Privacy Policy —
How innwa777 Protects Your Data

This Privacy Policy ("Policy") issued by innwa777, the operator of the online gaming platform accessible at innwa777.casa

innwa777 is committed to processing personal data responsibly, lawfully, and transparently in accordance with applicable data protection principles. This Policy sets out in clear terms the categories of personal data we collect, the purposes for which that data is used, the conditions under which it may be shared, the security measures we apply to protect it, and the rights you are entitled to exercise in respect of your personal information.

If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team. This Policy must be read in conjunction with our Terms & Conditions, which govern the overall relationship between innwa777 and its players.

The following definitions apply throughout this Policy:

innwa777 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment service providers. The categories of data we collect are detailed below.

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — minimum 21 years required);
• Residential address, including city and postcode;
• Email address and contact telephone number;
• Government-issued photo identification document (e.g., Malaysian MyKad — front and back).

3.2 Financial & Transaction Data

• Payment method details including bank account numbers (partial), e-wallet identifiers (DuitNow, Touch 'n Go eWallet, Boost, GrabPay), or cryptocurrency wallet addresses (BTC/USDT);
• Deposit and withdrawal transaction records, amounts, dates, and associated payment references;
• Account balance history and wagering transaction logs;
• Currency denomination — primarily Malaysian Ringgit (MYR/RM).

3.3 Technical & Usage Data

• IP address, device type, operating system, browser type and version;
• Session timestamps, login history, and geographic region derived from IP address;
• Game session data including games played, wagers placed, and session durations;
• Platform navigation patterns and feature usage metrics (collected via cookies and analytics tools).

3.4 Communications Data

• Records of live chat sessions, email correspondence, and support ticket interactions;
• Feedback, complaints, and dispute submissions;
• Marketing preferences and opt-in/opt-out records for promotional communications.

innwa777 processes your personal data for the following purposes:

innwa777 processes personal data only where a valid legal basis exists. The primary legal bases upon which we rely are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, game access, and payment processing;
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, AML/CTF obligations, and regulatory reporting requirements;
• Legitimate Interests: Processing undertaken in pursuit of innwa777's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent for marketing at any time by contacting our support team or updating your account preferences.

innwa777 does not sell, rent, or trade your personal data to third-party marketers or advertising networks under any circumstances. Your data may, however, be disclosed to the following categories of third parties for the specified purposes:

• Payment Service Providers: Banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow), FPX gateway providers, and cryptocurrency processors — solely for the purpose of processing your transactions;
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify player identity and conduct due diligence checks in compliance with regulatory requirements;
• Technology Partners: Cloud hosting, infrastructure, and cybersecurity service providers engaged under contractual data processing agreements with appropriate confidentiality obligations;
• Game Studio Partners: Licensed international game studios whose titles are hosted on the Platform may receive anonymised or pseudonymised game session data for technical debugging and certification purposes — no personally identifiable information is shared;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory directive, innwa777 may be obligated to disclose personal data to competent authorities. Such disclosures will only be made to the extent strictly required by law.

innwa777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with industry-standard data destruction practices, unless ongoing legal proceedings require continued retention.

innwa777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the innwa777 Platform is encrypted using industry-standard SSL/TLS protocols, ensuring data in transit cannot be intercepted;
• Data Encryption at Rest: Sensitive personal data stored on innwa777 servers is encrypted using AES-256 encryption standards;
• Access Controls: Access to personal data is restricted to authorised innwa777 personnel on a strict need-to-know basis. All staff with data access undergo background verification;
• Intrusion Detection & Monitoring: Continuous monitoring systems are in place to detect and respond to unauthorised access attempts, anomalous login behaviour, and potential security incidents;
• Password Security: User passwords are stored as salted cryptographic hashes — innwa777 staff cannot access or view your plaintext password at any time;
• Regular Security Audits: The Platform undergoes periodic security assessments and vulnerability testing to identify and remediate potential weaknesses.

Despite these measures, no digital system can guarantee absolute security. Players are advised to maintain strong, unique passwords and to notify innwa777 support immediately if they suspect any unauthorised access to their account. innwa777 will notify affected users of any data breach that is likely to result in a high risk to their rights and freedoms, in accordance with applicable notification obligations.

innwa777 uses cookies and similar tracking technologies to operate the Platform effectively, analyse usage patterns, and improve user experience. The following categories of cookies may be deployed on the Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, authentication state, and security tokens. These cannot be disabled without preventing access to core Platform features;
• Functional Cookies: Remember your preferences, language settings, and account configuration to provide a personalised experience across sessions;
• Analytics Cookies: Collect anonymised or pseudonymised data about how Players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used exclusively for internal Platform improvement;
• Security Cookies: Support fraud detection systems by identifying irregular session behaviour and potential account takeover attempts.

innwa777 does not deploy third-party advertising cookies or sell-derived data to external marketing platforms. Players may manage cookie preferences through their browser settings, noting that disabling certain cookies may affect Platform functionality. Continued use of the Platform following acceptance of this Policy constitutes consent to our use of cookies as described above.

As a data subject, you hold a number of rights in relation to the personal data innwa777 holds about you. These rights may be exercised by submitting a written request to our support team at the contact details provided in Section13. innwa777 will respond to all verified data rights requests within a reasonable timeframe, typically not exceding 30 days from receipt of a valid request.

• Right of Access: You may request a copy of the personal data innwa777 holds about you, together with information about how it is being used;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held your account record;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to innwa777's legal retention obligations;
• Right to Restriction of Processing: You may request that innwa777 limit the processing of your data in certain circumstances, such as where you contest the accuracy of the data;
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to innwa777, for the purpose of transfering it to another service provider;
• Right to Object: You may object to processing of your data where that processing is based on legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

The innwa777 Platform is strictly intended for adults aged21 years and above. innwa777 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step during the KYC process, and any account found to belong to an underage individual will be immediately closed and all associated data will be securely deleted in accordance with this Policy, subject to any legal retention obligations.

If you believe that a minor has registered on the innwa777 Platform or that their personal data has been inadvertently collected, please notify us immediately at [email protected]. We will investigate and take appropriate action without delay.

innwa777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, the Effective Date and version number at the top of this document will be updated accordingly. Players are encouraged to review this Policy periodically.

Where changes are significant and affect the legal basis or scope of data processing, innwa777 will make reasonable efforts to notify active account holders via email or an in-Platform notification prior to the changes taking effect. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

For any privacy-related enquiries, data subject rights requests, or concerns about how innwa777 handles your personal data, please contact our support team using the details below. All contact details are provided as plain text — no clickable links or mailto protocols are used in this section.

When submitting a data rights request, please include your registered account username, a description of your request, and a copy of a government-issued photo ID to allow innwa777 to verify your identity before processing the request. This verification step is necessary to protect your data from being disclosed to or deleted by unauthorised third parties.