Privacy Policy pg77 – Personal Data Protection for Malaysian Players

1. Introduction

Pg77 ("we", "Platform") is committed to protecting the privacy of every individual who uses our services at pg77.bz. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail how we handle your personal information.

This Policy applies to all users of the pg77 platform, including website visitors, prospective members currently in the registration process, active registered members, and former members whose accounts have been closed but whose data is still retained for legal compliance purposes.

We believe transparency is the foundation of trust. That is why we strive to explain clearly and plainly — without confusing legal jargon — how your data is managed from the moment you visit our website through to the period after your account is closed.

2. Personal Data We Collect

Pg77 collects various categories of data depending on the type of interaction you have with the platform. Below is a full list of the data types we collect and their purposes:

Data you provide voluntarily: This includes all information you enter during registration, the KYC process, withdrawal requests, and communications with our support team.

Data collected automatically: When you browse or use the pg77 platform, our systems automatically record technical information such as your IP address, device type, operating system, web browser used, and pages visited. This information helps us detect suspicious activity and ensure the security of your account.

3. How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. pg77 uses your personal data for the following purposes:

• Account management: Create, verify and maintain your pg77 account, including the KYC process required for regulatory compliance.
• Transaction processing: Process deposits, withdrawals and all other financial transactions securely and in a timely manner.
• Security and fraud prevention: Monitor account activity to detect any signs of unauthorised access, fraud or money laundering.
• Customer support: Provide effective assistance when you contact the pg77 support team via live chat or email.
• Platform improvement: Analyse usage patterns in aggregate (without identifying individuals) to improve platform features, performance and overall experience.
• Marketing communications: Send promotional information, bonus offers and the latest pg77 news — only to members who have consented to receive such communications.
• Legal compliance: Meet our obligations under applicable laws, including anti-money laundering (AML) reporting requirements.
• Responsible gambling: Monitor gameplay patterns to identify players who may need responsible gambling support.

4. Data Sharing with Third Parties

Pg77 does not sell your personal data. However, there are limited situations where we need to share certain information with trusted third parties in order to deliver our services to you:

• Payment providers: Required financial information is shared with payment processors such as FPX, DuitNow and e-wallet providers to enable transactions to be processed securely.
• Identity verification providers: Your KYC documents may be reviewed by approved third-party identity verification services to ensure the authenticity of your information.
• Relevant authority: pg77 is required to disclose information to government authorities, law enforcement bodies, or courts when required to do so under Malaysian law.
• Technology service providers: Technical vendors such as cloud service providers and cybersecurity firms may have limited access to certain data solely for technical purposes related to platform operations.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for specific, agreed purposes. They are not permitted to use your data for their own purposes.

5. Cookies & Tracking Technology

Pg77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and ensuring account security. These cookies cannot be disabled as they are essential to platform operations.
• Performance cookies: Collect information about how you use our platform — which pages are visited most frequently, errors encountered and so on. All data is collected anonymously.
• Functional cookies: Save your preferences such as language, display settings and login information so you do not need to re-enter them each time.
• Marketing cookies: Used to display relevant advertisements and promotions to you. You may opt out of this type of cookie through your browser settings.

You can manage or delete cookies at any time through your web browser settings. However, disabling certain cookies may affect the functionality of the pg77 platform. For more information on managing cookies, refer to your browser's help documentation.

6. Data Security Measures

Protecting your personal data from unauthorised access, loss, misuse or disclosure is a top priority for pg77. We implement a comprehensive range of technical and organisational security measures:

• Data encryption: All sensitive data is encrypted using AES-256 standards at rest and SSL/TLS 256-bit encryption in transit.
• Access controls: Access to members' personal data within pg77's internal systems is restricted on a need-to-know basis. Only staff authorised for specific work purposes may access your data.
• Continuous monitoring: The pg77 system is monitored around the clock by our cybersecurity team to detect any suspicious activity or intrusion attempts.
• Regular security assessments: The pg77 platform undergoes regular penetration testing and security audits by independent third parties to identify and address potential vulnerabilities.
• Staff training: All pg77 staff who handle personal data receive comprehensive data protection training and are bound by strict confidentiality agreements.

7. Your Rights

As a data subject, you have the following rights regarding your personal data held by pg77. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the pg77 support team via in-platform live chat. We will process your request within 14 business days. Please note that some requests may be subject to legal obligations that prevent full deletion or restriction of processing.

8. Children's Data Protection

Pg77 is an online gaming platform that strictly for individuals aged 18 and above. We do not intentionally collect, process, or store any personal data from children under the age of 18.

If we discover that data belonging to a person under the age of 18 has been collected without our knowledge, the account in question will be closed immediately and all related data will be deleted from our systems within 48 hours.

If you are a parent or guardian and suspect that your underage child has registered or used the pg77 platform, please contact our support team immediately. We will take prompt action to address the situation.

9. International Data Transfer

In the context of pg77's operations, your personal data may be processed or stored on servers located outside Malaysia. This occurs when we utilise trusted cloud services or international technology providers to ensure optimal platform performance and availability.

In all cases of international data transfer, pg77 ensures that:

• The recipient country or organisation provides a level of data protection equivalent to or higher than Malaysia's PDPA.
• Appropriate data transfer agreements are in place between pg77 and data recipients, including internationally recognised standard data protection clauses.
• All data transfers are subject to the same technical security measures that apply to data stored in Malaysia.

10. Data Retention Period

Pg77 does not retain your personal data for longer than is necessary for the relevant processing purpose or as required by law. Below are general guidelines for our data retention periods:

• Active account data: Retained for as long as your account is active and up to 7 years after account closure for financial compliance and audit purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC records: Retained for a minimum of 5 years after the business relationship ends, as required by AML/CFT laws.
• Support communication logs: Retained for 3 years for dispute resolution and service quality improvement purposes.
• Cookie & analytics data: Retained for a maximum of 2 years before being automatically deleted or anonymised.

When data is no longer needed and there is no legal obligation to retain it, pg77 will securely delete or anonymise that data using methods that ensure it cannot be recovered.

11. Changes to the Privacy Policy

Pg77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to the services we offer.

When significant changes are made to this Privacy Policy, we will notify you via:

• In-account notification on your pg77 account upon your next login.
• A notification email to the email address registered to your account.
• Update the "Last Updated" date shown at the top of this document.

Your continued use of the pg77 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, the pg77 privacy team is here to help.

You may reach us through the following channels:

• Live Chat: The fastest way — available within the pg77 platform from 9 AM to 12 midnight, 7 days a week.
• Email: Send your privacy enquiry to [email protected] — we respond within 2 business days.
• FAQ Section: Visit FAQ page us for answers to frequently asked questions about privacy and data security.