Privacy Policy —
77bet Malaysia

This Privacy Policy ("Policy") governs the collection, storage, processing, and use of personal data by 77bet ("77bet", "We", "Us", or "Our"), accessible via the domain 77bet.asia. This Policy applies to all individuals who access or use the Platform, including registered players, visitors, and prospective users ("You", "Your", or "Data Subject").

77bet is committed to protecting the privacy and personal data of all its users in accordance with applicable data protection principles, including principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity. We adhere to internationally recognised privacy standards and take our obligations as a data controller seriously.

By registering a 77bet account, depositing funds, or continuing to use the Platform after this Policy is published, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to close your account.

For the purposes of this Privacy Policy, the following definitions apply:

77bet collects the following categories of Personal Data, limited to what is necessary for the stated purposes of processing:

3.1 Registration Data

When you create a 77bet account, we collect your full legal name (as shown on your MyKad or passport), email address, date of birth, username, encrypted password, mobile phone number, and the state or city of residence within Malaysia (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and to verify player identity prior to first withdrawal, we collect copies of government-issued identification documents (MyKad, passport, or driving licence), proof of address, and, where required, selfie or biometric confirmation images. KYC Data is handled with the highest level of security and access is restricted to authorised compliance personnel only.

3.3 Financial & Transaction Data

We collect records of all deposit and withdrawal transactions, including payment method identifiers (e-wallet account numbers, bank account numbers, cryptocurrency wallet addresses), transaction amounts in MYR or equivalent, timestamps, and processing references. We do not store full credit or debit card numbers directly — card data is handled by our licensed payment processors.

3.4 Gameplay & Betting Data

We collect records of all bets placed, games played, wager amounts, outcomes, bonus activity, session durations, and account activity logs. This data is used for account management, dispute resolution, responsible gambling monitoring, and platform improvement.

3.5 Technical & Device Data

We automatically collect IP addresses, device identifiers, browser type and version, operating system, screen resolution, time zone, and referral source data when you access the Platform. This data helps us detect fraud, maintain platform security, and optimise the user experience.

3.6 Communications Data

Records of your communications with the 77bet support team — including live chat transcripts, email correspondence, and WhatsApp message history — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

Personal Data is collected through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional survey.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the Platform.
• From payment processors — when you initiate a financial transaction via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, or cryptocurrency networks, our payment processing partners may share transaction confirmation data with us.
• From fraud prevention and identity verification services — third-party providers that assist us in verifying identity, detecting suspicious activity, and complying with regulatory KYC requirements.
• From analytics providers — aggregated and anonymised usage statistics collected by our analytics partners to help us understand how the Platform is being used.

77bet processes your Personal Data for the following specific, documented purposes:

77bet processes your Personal Data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 77bet — i.e., to operate your account and provide the betting and gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, CTF, and KYC obligations.
• Legitimate interests: Processing necessary for 77bet's legitimate business interests, including fraud prevention, security, and platform improvement, provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given and revocable consent, primarily in the context of marketing communications and optional data enrichment.

77bet does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: Licensed payment gateway providers (including those facilitating Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, and cryptocurrency transactions) receive the minimum transaction data necessary to process your deposit or withdrawal.
• Identity verification providers: Third-party KYC service providers that assist us in verifying the identity and age of players in compliance with regulatory requirements.
• Fraud prevention services: Specialist providers that analyse transaction patterns and device data to detect and prevent fraudulent account activity.
• Cloud infrastructure providers: Hosting and data storage providers that maintain our platform infrastructure under strict data processing agreements and confidentiality obligations.
• Analytics providers: Platform analytics tools that process aggregated, pseudonymised usage data to help us understand platform performance. These providers do not receive personally identifiable information.
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, or courts where disclosure is required by applicable law, valid legal process, or to protect the safety of our users and the integrity of the Platform.

All third-party Data Processors engaged by 77bet are required to handle Personal Data in accordance with applicable data protection principles and are prohibited from using such data for their own purposes beyond the scope of the services provided to 77bet.

77bet retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account registration data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, in accordance with anti-money-laundering legislation.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for a period of three (3) years from the date of the last communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Marketing consent records: Retained for as long as you hold a 77bet account and for a period of two (2) years thereafter.
• Technical and device data (logs): Typically retained for ninety (90) days, with exception where retained for fraud investigation purposes.

Upon expiry of the relevant retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to you as an individual.

77bet implements a range of technical and organisational security measures to protect your Personal Data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• Encryption at rest for sensitive stored data, including KYC documents and financial records.
• Role-based access controls, ensuring that only authorised personnel with a documented business need can access specific categories of Personal Data.
• Multi-factor authentication requirements for all internal system access by 77bet staff.
• Regular vulnerability assessments, penetration testing, and security audits of the Platform infrastructure.
• Data breach response procedures, including notification protocols where required by applicable law.
• Staff training on data protection obligations and security awareness.

The 77bet Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small text files stored on your device when you visit our website.

10.1 Types of Cookies We Use

10.2 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform. Essential cookies cannot be disabled as they are required for the secure operation of your account.

As a user of the 77bet Platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team via live chat or at the email address set out in Section 15 below. We will respond to all valid requests within thirty (30) days.

Please note that certain rights may be subject to limitations where processing is necessary to comply with a legal obligation, to protect the vital interests of another person, or where the data relates to an ongoing legal claim or regulatory investigation.

The 77bet Platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect Personal Data from individuals below this age. Strict age verification measures are applied at the point of account registration and during the KYC process to prevent access by minors.

If we become aware that Personal Data has been collected from a person under the age of 21 — whether through a misrepresentation at registration or any other means — we will immediately suspend the relevant account, void any associated transactions, and permanently delete the minor's data from our systems.

Parents or guardians who believe their child may have accessed or registered on the 77bet Platform are urged to contact our support team immediately so that appropriate action can be taken without delay.

In the course of providing the Platform's services, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. Such transfers may occur in connection with cloud infrastructure hosting, third-party analytics services, or global payment processing partners.

Where Personal Data is transferred to a jurisdiction that does not provide the same level of data protection as Malaysia, 77bet implements appropriate safeguards, including contractual data protection clauses with the receiving party, to ensure that your data continues to be handled with equivalent standards of protection.

By using the 77bet Platform and accepting this Privacy Policy, you consent to such transfers being carried out under the safeguards described above.

77bet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Where changes are material — for example, where we introduce a new category of data collection or change the basis on which we share data with third parties — we will provide reasonable prior notice to registered players via the email address associated with their account.

The revised Policy will be published on this page with an updated Effective Date. Your continued use of the Platform following publication of the updated Policy constitutes your acceptance of those changes. If you do not agree with any change, you should discontinue use of the Platform and close your account.

We recommend reviewing this Policy periodically to stay informed of how 77bet manages and protects your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by 77bet, please contact us through the following channels:

77bet is committed to addressing all privacy-related enquiries in a timely and transparent manner. All formal data subject requests will receive a written response within thirty (30) days of receipt.