Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by sumo777 ("we", "us", "our", "the Company") and applies to all users ("you", "User", "Player") of the sumo777 online gaming platform, accessible at https://sumo777.cam (the "Platform").

This Policy describes how sumo777 collects, processes, stores, shares, and protects personal data in connection with your use of our Platform and related services. It also describes the rights you hold in relation to your personal data and the mechanisms available to exercise those rights.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.

sumo777 serves players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and other locations. All account currency is Malaysian Ringgit (MYR). Local payment data from providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank is processed in accordance with this Policy.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other data.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" — sumo777, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — A third party that processes personal data on behalf of sumo777 under a data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.
• "KYC" — Know Your Customer: the identity and address verification process required to operate your account and process withdrawals.
• "Cookies" — Small text files placed on your device by the Platform to store session information, preferences, and analytical data.
• "Data Subject Request" — A formal request by you to exercise one or more of the user rights described in Section 11.
• "Sensitive Personal Data" — A subcategory of personal data including, where applicable, financial information, payment details, and identity documentation.

3. Personal Data We Collect

sumo777 collects the following categories of personal data in the course of providing its services. All collection is limited to what is necessary and proportionate for the specified purpose.

We do not collect data that is not relevant to the provision of our services. Where you voluntarily provide additional information beyond what is required, we will process it only in connection with the purpose for which you provided it.

4. How We Collect Your Data

sumo777 collects personal data through the following channels:

4.1 Direct Collection

• At the time of account registration, when you provide your name, email address, date of birth, and contact details.
• During the KYC verification process, when you submit identity documents and proof of address.
• When you make a deposit or request a withdrawal via any of our accepted payment methods, including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong Bank.
• When you contact our support team via live chat or email.
• When you interact with promotions, bonus offers, or the referral programme.

4.2 Automated Collection

• Technical and usage data is collected automatically as you browse and interact with the Platform, including through cookies and similar tracking technologies as described in Section 8.
• Login events, session data, and security-relevant signals (such as unusual access patterns) are logged automatically.

4.3 Third-Party Sources

• Identity verification and fraud detection service providers may supply additional verification data as part of the KYC process.
• Payment processors may transmit transaction confirmation data necessary to reconcile deposits and withdrawals.

5. Purpose and Legal Basis for Processing

sumo777 processes your personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are set out below:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including operating your account, processing deposits and withdrawals, and providing access to gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) checks, KYC verification, responsible gambling obligations, and financial record-keeping.
• Legitimate Interests: Processing necessary for sumo777's legitimate business interests, including fraud detection, platform security, service improvement, and analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as a legal basis (such as for certain marketing communications), you have the right to withdraw that consent at any time by contacting our support team or updating your account preferences.

sumo777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where expressly required for fraud prevention or compliance purposes.

6. Data Sharing and Disclosure

sumo777 does not sell your personal data. We share personal data only in the following circumstances and only to the extent strictly necessary:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under written data processing agreements. These include: payment gateway operators (to process MYR transactions via DuitNow, FPX, e-wallets, and Malaysian bank transfers); KYC and identity verification providers; fraud detection and security services; and cloud infrastructure providers hosting Platform data.

6.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by applicable law or a valid legal order. We will, where legally permitted to do so, notify affected users of such disclosures.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data held by sumo777 may be transferred to the acquiring entity. You will be notified of any such transfer and any changes to this Policy that may result.

6.4 No Third-Party Marketing

sumo777 does not share your personal data with third parties for their own marketing purposes. Any promotional communications from sumo777 will relate exclusively to our own products and services.

7. International Data Transfers

In some cases, personal data processed by sumo777's service providers may be transferred to and stored in locations outside Malaysia. Where such transfers occur, sumo777 ensures that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses, data processing agreements, and — where applicable — adequacy decisions.

We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate protective measures. If you wish to obtain more information about specific transfer safeguards, please contact our support team.

8. Cookies and Tracking Technologies

sumo777 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies help us recognise your session, remember your preferences, and understand how you use the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your language preferences, display settings, and account-level configuration to improve your experience on return visits.
• Analytics Cookies: Help us understand how users interact with the Platform — which pages are visited, how long sessions last, and where users encounter difficulties. Analytics data is aggregated and anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent sessions, bot activity, and account takeover attempts.

8.2 Cookie Management

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and maintaining an active gaming session. Analytics and functional cookies can be disabled with minimal impact on core Platform functionality.

9. Data Retention

sumo777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, tax, and accounting obligations.

• Account and KYC Records: Retained for the duration of your active account relationship plus a minimum of five (5) years following account closure, in compliance with applicable financial record-keeping and AML obligations.
• Transaction Records: Financial transaction records, including deposits and withdrawals in MYR, are retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Records of live chat and email support interactions are retained for a minimum of two (2) years to facilitate dispute resolution and quality assurance.
• Technical and Usage Data: Aggregated analytics data is retained for up to two (2) years. Raw technical logs are retained for 90 days unless required for an active investigation.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your personal data, subject to our legal retention obligations, by submitting a Data Subject Request as described in Section 11.

10. Data Security

sumo777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction.

• Encryption: All data in transit between your device and our servers is encrypted using TLS/SSL with a minimum of 256-bit key strength.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and security training.
• Infrastructure Security: Platform servers are hosted in hardened data centre environments with physical access controls, intrusion detection, and regular security audits.
• Password Security: User passwords are never stored in plain text. Password hashing uses industry-standard algorithms with salting.
• Incident Response: sumo777 maintains a documented incident response procedure. In the event of a data breach that poses a risk to user rights, we will notify affected users and relevant authorities within legally required timeframes.

11. Your Data Rights

As a user of sumo777 and a data subject, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a Data Subject Request to our support team with appropriate identity verification.

sumo777 will respond to verified Data Subject Requests within 30 calendar days of receipt. Where requests are complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

We reserve the right to request proof of identity before processing any Data Subject Request to prevent unauthorised access to personal data.

12. Children and Minors

sumo777 does not knowingly collect personal data from individuals under the age of 21. Our Platform is strictly intended for adults aged 21 and above. As part of our KYC process, we verify the age of all registered users.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our Platform, please contact us immediately at [email protected].

13. Third-Party Links and Services

The sumo777 Platform may contain references or links to third-party websites, payment processors, or service portals. This Privacy Policy applies exclusively to data processed by sumo777 and does not extend to any third-party platforms or services.

sumo777 has no control over and accepts no responsibility for the privacy practices or content of third-party platforms. We strongly encourage you to review the privacy policies of any third-party services you interact with, including payment providers such as Touch 'n Go eWallet, Boost, GrabPay, and your chosen Malaysian bank.

14. Amendments to This Policy

sumo777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. The current version of this Policy is always available at https://sumo777.cam/privacy-policy, with the effective date prominently displayed.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide reasonable prior notice through the Platform or by email to your registered address. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of those changes.

If you do not agree to a revised Policy, you must discontinue use of the Platform and may request closure of your account in accordance with the Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the sumo777 data team through the following channels:

• Email: [email protected] — plain text address, not a clickable link. Please copy into your email client.
• Live Chat: Available 24 hours a day, 7 days a week through the sumo777 Platform.
• Support Hours: 00:00 – 24:00 MYT, every day of the year.

We aim to acknowledge all privacy-related enquiries within 2 business hours and to fully resolve them within 30 calendar days. For urgent account security concerns, live chat is the fastest available channel.