Privacy Policy

This Privacy Policy ("Policy") sets out how se7win ("the Company", "we", "us", "our"), operator of the online gaming and sports betting platform at https://se7win.click ("the Platform"), collects, processes, stores, uses, and protects personal data belonging to users of the Platform ("you", "User", "Player").

se7win recognises that your personal data is yours. We are committed to handling it responsibly, transparently, and in accordance with applicable data protection principles. We do not treat data collection as a business opportunity — we collect only what is necessary to operate a secure, compliant, and high-quality service for Malaysian players.

This Policy applies to all personal data processed in connection with your use of the Platform, including data collected during registration, account usage, payment transactions, customer support interactions, and browsing activity on our website. It applies regardless of the device you use to access the Platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform and are incorporated by reference into this Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, IP address, and device identifiers.
• "Data Controller" means se7win, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of se7win, under our instruction and subject to a data processing agreement.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a specified purpose.
• "KYC" means Know Your Customer — the identity and age verification process required before a User may withdraw funds from the Platform.
• "Cookies" means small text files stored on your device by your web browser when you access the Platform, used to retain session information and analyse usage patterns.
• "Platform" means the website and associated services operated by se7win at https://se7win.click.

se7win collects personal data across several categories. The following table summarises the main categories of data we collect, examples of the specific data within each category, and the primary purpose for which each category is processed:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is strictly necessary for KYC purposes (facial photo for identity matching). Where such data is incidentally included in documents you submit, it is stored securely and used only for verification.

se7win collects your personal data through the following channels and mechanisms:

• Direct collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device fingerprint, browser information, and session activity, via server logs and similar technologies.
• Cookies and tracking technologies: Data collected passively through browser cookies, session tokens, and analytics tools as you navigate the Platform. See Section 8 for full details.
• Payment providers: When you make a deposit or withdrawal via Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency, transaction confirmation data is passed to us by the relevant payment service provider.
• Third-party verification providers: Where we use a regulated third-party KYC provider to assist with identity verification, that provider may share verification results and associated data with us.
• Publicly available sources: In limited circumstances (such as fraud investigations), we may reference publicly available data including social media profiles or company registries to corroborate information provided during registration.

se7win processes your personal data for the following specific purposes:

• Account creation and management: Setting up, maintaining, and administering your se7win account, including processing login requests and managing account settings.
• Identity and age verification (KYC): Verifying your identity and confirming you are at least 21 years of age before authorising your first withdrawal, in compliance with our responsible gambling and fraud prevention obligations.
• Payment processing: Processing your deposits and withdrawals through your chosen Malaysian payment method. Transaction data is retained for financial record-keeping and regulatory compliance purposes.
• Fraud prevention and security: Monitoring account activity for signs of fraudulent behaviour, multi-accounting, money laundering, or other violations of our Terms & Conditions. IP address and device data are used to detect and prevent unauthorised access.
• Customer support: Handling your support queries, complaints, and disputes via live chat, email, and other support channels. Support interaction records are retained to maintain continuity of service and for quality assurance.
• Responsible gambling monitoring: Analysing your betting and gaming activity to identify patterns that may indicate problem gambling behaviours, and applying responsible gambling tools where appropriate. This processing is carried out in your interest as a player.
• Marketing and promotions: Sending you information about bonuses, promotions, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time by contacting support or updating your account preferences.
• Platform improvement and analytics: Analysing aggregated and anonymised usage data to improve game performance, page load times, user interface design, and overall platform quality.
• Legal and regulatory compliance: Retaining transaction records and identity data as required by applicable anti-money-laundering, financial crime prevention, and data protection regulations.

se7win processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under your account agreement with se7win — including account setup, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and platform analytics is carried out on the basis of our legitimate interests as a business, provided those interests are not overridden by your rights and interests.
• Legal obligation: Processing to comply with applicable anti-money-laundering legislation, financial record-keeping requirements, and age verification obligations is carried out on the basis of legal obligation.

se7win does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share your data with third parties only in the following limited and necessary circumstances:

• Payment service providers: We share the transaction data necessary to process your deposits and withdrawals with your chosen payment provider — for example, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or cryptocurrency network operators. These providers act as independent data controllers for their own services and process data in accordance with their own privacy policies.
• KYC and identity verification providers: We may engage regulated third-party identity verification services to assist with KYC processing. These providers act as data processors under a formal data processing agreement and are prohibited from using your data for any purpose other than providing verification services to se7win.
• Game and platform technology providers: The third-party game studios and platform technology providers that power our casino and sports betting services may receive limited technical and gameplay data for the purpose of operating their services on the Platform. Such providers are contractually bound to process data only as required to deliver their services.
• Analytics and security tools: We may use third-party analytics and cybersecurity services that process anonymised or pseudonymised technical data to help us monitor platform performance and detect security threats.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement authorities, regulators, or courts where required to do so by applicable law, court order, or regulatory direction — including in connection with fraud investigations or anti-money-laundering obligations.
• Business transfers: In the event of a merger, acquisition, or sale of the business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

