77win Privacy Policy – Member Personal Data Protection

77win deeply values the trust you place in us when you register and play on our platform. This Privacy Policy is written in clear, straightforward language so you know exactly how your personal data is handled — no hidden terms, no confusing legal jargon.

This policy applies to all users of the 77win platform, including website visitors, registered members, and anyone who interacts with our services via our website, mobile app, or customer support channels. By using the 77win platform, you agree to the collection and use of your personal data as described in this document.

77win operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards. We collect only what is strictly necessary, store it securely, and never sell it to third parties for commercial purposes.

We only collect data that is necessary for specific, legitimate purposes. The following are categories of data we may collect from you when using the 77win platform:

We never collect sensitive data such as your health information, religious beliefs or political views. Data collected during registration is the minimum required for KYC purposes as mandated by financial authorities.

The personal data you provide is used solely for defined, legitimate purposes. 77win does not use your data for anything unrelated to delivering platform services. Here is specifically how your data is used:

• Account management: Creating, verifying and maintaining your member account so you can log in securely and access all features of the 77win platform.
• Financial transaction processing: Processing deposits, withdrawals and all other financial transactions efficiently and securely through trusted payment channels such as FPX, DuitNow and Touch 'n Go eWallet.
• Identity verification (KYC): Complying with legal requirements related to anti-money laundering (AML) and counter-terrorism financing (CFT) as mandated by the relevant authorities.
• Platform security: Proactively detecting and preventing fraudulent activity, account intrusions, bonus abuse and any other security threats.
• Customer support: Resolving enquiries, complaints and technical issues more efficiently when our support team has sufficient context about your account.
• Service communications: Sending important notices related to your account such as transaction confirmations, security alerts and terms changes — not unsolicited marketing messages.
• Platform improvement: Analysing usage patterns in aggregate (not individually) to improve user experience, platform performance and interface design.
• Legal compliance: Retaining records as required by Malaysian law and the relevant authorities for the prescribed period.

Your data security is 77win's absolute priority. We continuously invest in the latest security infrastructure to ensure your personal information is always protected against unauthorised access, data breaches and cyber threats.

Our security infrastructure includes:

• 256-bit SSL encryption: All data transmitted between your device and 77win's servers is protected by military-grade SSL encryption. This means that even if data is intercepted, it cannot be read by any unauthorised party.
• Hashed password storage: Your password is never stored in plain text. We use the industry's most secure one-way hashing algorithms, meaning no one — including our internal staff — can ever view your original password.
• Multi-tiered server protection: Personal data is stored in ISO 27001-certified data centres with strict physical and digital access controls, including biometric scanning and 24-hour monitoring.
• Financial data segregation: Sensitive financial information such as card and bank account details is stored separately with additional encryption and is only accessible by specifically authorised systems.
• Real-time threat monitoring: Our system monitors for any unusual activity around the clock and will automatically take preventive action upon detecting any intrusion attempts.

Data retention period: We retain your personal data for as long as your account is active, plus any additional period required by Malaysian law (typically 7 years for financial records). Once this period ends, data will be securely deleted or anonymised.

77win does not sell, rent, or trade your personal data to any third party for commercial purposes. This is non-negotiable. However, there are limited scenarios where we need to share your data with certain parties in order to deliver our services to you:

• Payment processing provider: Minimum transaction information is shared with licensed payment processing partners such as FPX and the DuitNow gateway to facilitate deposit and withdrawal processing. These providers are bound by strict confidentiality agreements.
• KYC verification provider: Your identity documents may be shared with authorised KYC service providers for identity verification as required by law. These providers are not permitted to use your data for any other purpose.
• Licensed gaming provider: Limited usernames and session information are shared with licensed gaming platform providers solely to enable you to play. No financial information or full identity details are shared.
• Legal authority: We will disclose the required data to law enforcement agencies, courts, or regulatory bodies when compelled to do so by a court order or applicable law in Malaysia.
• Independent auditors: Appointed auditors may access certain data as part of the compliance audit process — all access is controlled and recorded.

All third parties we work with are required to sign a Data Processing Agreement (DPA), ensuring your data is protected to a standard no less stringent than our own.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and 77win's internal policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our DPO team via live chat within the platform or through the official support email. We will process your request within 21 business days or sooner where possible.

The 77win platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Here is a straightforward explanation of the cookies we use and their purposes:

• Essential Cookies: These cookies are required for core platform functions such as login authentication, session management and security. Without them, the platform cannot operate. They cannot be disabled.
• Preference Cookies: Used to remember your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand how members use the platform in aggregate — which pages are most popular, where users encounter difficulties, and so on. This data is used solely to improve the platform.
• Security Cookies: Used to identify potentially fraudulent activity, suspicious login attempts, and to ensure only one active session per account.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality. For analytics and preference cookies, you may opt out without affecting your gaming experience.

The 77win platform is strictly for users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

All new registrants are required to confirm they are at least 18 years of age during the registration process. Our KYC process is designed to effectively identify and prevent underage registrations.

If we discover that a child's personal data has been inadvertently collected, we will take immediate action to:

• Immediately deleting all data related to that individual from our systems.
• Closing the associated account and freezing any existing balance while the refund process is carried out.
• Submitting reports to the relevant authorities where required by law.

Parents or guardians who discover that their child has registered with 77win are urged to contact our support team immediately via the live chat channel.

77win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. We are committed to keeping you informed of any material changes.

When we make material changes to this Privacy Policy, we will:

Your continued use of the 77win platform after the effective date of any amendment constitutes your acceptance of the latest version of this Privacy Policy.

If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer (DPO) through the following channels: