triton7 Privacy Policy

triton7 ("triton7", "we", "us", "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the triton7 Platform at triton7.co and associated services. This Privacy Policy ("Policy") describes how triton7 collects, processes, stores, shares, and protects personal data in connection with the operation of the Platform.

This Policy applies to all registered account holders, visitors to the Platform, and any individual whose personal data triton7 processes in the course of operating its services. By creating a triton7 account, making a deposit, or continuing to access the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

triton7 is the data controller responsible for the personal data of users of the triton7 Platform. As data controller, triton7 determines the purposes and means of processing personal data collected through the Platform. triton7 processes personal data in accordance with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection frameworks.

For all data protection enquiries, including data subject access requests, correction requests, and deletion requests, players may contact triton7 via the Live Chat support facility available through the account dashboard. Data subject requests will be acknowledged within three (3) business days and actioned within the timeframes prescribed by applicable law.

triton7 collects personal data from you directly when you interact with the Platform, and automatically through your use of the Platform. The categories of personal data collected include:

3.1 Data You Provide Directly

• Registration data: full name, date of birth, email address, mobile phone number, and residential address;
• Identity verification documents: government-issued photographic identification (MyKad, passport), proof of address, and payment method verification documents submitted during Know Your Customer (KYC) verification;
• Account preferences: language, communication preferences, responsible gaming settings including deposit limits and self-exclusion elections;
• Customer support interactions: the content of Live Chat conversations, emails, and other communications with triton7 support;
• Survey and feedback responses where you choose to participate in triton7 player research.

3.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, and device identifiers;
• Usage data: pages visited, features used, game sessions initiated, session duration, navigation paths, and clickstream data;
• Transaction data: deposit and withdrawal amounts, dates and times, payment methods used, and transaction references;
• Gaming activity data: games played, stakes placed, results, betting history, and responsible gaming tool usage;
• Cookie and tracking technology data as described in Section 7 of this Policy.

triton7 uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. The primary purposes for which triton7 processes personal data are:

1. Account management: to create, maintain, and operate your triton7 account, including identity verification, password management, and account communications;
2. Service delivery: to provide you with access to the triton7 Platform, games, sportsbook, and associated services;
3. Payment processing: to process deposits and withdrawals via Touch 'n Go eWallet, Boost, Maybank FPX, CIMB Clicks, and other supported Malaysian payment methods;
4. Legal and regulatory compliance: to comply with Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification requirements, and other regulatory obligations applicable to the operation of an online gaming platform;
5. Responsible gaming: to operate and enforce responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion, and to identify and intervene where a player may be at risk of gambling-related harm;
6. Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities;
7. Customer support: to respond to your support queries, complaints, and feedback via Live Chat and other support channels;
8. Platform improvement: to analyse usage patterns and player behaviour in aggregate to improve the triton7 Platform, user interface, and game offering;
9. Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications or where triton7 has a legitimate interest in doing so.

triton7 processes your personal data on the following legal bases under applicable data protection law:

• Contract performance: processing necessary to perform the contract between triton7 and you as a registered account holder, including account operation, payment processing, and service delivery;
• Legal obligation: processing required to comply with applicable legal and regulatory requirements, including AML, KYC, age verification, and gaming regulatory obligations;
• Legitimate interests: processing necessary for triton7's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your privacy rights;
• Consent: processing for direct marketing communications and non-essential cookies where you have provided explicit, informed consent, which you may withdraw at any time.

triton7 does not sell, rent, or trade your personal data. triton7 shares personal data with third parties only in the following limited circumstances:

• Service providers: payment processors (including Touch 'n Go, Boost, and Malaysian bank FPX operators), identity verification providers, fraud prevention services, cloud infrastructure providers, and customer support platform providers — each operating under data processing agreements that restrict their use of your data to the purposes for which it was shared;
• Game providers: licensed third-party game studios whose games are accessible through the triton7 Platform may receive transaction-level data necessary for game operation and dispute resolution;
• Regulatory and law enforcement authorities: where triton7 is legally required to disclose personal data to comply with a court order, regulatory direction, or law enforcement request;
• Responsible gaming bodies: where triton7 is required or permitted under gaming regulatory frameworks to share data with self-exclusion registers or responsible gaming authorities;
• Business transfers: in the event of a merger, acquisition, or sale of all or part of triton7's business, personal data held by triton7 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

triton7 uses cookies, web beacons, pixel tags, and similar tracking technologies on the triton7 Platform. Cookies are small data files stored on your device that help triton7 operate the Platform effectively and improve your user experience.

The categories of cookies used by triton7 are:

• Strictly necessary cookies: required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: remember your preferences such as language settings, responsible gaming configurations, and last-visited game category;
• Analytics cookies: collect aggregated, anonymised data about how players use the Platform — pages visited, session duration, navigation paths — to help triton7 improve the user experience;
• Marketing cookies: used to deliver relevant promotional content and measure the effectiveness of triton7's marketing activities, where you have consented.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the triton7 Platform.

triton7 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes or enforce triton7's legal rights.

In practice, this means that account data is retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements applicable to the gaming sector. Transaction records are retained for a minimum of seven (7) years. Marketing communication preferences and consent records are retained for three (3) years from the date of last contact.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with triton7's data disposal procedures.

Subject to applicable law and certain legal exemptions, you have the following rights in respect of your personal data held by triton7:

To exercise any of these rights, contact triton7 via the Live Chat support facility available within your account dashboard. Requests will be acknowledged within three (3) business days. triton7 may require identity verification before actioning any data subject request.

triton7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include 256-bit SSL encryption for all data in transit, encryption of sensitive data at rest, access controls restricting internal data access to authorised personnel, regular security assessments and penetration testing, and incident response procedures.

Despite these measures, no online platform can guarantee absolute security. triton7 strongly recommends that all players enable two-factor authentication on their triton7 account and use a strong, unique password not shared with any other online service. If you suspect that your triton7 account has been compromised, contact triton7 support via Live Chat immediately.

In the event of a personal data breach that poses a risk to your rights and freedoms, triton7 will notify affected individuals in accordance with applicable data protection law.

The triton7 Platform is strictly intended for adults aged 21 and above. triton7 does not knowingly collect personal data from individuals under the age of 21. Age verification is mandatory on all triton7 accounts and is enforced as a condition of account activation and withdrawal processing.

If triton7 becomes aware that personal data has been collected from an individual under the minimum age requirement, that data will be deleted promptly and the associated account will be closed. If you believe that a minor has registered or is using a triton7 account, please contact triton7 support via Live Chat immediately.

triton7 may transfer personal data to service providers and infrastructure partners located outside Malaysia where necessary for the operation of the Platform. Where personal data is transferred internationally, triton7 ensures that appropriate safeguards are in place to protect the data, including contractual data protection obligations consistent with applicable law.

triton7's core player data and financial records are processed and stored on infrastructure subject to security standards consistent with the requirements of Malaysia's PDPA and applicable international data protection frameworks. All international data transfers are conducted under data processing agreements that require third-party recipients to maintain equivalent data protection standards.

triton7 reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or Platform features. The "Last Updated" date at the top of this Policy will be revised accordingly. Where material changes are made, triton7 will endeavour to notify registered players via in-platform notification or email communication.

Your continued use of the triton7 Platform following any update to this Policy constitutes your acknowledgement of the updated Policy. If you do not agree to any changes, you should cease using the Platform and may request account closure in accordance with the procedures described in triton7's Terms and Conditions.

For all privacy-related enquiries, including data subject access requests, correction requests, deletion requests, and questions about this Privacy Policy, please contact triton7 via: