Privacy Policy Gold7 — User Personal Data Protection

01Introduction and Scope of This Policy

Welcome to the gold7 Privacy Policy. This document outlines the privacy practices of the gold7.vip platform and the gold7 mobile app regarding the collection, use, storage, and protection of your personal information. gold7 is an online entertainment platform operating for users in Malaysia, and we are committed to conducting our operations with the highest level of transparency and integrity.

This policy applies to all users who access the Gold7 platform through any device or channel, including the website, Android app, iOS app, and any other official channels operating under the Gold7 brand. By registering an account or using any Gold7 service, you confirm that you have read and understood this privacy policy.

This policy is intended to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. In the event of any conflict between other language versions and this version, the English version applies to Malaysian users.

02Types of Personal Data We Collect

Gold7 collects your personal data through several different means, depending on how you interact with our platform. The following are the categories of data we collect:

We do not collect sensitive data such as health information, religious beliefs or political views. Your financial information, such as credit card numbers, is not stored on gold7 servers — transactions are processed directly through certified payment providers, and card details are managed entirely by the respective payment gateways.

03How Gold7 Uses Your Data

The personal data we collect is used responsibly for the following purposes only. Gold7 will not use your data for any other purpose without first obtaining your consent:

• Account management: Creating and maintaining your account, processing registration, login and identity verification (KYC) required to ensure platform security;
• Transaction processing: Processing your fund deposits and withdrawals via your chosen payment methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay;
• Customer support: Responding to your enquiries and complaints via Live Chat and providing the necessary technical support;
• Platform security: Detecting and preventing fraud, money laundering, multi-account usage and any activity that violates gold7's terms;
• Service improvement: Analysing usage patterns to improve the user experience, platform performance and game offerings;
• Marketing communications: Sending you promotional information, bonuses and exclusive offers — only if you have consented to receive them;
• Legal compliance: Fulfilling reporting and compliance obligations to relevant authorities in accordance with applicable Malaysian law.

04Information Sharing and Disclosure

Gold7 holds a firm principle that your personal data is never sold, rented, or disclosed to third parties for commercial purposes. However, there are limited situations where we need to share your information with others to enable Gold7's services to function properly:

• Payment providers: Required transaction information is shared with certified payment gateways such as FPX processors and e-wallet providers to process your deposits and withdrawals;
• Game service providers: Usernames and basic game data are shared with third-party game providers such as slot and Live Casino providers operating within the gold7 platform;
• KYC providers: Identity verification documents are processed through an accredited KYC service provider to verify the authenticity of your documents;
• Legal authorities: Gold7 will disclose user information to relevant authorities where required by law, a valid court order, or an official investigation conducted by an authorised government agency;
• Fraud prevention: In cases of suspected fraud or financial crime, required information may be shared with relevant financial institutions or enforcement authorities.

All third parties we work with are bound by strict confidentiality agreements and are required to comply with data protection standards equivalent to or exceeding those of gold7. We do not permit any third party to use your data for their own purposes unrelated to the services they provide to us.

05Data Security Measures

Your data security is gold7's top priority. We implement multiple layers of technical and organisational safeguards to protect your personal information from unauthorised access, loss, alteration or improper disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and the gold7 servers;
• AES-256 encryption for all sensitive personal data stored in our databases;
• Layered access control with two-factor authentication (2FA) for all staff accessing data management systems;
• Round-the-clock 24/7 security monitoring by gold7's in-house cybersecurity team;
• Regular penetration testing conducted by independent third-party security auditors;
• A comprehensive incident response plan to address any security breach promptly;
• Mandatory data security awareness training for all gold7 staff who handle user data.

06Cookies, Tracking Technologies & Analytics

Gold7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you during subsequent sessions and understand how you use the platform.

Gold7 uses several types of cookies:

• Essential Cookies: These cookies are required for basic platform functions such as login authentication and session security. They cannot be disabled as the platform will not function without them;
• Functional Cookies: Saving your preferences such as language, display settings and session information to ensure a smoother experience while browsing the platform;
• Analytics Cookies: Helping us understand how users interact with the gold7 platform through anonymised usage data so we can continuously improve our services;
• Marketing Cookies: Used to display relevant promotions to you based on your interests and activity on the platform — only with your consent.

You may manage cookie settings through your browser settings. Please note that disabling certain cookies may affect the functionality of the Gold7 platform. For more information on managing cookies, please refer to your browser's help guide.

07Your Rights as a User

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by gold7:

To exercise any of the above rights, please contact the gold7 support team via Live Chat within the platform. We are committed to responding to all privacy rights requests within 14 business days from the date the request is received.

08Data Retention Period

Gold7 does not retain your personal data longer than necessary for the purposes stated in this policy. Data retention periods are determined based on operational requirements, legal obligations, and Gold7's legitimate interests:

• Active account data: Retained for as long as your account is active and for 7 years after account closure to meet financial record-keeping and legal requirements;
• Transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering;
• KYC documents: Retained for the lifetime of the account and 5 years after account closure in accordance with regulatory compliance requirements;
• Communication logs: Customer support chat records are retained for 2 years for quality control and dispute resolution purposes;
• Analytics data: Anonymised usage data is retained for 2 years for trend analysis and platform improvement purposes.

Once the retention period expires, your data will be securely deleted using certified data deletion methods, or permanently anonymised if the data is needed for aggregate statistical purposes.

09Child Protection

The gold7 platform is strictly for users aged 18 and above. gold7 does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian who believes your underage child has registered a gold7 account, please contact us immediately via Live Chat so the account can be terminated and the associated data securely deleted.

Gold7 applies age verification procedures during the registration process, including KYC requirements that oblige users to submit valid identification documents. This is one of our primary mechanisms for preventing underage access to the platform.

10Changes to This Privacy Policy

Gold7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service expansion. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page;
• Displaying a clear notice on the gold7 homepage at least 7 days before changes take effect;
• Sending notifications to registered users via email or in-app notifications on the gold7 app;
• In the event of highly significant changes, explicit consent will be sought from users again before the changes take effect.

Your continued use of the gold7 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

11How to Contact Gold7 Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gold7 handles your personal data, we encourage you to reach out to us through the following channels:

• Live Chat: The fastest channel — available 24/7 directly within the gold7 platform for immediate responses;
• Email: [email protected] — for detailed privacy enquiries and personal data rights requests;
• FAQ Page: Visit FAQ Help Centre us for answers to the most frequently asked questions.

Gold7 has a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy. All privacy-related requests will be handled confidentially and professionally within the specified timeframe.