This Privacy Policy explains how grab777 collects, uses, stores, and protects your personal data when you use our platform. We are committed to handling your information with transparency, security, and respect.
grab777 ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://grab777.cam (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, disclose, store, protect, and otherwise process Personal Data that we receive from individuals ("Users", "Players", "you") who access or use the Platform and its associated services.
This Policy is incorporated by reference into grab777's Terms & Conditions. By registering an Account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your Personal Data in the manner described herein.
If you do not agree with this Policy, you must cease using the Platform immediately and may request Account closure as described in our Terms & Conditions. This Policy applies to all Users of grab777 regardless of location, though our platform is primarily designed to serve players in Malaysia.
Our Privacy Commitment: grab777 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial use. Your data is processed solely to operate and improve the Platform, fulfil our legal obligations, and protect the security of our players and the platform itself.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
Any information that directly or indirectly identifies a living individual, including name, identification number, contact information, financial account details, IP address, device identifiers, location data, or any combination of data that would enable identification of a specific person.
Any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction.
The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, grab777 is the Data Controller for Personal Data collected through the Platform.
A natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Data Controller — for example, a payment gateway provider or cloud hosting service engaged by grab777.
A freely given, specific, informed, and unambiguous indication of agreement by which the data subject signifies consent to the processing of their Personal Data for one or more specific purposes.
Know Your Customer — the mandatory identity verification process through which grab777 collects and verifies a Player's identity documentation to comply with anti-money laundering and player protection regulations.
grab777 collects the following categories of Personal Data, which vary depending on the nature of your interaction with the Platform:
grab777 collects Personal Data through the following means:
The table below summarises the primary purposes for which grab777 processes your Personal Data:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation & management | Registration data, device data | Contract performance |
| Identity verification (KYC) | KYC documents, facial data | Legal obligation |
| Processing deposits & withdrawals | Financial data, payment identifiers | Contract performance |
| Anti-money laundering & fraud prevention | Financial data, usage data, KYC | Legal obligation |
| Game & platform delivery | Behavioural data, technical data | Contract performance |
| Responsible gambling monitoring | Behavioural data, financial data | Legal obligation / Legitimate interest |
| Customer support | Communications data, account data | Contract performance |
| Bonus & promotion administration | Account data, behavioural data | Contract performance |
| Security & platform integrity | Technical data, behavioural data | Legitimate interest |
| Legal & regulatory compliance | All categories as required | Legal obligation |
| Platform improvement & analytics | Aggregated/pseudonymised usage data | Legitimate interest |
| Marketing communications (where opted in) | Registration data, preferences | Consent |
grab777 does not use your Personal Data for automated decision-making that produces significant legal effects without human oversight, except where required by our anti-fraud and AML compliance obligations.
grab777 processes your Personal Data on one or more of the following legal bases, depending on the purpose of processing:
Processing is necessary to fulfil our obligations under the User Agreement, including operating your Account, processing your bets and financial transactions, and delivering the gaming services you have registered to receive.
Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, counter-terrorism financing (CTF) requirements, age verification mandates, and gaming licensing conditions.
Processing is necessary for our legitimate interests — including preventing fraud, ensuring platform security, improving the user experience, and responsible gambling monitoring — where these interests are not overridden by your rights and freedoms.
Where we process data for marketing communications, certain cookie placements, or other optional features, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
grab777 does not sell or rent your Personal Data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:
All third parties who receive your Personal Data are contractually required to maintain its confidentiality and security, and to process it only for the specified purpose for which it was shared. grab777 does not permit third parties to use your data for their own marketing purposes.
grab777 uses cookies, web beacons, pixel tags, and similar technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:
Essential for the Platform to function. These cookies enable core features such as user authentication, session management, security, and load balancing. They cannot be disabled without materially impairing Platform functionality.
Used to remember your preferences and settings — such as language selection, preferred deposit method, and display configuration — to provide a more personalised experience across sessions.
Used to collect aggregated and pseudonymised data about how users interact with the Platform — including pages visited, time spent, and navigation paths — to help us understand and improve the user experience. No individual is identified through analytics data.