All third-party data processors engaged by se7win are required to enter into a formal data processing agreement and are subject to regular compliance reviews.

se7win uses cookies and similar tracking technologies on the Platform to deliver a functional, secure, and personalised experience. The following categories of cookies are in use:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as logging in, maintaining your session, and processing transactions. They cannot be disabled without severely impacting your ability to use the Platform.
• Functional cookies: These cookies remember your preferences (such as your preferred language and currency display) and allow us to provide a more personalised experience. They do not track you across other websites.
• Analytics cookies: We use anonymised analytics cookies to understand how users interact with the Platform — for example, which pages are most visited, where users drop off during a process, and how load times vary across devices. This helps us improve the Platform.
• Security cookies: These cookies help us detect and prevent fraudulent activity, including session hijacking and multi-account attempts. They are part of our platform security infrastructure.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform. For analytics and functional cookies, you may opt out by adjusting your browser settings or contacting our support team.

se7win retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as general guidance:

• Account data and KYC documentation: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years following the transaction date, in line with standard financial record-keeping requirements.
• Customer support communications: Retained for three (3) years following the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Anonymised or deleted on a rolling basis, typically within 13 months of collection, unless retained in anonymised aggregated form for analytics purposes.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of your preferences.

When your data is no longer required, it will be securely deleted or anonymised so that it can no longer be attributed to you as an individual. Where deletion is not immediately possible due to technical constraints, the data will be isolated from further active processing until deletion can be completed.

se7win implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the Platform is encrypted in transit using industry-standard TLS 1.3 protocols.
• Encryption at rest: Personal data stored in our databases — including KYC documents, payment information, and account credentials — is encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA): Available for all accounts and strongly recommended for all Players accessing the Platform.
• Access controls: Access to personal data within se7win's infrastructure is restricted on a strict need-to-know basis. Team members with access to personal data are subject to confidentiality obligations and regular security training.
• Regular security audits: We conduct periodic independent security assessments and penetration tests to identify and remediate vulnerabilities in our systems.
• Incident response: se7win maintains a formal data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected users promptly and take immediate remediation steps.

While we take every reasonable step to secure your personal data, no electronic transmission or storage system is completely immune to risk. If you suspect unauthorised activity on your account, contact our support team immediately via live chat or at [email protected].

As a data subject, you hold the following rights in respect of the personal data that se7win holds about you. You may exercise any of these rights at any time by contacting our Data Privacy team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request). We will respond to verified requests within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that we may be required to retain certain data for legal compliance purposes even following an erasure request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing based on our legitimate interests, including processing for direct marketing purposes. Upon receipt of a valid objection to marketing processing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The se7win Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and we reserve the right to request proof of age at any point during your use of the Platform.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be refunded to the original payment method following verification.

If you are a parent or guardian and believe that a minor in your care has registered an account on the Platform, please contact us immediately at [email protected] so that we can take appropriate action.

se7win primarily processes personal data within the region. However, some of our third-party service providers (including KYC verification providers, game platform operators, and infrastructure providers) may be located in or operate from jurisdictions outside Malaysia.

Where personal data is transferred to a country or jurisdiction outside Malaysia, se7win ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Malaysia. These safeguards may include:

• Standard contractual clauses in data processing agreements with service providers
• Transfers only to jurisdictions that offer an adequate level of data protection as recognised by relevant authorities
• Binding corporate rules where applicable within corporate group structures

You may request details of the specific safeguards in place for any cross-border transfer of your personal data by contacting us at [email protected].

se7win reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. Where changes are material, we will notify registered users by email at the address associated with their account no less than seven (7) days before the revised Policy takes effect.

Non-material changes — such as minor clarifications or corrections — may be published without prior individual notice. The "Last updated" date at the top of this Policy will be revised each time changes are made.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

We recommend reviewing this Policy periodically. The most current version is always accessible at https://se7win.click/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact our Data Privacy team using the details below. We are committed to responding to all privacy-related queries promptly and transparently.

When submitting a privacy-related request, please include your registered account email address and a clear description of your query. For data subject access requests and erasure requests, we may need to verify your identity before proceeding.