Privacy Policy
inwa777 takes your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a player. Please read this document in full before registering an account.
256-bit SSL Encryption
All data transmitted between your device and inwa777 is encrypted using industry-standard TLS/SSL protocols. Your personal details, payment information, and account credentials are fully protected in transit.
No Third-Party Data Sales
inwa777 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used exclusively for account management, compliance, and service improvement.
Your Data, Your Rights
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a data rights request to our support team and we will respond within 30 days.
Secure Data Storage
Personal data and KYC documents held by inwa777 are stored on encrypted servers with access restricted to authorised personnel only. Retention periods follow applicable data protection standards.
Transparent Cookie Use
We use only essential, analytics, and preference cookies. You can review what each cookie category does in Section 9 of this policy. No invasive cross-site tracking is conducted by inwa777.
Breach Notification
In the unlikely event of a data security incident that affects your personal information, inwa777 will notify you by email within the timeframe required by applicable data protection law and will outline steps taken to mitigate the issue.
Introduction
This Privacy Policy ("Policy") is issued by inwa777 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at inwa777.buzz ("the Platform"). This Policy applies to all individuals who access, register on, or interact with the Platform in any capacity, including registered Players, visitors, and prospective users.
At inwa777, we recognise that the privacy and security of personal data is a fundamental right. We are committed to collecting only the data we genuinely need, using it only for the purposes described in this Policy, and protecting it with industry-standard security measures throughout its lifecycle on our systems.
This Policy has been prepared in compliance with applicable data protection legislation and international standards governing the handling of personal data in the online gaming industry. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the broader agreement between you and inwa777.
Your Consent: By registering an account on the Platform or by continuing to use the Platform after any update to this Policy, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, you must cease using the Platform and contact our support team to request account closure.
Definitions
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. |
| Data Subject | The individual to whom Personal Data relates — in most cases, a registered Player or Platform visitor. |
| Data Controller | inwa777, the entity that determines the purposes and means by which Personal Data is processed. |
| Data Processor | A third party that processes Personal Data on inwa777's behalf and under its documented instructions. |
| Processing | Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion. |
| KYC | Know Your Customer — the identity and age verification process applied to registered Players. |
| Cookies | Small text files placed on your device by the Platform to enable functionality, analytics, and preference retention. |
Personal Data We Collect
inwa777 collects Personal Data across several categories, depending on how you interact with the Platform. The categories below describe the data we may hold about you:
3.1 Identity & Contact Data
- Full legal name (as it appears on your government-issued identification document)
- Date of birth (required to verify the 21+ age requirement)
- Malaysian NRIC number, passport number, or driver's licence number
- Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang, Shah Alam)
- Email address and contact phone number
3.2 Account Data
- Username and hashed password credentials
- Account registration date and status
- VIP tier and loyalty programme standing
- Communication and notification preferences
- Responsible gambling tool settings (deposit limits, exclusion status, etc.)
3.3 Financial & Transaction Data
- Deposit and withdrawal transaction history, including amounts in MYR and timestamps
- Payment method identifiers (e.g., Touch 'n Go eWallet account reference, FPX bank account last four digits, DuitNow registered number — never full account numbers or PINs)
- Cryptocurrency wallet addresses used for deposits or withdrawals
- Bonus and promotional credit history
- Wagering activity records required for compliance audit purposes
3.4 Technical & Usage Data
- IP address at time of login and registration
- Device type, operating system, and browser version
- Session logs including login and logout timestamps
- Pages visited, games accessed, and betting activity within the Platform
- Geolocation data (country and region level only, derived from IP address)
3.5 KYC Verification Documents
- Photographic copy of government-issued identity document (Malaysian MyKad, Driver's Licence, or Passport)
- Proof of address document (utility bill or bank statement, not older than three months)
- Selfie photograph held alongside identity document, as requested during enhanced verification
Sensitive Data: inwa777 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless specifically required for compliance with regulatory obligations. Where such data is incidentally provided (for example, in a document submitted for KYC), it will be treated with the highest level of protection and used only for the stated verification purpose.
How We Collect Personal Data
inwa777 collects Personal Data through the following channels:
4.1 Direct Collection
Data you provide directly when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our customer support team, participate in a promotion, or update your account settings. This is the primary source of your Personal Data.
4.2 Automated Technical Collection
Certain technical data is collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, and session activity logs. This data is collected via server logs and first-party cookies and is used primarily for platform security, fraud prevention, and performance monitoring.
4.3 Third-Party Sources
In limited circumstances, inwa777 may receive data about you from authorised third parties. These include:
- Identity verification providers who validate the authenticity of KYC documents submitted by you.
