7 Wonders Privacy Policy – Our Commitment to Protecting Malaysian Members' Data

7 Wonders ("we", "Platform") respects the privacy of every individual who uses our platform and is committed to protecting your personal data. This Privacy Policy describes our data handling practices and applies to all users and members of the platform 7 Wonders accessible at https://7wonders.best.

This policy covers:

• The types of personal data we collect from you;
• The purpose and legal basis for processing that data;
• Who we share your data with and under what circumstances;
• How we protect your data;
• How long we retain your data;
• Your rights regarding your personal data;
• How to reach us regarding privacy concerns.

This Privacy Policy is to be read together with the platform's Terms & Conditions 7 Wonders. This policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable data protection legislation.

If you have any questions about how we handle your data, please reach out to us using the contact details in Section 14. We aim to respond to all privacy-related enquiries within 5 business days.

7 Wonders collects various types of personal data from you depending on how you interact with our platform. Below is a comprehensive overview of the data we collect:

Data You Provide Directly:

• Registration information: Full name, phone number, email address, date of birth, and account password;
• Identity verification (KYC) information: A copy of your identity card (MyKad), identity card number, and proof of residential address — collected only when required for withdrawal processing or compliance purposes;
• Payment details: Details of registered payment methods, such as the phone number linked to your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, your DuitNow account number, or your bank account number for FPX — we do not store credit card numbers directly;
• Communication with us: The contents of live chat sessions, emails, or any other communications you send to our support team 7 Wonders.

Automatically Collected Data:

• Device and technical data: IP address, device type, operating system, browser version, language settings, and time zone;
• Log data: Login and logout timestamps, pages visited, games played, and time spent in each session;
• Platform usage data: Betting history, lottery ticket purchase history, slots and casino game history, deposit and withdrawal records;
• Cookie data: Information collected through cookies and similar tracking technologies – see Section 7 for more details.

7 Wonders uses your personal data only for legitimate and necessary purposes. We do not use your data for any purpose not stated in this policy. The following are the primary uses of your data:

Account Management & Services:

• Creating and managing your account on the platform 7 Wonders;
• Verifying your identity and age before you can use our services;
• Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX;
• Processing withdrawal of winnings to your account;
• Sending important account-related notifications such as transaction confirmations, security alerts, and updates on changes to our terms.

Security & Fraud Prevention:

• Detecting and preventing fraud, money laundering, and suspicious activity;
• Monitoring activity that violates the platform's Terms & Conditions;
• Verifying that each user holds only one account;
• Fulfilling applicable legal compliance obligations.

Responsible Gambling:

• Monitoring usage patterns to identify signs of problem gambling;
• Enforcing the deposit limits, loss limits, and self-exclusions that you have set;
• Providing responsible gambling information and support to members who may need assistance.

Platform Enhancement & Marketing:

• Analysing usage patterns to improve platform design and functionality 7 Wonders;
• Sending marketing communications about promotions, bonuses, and new games — subject to your communication preferences;
• Conducting customer satisfaction research and product improvement initiatives.

We do not make solely automated decisions that significantly affect you based on your personal data without human involvement.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, 7 Wonders processes your personal data on the following legal bases depending on the purpose of processing:

• Consent: For marketing communications and the use of data for product improvement purposes that are not strictly necessary. You may withdraw this consent at any time without affecting the validity of any prior processing;
• Contract Performance: To process transactions, manage your account, and deliver the services you request – this is necessary to fulfil the agreement between you and 7 Wonders;
• Legal Obligations: To comply with Malaysian legal requirements, including Know Your Customer (KYC) obligations, anti-money laundering (AML) requirements, and statutory reporting duties;
• Legitimate Interest: To detect and prevent fraud, maintain platform security, and improve our services — provided these legitimate interests do not override your fundamental rights.

7 Wonders does not sell your personal data to any party. However, we do share data in the following limited and specific circumstances:

Service Providers: We share necessary data with third parties who help us deliver our services, including:

• Payment processing providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) to handle deposit and withdrawal transactions;
• Third-party game software providers for live casino, slots, and other games that operate on external platforms;
• Cloud and infrastructure service providers that host our data under strict security agreements;
• Identity verification service providers for KYC processing.

All of these third-party service providers are bound by strict data confidentiality agreements and are only permitted to use your data for the purposes we specify.

Legal Requirements: 7 Wonders may be required to disclose your personal data to the authorities where mandated by Malaysian law, court order, or in cooperation with a legitimate legal investigation. We will not disclose your data to foreign authorities without careful legal assessment.

