fraud, money laundering, or other illegal activity.
• Professional advisors: We may share data with lawyers, auditors, and insurers where necessary for the conduct of our business, subject to appropriate confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data may be transferred to the acquiring entity, provided that equivalent data protection standards are maintained.

9. International Data Transfers

In the course of operating a global gaming platform that serves Malaysian players, your personal data may be transferred to, stored, or processed in countries outside Malaysia. Where such transfers occur, Tokyo777 takes steps to ensure that an adequate level of protection is applied to your data, consistent with the standards described in this Policy.

Where data is transferred to jurisdictions that may not offer the same level of statutory data protection as Malaysia, we implement appropriate safeguards — including data processing agreements with contractual protections — to ensure your data remains protected.

10. Data Retention

Tokyo777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The key retention periods that apply to player data are outlined below:

• Active account data: Retained for the duration of your account and for a period of 5 years following permanent account closure, unless a longer retention period is required by law.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or from the date of the last transaction, whichever is later, in accordance with anti-money-laundering regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction for accounting, tax, and regulatory compliance purposes.
• Support communications: Retained for a period of 3 years from the date of the relevant interaction, or longer if related to an ongoing dispute or investigation.
• Marketing consent records: Retained for as long as your consent remains active, or for 2 years following withdrawal of consent, as evidence of the consent having been given.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

11. Data Security

Tokyo777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all pages and data transmissions between your device and our servers.
• Encrypted storage of sensitive data at rest, including financial account details and identity documents.
• Access controls limiting internal access to personal data on a strict need-to-know basis, enforced by role-based permissions and audit logging.
• Regular security assessments including penetration testing and vulnerability scanning to identify and remediate security risks.
• Incident response procedures to manage any data security incidents promptly and notify affected individuals and authorities where required.

12. Your Data Rights

As a player whose personal data is processed by Tokyo777, you hold the following rights in relation to that data. To exercise any of these rights, please contact our support team using the details in Section 16.

Tokyo777 will respond to all verified data rights requests within 30 calendar days. Where a request is complex or numerous, we may extend this period by up to a further 60 days, in which case we will notify you of the extension and the reasons for it.

We may need to verify your identity before processing a data rights request to ensure that we do not disclose personal data to an unauthorised person. This verification step typically involves confirming your registered email address and a form of identity matching our records.

13. Protection of Minors

As part of our account registration and KYC process, Tokyo777 verifies the age of all Players. If we discover or have reasonable grounds to believe that a person under 21 has registered an account or submitted personal data to us, we will:

• Immediately suspend and close the Account.
• Delete or securely quarantine all personal data associated with the underage individual.
• Return any real-money deposits made to the payment source, subject to applicable processing constraints.
• Void any winnings generated during the underage period of use.

If you are a parent or guardian and you believe your child has registered an account on Tokyo777, please contact our support team immediately at [email protected] and we will take prompt action.

14. Third-Party Links & Content

The Tokyo777 platform may contain references to or integrations with third-party services — such as payment processors, game providers, and analytics tools. This Privacy Policy applies solely to personal data collected and processed by Tokyo777 directly.

Where your interaction with the platform involves a third-party service provider (for example, completing a deposit via Touch 'n Go eWallet or a bank transfer via FPX), that provider's own privacy policy will govern the processing of any personal data submitted directly to their systems. We encourage you to review the privacy policies of any third-party services you use in connection with our platform.

Tokyo777 accepts no responsibility for the privacy practices of third-party services, and the inclusion of any third-party integration does not constitute an endorsement of their privacy standards.

15. Changes to This Privacy Policy

Tokyo777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the rights available to you — we will notify registered Players by email or by prominent notice on the platform at least 14 days before the changes take effect.

The effective date at the top of this Policy indicates when the current version was last revised. Your continued use of the Tokyo777 platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised terms, please contact our team to request account closure.

We recommend bookmarking this page and reviewing it periodically to stay informed of how Tokyo777 handles your personal information.

16. Contact Us

If you have questions or concerns about this Privacy Policy, wish to exercise your data rights, or need to report a suspected data security incident, please contact us through any of the following channels:

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions of the Tokyo777 Privacy Policy.