judi77 Privacy Policy

1. Who We Are

This Privacy Policy applies to the judi77 online casino and sportsbook platform operated at judi77.club (the "Platform"). References in this Policy to "judi77", "we", "us", or "our" refer to the entity operating the Platform under its applicable gaming licence.

judi77 acts as the data controller in respect of the personal data of its registered players and site visitors processed in connection with the Platform. As data controller, judi77 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection law.

If you have any questions about this Privacy Policy or how judi77 handles your personal data, please contact our Data Protection team at [email protected]. We aim to respond to all data-related enquiries within 30 calendar days.

2. Data We Collect

judi77 collects the following categories of personal data from players and site visitors:

Category	Data Points
Identity Data	Full legal name, date of birth, government-issued identity document details (IC number, passport number)
Contact Data	Email address, Malaysian mobile number, residential address
Financial Data	Bank account details, e-wallet identifiers (Touch n Go, Boost), deposit and withdrawal transaction records
Transactional Data	Betting history, game session records, wagering amounts, win/loss records, bonus usage
Technical Data	IP address, device type, operating system, browser type and version, session timestamps
Usage Data	Pages visited, games launched, time on platform, navigation paths, search queries
Communication Data	Live chat transcripts, support email correspondence, voluntary survey responses
Responsible Gaming Data	Self-imposed deposit limits, session time settings, self-exclusion requests and duration

judi77 does not collect special categories of personal data (such as health data, racial or ethnic origin, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support interaction. Such data is processed solely for the purpose of providing appropriate player welfare assistance.

3. How We Collect Data

judi77 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server log files.
• Third-party sources: Identity verification data received from KYC service providers; payment confirmation data from payment processors (Maybank, CIMB, Public Bank, Touch n Go, Boost); fraud screening signals from anti-fraud service providers; and publicly available information used for AML compliance purposes.

4. Purposes and Legal Bases for Processing

judi77 processes your personal data only where a lawful basis for processing exists. The following table sets out the primary purposes of processing and the corresponding legal bases:

Purpose	Legal Basis
Account registration and identity verification	Performance of contract; Legal obligation (KYC / AML compliance)
Processing deposits, withdrawals, and bets	Performance of contract
Fraud detection and prevention	Legitimate interests; Legal obligation
Responsible gaming monitoring and intervention	Legal obligation; Vital interests of the data subject
Customer support and dispute resolution	Performance of contract; Legitimate interests
Marketing communications (opted-in players only)	Consent (withdrawable at any time)
Platform analytics and product improvement	Legitimate interests
Compliance with gaming authority obligations	Legal obligation

5. Data Sharing and Disclosure

judi77 does not sell your personal data to any third party under any circumstances. We share personal data with third parties only where necessary and as described below:

• Payment processors: Financial data is shared with payment service providers (including Touch n Go, Boost, Maybank, CIMB, and Public Bank) solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and AML service providers: Identity and financial data is shared with regulated identity verification and anti-money laundering screening providers to fulfil our legal compliance obligations.
• Game suppliers: Transactional data (player ID, bet amounts, session data) is shared with licensed game developers and live casino studios to facilitate game delivery and auditing.
• Gaming regulatory authority: Player data may be disclosed to our licensing gaming authority upon lawful request, as required by our operating licence conditions.
• Law enforcement and government authorities: judi77 will disclose personal data to competent authorities where required by applicable law, court order, or binding regulatory direction.
• Fraud prevention agencies: Data relevant to suspected fraudulent activity may be shared with specialist fraud prevention services operating within our operating jurisdiction.

All third-party processors engaged by judi77 are subject to data processing agreements that require them to process personal data only on judi77's documented instructions and to implement appropriate technical and organisational security measures.

6. International Data Transfers

The judi77 Platform and certain of our service providers operate infrastructure located outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection to Malaysia, judi77 implements appropriate safeguards, which may include standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms. You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting [email protected].

7. Data Retention

judi77 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in accordance with AML regulatory requirements.
• Financial and transactional data: Retained for a minimum of seven (7) years after the relevant transaction, in accordance with financial record-keeping obligations.
• Communication and support data: Retained for three (3) years from the date of the last interaction, or longer where the communication is relevant to an unresolved dispute.
• Responsible gaming data: Retained for the duration of any self-exclusion period plus five (5) years, to allow re-registration controls to function effectively.
• Marketing data: Retained until consent is withdrawn; thereafter purged from marketing lists within 30 days.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

8. Cookies and Tracking Technologies

judi77 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) to operate the Platform, remember your preferences, maintain your session, analyse Platform usage, and — where you have consented — deliver targeted promotional communications.

The following categories of cookies are used on the Platform:

• Strictly necessary cookies: Essential to the functioning of the Platform, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences (language, display settings) to provide a consistent experience. Disabled by default; activated upon consent.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to allow us to improve performance. Activated upon consent.
• Marketing cookies: Used where you have consented to receive personalised promotional content. You may withdraw consent at any time through the cookie preference centre accessible from the Platform footer.

Browsers can be configured to refuse or delete cookies; however, disabling strictly necessary cookies will impair Platform functionality, including the ability to log in to your judi77 account.

9. Security Measures

judi77 implements technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, without limitation:

• SSL/TLS encryption on all data transmitted between your device and judi77's servers
• Encryption of sensitive data fields (passwords, payment details) at rest
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent third parties
• Multi-factor authentication requirements for administrative platform access
• Automated anomaly detection systems monitoring for unusual access patterns

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, judi77 will notify affected players without undue delay and take all reasonable remedial measures. Breaches meeting applicable notification thresholds will be reported to the relevant supervisory authority within the required timeframe.

10. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by judi77:

• Right of access: You may request a copy of the personal data judi77 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to judi77's legal retention obligations.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, for example while an accuracy dispute is resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data for transfer to another controller.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact [email protected] with the subject line "Data Subject Request". judi77 will respond within 30 calendar days. We may require identity verification before processing any data subject request.

11. Children's Privacy

The judi77 Platform is strictly restricted to individuals aged 21 and above. judi77 does not knowingly collect personal data from persons under the age of 21. If judi77 becomes aware that personal data has been collected from an underage individual, all such data will be deleted immediately and the associated account closed. If you have reason to believe that an underage person has registered an account on the Platform, please notify us at [email protected].

12. Changes to This Policy

judi77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The "Last updated" date at the top of this Policy will be revised on each update. Where changes are material, judi77 will notify registered players by email. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy.

13. How to Contact Us

For all privacy-related enquiries, data subject requests, or concerns about how judi77 handles your personal data, please contact us via:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Subject Request")
• Live Chat: Available 24/7 through the judi77 Platform — response within 2 minutes

judi77's support team handles English and Bahasa Malaysia correspondence. We aim to acknowledge all privacy enquiries within 48 hours and to resolve substantive requests within 30 calendar days.