Privacy Policy How G7VIP Protects Your Data

This Privacy Policy ("Policy") describes how G7VIP ("G7VIP", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who register for or use the G7VIP platform accessible at https://g7vip.cam and all associated mobile interfaces and services (collectively, the "Platform").

G7VIP is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws. Our Platform is designed specifically for the Malaysian market, and we take our obligations to Malaysian players seriously — from how we handle your MyKad or passport number during identity verification, to how we process your transaction history with local payment providers such as Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank.

By creating an account on G7VIP or otherwise providing us with personal data, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

The following terms used throughout this Privacy Policy shall carry the meanings defined below:

G7VIP collects personal data through several channels: information you provide directly during registration, data generated through your use of the Platform, and information received from third-party payment or identity verification partners.

3.1 — Registration & Account Data

• Full legal name
• Date of birth (to verify minimum age requirement of 21 years)
• Email address
• Mobile phone number
• Preferred username and encrypted password
• Residential address in Malaysia (city, state, postcode)
• Preferred language (English, Bahasa Melayu, or Mandarin)

3.2 — Identity Verification (KYC) Data

• Government-issued photo ID (MyKad number, passport number, or driving licence number)
• Copy of proof-of-address document (utility bill, bank statement, or official correspondence)
• Payment method ownership verification (e-wallet or bank account confirmation)
• Source of funds documentation for accounts subject to enhanced due diligence

3.3 — Transaction & Financial Data

• Deposit and withdrawal history (amounts in MYR, timestamps, payment method used)
• Masked payment method identifiers (we do not store full bank account numbers or full e-wallet credentials)
• Bonus redemption history and wagering records

3.4 — Usage & Behavioural Data

• Game session data (games played, bet amounts, session duration)
• Sports betting selections and odds accepted
• Platform navigation patterns and feature interactions
• Device type, operating system, browser type, and IP address
• Customer support conversation history

G7VIP uses your personal data for the following specific purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent.

G7VIP processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to provide the Platform services pursuant to our Terms and Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, responsible gambling obligations, and financial reporting requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — such as promotional email communications — where you have explicitly opted in. You may withdraw consent at any time.

G7VIP does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: Malaysian e-wallet and banking partners (including Touch'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, and Hong Leong) receive the minimum data necessary to process your financial transactions.
• Identity Verification Providers: Accredited KYC and AML screening partners receive identity documents solely for verification purposes.
• Game Software Providers: Licensed game studios receive session identifiers and game-relevant data to deliver gameplay. They do not receive your full personal profile.
• Cloud Infrastructure Partners: Secure hosting and data storage providers operating under strict data processing agreements and bound by the same standards as G7VIP.
• Law Enforcement and Regulators: Where required by a valid legal demand, court order, or regulatory direction, G7VIP may disclose data to relevant authorities in Malaysia or elsewhere.

All third-party Data Processors engaged by G7VIP are contractually bound to process personal data only for the specific purpose for which it was shared, and to maintain appropriate technical and organisational security measures.

G7VIP uses cookies and similar technologies to ensure the Platform functions correctly, maintain your session security, and gather anonymised usage analytics to improve our services. The following categories of cookies are in use:

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing core Platform features, but may affect the personalised experience.

G7VIP retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a statutory period post-closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction, in accordance with applicable AML regulations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction for financial regulatory compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of last interaction.
• Analytics Data: Anonymised within 90 days of collection. Anonymised aggregated data may be retained indefinitely.
• Closed Account Data: Personal identifiers deleted or anonymised within 90 days of account closure where no legal hold period applies.

Where retention beyond the above periods is required for legal proceedings, regulatory investigations, or dispute resolution, data will be retained for the duration of the relevant matter.

G7VIP implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit TLS encryption for all data in transit between your device and G7VIP servers
• AES-256 encryption for sensitive data at rest, including KYC documents and payment identifiers
• Multi-factor authentication (MFA) requirements for all internal staff accessing Player data
• Role-based access controls ensuring that staff can only access data necessary for their specific role
• Regular third-party security audits and penetration testing of our infrastructure
• Real-time intrusion detection and anomaly monitoring systems
• Segregated storage environments for KYC documents, separate from operational databases

Despite these measures, no system is entirely immune to risk. In the event of a data breach that poses a risk to your rights and freedoms, G7VIP will notify affected Players and take all reasonable steps to contain and remediate the incident without undue delay.

You are responsible for maintaining the confidentiality of your account credentials. G7VIP staff will never ask for your password. If you suspect unauthorised access to your account, contact our support team immediately via live chat.

As a G7VIP Player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or email as described in Section 14.

We will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notice provided to you. There is no charge for exercising your rights except where requests are manifestly unfounded or excessive.

The G7VIP Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by or on behalf of a minor, we will take immediate steps to delete that data and close the associated account.

Age verification is conducted as part of our KYC process. We request date of birth at registration and require submission of government-issued photo identification before any withdrawal is processed. Accounts where age cannot be confirmed will be suspended pending verification.

If you believe that a minor has registered on the G7VIP Platform, please contact our support team immediately via live chat or by emailing [email protected] (plain text — not a link).

G7VIP's primary data processing operations are structured to serve the Malaysian market. In limited cases, personal data may be transferred to or processed by systems or service providers located outside Malaysia — for example, where cloud infrastructure, game software providers, or fraud detection services operate internationally.

Where such transfers occur, G7VIP ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements requiring the recipient to apply equivalent data protection standards
• Transfer to jurisdictions that provide an adequate level of data protection as recognised by applicable frameworks
• Encryption of data in transit and at rest during international transfer operations

G7VIP does not transfer personal data internationally for commercial sale or marketing purposes.

G7VIP reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be communicated by updating the "Last Updated" date at the top of this page.

Where a change materially affects how we process your data in a way that requires your renewed consent, we will provide notice via in-platform notification or email before the change takes effect and request your affirmative consent where required.

We encourage all Players to review this Policy periodically. Your continued use of the Platform following publication of an updated Policy constitutes your acknowledgement of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact G7VIP through the following channels. All data-related requests are handled by our dedicated Privacy team.

For further information about your account or platform policies, please visit our FAQ, review our Terms & Conditions, or read our Responsible Gambling page.