- Payment processors (including Malaysian payment providers such as DuitNow, FPX, Touch 'n Go eWallet, and Maybank2u) who confirm the status of deposit and withdrawal transactions — they share only the transaction reference and outcome, not your full financial account details.
- Fraud detection services that flag account patterns associated with known fraudulent behaviour across the online gaming industry.
Purpose of Data Processing
inwa777 processes your Personal Data exclusively for the following documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity, contact, account data |
| Age and identity verification (KYC) | Identity, KYC documents, date of birth |
| Processing deposits and withdrawals | Financial, transaction, identity data |
| Fraud prevention and security monitoring | Technical, usage, financial data |
| Compliance with anti-money laundering (AML) obligations | Identity, financial, transaction data |
| Responsible gambling monitoring and intervention | Account, usage, transaction data |
| Customer support and dispute resolution | Identity, account, transaction data |
| Platform personalisation and user experience improvement | Technical, usage, account data |
| Promotional communications (where consented) | Contact, account, preference data |
| Legal and regulatory reporting obligations | Identity, financial, transaction data |
Legal Basis for Processing
inwa777 processes your Personal Data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:
- Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account creation, payment processing, and dispute resolution.
- Legal Obligation: Processing required to comply with applicable law — including anti-money laundering regulations, KYC requirements, and reporting obligations to regulatory authorities.
- Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gambling monitoring, and statistical analysis — where such interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your explicit and freely given consent — including sending promotional emails and push notifications. You may withdraw consent at any time by updating your account communication preferences or contacting our support team.
Data Sharing & Disclosure
inwa777 does not sell, rent, or trade your Personal Data. We may share your data only in the strictly limited circumstances described below:
7.1 Authorised Service Providers
We engage carefully selected third-party service providers who process data on our behalf as Data Processors under binding data processing agreements. These include:
- KYC and identity verification technology providers
- Malaysian and international payment processors (including DuitNow, FPX, Touch 'n Go eWallet, Maybank, CIMB, Public Bank, and cryptocurrency payment gateways)
- Fraud detection and AML screening service providers
- Cloud hosting and infrastructure providers
- Customer support platform providers
All service providers are contractually prohibited from using your data for any purpose other than providing the specified service to inwa777, and are required to maintain appropriate data security standards.
7.2 Regulatory and Legal Disclosure
inwa777 may be required by law, regulation, court order, or other legal process to disclose Personal Data to competent authorities, regulatory bodies, or law enforcement agencies. We will comply with such obligations while, where legally permissible, notifying you of any such disclosure.
7.3 Business Transfers
In the event that inwa777 undergoes a merger, acquisition, sale of assets, or similar corporate transaction, your Personal Data may form part of the transferred assets. You will be notified by email and via a prominent Platform notice in advance of any such transfer, and the successor entity will be required to honour this Privacy Policy.
International Transfers: Some of inwa777's service providers may be located outside Malaysia. Where Personal Data is transferred internationally, we ensure that appropriate safeguards are in place — including standard contractual clauses or equivalent protections — to maintain data protection standards consistent with this Policy.
Data Retention
inwa777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention guidelines apply:
- Account data and transaction records: Retained for a minimum of 5 years following the closure or last activity of an account, in accordance with standard financial record-keeping and AML compliance requirements.
- KYC documents: Retained for the duration of the account and for a minimum of 5 years following account closure. Documents may be retained longer if required by a specific regulatory investigation or legal proceeding.
- Technical and usage logs: Typically retained for 12 months from the date of collection, unless a specific event (such as a fraud investigation) warrants extended retention.
- Marketing communications data: Retained until you withdraw consent or request removal from marketing lists, whichever is earlier.
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction.
Cookies & Tracking Technologies
inwa777 uses cookies and similar technologies to ensure the Platform functions correctly, to understand how players use the Platform, and to remember your preferences. We do not use third-party advertising cookies or cross-site tracking technologies.
| Cookie Category | Purpose | Retention | Required? |
|---|---|---|---|
| Maintain your logged-in session, secure your account, enable core Platform functionality including deposit and withdrawal flows. | Session / up to 30 days | Yes — cannot be disabled | |
| Aggregate, anonymised data on how players navigate and use the Platform — used to improve performance and identify friction points. No personally identifiable data is collected. | Up to 12 months | Optional | |
| Remember your language setting, display preferences, and last-visited game categories so you do not need to reconfigure them on each visit. | Up to 12 months | Optional |
You can manage cookie preferences through your browser settings. Disabling all cookies (including essential ones) may impair your ability to log in and use the Platform. For guidance on cookie settings in common browsers used in Malaysia, please refer to the help documentation of your specific browser.
