Vr7 Privacy Policy – Personal Data Protection for Malaysia Members

Vr7 (hereinafter referred to as "we", "the platform", or "vr7") operates under the official domain vr7.bar and is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal data when you register, log in, or use any services offered by vr7.

By registering an account or continuing to use the vr7 platform, you confirm that you have read, understood, and accepted the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

This Privacy Policy applies to all products and services operated by vr7, including the main website, the vr7 mobile app, and all our official communication channels. It is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international privacy standards.

Vr7 only collects personal data that is strictly necessary for the purpose of delivering a quality and secure service. We do not collect excessive or irrelevant information in relation to platform operations. Below are the main categories of data we collect:

Personal data is collected through several different channels depending on how you interact with the vr7 platform. Understanding these channels helps you clearly see how your information reaches us:

• Account Registration: Information you fill in when creating a new account at vr7 — your name, email, phone number, and chosen password.
• KYC Verification Process: Identity documents and verification selfies you upload as part of the mandatory Know Your Customer process.
• Financial Transactions: Your bank details and payment information provided when making a deposit or withdrawal request.
• Support Communications: Information you share when interacting with the vr7 customer support team via live chat, email, or Telegram.
• App & Website Usage: Log data, cookies, and technical information collected automatically when you browse the website or use the vr7 mobile app.
• Referral Program: Information shared when you or a friend joins the official vr7 referral program, subject to the consent of all parties involved.

In all cases, data collection is conducted transparently and you will be informed of the purpose at the point of collection. vr7 does not collect your personal data from third-party sources without your knowledge, except for identity verification through licensed KYC services.

Vr7 uses the personal data collected solely for legitimate and clearly stated purposes. We do not use your data for any other purpose without first obtaining your additional consent. Below are the primary purposes for data use:

• Account Management: Create, verify, maintain, and protect your member account, including detection of unauthorized login activity.
• Payment Processing: Process deposits, verify withdrawal requests, and reconcile your financial transaction records.
• Legal Compliance: Meet compliance obligations including KYC requirements, anti-money laundering (AML), and statutory reporting requirements.
• Platform Security: Detect and prevent fraud, account abuse, multi-account usage, and activities that violate the terms of service.
• Customer Support: Answer inquiries, resolve technical issues, and provide assistance related to your account.
• Service Improvement: Analyze aggregated usage data to improve platform performance, add new features, and enhance the overall experience.
• Service Communications: Send important account-related notifications, security updates, terms changes, and promotional information to members who have given their consent.

Vr7 does not sell, rent, or trade member personal data to any third party for commercial purposes. However, in the course of platform operations, there are certain situations where data must be shared with trusted parties. All data sharing is subject to strict confidentiality agreements.

• KYC Service Provider: A licensed identity verification provider that helps vr7 conduct KYC checks automatically and securely.
• Payment Processor: Financial institutions and payment processors required to process deposits and withdrawals securely.
• Game Provider: Licensed gaming software providers that require minimum session data to operate games within the vr7 platform.
• Statutory Authority: Law enforcement agencies or regulatory bodies where required by court order or applicable law.
• Cloud Services & Infrastructure: A cloud service provider that stores and processes data under strict data protection agreements and international security standards.

The vr7 platform uses cookies and similar tracking technologies to enhance website functionality, understand usage patterns, and secure your login session. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification, session management, and security preferences. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps us understand how members use the platform — most visited pages, session duration, and navigation patterns — for service improvement purposes.
• Preference Cookies: Save your preferences such as interface language, display settings, and notification preferences so you don't have to reconfigure them every time you log in.
• Security Cookies: Used to detect suspicious login attempts, prevent cross-site request forgery (CSRF), and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect your ability to use certain vr7 platform features fully.

Vr7 continuously invests in security infrastructure to ensure member personal data is always protected. Our security architecture is built on a "defence in depth" approach — if one layer fails, the next layer still provides adequate protection.

• Data Encryption in Transit: All communications between your device and vr7's servers are secured by TLS 1.3 encryption — the most current and secure encryption protocol available.
• Data Encryption at Rest: Sensitive data such as banking information and KYC documents is stored in encrypted form using AES-256 encryption.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of protection during login and when submitting withdrawal requests.
• 24/7 Monitoring: vr7's automated monitoring system tracks platform traffic around the clock to detect and respond to any security threats without delay.
• Regular Security Audits: Independent security assessments are conducted periodically by third-party cybersecurity firms to identify and address any potential vulnerabilities.
• Internal Access Controls: Only vr7 staff with a legitimate job requirement are permitted to access members' personal data, and all access is recorded in a strict audit log.

As a vr7 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. vr7 is committed to respecting and facilitating the exercise of these rights at no additional charge:

Vr7 only retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. The principle of "minimum necessary retention" is central to our approach to data management.

Once the retention period expires, data is permanently deleted or anonymised so it can no longer be linked to any individual. The deletion process is carried out automatically by vr7's data management system on a set schedule.

Vr7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or service improvements. Any updates made are intended to strengthen member privacy protection, not reduce it.

• Material changes to this policy will be communicated to members via their registered email at least 14 days before taking effect.
• In-platform notifications will be displayed upon login for changes that require immediate attention.
• The "Last Updated" date at the top of this document always reflects the latest version currently in effect.
• Continued use of the platform after the effective date constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. If you disagree with any changes, you have the right to close your account and request data deletion following the procedure described in Section 8 above.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the vr7 privacy team is here to help. We are committed to responding to all privacy enquiries in a timely and transparent manner.

• Privacy Email: [email protected] — please use the subject line "Privacy Enquiry" for faster processing.
• Response Time: General enquiries are answered within 3–5 business days; data rights requests within 14 business days.
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon in the corner of the vr7 platform for immediate enquiries.
• More Information: For more information about your rights under Malaysia's PDPA, you may refer to the Department of Personal Data Protection (JPDP) Malaysia.