Within the Business Group: Data may be shared among companies within the same group as 7 Wonders for internal operational purposes only, subject to the same level of protection as set out in this policy.

Protecting your personal data is a technical and operational priority in which we invest considerable resources. The security measures we have implemented at 7 Wonders including:

Technical Measures:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest using industry-standard protocols;
• Multi-layered firewalls and intrusion detection systems;
• Regular security audits conducted by independent cybersecurity firms;
• Two-factor authentication (2FA) is available for member accounts and is mandatory for all internal administrative access;
• Data segregation between production and testing environments.

Organisational Measures:

• Minimum access principle – staff may only access data required for their specific role;
• All staff undergo data protection training during onboarding and on a regular basis;
• Confidentiality agreements are mandatory for all staff and contractors;
• Established security incident response procedures to manage any data breaches that may occur.

While we take all reasonable steps to protect your data, no internet transmission system or electronic storage is 100% secure. You are also responsible for keeping your account login credentials safe. If you suspect any unauthorised access to your account, please contact our support team 7 Wonders immediately.

7 Wonders uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functionality, such as keeping you logged in during a session and securing your transactions. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies: Collects information about how you use the platform to help us improve its performance — for example, identifying which pages load most slowly;
• Functional Cookies: Saving your preferences such as language and display settings so you do not need to reconfigure them each time;
• Analytics Cookies: Helping us understand overall platform usage patterns for product improvement purposes.

You can manage your cookie preferences through your web browser. However, disabling certain cookies may affect the functionality of the platform 7 Wonders. For non-essential cookies, we obtain your consent through a cookie notice when you first visit the platform.

7 Wonders retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements. The following are retention period guidelines for key data categories:

• Active account data: Retained for as long as your account remains active with 7 Wonders plus 5 years after account closure for record-keeping and legal compliance purposes;
• Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysian financial legal requirements;
• KYC documents (MyKad copy, proof of address): Retained for 5 years from the date of submission or the date of account closure, whichever is later;
• Support communication records: Retained for 2 years from the date of communication;
• Technical and security logs: Retained for 12 months for security monitoring and technical troubleshooting purposes;
• Cookie data: Depending on the type of cookie – from the current session up to a maximum of 24 months for non-session cookies.

Once the retention period ends, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. The deletion process is carried out systematically and has been audited.

Under Malaysia's PDPA and our policy 7 Wonders, you have the following rights with respect to your personal data:

In the course of operating the platform 7 Wonders, your personal data may be processed or stored on servers located outside Malaysia. This occurs primarily when we use cloud infrastructure services or international game software providers.

In such cases, 7 Wonders ensures that:

• Data transfers are carried out only to countries or entities that offer a level of data protection equivalent to Malaysian standards;
• Appropriate data transfer agreements are signed with the relevant providers;
• All third-party providers who handle your data outside Malaysia are bound by strict confidentiality and security obligations;
• Your data will not be transferred to any foreign entity not recognised as providing adequate data protection.

Platform 7 Wonders is strictly for users aged 21 and above. We do not target or knowingly collect personal data from individuals under the age of 21. Should we discover that personal data belonging to someone under 21 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who suspect their underage child has registered an account with 7 Wonders are welcome to contact us at support@7wonders.best for prompt assistance.

Platform 7 Wonders may contain links to or integrations with third-party websites or services. This Privacy Policy applies solely to the 7 Wonders and does not cover the privacy practices of third-party websites you may access via links on our platform.

We have no control over the content or privacy practices of third-party websites and are not responsible for them. We encourage you to read the privacy policy of any third-party website you visit.

7 Wonders reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When material changes are made to this Privacy Policy:

• We will update the "Last Updated" date at the top of this document;
• A clear notice will be displayed on the platform's homepage for at least 7 days before any changes take effect;
• For significant changes, active members will be notified via their accounts;
• Where changes require your renewed consent, we will obtain that consent explicitly before continuing to process the affected data.

Continued use of the platform 7 Wonders after the effective date of the amendment will be considered your acceptance of the updated Privacy Policy. Previous versions of our Privacy Policy are archived and available upon request through our support team.

If you have any questions, concerns, or complaints regarding how 7 Wonders handling your personal data, or if you wish to exercise any of your data rights, please contact us through the following channels:

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority. That said, we encourage you to contact us first, as we are committed to resolving any privacy concerns directly and fairly.