Privacy Policy – How 77myr Handles Your Data

1. Introduction and Scope

This Privacy Policy (the "Policy") describes how 77myr (the "Company", "we", "us", or "our"), the operator of the online gaming platform accessible at https://77myr.net (the "Platform"), collects, uses, stores, discloses, and protects personal data relating to individuals who access or use the Platform ("Members" or "you").

This Policy applies to all personal data processed by 77myr in connection with the Platform, including data collected when you register an account, use any game or product, make a deposit or withdrawal, contact support, or simply browse the Platform as a visitor. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

77myr is committed to handling personal data responsibly and in accordance with applicable data protection principles. We do not sell personal data to third parties for their own marketing purposes. We do not use personal data collected through the 77myr Platform for any purpose unrelated to the operation of the Platform and the fulfilment of our obligations to Members.

2. Data Controller Information

For the purposes of applicable data protection law, 77myr is the data controller in respect of personal data collected through the Platform. The data controller is responsible for determining the purposes and means of processing personal data. If you have questions about how 77myr processes your personal data, you may contact us using the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

77myr collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Contact Data

• Full legal name;
• Date of birth (for age verification purposes);
• Nationality;
• Residential address, including city and postcode (e.g. Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru);
• Email address;
• Mobile phone number.

3.2 Account and Authentication Data

• Username;
• Hashed and salted password (the plaintext password is never stored);
• Two-factor authentication configuration;
• Login history, including timestamps and IP addresses;
• Device identifiers associated with account sessions.

3.3 Financial Data

• Payment method details (e.g. Touch 'n Go eWallet identifier, Boost account reference, DuitNow registration, FPX bank account name and partial account number);
• Deposit and withdrawal transaction history;
• Wallet balance history.

77myr does not store full bank account numbers or payment card details on its own servers. Payment processing is handled by third-party payment processors subject to their own data security standards.

3.4 Gaming Activity Data

• Game play history across all Platform products (casino, sportsbook, slots, jackpot, arcade);
• Bet amounts, outcomes, and session durations;
• Bonus and promotion participation history;
• Responsible gaming tool settings and activity (deposit limits, session limits, self-exclusion records).

3.5 Technical and Usage Data

• IP address;
• Browser type and version;
• Operating system and device type;
• Pages visited on the Platform and time spent;
• Referring URL;
• Error logs and platform interaction events.

3.6 Identity Verification Data

• Government-issued identity document (e.g. MyKad, passport) — collected when identity verification is required under our Know Your Customer (KYC) obligations;
• Proof of address documentation where required;
• Source of funds documentation where required by applicable anti-money laundering obligations.

4. How We Collect Your Data

77myr collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through cookies, server logs, and analytics tools when you access or use the Platform;
• From third parties — from payment processors in connection with financial transactions, from identity verification service providers, and from fraud prevention databases where applicable.

5. Legal Basis for Processing

77myr processes personal data on the following legal bases:

• Performance of a contract — processing necessary to provide the Platform services to you, including account management, transaction processing, and game delivery;
• Legal obligation — processing required to comply with applicable anti-money laundering, age verification, and identity verification obligations;
• Legitimate interests — processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your rights;
• Consent — where you have provided explicit consent for a specific processing purpose, such as receiving promotional communications.

6. How We Use Your Personal Data

77myr uses personal data for the following purposes:

• To create, maintain, and administer your 77myr account;
• To verify your identity and age in accordance with our eligibility requirements (21 years and older);
• To process deposits and withdrawals via your nominated Malaysian payment methods;
• To deliver the Platform's games, products, and services to you;
• To administer bonuses, promotions, and loyalty rewards;
• To detect and prevent fraud, money laundering, and other prohibited conduct;
• To enforce the 77myr Terms and Conditions;
• To provide customer support and respond to your enquiries;
• To send transactional communications (e.g. deposit confirmations, withdrawal notifications, account security alerts);
• To send promotional communications where you have opted in;
• To comply with applicable laws and regulatory requirements;
• To monitor and improve Platform performance and user experience;
• To administer responsible gaming tools, including self-exclusion records.