Used to detect and prevent fraudulent activity, multiple account creation, unauthorised access attempts, and other security threats to the Platform and its players.
You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the Platform. Your continued use of the Platform after being informed of our cookie practices constitutes consent to the placement of non-essential cookies, subject to your browser settings.
grab777 retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal and regulatory obligations. The following indicative retention periods apply:
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.
grab777 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While we employ industry-standard security practices, no data transmission over the internet can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users in accordance with our obligations under applicable data protection law.
Subject to applicable law and certain exceptions, you have the following rights in relation to your Personal Data held by grab777. To exercise any of these rights, please contact us as set out in Section 15.
Request a copy of the Personal Data we hold about you and information about how it is being processed.
Request correction of inaccurate or incomplete Personal Data held in your Account or our records.
Request deletion of your Personal Data where there is no longer a legitimate purpose or legal obligation for us to retain it.
Request that we restrict processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved.
Receive your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
Object to processing based on legitimate interests or for direct marketing purposes. We will comply unless we have compelling legitimate grounds.
Withdraw consent for processing activities based on consent at any time, without affecting the lawfulness of prior processing.
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
We will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, of which we will notify you. Some rights may be subject to exceptions where processing is necessary to comply with our legal obligations — for example, we cannot delete KYC records required to be retained under AML regulations.
The grab777 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from any individual under the age of 21. Age verification is a mandatory step in our registration and KYC process.
If we become aware that Personal Data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated Account, and return any deposited funds to the extent permitted by our AML obligations. If you have reason to believe that a minor has registered on our platform, please contact us immediately at [email protected].
Parents and guardians are encouraged to use appropriate parental control software to prevent minors from accessing online gambling services. Our Responsible Gambling page contains additional information on safeguarding resources.
Some of our third-party service providers — including cloud hosting providers, game content providers, and KYC verification services — may be located in countries outside Malaysia. Where Personal Data is transferred to servers or processors in other jurisdictions, grab777 ensures that such transfers are subject to appropriate safeguards, which may include:
By using the Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside Malaysia. We take all reasonable steps to ensure that international transfers are conducted with the same level of protection as would apply under applicable Malaysian law.
grab777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify registered Players by email (to the address on file) and by displaying a prominent notice on the Platform prior to the changes taking effect.
The updated date displayed at the top of this page reflects the date on which the current version of the Policy became effective. We encourage you to review this Policy periodically. Your continued use of the Platform following any amendment constitutes acceptance of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact grab777 using the following channels. We take all privacy enquiries seriously and will respond as promptly as possible.
Available 24 hours a day, 7 days a week via the live chat widget on the grab777 platform. For data rights requests, please identify yourself as submitting a privacy request at the start of the conversation.
Please direct all privacy-related enquiries, data access requests, and erasure requests to: [email protected] — with the subject line "Privacy Request" to ensure it is routed to our data protection team promptly.
Please note that to process any data rights request, we may need to verify your identity before taking action. This is to ensure that we disclose, correct, or delete data only at the direction of the legitimate Account holder, and not in response to an unauthorised third-party request.
Privacy is not a checkbox for us — it is a standing operational commitment built into how we build and run the platform.
All data in transit between your device and our servers is encrypted to bank-grade standard. Every session on grab777 is protected from interception, whether you're on mobile in Petaling Jaya or desktop in Penang.
Your personal information is not sold, rented, or traded to third parties for their own marketing use. Period. Data is shared only to operate the Platform and fulfil our legal obligations.
You can request access to, correction of, or deletion of your Personal Data at any time. Our team processes all data rights requests within 30 days of receipt.
This Policy clearly explains what data we collect, why we collect it, who we share it with, and how long we keep it. No deliberately obscured clauses.
Our data practices comply with applicable international data protection standards and gaming regulatory requirements, including mandatory AML/KYC obligations for licensed gaming operators.
We only keep your data for as long as necessary. When retention periods expire, data is securely deleted or anonymised — not kept indefinitely in legacy systems.
Your data is treated with the same care we apply to your funds. Transparent policies, real security, and a support team that takes privacy seriously. For players aged 21 and above — play responsibly.
For players aged 21 and above only. Play responsibly.