Your Data Rights
As a Data Subject, you hold the following rights in relation to your Personal Data held by inwa777. These rights may be subject to certain limitations where processing is required for legal compliance or fraud prevention purposes.
Right of Access
Request a copy of all Personal Data inwa777 holds about you. We will respond within 30 days of a valid request.
Right to Rectification
Request correction of any inaccurate or outdated Personal Data. Name and date-of-birth corrections require supporting documentation.
Right to Erasure
Request deletion of your Personal Data where we no longer have a legal basis to retain it. Note: data required for AML and KYC compliance cannot be erased until the mandatory retention period expires.
Right to Data Portability
Request your Personal Data in a structured, machine-readable format (CSV or JSON) so you can transfer it to another service provider if you choose.
Right to Object
Object to processing conducted on the basis of legitimate interests, including use of your data for Platform analytics or personalisation.
Right to Restriction
Request that inwa777 restricts processing of your data — for example, while a rectification request is being assessed or during a dispute.
To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 days. We may ask for identity verification before processing your request.
Children & Underage Players
inwa777 strictly prohibits use of the Platform by individuals under the age of 21. Our Platform is not directed at, nor intended for, any person under 21 years of age, and we do not knowingly collect Personal Data from minors.
During the registration process, all applicants are required to declare their date of birth and confirm that they are at least 21 years of age. KYC verification is used to validate this declaration. Any account found to belong to a person under 21 will be suspended immediately, all funds frozen pending investigation, and any winnings accrued may be forfeited in accordance with our Terms & Conditions.
If you believe that a minor has registered on the Platform or that Personal Data belonging to a minor has been collected, please contact our compliance team immediately at [email protected]. We will investigate and take corrective action without delay.
Parental Controls: If you share a device with minors, we strongly recommend enabling parental control software on your device and ensuring that your inwa777 account credentials are not accessible to persons under 21. inwa777 cannot be held responsible for unauthorised access by a minor where adequate precautions have not been taken on the account holder's device.
Security Measures
inwa777 implements a layered set of technical and organisational security measures to protect your Personal Data from unauthorised access, loss, alteration, or disclosure. These measures include but are not limited to:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and inwa777's servers is encrypted using 256-bit TLS encryption.
- Data Encryption at Rest: Personal data and KYC documents stored on inwa777's servers are encrypted using AES-256 encryption.
- Access Controls: Access to Personal Data is restricted to authorised personnel only, based on a need-to-know principle. Access is logged and audited.
- Intrusion Detection Systems: inwa777's infrastructure is monitored continuously for anomalous access patterns and potential security incidents.
- Regular Security Audits: Third-party security assessments are conducted periodically to identify and remediate vulnerabilities.
- Password Hashing: Player account passwords are never stored in plain text. They are hashed using industry-standard cryptographic algorithms before storage.
While inwa777 applies robust technical measures, no online platform can guarantee absolute security. You also have a responsibility to protect your account — use a strong, unique password for inwa777 and do not share your login credentials with anyone. If you suspect unauthorised access to your account, contact our 24/7 support team immediately via live chat.
Amendments to This Policy
inwa777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where amendments are material — meaning they significantly affect your rights or the ways in which your data is used — we will provide advance notice by email to your registered address and via a prominent notification on the Platform, at least 7 days before the changes take effect.
For minor updates (such as clarifications or non-material corrections), the Policy will be updated with a revised "Last Updated" date without prior individual notice. We recommend reviewing this page periodically to remain informed of how inwa777 handles your data.
Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you have the right to request account closure by contacting our support team before the effective date.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact inwa777 through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the Platform. This is the fastest channel for urgent data-related enquiries. Average response time: 3–5 minutes.
- Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Rights Request" in your subject line to ensure prompt routing to our compliance team. Response time: typically within 4–12 hours.
- Language of Correspondence: Our team can handle privacy-related enquiries in English, Bahasa Melayu, and Chinese.
Data Protection Officer: For formal data protection correspondence or to exercise your rights under Section 10 of this Policy, please email [email protected] with the subject line "Attention: Data Protection — [Your Request Type]". We will acknowledge your request within 5 business days and aim to resolve it within 30 days.
For information on responsible gambling tools and self-exclusion options, please visit our Responsible Gambling page. For the complete terms governing your use of the Platform, please refer to our Terms & Conditions.
Your Privacy is Our Priority
Questions about how your data is handled? Our support team is available around the clock — in English, Bahasa Melayu, and Chinese.
For players aged 21 and above only. Please review our Responsible Gambling page before playing.
⚠️ 21+ Only. inwa777 is an entertainment platform for players aged 21 and above. Play responsibly. Visit Responsible Gambling for tools and support.