Privacy Policy k77 — Data Protection & Information Security You

Introduction & Scope of This Policy

This Privacy Policy explains how k77 ("we", "the platform") collects, uses, stores, and protects your personal information when you use the website, mobile app, or any services provided by k77.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection laws. By accessing or using the k77 platform, you agree to the practices described in this document.

This Privacy Policy applies to all k77 platform users — including unregistered visitors, registered members, and anyone who interacts with our content or services. We encourage you to read this document carefully and contact us if you have any questions.

Information We Collect

K77 collects your personal information through the following means:

A. Information You Provide Directly

• Full name, date of birth, and gender upon account registration.
• Email address, phone number, and residential address.
• Bank account or digital wallet details for deposit and withdrawal purposes.
• Identity verification documents (MyKad, passport) when KYC processing is required.
• Information you provide when contacting our customer support team.

B. Automatically Collected Information

• Your IP address, browser type, and device operating system.
• Platform usage data including pages visited, access times, and in-game actions.
• Cookie data and similar tracking technologies to enhance the user experience.
• Transaction logs including deposit history, betting, and withdrawal records.

C. Information from Third Parties

• Verification information from payment providers when financial transactions are processed.
• Identity verification data from trusted KYC services when required.
• Information from public databases or authorities for legal compliance purposes.

How We Use Your Information

K77 uses your personal data for legitimate and limited purposes as follows:

• Account Management: Creating and maintaining your account, processing registration, login, and identity verification.
• Financial Processing: Processing deposits and withdrawals and ensuring all financial transactions run smoothly and securely.
• Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, KYC compliance, and reporting to authorities when required.
• Platform Security: Detecting and preventing fraud, account abuse, bot activity, and other security threats to the platform and its users.
• Customer Support: Responding to inquiries, complaints, or assistance requests submitted to our support team.
• Service Improvement: Analyzing usage patterns to improve platform performance, enhance the user interface, and develop more relevant new features.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — subject to your consent. You may unsubscribe at any time.
• Responsible Gaming: Monitoring gaming patterns to identify users who may need responsible gaming support.

Sharing Information With Third Parties

K77 does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share certain information with the following parties in limited circumstances:

• Payment Service Providers: Transaction information required to process your deposits and withdrawals via trusted payment channels.
• KYC Service Providers: Identity information required for identity verification in accordance with legal compliance requirements.
• Game Providers: Minimum game data required to operate third-party games available on the k77 platform.
• Authority: Information required by law, court order, or directive from a competent regulatory authority.
• Analytics Partners: Anonymized usage data for platform analytics purposes — not identifiable at an individual level.

All third-party service providers we engage are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than those specified in the agreement. k77 conducts regular audits of all partners to ensure ongoing compliance with our privacy standards.

Data Security

K77 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL Encryption: All communications between your device and k77 servers are encrypted using the latest TLS protocol.
• Database Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using strong hashing algorithms.
• Layered Access Control: A role-based access control (RBAC) system ensures that only authorised personnel can access user data.
• 24/7 Monitoring: An intrusion detection system (IDS) and security monitoring operate around the clock to detect suspicious activity.
• Regular Security Testing: k77 conducts regular penetration testing and security audits carried out by independent third parties.
• Two-Factor Authentication: Additional security features are available for users who wish to enhance their account protection.

Cookies & Tracking Technologies

K77 uses cookies and similar tracking technologies to improve the user experience, analyse platform traffic, and enable certain features to function correctly.

You can manage cookies through your browser settings. Most browsers allow you to view, delete, or block cookies. However, disabling essential cookies may affect the login functionality and key features of the k77 platform. For more information on managing cookies in your browser, refer to your browser's help section.

Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by k77:

• Right to Access: You have the right to request a copy of the personal data we hold about you. k77 will process this request within 21 business days.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request a correction at no charge.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances — such as when the data is no longer needed or you withdraw your consent. Please note that some data may need to be retained for legal compliance purposes.
• Right to Withdraw Consent: For data processing based on consent (such as marketing communications), you may withdraw your consent at any time.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Data Portability Right: You may request your data in a machine-readable format for transfer to another service, where technically feasible.

To exercise any of the above rights, contact our data protection team via email at [email protected] with the subject line "Privacy Rights Request". Please include your account username and a clear description of your request. We will verify your identity before processing any request to safeguard your account security.

Data Storage & Deletion

K77 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: For as long as your account remains active and you continue using the k77 platform.
• Data After Account Closure: Financial transaction records and KYC data are retained for a minimum of 7 years following account closure for anti-money laundering compliance purposes.
• Security Logs: System and security logs are retained for 2 years for the purpose of investigating security incidents when required.
• Marketing Data: Immediately upon your withdrawal of consent for marketing communications.

Once the retention period expires, data will be securely deleted or anonymized using methods that ensure it can no longer be personally linked to you. k77's servers are located in facilities that comply with international data security standards.

Child Protection

The k77 platform is strictly for adults aged 18 and above. k77 does not knowingly collect any personal information from individuals under the age of 18.

If we discover that we have inadvertently collected data from someone under the age of 18, we will take immediate steps to delete that information and close the account in question. Parents or guardians who find that their children have registered on the k77 platform without authorisation are requested to contact us immediately at [email protected].

Amendments to This Privacy Policy

K77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will take effect immediately upon publication on this page.

For changes deemed material — that is, changes that significantly affect how we process your data — k77 will provide advance notice to registered users via email or in-platform notification at least 14 days before the changes take effect.

We encourage you to review this page periodically to stay informed about how we protect your information. The "Last Updated" date at the top of this page reflects the most recent revision of this Privacy Policy.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how k77 handles your personal data, our data protection team is ready to assist you.

To expedite the process, please provide your account username, the type of request (data access / correction / deletion / complaint) and full details of the issue. We are committed to responding to all privacy-related enquiries within the timeframe required by applicable law.