How km77 Protecting Your Privacy

Six core principles that form the foundation of km77's privacy policy — all designed to provide the best protection for Malaysian players.

PDPA 2010 Compliance

All data management practices at km77 fully comply with Malaysia's Personal Data Protection Act 2010. This means your data is protected under a legally recognised framework in Malaysia.

256-bit SSL Encryption

Every bit of data transmitted between your device and km77's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions to safeguard their customers' data.

No Data Sales

Km77 does not sell, rent, or share players' personal data with any third party for marketing purposes. Your data belongs to you — we only use it for the purposes you have consented to.

Full Player Control

You have the right to access, correct, delete, and control the use of your personal data at any time. Requests to update or delete data can be submitted through km77 customer support.

Secure Storage

Player data is stored on servers protected by multi-layered firewalls, role-based access controls, and real-time threat monitoring. Data backups are performed regularly to prevent information loss.

Breach Notification

In the event of any security incident involving player data, km77 is committed to notifying affected players within the timeframe required by PDPA and taking immediate remediation steps.

Important Note: This Privacy Policy describes km77's practices regarding the collection, use, and protection of your personal data. By using the km77 platform, you agree to the terms set out in this policy. Please read it carefully and contact us if you have any questions.
1

Introduction

Km77 ("we", "our platform") operates the km77.vu website and related mobile applications. We are committed to protecting and respecting your privacy. This Privacy Policy explains the types of personal data we collect from you, how we use it, and the rights you hold in relation to that data.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applies to all users of the km77 platform, including visitors, registered players, and active account holders.

Km77 is the data controller responsible for all personal data collected through our platform. If you have any questions about how we manage your data, our contact information is available at the end of this document.

2

Types of Personal Data We Collect

Km77 collects several categories of personal data depending on how you interact with our platform. Below is a summary of the types of data we collect:

Data Category Example Information Requirements
Identification Data Full name, MyKad/passport number, date of birth Mandatory (KYC)
Contact Data Email address, phone number, residential address Mandatory
Financial Data Bank name, account number (last 4 digits), transaction history Mandatory
Game Data Betting history, wins, losses, play time Automatic
Technical Data IP address, device type, web browser, approximate location Automatic
Communication Data Live chat session records, support emails When used
Data Minimisation Principle: km77 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.
3

How We Collect Data

Your personal data is collected through several methods on the km77 platform:

3.1 Directly From You

  • New account registration form
  • Identity verification process (KYC) — uploading identification documents
  • Deposit and withdrawal requests
  • Interactions with customer support via live chat or email
  • Participation in promotions or contests
  • Account profile updates made by you directly

3.2 Automatically

  • Server logs that record IP addresses, access times, and pages visited
  • Cookies and similar tracking technologies (see Section 7)
  • Mobile app usage data including device type and operating system version
  • Game session information generated by the platform system

3.3 From Third Parties

  • Payment service providers for transaction verification
  • Identity verification agencies for the KYC process
  • Blacklist database for fraud prevention and anti-money laundering
4

Purpose of Personal Data Use

Km77 uses your personal data for the following purposes, all of which have a valid legal basis under PDPA:

  • Account Management: Creating, verifying, and maintaining your player account
  • Financial Processing: Processing deposits, withdrawals, and tracking transaction history
  • Legal Compliance: Meeting KYC requirements, anti-money laundering (AML) regulations, and reporting obligations set out by law
  • Platform Security: Detecting and preventing fraud, unauthorised access, and platform abuse
  • Customer Support: Handling enquiries, complaints, and providing technical assistance
  • Service Improvement: Analysing usage patterns to improve the user experience
  • Marketing Communications: Sending promotional information and relevant offers (with your consent)
  • Responsible Gaming: Monitoring playing habits to identify signs of problem gambling
Marketing Preferences: You may withdraw consent to receive marketing communications at any time by updating your notification settings in your account. Withdrawing this consent will not affect the processing of your data for other required purposes.
5

Data Sharing with Third Parties

Km77 does not sell players' personal data to any party. However, in certain situations, data may be shared with the following parties for legitimate purposes:

5.1 Service Providers

Km77 works with third-party service providers acting on our behalf, including:

  • Payment gateway for processing deposit and withdrawal transactions
  • Identity verification service providers for the KYC process
  • Cloud service providers for secure data storage
  • Gaming software providers supplying live casino content

All these service providers are bound by strict confidentiality agreements and may only use the data provided for the specific purposes agreed upon with km77.

5.2 Authorities

Km77 may disclose personal data to authorities when required by law — such as court orders, requests from law enforcement agencies, or reporting obligations under financial crime prevention legislation.

6

Data Storage & Security

The security of your personal data is a top priority for km77. We implement a range of technical and organisational measures to protect your data from unauthorised access, alteration, disclosure, or destruction:

  • 256-bit SSL encryption for all data transmissions
  • Encryption of sensitive data at rest (at-rest encryption)
  • Role-based access control — only authorised staff can access player personal data
  • Continuous 24/7 system security monitoring
  • Regular data backups at geographically separate locations
  • Regular security testing and audits by independent experts
  • Security awareness training for all km77 staff
Breach Notification: In the event of a security incident involving your personal data, km77 will notify you via email or in-platform notification within the timeframe required by PDPA, along with details of what occurred and the steps taken.
7

Cookies & Tracking Technologies

Km77 uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

7.1 Essential Cookies

These cookies are required for the platform to function properly. They include login session cookies, security cookies, and cookies that retain your language preference. These cookies cannot be disabled without affecting core platform functionality.

