Data Protection

Privacy Policy spiv7 – Personal Data Protection for Malaysian Players

Spiv7 takes every member's privacy seriously. This document clearly explains what data we collect, how it is used, and the measures we take to protect it using the latest encryption technology.

How spiv7 Protecting Your Data

Six core principles that shape how spiv7 handles your personal data every day.

256-bit SSL Encryption

All data transmitted between your device and spiv7's servers is encrypted using 256-bit SSL encryption — the same level of security used by major Malaysian banks.

No Data Sales

Spiv7 does not sell, rent, or commercialise your personal data to any third party for marketing purposes without your explicit consent. Your data belongs to you.

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time via the account settings section or by contacting support.

Secure Data Storage

Data is stored in data centres equipped with strict physical access controls, 24/7 surveillance, and regular backup procedures. Internal access to member data is limited to authorised staff only.

MY Legal Compliance

Spiv7's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. We continuously update our practices in line with changes in legislation.

Immediate Breach Notification

In the event of any security incident affecting your data, spiv7 is committed to notifying you within the timeframe required by Malaysian law and taking immediate action.

Last Updated: 1 January 2026
Important Note: This Privacy Policy explains how spiv7 collects and handles your personal data when you use our platform, mobile app, or related services. By using the spiv7 platform, you agree to the practices described in this Privacy Policy.
SECTION 01

How We Collect Your Personal Data

Spiv7 collects your personal data through several key channels that occur when you interact with our platform. This data collection is necessary for us to provide a secure, efficient, and personalised service to you as a spiv7 member.

Data is collected through the following means:

  • Account Registration: Information you provide when registering a new account on spiv7.
  • KYC Verification: Documents and information submitted during the Know Your Customer process.
  • Financial Transactions: Data related to deposits, withdrawals, and wagering history.
  • Platform Usage: Activity data, login records, device data, and usage patterns collected automatically.
  • Customer Support: Communications you have with the spiv7 support team.
  • Cookies and Tracking Technologies: Data collected through cookies, sessions, and similar technologies while you browse the platform.
Data Minimisation Principle: spiv7 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required to provide our services.
SECTION 02

Types of Personal Data Collected

Below are the categories of personal data collected by spiv7, along with the purpose and legal basis for collection:

Data Category Specific Examples Primary Purpose
Identity Data Name, IC number, date of birth Identity verification & KYC
Contact Data Email, phone number, address Service communications
Financial Data Payment methods, transaction history Payment processing
Technical Data IP address, device type, browser Security & fraud detection
Usage Data Betting history, platform activity Service improvement
Communication Data Support chat logs, email Issue resolution & support

Spiv7 does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, except where strictly required for compliance with anti-money laundering legal obligations.

SECTION 03

Purpose of Personal Data Use

Personal data collected by spiv7 is used exclusively for the following purposes and will not be used for any other purpose without notifying you:

  • Service Provision: Enabling you to register, log in, use all platform features, and manage your account.
  • Identity Verification: Conducting KYC processes to comply with anti-money laundering (AML) requirements and other compliance obligations.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Platform Security: Detecting and preventing fraud, misuse, unauthorized access, and other security threats.
  • Customer Support: Enabling our support team to assist you in resolving issues and answering queries effectively.
  • Personalisation: Providing relevant content recommendations and offers based on your usage patterns (with your consent).
  • Legal Compliance: Fulfilling legal and regulatory obligations applicable to spiv7 as a betting platform operator.
  • Analytics & Improvement: Understanding aggregate usage patterns to improve platform quality and usability.
SECTION 04

Data Sharing with Third Parties

Spiv7 takes data sharing seriously. We only share your personal data under the following circumstances and with parties that have undergone rigorous security assessments:

  • Payment Service Providers: Transaction data that must be shared with licensed payment processors (DuitNow, FPX, Touch 'n Go, GrabPay, Boost) to facilitate the processing of deposits and withdrawals.
  • KYC Service Providers: Identity information that must be verified by a licensed third-party identity verification service provider.
  • Game Content Providers: Minimum account information required by game providers to grant access to game content.
  • Legal Authority: Information required by competent authorities pursuant to a valid court order or legal obligation.
We Do Not Sell Data: spiv7 does not sell, rent, disclose, or transfer your personal data to any third party for marketing or commercial purposes without your explicit and separate consent.

All third parties we share data with use it solely for the specified purpose and are bound by strict data protection agreements with spiv7.

