Privacy Policy

This Privacy Policy ("Policy") describes how Sarang777 ("we", "us", "our", "the Company", "the Platform") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "User", "Player") who access or use the online gaming and sports betting platform located at sarang777.cam and any associated subdomains or digital services.

Sarang777 recognises that personal data is a sensitive asset and that users have a legitimate expectation of privacy when entrusting their information to an online gaming platform. We take this responsibility seriously. This Policy has been drafted to be clear, transparent, and genuinely informative — not merely to satisfy a legal formality.

By registering for an account, making a deposit, or continuing to use the Sarang777 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform and may request account closure through our support channels.

This Policy should be read in conjunction with the Sarang777 Terms & Conditions and Responsible Gambling Policy, both of which form part of the binding agreement between you and the Company.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Sarang777 collects personal data through several channels: directly from you when you register or use the Platform, automatically through technical means as you browse and interact with our services, and from third parties such as payment processors and identity verification providers. The categories of data collected are set out below.

3.1 Registration & Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (used to verify 21+ age eligibility)
• Email address (primary account and communication identifier)
• Username and encrypted account password
• Residential address (city, state, postcode) — Malaysian addresses accepted from all states including Kuala Lumpur, Penang, Johor, Selangor, Sabah, and Sarawak
• Nationality and country of residence
• National identification number (MyKad number for Malaysian citizens) — collected only for KYC verification purposes

3.2 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR and timestamps
• Payment method identifiers — e.g., masked Touch 'n Go eWallet account reference, last four digits of a bank account used via FPX or DuitNow, CIMB Clicks or Maybank2u account reference — full account numbers are never stored
• Cryptocurrency wallet addresses where USDT TRC20 deposits are made
• Bonus redemption and wagering activity records
• Chargeback and refund history, where applicable

3.3 Technical & Device Data

• IP address at the time of registration and subsequent logins
• Device type, operating system, and browser version
• Session timestamps, duration, and navigation path data
• Geolocation data at country/region level (not precise GPS coordinates)
• Cookie identifiers and local storage data (see Section 7)
• Error logs generated during Platform use

3.4 KYC & Verification Documents

• Copy of government-issued photo ID (MyKad, passport, or driving licence)
• Proof of address document — utility bill, bank statement, or official correspondence dated within the past 3 months
• Proof of payment method — screenshot or statement confirming ownership of deposit method
• Source of funds documentation where requested during enhanced due diligence reviews

3.5 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence with the Sarang777 support team
• Feedback, complaint records, and dispute correspondence
• Marketing communication preferences and opt-in or opt-out records

Sarang777 processes personal data for specific, defined purposes. We do not process personal data in ways that are incompatible with the purposes declared below. Each purpose is linked to a legal basis as described in Section 5.

Sarang777 processes personal data under one or more of the following recognised legal bases, selected on the basis of the specific purpose of each processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, transaction processing, and support services.
• Consent: Processing based on your active, freely given consent — most relevantly for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
• Legitimate interests: Processing necessary for the Platform's legitimate business interests — including fraud prevention, security monitoring, analytics, and platform improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering obligations, age verification mandates, and data retention requirements imposed by applicable financial regulations.
• Vital interests: In exceptional circumstances, where processing is necessary to protect the vital interests of a user or another person — for example, where responsible gambling protections require intervention.

Sarang777 does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

6.1 Payment Processors

To process MYR deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and USDT TRC20, Sarang777 shares the minimum necessary transaction data with the relevant payment processors and banking institutions. These entities operate under their own regulated data protection frameworks.

6.2 Identity Verification Providers

KYC and identity verification may be conducted with the assistance of third-party verification service providers. These processors operate under binding data processing agreements and are prohibited from using identity documents for any purpose other than the specific verification task they are engaged to perform.

6.3 Regulatory and Law Enforcement Authorities

Sarang777 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by lawful order, or where disclosure is necessary to protect the rights, property, or safety of the Company, its users, or the public.