7.2 Analytics Cookies

We use analytics cookies to understand how players interact with the km77 platform — the most frequently visited pages, time spent on the platform, and navigation paths. This information is used in aggregate form to improve the platform.

7.3 Preference Cookies

These cookies store your preferences such as display theme, preferred language, and other account settings for a more personalised experience.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect platform functionality. Continued use of the km77 platform after a cookie notice is displayed is considered acceptance of cookie use as described.

8

Your Rights as a User

Under PDPA 2010, you have several rights regarding your personal data. km77 respects and facilitates the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days from the date of receipt.

Right to Rectification

If personal data stored by km77 is inaccurate or outdated, you have the right to request a correction. Updates can be made directly through your account profile or by contacting support.

Right to Erasure

You may request deletion of your personal data in certain circumstances. However, km77 may need to retain certain data to fulfil legal obligations, such as financial record-keeping requirements.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Once an objection is received, we will immediately stop using your data for that purpose.

Right to Data Portability

You have the right to receive the personal data you provided to us in a machine-readable format, allowing transfer to another platform if desired.

How to Exercise Your Rights: To exercise any of the above rights, contact the km77 privacy team via live chat or our support email. You may be asked to verify your identity before the request is processed, to ensure the security of your data.
9

Children's Data Protection

The km77 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we find that we have collected data from a verified minor, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered on our platform are encouraged to contact km77 customer support immediately.

10

Third-Party Links & Services

The km77 platform may contain links to third-party websites or services, including live casino game providers and payment gateways. km77's Privacy Policy does not apply to those third-party websites or services.

Every game provider and payment provider that works with km77 has its own privacy policy. km77 ensures that all third-party partners meet data protection standards equivalent to or exceeding our own. However, km77 is not responsible for the privacy practices of third-party websites or platforms outside our control.

11

Cross-Border Data Transfers

In some situations, your personal data may be transferred to or accessed from countries outside Malaysia — for example, when we use cloud storage services or international game providers.

In such cases, km77 ensures that data transfers are carried out with adequate safeguards, including contractually binding data transfer agreements and verification that recipient countries have equivalent data protection laws. These measures are in place to ensure your data remains protected wherever it is held.

12

Data Retention Period

Km77 retains your personal data only for as long as necessary for the stated purposes or as required by law:

  • Active Account Data: Retained for the duration your account is active and up to 7 years after account closure (financial record-keeping requirement)
  • Transaction Data: Minimum 7 years in line with financial reporting and tax requirements
  • Communication Records: Up to 3 years from the date the communication took place
  • Technical Data (Logs): Between 90 days and 1 year depending on log type
  • KYC Data: Minimum 5 years after the business relationship ends, in line with AML requirements

Once the retention period ends, data will be securely deleted or anonymised in accordance with km77's data deletion procedures.

13

Changes to the Privacy Policy

Km77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service expansion. The latest update date will always be displayed at the top of this page.

For significant changes, km77 will notify players via their registered email or a prominent in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the amended policy.

14

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact the km77 privacy team via:

  • Live Chat: Available 24 hours a day, 7 days a week — click the chat icon at the bottom right of the website
  • Email: [email protected] (please copy this address into your email client)
  • FAQ: Review FAQ page us for quick answers to privacy-related questions

All privacy-related enquiries will be handled seriously and will receive a response within 5 business days. For formal requests regarding data access or deletion rights, please clearly state the type of request and provide the required identity verification.

FAQ km77 Privacy

The most frequently asked questions about how km77 manages players' personal data.

No. km77 does not sell, rent, or share players' personal data with any advertisers or third-party marketing companies for advertising purposes unrelated to km77. We only share data with service providers that help us operate the platform — such as payment gateways and game providers — and all such sharing is subject to strict confidentiality agreements.

You may request data deletion by contacting km77 customer support via live chat or email. Include your full name and registered email address, and state that you wish to exercise your "Right to Erasure" under PDPA 2010. Please note that km77 may need to retain certain data such as transaction records for periods required by law, even after a deletion request is received.

Identity verification (KYC) is a standard legal compliance requirement in the financial and online gaming industry. It is required to confirm that you are an individual aged 18 and above, prevent identity fraud, comply with anti-money laundering (AML) laws, and ensure that winning withdrawals are sent to the rightful account owner. KYC documents are stored with full encryption and are only accessible by authorised staff.

Yes, you can opt out of promotional emails at any time in two ways: (1) click the "Unsubscribe" link found at the bottom of every km77 promotional email, or (2) log in to your account and update your communication preferences under profile settings. The withdrawal of consent will take effect within 48 hours. However, you will still receive important transactional emails such as deposit confirmations, withdrawal notifications, and security alerts.

Following account closure, km77 will retain certain data for the period required by Malaysian law — typically between 5 and 7 years for financial and KYC records to meet AML and tax obligations. Once the retention period ends, all your data will be securely deleted or anonymised in accordance with km77's standard procedures. Data not required to be retained by law will be deleted within 30 days of account closure.

Play with Peace of Mind at km77

Your data is protected, your identity is verified, and your privacy is respected. Register a km77 account today and enjoy a secure gaming experience alongside the hundreds of thousands of Malaysian players who have trusted us.

Bahasa Melayu