SECTION 05

Encryption & Security Measures

Protecting your personal data is the highest technical priority at spiv7. We implement multiple layers of security to ensure your data is always protected:

  • 256-bit SSL/TLS Encryption: All communications between your browser or app and spiv7's servers are encrypted using the latest SSL/TLS protocol with a 256-bit key length.
  • Stored Data Encryption: Sensitive data stored in spiv7's databases is encrypted using industry-leading encryption algorithms, ensuring the data remains unreadable even in the event of a database breach.
  • Tiered Access Control: Access to member data within spiv7's internal systems is strictly controlled using the principle of least privilege — only staff who require access to perform their duties are permitted.
  • Two-Factor Authentication (2FA): All internal staff accounts with access to systems containing member data are required to use two-factor authentication.
  • Regular Security Audits: spiv7 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
  • Real-Time Threat Monitoring: Our automated monitoring system detects and alerts on any suspicious activity or unauthorised access attempts in real time.
SECTION 06

Cookies and Tracking Technologies

Spiv7 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the website or use the app.

Types of cookies used by spiv7:

  • Essential Cookies: Cookies required for core platform functions such as login authentication, user sessions, and security. These cannot be disabled as they are essential for the platform to operate.
  • Performance Cookies: Used to collect aggregated, anonymised information about how visitors use the platform, helping us improve performance and usability.
  • Functional Cookies: Allowing the platform to remember your preferences such as language, region, and display settings to provide a more personalized experience.

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the spiv7 platform you access.

SECTION 07

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights regarding your personal data held by spiv7:

Right of Access

You have the right to request a copy of the personal data spiv7 holds about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data, subject to applicable legal obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format.

Right to Restriction

You may request a restriction on the processing of your data under certain circumstances permitted by law.

How to Submit a Request: To submit any request regarding your privacy rights, contact the spiv7 customer support team via live chat on the platform. We will process your request within 14 business days.
SECTION 08

Data Retention & Deletion

Spiv7 retains your personal data only for as long as necessary based on the original purpose of collection or applicable legal obligations. The following are our data retention guidelines:

  • Active Account Data: Retained for the duration your account is active plus 7 years after account closure to comply with anti-money laundering obligations.
  • KYC Documents: Retained for 5–7 years after the business relationship ends, in accordance with Malaysian legal requirements.
  • Transaction History: Retained for 7 years for accounting, tax, and regulatory audit purposes.
  • Support Communication Log: Retained for 3 years to allow reference in dispute resolution.
  • Cookie Data: Session cookies expire when you close your browser. Persistent cookies expire after a set period (typically 30–90 days).

Once the retention period expires, data is securely deleted or anonymised so it can no longer be linked to any individual. The deletion process uses methods that ensure data cannot be recovered.

SECTION 09

Child Data Protection

The spiv7 platform is a service exclusively for individuals aged 21 and above. spiv7 intentionally does not collect any personal data from individuals under the age of 21.

If we determine that personal data of a child or minor has been collected without proper knowledge or age verification, we will take immediate steps to delete that data and close the associated account.

Child Protection: If you believe a minor has registered an account on spiv7, please contact our support team immediately. We will take prompt action to resolve the matter.
SECTION 10

Amendments to This Privacy Policy

Spiv7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. All previous versions of this Privacy Policy are retained and available upon request for reference.

When significant amendments occur, spiv7 will:

  • Updating the "Last Updated" date at the top of this document.
  • Sending email notices to all registered members outlining the key changes.
  • Displaying an in-platform notice for at least 14 days before the amendments take effect.

Your continued use of the spiv7 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy.

SECTION 11

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by spiv7, we encourage you to reach out to us through the following channels:

  • Live Chat: Live chat within the spiv7 platform — the fastest way to get a response, available 24/7.
  • Email: [email protected] — response within 1–2 business days.
  • FAQ Section: Visit page FAQ us for answers to general privacy-related questions.

The spiv7 Data Privacy team is ready to assist and will handle all inquiries seriously and within a reasonable timeframe. For official requests related to privacy rights such as data access or deletion, please clearly state the type of request and include appropriate identity verification details.

Our Commitment: spiv7 is committed to processing all privacy-related requests within 14 business days and to communicating with you openly and transparently about how we handle your data.

Your Data is Safe. Your Platform Awaits.

With 256-bit SSL encryption, Malaysia PDPA compliance, and a full commitment to your privacy, spiv7 is a betting platform you can trust. Register today and play with peace of mind.

✅ 256-bit SSL Encryption ✅ Malaysia PDPA Compliant ✅ No Data Sales
Bahasa Melayu