6.4 Technical Service Providers

We engage third-party providers for hosting infrastructure, analytics, security monitoring, and customer support tooling. All such providers operate under contractual obligations that restrict their use of personal data to the specific service they provide to Sarang777 and require them to maintain appropriate security standards.

The Sarang777 website uses cookies and similar technologies to provide core functionality, maintain your session whilst logged in, and generate anonymised usage analytics that help us improve the platform experience for all Malaysian players.

7.1 Cookie Categories

You may manage your cookie preferences through your browser settings. Disabling certain cookie categories may affect the functionality of the Platform. Most modern browsers allow you to block or delete cookies; however, strictly necessary cookies cannot be disabled without losing the ability to log in or transact.

Sarang777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of an account's active status plus a minimum of five (5) years following account closure, in order to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction, as required under applicable financial record-keeping regulations.
• KYC documents: Retained for five (5) years following submission, or longer where required by law. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
• Support communications: Retained for three (3) years from the date of last interaction, or until the resolution of any related dispute, whichever is later.
• Marketing data: Retained until you withdraw consent or unsubscribe, after which it is deleted or anonymised within 30 days.
• Technical log data: Retained for up to twelve (12) months for security analysis and fraud investigation purposes, then deleted.

Upon expiry of applicable retention periods, personal data is either securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

Sarang777 implements a layered approach to data security, combining technical measures, organisational controls, and access management protocols designed to protect personal data against unauthorised access, disclosure, alteration, or destruction.

9.1 Technical Measures

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for all stored personal data, KYC documents, and financial records
• Multi-factor authentication requirements for all internal system access by Company personnel
• Continuous security monitoring and intrusion detection systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists

9.2 Organisational Measures

• Strict role-based access controls limiting personal data access to personnel with a demonstrated need for that data in performing their job functions
• Mandatory data protection and security training for all personnel who handle personal data
• Binding data processing agreements with all third-party processors who handle personal data on our behalf
• A documented data breach response protocol requiring notification of affected users and relevant authorities within applicable timeframes in the event of a confirmed breach

Subject to applicable data protection laws, you hold a number of rights in relation to your personal data held by Sarang777. These rights are summarised below. To exercise any of these rights, please contact us using the details in Section 13.

Sarang777 will respond to valid data subject requests within 30 calendar days of receipt. In cases of complexity or where a high volume of requests are pending, we may extend this period by a further 60 days and will notify you accordingly.

The Sarang777 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification checks are conducted as part of the account registration and KYC process to enforce this restriction.

If Sarang777 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will take immediate steps to permanently close the associated account, void any transactions conducted through it, and securely delete all personal data collected in connection with that account, subject only to any record-keeping obligations that apply by law.

Sarang777 reserves the right to update this Privacy Policy at any time to reflect changes in applicable data protection law, updates to our data processing practices, or the introduction of new Platform features involving personal data. The effective date of the current version is displayed at the top of this page.

Where changes are material — affecting the nature of data collected, the purposes for which it is used, or the rights available to users — we will notify registered users by email or through a prominent notice on the Platform prior to the changes taking effect. Non-material changes, such as typographical corrections or structural reformatting that does not alter substance, may be made without prior notice.

Continued use of the Sarang777 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and may request account closure and data deletion through our support channels.

For any queries, concerns, or requests relating to this Privacy Policy, or to exercise any of your data subject rights as described in Section 10, please contact the Sarang777 Data & Privacy team through the channels below. All privacy-related enquiries are handled by trained personnel and treated with strict confidentiality.

When submitting a privacy-related request, please include your registered username, the nature of your request (e.g., data access, rectification, erasure), and a description of the specific data or processing activity your request relates to. This information helps us locate and action your request accurately and without unnecessary delay.

Sarang777 is committed to resolving all privacy enquiries in good faith. If you remain dissatisfied with our response to a privacy concern, you retain the right to refer the matter to the relevant supervisory authority in your jurisdiction of residence.