Privacy Policy

This Privacy Policy ("Policy") describes how judi77 ("Company", "Platform", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at judi77.cam, collects, uses, stores, shares, and protects the personal data of its registered players and website visitors ("you", "your", "Data Subject").

Judi77 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise the importance of privacy to our players across Malaysia — from Kuala Lumpur and Penang to Johor Bahru and Petaling Jaya — and we have designed our data handling practices accordingly.

By registering an account on judi77.cam or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood how we process your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to request account closure.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, modification, and deletion.
• "Data Controller" means judi77, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of judi77, under a written data processing agreement.
• "KYC Data" means identity verification documents and related information collected as part of the Know Your Customer verification process.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and anonymised usage data.
• "Consent" means any freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

Judi77 collects the following categories of Personal Data, depending on how you interact with the Platform:

We do not intentionally collect special categories of sensitive Personal Data (such as health information, racial or ethnic origin, political opinions, or religious beliefs) unless explicitly required for a specific regulatory compliance purpose, in which case we will seek your explicit consent.

Judi77 collects your Personal Data through the following means:

• Direct submission: Information you voluntarily provide when creating an account, completing KYC verification, making a deposit, contacting support, or participating in a promotion.
• Automated technical collection: Data generated automatically when you access the Platform, including IP addresses, browser metadata, device identifiers, and session activity logs collected via cookies and server logs.
• Payment provider data: Transaction confirmation data received from your payment provider (e.g., Touch'n Go eWallet, Boost, GrabPay, DuitNow, Maybank FPX, CIMB, Public Bank) necessary to verify and record your deposit or withdrawal.
• Third-party verification services: Identity and document verification data received from KYC service providers engaged by judi77 to assist with the identity verification process.
• Fraud prevention tools: Risk signals and fraud indicators from integrated security services that help us detect prohibited conduct and protect the integrity of the Platform.

Judi77 processes your Personal Data for the following specific and legitimate purposes:

• Account management: Creating, maintaining, securing, and closing your player account on judi77.cam.
• Transaction processing: Processing deposits and withdrawals in MYR via supported Malaysian payment methods, and maintaining accurate transaction records.
• Identity verification (KYC): Verifying your identity and age (21+) as required by applicable anti-money laundering and gaming compliance obligations.
• Customer support: Responding to enquiries, resolving disputes, and providing 24/7 assistance in English, Bahasa Melayu, and Mandarin.
• Platform security: Detecting and preventing fraud, money laundering, account takeovers, multi-accounting, and other prohibited conduct.
• Regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and data protection frameworks.
• Personalisation and improvements: Analysing anonymised usage patterns to improve platform features, game recommendations, and promotional relevance.
• Responsible gambling monitoring: Identifying usage patterns that may indicate problem gambling behaviour, in support of our responsible gaming obligations.
• Marketing communications: Sending promotional emails or messages where you have provided consent to receive them. You may withdraw consent at any time.

Judi77 processes your Personal Data one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and judi77 — including account creation, game access, and payment processing — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML identity verification, transaction record retention, and fraud reporting obligations.
• Legitimate interests: Processing carried out for purposes that are in the legitimate interests of judi77 and do not override your fundamental privacy rights — including platform security, fraud prevention, and internal analytics.
• Consent: Processing for non-essential marketing communications and certain cookie categories, where we have obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent given before withdrawal.

Judi77 does not sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. We may share your Personal Data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX gateway operators, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services — to facilitate your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services engaged to assist with document verification and age confirmation as part of our compliance obligations.
• Fraud prevention and security services: Providers of risk scoring, device fingerprinting, and anti-fraud technology that help protect the Platform and our players.
• Game content providers: Licensed international game studios whose games are made available on the Platform, to the limited extent necessary to manage game sessions and fairness auditing.
• Professional advisors: Legal, accounting, or regulatory advisors where access to your data is reasonably necessary to obtain professional advice.
• Regulatory and law enforcement authorities: Where we are required by applicable law, court order, or regulatory directive to disclose your Personal Data to a competent authority.

Judi77 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate and improve the Platform. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect Platform functionality and your overall gaming experience.

Judi77 implements a comprehensive set of technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields (including payment details and identity documents) at rest using industry-standard algorithms.
• Role-based access controls ensuring that only authorised personnel have access to Personal Data, strictly on a need-to-know basis.
• Regular independent penetration testing and security audits of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding Personal Data.
• Incident response procedures providing for prompt assessment, containment, and notification in the event of a confirmed Personal Data breach.

While judi77 takes all reasonable precautions to secure your data, no method of electronic transmission or storage is 100% secure. We therefore cannot guarantee absolute security, but we commit to promptly notifying affected players and relevant authorities in the event of a confirmed breach affecting your Personal Data, as required by applicable law.

Judi77 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overiding legal retention obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a reasonable post-closure period to facilitate dispute resolution and regulatory audits.
• Transaction and financial records: Retained for a minimum of seven (7) years following the date of each transaction, in compliance with applicable AML record-keeping requirements.
• KYC identity documents: Retained for a minimum of five (5) years following account closure, or such longer period as required by applicable law.
• Customer support communications: Retained for up to three (3) years from the date of the last interaction, to support quality assurance and dispute resolution.
• Analytics and usage data: Retained in anonymised, aggregated form for platform improvement purposes. Individually identifiable usage data is deleted or anonymised within 13 months.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard data destruction methods.

Subject to applicable law and certain limited exceptions, you have the following rights in respect of the Personal Data judi77 holds about you. To exercise any of these rights, please contact us as described in Section 15.

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how and why it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data we hold about you.
• Right to Erasure: You may request deletion of your Personal Data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected and no overiding legal retention obligation applies.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your Personal Data while a dispute about its accuracy or lawfulness is resolved.
• Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling, at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The judi77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. If you are under 21 years of age, you are not permitted to register an account or use any services on judi77.cam.

If judi77 becomes aware that Personal Data has been collected from a person under 21 years of age without verified parental consent or in violation of our age eligibility requirements, we will take immediate steps to delete such data and close the associated account. If you have reason to believe that a person under 21 has accessed judi77 using false information, please contact us immediately at the address provided in Section 15.

In order to deliver our services, judi77 may transfer your Personal Data to third-party service providers and Data Processors located in countries other than Malaysia. Such transfers may include, for example, cloud infrastructure providers, KYC verification services, or fraud prevention systems operating international data centres.

Where Personal Data is transferred internationally, judi77 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including contractual data protection obligations binding on the receiving party that are consistent with applicable data protection standards. We will not transfer your Personal Data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a legitimate legal basis for doing so.

Judi77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The date of the most recent update is displayed at the top of this document.

Where amendments are material — meaning they significantly affect how we process your Personal Data or your rights in relation to it — we will provide reasonable advance notice by email to your registered address or by means of a prominent notice on the Platform. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with a revised Policy, you may request account closure before the changes take effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to submit a formal data protection complaint, please contact the judi77 Data Protection team through any of the following channels:

• Email: [email protected] — Please include "Data Privacy Request" and your Account username in the subject line. We respond to all privacy-related emails within 2 business days.
• 24/7 Live Chat: Available directly on judi77.cam — for general privacy queries and to initiate a formal data rights request. Average response time: 3–5 minutes.
• WhatsApp Support: Available in English, Bahasa Melayu, and Mandarin — suitable for general privacy enquiries and to request a data access or deletion form.

When submitting a data rights request by email, please include: your full name as registered on the Platform, your Account username, the nature of your request, and a copy of a valid government-issued identity document for verification purposes. This is required to ensure we process requests only from authorised individuals and protect against fraudulent data access attempts.