7. Disclosure of Personal Data to Third Parties

77myr does not sell or rent personal data to third parties. We may disclose personal data to third parties in the following limited circumstances:

• Payment processors — to facilitate deposits and withdrawals via your nominated payment methods (e.g. Touch 'n Go eWallet, Boost, DuitNow, FPX-participating banks);
• Identity verification providers — to fulfil our KYC and age verification obligations;
• Game content providers — in connection with game delivery and fair play certification; game providers receive only the minimum data necessary for game session management;
• Fraud prevention and security services — to detect and prevent fraud, account takeover, and other security threats;
• Legal and regulatory authorities — where 77myr is required by law, court order, or regulatory direction to disclose personal data;
• Professional advisers — including legal counsel, auditors, and insurers, subject to confidentiality obligations.

All third parties to whom 77myr discloses personal data are required to handle such data in accordance with applicable data protection law and the terms of applicable data processing agreements.

8. International Data Transfers

The 77myr Platform serves Members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and other locations. Certain of our service providers and game content partners operate from jurisdictions outside Malaysia. Where personal data is transferred to a recipient in another jurisdiction, 77myr ensures that appropriate safeguards are in place to protect the transferred data, including data processing agreements incorporating standard contractual clauses or equivalent protections recognised under applicable law.

9. Data Retention

77myr retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to maintain your account, comply with legal obligations, resolve disputes, and enforce agreements. Specifically:

• Account and identity data is retained for the duration of your active membership and for a minimum of five (5) years following account closure, in accordance with applicable anti-money laundering record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs are retained for a minimum of two (2) years;
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent.

Where personal data is no longer required for any purpose, it is securely deleted or anonymised in a manner that prevents re-identification.

10. Cookies and Tracking Technologies

The 77myr Platform uses cookies and similar tracking technologies to operate the Platform and improve your experience. Cookies used by 77myr fall into the following categories:

• Strictly necessary cookies — required for the Platform to function, including session management and authentication. These cannot be disabled without impairing Platform functionality;
• Performance and analytics cookies — collect anonymised data about how the Platform is used, to identify and fix errors and improve performance;
• Functional cookies — remember your preferences, such as language settings and display options.

11. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by 77myr:

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to restriction of processing — to request that we limit processing of your personal data in certain circumstances;
• Right to data portability — to receive personal data you have provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or contract;
• Right to object — to object to processing based on legitimate interests;
• Right to withdraw consent — to withdraw consent for processing activities based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact 77myr support via live chat or at the email address in Section 15. We will respond within 30 days of receiving a verified request. Requests relating to account closure or self-exclusion are handled separately under the Responsible Gaming and Terms and Conditions frameworks.

12. Children and Minors

The 77myr Platform is strictly prohibited for persons under 21 years of age. 77myr does not knowingly collect personal data from persons under 21. If we become aware that personal data has been collected from a person below the required age, that data will be deleted and the associated account will be permanently closed. If you believe a person under 21 has registered on the Platform, please notify 77myr support immediately.

13. Security Measures

77myr implements technical and organisational security measures designed to protect personal data against unauthorised access, loss, destruction, or alteration. Measures in place include:

• TLS 1.3 encryption for all data in transit between your browser and the Platform;
• Bcrypt password hashing with per-account salting — raw passwords are never stored;
• Two-factor authentication available to all Members;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing;
• Anomalous login detection and session management controls.

Despite these measures, no method of transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights, 77myr will notify affected Members in accordance with applicable legal requirements.

14. Changes to This Privacy Policy

77myr reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered Members via their registered contact method or via a prominent notice on the Platform before the changes take effect. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact and Complaints

For questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data by 77myr, please contact us:

• Via live chat on the Platform (available 24/7);
• By email at: [email protected]

We will acknowledge privacy enquiries within 48 hours and aim to resolve them within 30 calendar days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.