77menang Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data collected and processed by 77menang ("we", "us", "our") in connection with the operation of the online gaming and sports betting platform available at https://77menang.club ("Platform").

1.2 77menang is committed to protecting the privacy and security of all personal information entrusted to us by our players. This Policy is intended to give you a clear and transparent account of how your data is handled at every stage of your relationship with the 77menang platform.

1.3 This Policy should be read in conjunction with the 77menang Terms & Conditions, which together govern your use of the Platform. Defined terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions.

1.4 If you have any questions about this Policy or the way 77menang handles your personal data, please contact us using the details provided in Section 14.

2. Personal Data We Collect

77menang collects the following categories of personal data in the course of providing our services:

2.1 Identity & Contact Data

• Full legal name as it appears on official identification documents
• Date of birth
• Nationality and country of residence
• Residential address
• Email address
• Mobile phone number
• Government-issued photo identification (e.g., MyKad, passport)

2.2 Account & Usage Data

• Username and encrypted password
• Account registration date and 77menang login history (timestamps, IP addresses, device identifiers)
• Game history and betting records
• Bonus and promotion usage
• Customer support interaction records
• Responsible gaming settings and self-exclusion status

2.3 Financial Data

• Payment method details (Touch n Go eWallet account reference, Boost account reference, bank account number and name)
• Deposit and withdrawal transaction history
• Transaction amounts and timestamps

2.4 Technical Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session duration and navigation patterns on the Platform
• Cookie identifiers (see Section 6)

3. How We Collect Personal Data

3.1 Directly from you — when you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, or update your account settings.

3.2 Automatically — through cookies, web server logs, and similar tracking technologies when you access and use the Platform (see Section 6).

3.3 From third parties — including identity verification service providers, payment processors, fraud detection services, and, where applicable, publicly available sources used for AML/KYC compliance purposes.

4. Purpose and Legal Basis for Processing

The table below summarises the primary purposes for which 77menang processes your personal data and the legal basis for each:

Purpose	Data Categories	Legal Basis
Account creation and authentication	Identity, Account	Contract performance
KYC / age verification	Identity, Financial	Legal obligation; gaming authority compliance
Processing deposits and withdrawals	Financial, Identity	Contract performance
Fraud detection and prevention	All categories	Legitimate interest; legal obligation
Anti-money laundering compliance	Identity, Financial	Legal obligation
Customer support	Identity, Account	Contract performance
Responsible gaming monitoring	Account, Usage	Legitimate interest; legal obligation
Platform analytics and improvement	Technical, Usage	Legitimate interest
Marketing communications (opted-in players only)	Identity, Contact	Consent

4.1 77menang does not use your personal data for purposes incompatible with those described above without your prior consent or a lawful basis for doing so.

5. Data Sharing and Disclosure

5.1 77menang does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.

5.2 We may disclose your personal data to the following categories of recipients where necessary to operate the Platform and fulfil our legal obligations:

• Game providers and platform technology partners — who process game outcomes and account events on behalf of 77menang under data processing agreements;
• Payment processors — including Touch n Go, Boost, Maybank, CIMB, and Public Bank infrastructure providers, for the purpose of processing transactions;
• Identity verification and fraud prevention services — third-party providers who assist with KYC verification and anti-fraud screening;
• International gaming authority regulators — where disclosure is required as a condition of our operating licence or in response to a lawful regulatory request;
• Law enforcement and competent authorities — where 77menang is required by law to disclose data, including in connection with AML/CTF obligations;
• Professional advisors — including legal, audit, and compliance advisors, bound by professional confidentiality obligations.

5.3 All third parties with whom we share personal data are required to process that data only in accordance with 77menang's instructions and applicable data protection standards.

6. Cookies and Tracking Technologies

6.1 The 77menang Platform uses cookies and similar tracking technologies to: (a) maintain your login session and account preferences; (b) enable platform security features and fraud detection; (c) analyse aggregate usage patterns to improve Platform performance; and (d) personalise game lobby content where you have provided consent.

6.2 The following categories of cookies are used on the Platform:

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Analytics cookies — collect anonymised data about how players navigate the Platform, used to identify usability issues and inform improvements.
• Preference cookies — store account settings such as language preference and lobby sort order.

6.3 You may configure your browser to refuse or delete non-essential cookies. Note that disabling certain cookies may impair the functionality of the Platform, including the ability to maintain an authenticated 77menang login session.

7. Data Retention

7.1 77menang retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory retention obligations. In practice, this means:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations under international gaming authority requirements;
• KYC verification documents are retained for a minimum of five (5) years following the completion of the business relationship;
• Technical and log data is retained for up to twelve (12) months for security and fraud detection purposes;
• Marketing communication preferences and consent records are retained for as long as the account remains active and for three (3) years following account closure.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 77menang's data destruction procedures.

8. Data Security

8.1 77menang implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the 77menang Platform;
• Encryption of sensitive data fields at rest within the 77menang database infrastructure;
• One-way cryptographic hashing of passwords — 77menang staff cannot retrieve your plaintext password;
• Role-based access controls restricting internal access to personal data to authorised personnel only;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for internal system access.

8.2 While 77menang takes data security seriously and applies industry-standard measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, 77menang will notify affected players as required by applicable obligations.

9. Your Rights

9.1 Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by 77menang:

• Right of access — you may request a copy of the personal data we hold about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — in certain circumstances, you may request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction — you may request that we restrict processing of your data in certain circumstances;
• Right to data portability — where technically feasible, you may request a copy of your data in a structured, machine-readable format;
• Right to object — you may object to processing based on legitimate interest, including direct marketing;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of these rights, please contact 77menang using the details in Section 14. We will respond to verified requests within thirty (30) calendar days. We may require identity verification before processing a data rights request.

10. Children's Privacy

10.1 The 77menang Platform is strictly restricted to individuals aged 21 years and older. 77menang does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, the account will be immediately suspended, all data will be deleted, and any funds deposited will be returned.

10.2 If you have reason to believe that a minor has registered an account on the 77menang Platform, please contact us immediately via the support channels in Section 14.

11. International Data Transfers

11.1 As an internationally operating platform, 77menang may transfer personal data to servers or service providers located outside Malaysia. Where such transfers occur, 77menang ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that described in this Policy, including by relying on contractual data protection clauses with receiving parties.

12. Third-Party Links

12.1 The 77menang Platform does not contain links to third-party websites outside of the 77menang domain. This Privacy Policy applies solely to data processed by 77menang in connection with the operation of the Platform and does not extend to any external websites or services.

13. Changes to This Policy

13.1 77menang may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made, we will update the "Last updated" date at the top of this Policy and, where appropriate, notify registered players via the on-platform notification system. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy.

14. Contact Us

14.1 For any questions, concerns, or data rights requests relating to this Privacy Policy or 77menang's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the Platform
• Email: support@77menang.club — please include "Privacy Request" in the subject line for data rights inquiries

14.2 77menang will acknowledge privacy-related inquiries within 48 hours and aims to resolve all data rights requests within 30 calendar days of identity verification.