Privacy Policy VR7 — Your Data Protection

Vr7 collects your personal data through several channels. The following are the categories of information we collect and the reasons for doing so:

We only collect data that is genuinely necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

Collected data is used exclusively for the following purposes:

• Managing member accounts — registration, login, identity verification, and account security.
• Processing financial transactions — deposits, withdrawals, and transaction records required for internal auditing.
• Providing customer support services — responding to inquiries, resolving complaints, and providing technical support.
• Fraud detection and prevention — monitoring suspicious activity to protect your account from unauthorized access.
• Legal compliance — meeting reporting and record-keeping requirements under applicable legislation.
• Platform improvements — analyzing usage patterns in aggregate (not individually) to improve the user experience.
• Important communications — sending account-related notifications, security alerts, and updates to terms that affect you.

VR7 not using your data for third-party advertising, unauthorized marketing profiling, or any purpose not stated in this Privacy Policy.

Vr7 does not sell member personal data. In limited cases, we may share data with the following parties, solely for platform operational purposes:

• Payment providers — FPX, Touch 'n Go eWallet, DuitNow, GrabPay, and USDT require basic information to process your transactions. These providers are subject to their own privacy policies.
• Game providers — Third-party gaming companies integrated with vr7 receive limited game session data for technical purposes.
• Authorities — vr7 will disclose data when required by law, court order, or direction from a lawful authority.
• Security services — Third-party fraud detection providers receive limited technical data to identify suspicious activity.

All third parties working with us are required to comply with data protection standards equivalent to our own, and are prohibited from using the data for any purpose other than what has been agreed upon.

We invest seriously in security infrastructure to ensure your data is always protected. The security measures we practice include:

• 256-bit SSL Encryption for all data communications between your device and our servers.
• Data-at-rest encryption for all sensitive data stored in our databases.
• Two-factor authentication (2FA) available and encouraged for all member accounts.
• 24/7 security monitoring by our cybersecurity team to detect and respond to threats in real time.
• Regular security audits by independent third parties to verify the resilience of our systems.
• Role-based access control ensuring staff can only access data necessary for their role.

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. We encourage you to take precautions as well, such as using a strong password and not sharing your login credentials.

Vr7 uses cookies and similar technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies: Collecting anonymous information about how you use the platform to help us improve our services.
• Functional Cookies: Saving your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Helps us understand usage patterns in aggregate. This data is never linked to any individual's identity.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect platform functionality. Third-party cookies from game and payment providers are subject to their respective privacy policies.

As a vr7 member, you have the following rights regarding your personal data:

To exercise any of the rights above, contact our privacy team via email at [email protected] or Live Chat. We will process your request within 14 working days. In complex cases, this period may be extended by up to 30 days with prior notice.

Vr7 does not retain your personal data longer than necessary. The following are our data retention period guidelines:

• Active account data: Retained for the duration your account is active and for 5 years after account closure.
• Financial transaction records: Retained for 7 years in accordance with Malaysia's financial legislation.
• KYC Documents: Retained for the period required under anti-money laundering legislation.
• Communication logs: Retained for 2 years for dispute resolution purposes.
• Cookies and session data: Automatically deleted according to the configured expiry settings.

Once the retention period ends, your data will be securely disposed of using irreversible deletion methods.

Vr7 reserves the right to update this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or the technologies we use.

When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to members via their registered email or in-platform notifications.
• Providing a summary of key changes to help you understand them easily.

Continued use of the vr7 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account.

Any enquiries regarding this Privacy Policy can be directed to our team via email at [email protected] or via Live Chat, available 24 hours a day, 7 days a week.