Privacy Policy

coklat777 ("we", "us", "our") is committed to protecting the privacy and personal data of all users ("you", "User", "Player") who access or use the coklat777 online casino and sports betting platform located at https://coklat777.cam ("Platform").

This Privacy Policy ("Policy") explains how coklat777 collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform. It also explains the rights you hold in relation to your personal data and how to exercise those rights.

This Policy applies to all personal data collected through the Platform, including data submitted during registration, account management, KYC verification, financial transactions, customer support interactions, and general browsing of the Site. It applies to all users who access the Platform from within Malaysia and from other jurisdictions where access to the Platform is permitted.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which together govern the entirety of your relationship with coklat777.

For the purpose of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including but not limited to name, identification number, contact details, financial data, and digital identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means coklat777, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of coklat777, under contractual obligation and in accordance with this Policy.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "KYC" means Know Your Customer — the identity verification process mandated for compliance purposes before withdrawal processing.
• "Cookies" means small data files stored on your device by the Platform to enable functionality, session management, and analytics.
• "Sensitive Data" means personal data that warrants heightened protection, including government-issued identity numbers (MyKad / passport numbers) and financial account details.

coklat777 collects personal data through several channels, including your account registration, KYC submission, financial transactions, customer support contacts, and your general interaction with the Platform. The categories of personal data we collect are set out below.

3.1 Registration Data

When you create an Account with coklat777, we collect:

• Full legal name
• Date of birth (to verify minimum age requirement of 21 years)
• Email address
• Malaysian mobile phone number
• Username and encrypted password
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru)

3.2 KYC Verification Data

To comply with anti-money laundering (AML) and identity verification requirements, we collect:

• Government-issued identity document (MyKad front and back, or valid passport)
• Proof of residential address (utility bill, bank statement, or official government mail dated within three months)
• Proof of payment method (e-wallet or bank account screenshot confirming ownership)
• In certain circumstances, a selfie photograph for liveness verification

3.3 Transaction & Financial Data

In connection with deposits and withdrawals, we collect:

• Details of your payment method (e-wallet account name, last four digits of bank account)
• Transaction amounts, timestamps, and reference numbers
• Payment method type (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, cryptocurrency wallet addresses)
• Account balance history and wagering activity for bonus compliance monitoring

3.4 Technical & Usage Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session duration, pages visited, and features used
• Referring URL and exit URL
• Cookie identifiers and session tokens

coklat777 uses your personal data strictly for the following purposes. We do not use your data for purposes beyond those listed below without your explicit consent or a valid legal basis:

• Account management: To create, maintain, and secure your coklat777 Account, including password reset, two-factor authentication, and account history.
• Identity verification (KYC): To confirm your identity, verify your age (minimum 21 years), and ensure compliance with applicable anti-money laundering regulations.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, and other approved channels.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeover attempts, money laundering, and other illicit conduct on the Platform.
• Legal and regulatory compliance: To meet obligations under applicable laws and cooperate with regulatory authorities or law enforcement when lawfully required.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and improve the performance and user experience of the Platform.
• Responsible gambling monitoring: To identify behavioural patterns that may indicate problem gambling and to enforce self-imposed limits, cool-down periods, or exclusions.
• Promotional communications: To send you information about relevant bonuses and promotions, where you have opted in to receive such communications. You may opt out at any time.

coklat777 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing required to perform the contract between you and coklat777, including operating your Account, processing payments, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, and regulatory reporting obligations.
• Legitimate interests: Processing that coklat777 conducts in pursuit of its legitimate business interests, such as fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: For non-essential processing such as marketing communications and non-essential cookies, we rely on your freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

coklat777 does not sell, rent, trade, or lease your personal data to third parties for commercial purposes. Your data is shared only in the following limited and controlled circumstances:

6.1 Service Providers

We engage third-party service providers who process personal data on our behalf solely to provide specific services to coklat777. These include:

• Payment processors and Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX partners)
• KYC and identity verification service providers
• Cloud hosting and server infrastructure providers
• Customer support platform providers
• Fraud detection and security monitoring services

All service providers are contractually bound to process your data only for the specific purpose for which it was shared, to maintain appropriate security measures, and not to further disclose your data without authorisation.

6.2 Legal & Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required or compelled to do so — for example, in response to a valid court order, subpoena, or statutory investigation. We will notify you of any such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of coklat777's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and your rights in connection with it.

The coklat777 Platform uses cookies and similar technologies to provide a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your web browser when you visit our Site.

7.1 Types of Cookies We Use

coklat777 does not use third-party advertising or tracking cookies. You may manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform.

coklat777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform
• Encrypted storage for all sensitive personal and financial data at rest
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis
• Comprehensive audit logging of all access events and data modifications
• Regular security assessments and penetration testing of Platform infrastructure
• Two-factor authentication options for all registered users
• Intrusion detection systems and 24/7 security monitoring

Despite these measures, no method of electronic transmission or storage is completely secure. While coklat777 makes every reasonable effort to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you promptly and take all necessary steps to mitigate the impact.

coklat777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, or as required by applicable law.

• Active Account data: Retained for the duration of your Account's active status.
• KYC documents: Retained for a minimum period following Account closure, as required by applicable anti-money laundering regulations.
• Transaction records: Retained for the statutory period required under applicable financial record-keeping laws.
• Customer support records: Retained for a defined period following resolution of the support interaction, to enable complaint handling.
• Technical logs: Retained for a limited period for security analysis and fraud detection purposes, then deleted or anonymised.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. You may request early deletion of your personal data (subject to legal retention obligations) by contacting our support team.

As a user of the coklat777 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team via the details set out in Clause 14 of this Policy.

• Right of Access: You have the right to request a copy of the personal data we hold about you, and to receive information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The coklat777 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Registration by underage individuals is prohibited under our Terms & Conditions and applicable responsible gambling standards.

If we become aware that personal data has been submitted by a person under the age of 21, we will immediately suspend the relevant Account, delete all associated personal data, and take appropriate steps to prevent further access. We encourage parents and guardians to monitor the online activities of minors and to make use of available parental control tools.

If you believe a minor has registered an Account with coklat777, please contact us immediately via our 24/7 live chat or at the email address listed in Clause 14 below.

The coklat777 Platform may contain references to or integrations with third-party services such as payment gateways (Touch 'n Go eWallet, GrabPay, Maybank internet banking, etc.) and game content providers. When you interact with third-party services, you are subject to the privacy policies and terms of those third parties, which are separate from and independent of this Policy.

coklat777 is not responsible for the privacy practices or content of any third-party services or platforms. We encourage you to review the privacy policies of any third-party service you use in connection with your coklat777 Account.

coklat777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Any material changes will be communicated to registered users via email or a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this Policy indicates when it was last reviewed and updated. We encourage you to revisit this page periodically to stay informed about how we handle your personal data. Your continued use of the Platform following any updates constitutes your acceptance of the revised Policy.

For any enquiries, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact the coklat777 Privacy & Data Protection team using the details below. All contact information is provided as plain text for reference — these are not clickable links.