KL77 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is published by KL77 ("we", "our platform"), operating under the domain kl77.xyz. It describes our practices regarding the collection, use, storage, protection, and deletion of personal data you provide to us when registering, using our services, or interacting with the KL77 platform in any form.

This Privacy Policy applies to all users of the KL77 platform, including registered members, visitors who browse the website without registering, and individuals who contact our customer support team. It covers all services we offer — slots, Live Casino, lottery, badminton betting, Malaysian Super League football, E-Sports, virtual sports, and all other related activities on kl77.xyz.

KL77 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and the industry's best standards for data protection. If you disagree with any part of this Privacy Policy, please discontinue use of the KL77 platform and contact us at support@kl77.xyz — we will assist you in closing your account and deleting your data.

Kl77 only collects data that is necessary to provide, improve, and protect our services. We do not collect excessive or irrelevant information. Below are the categories of data we collect along with specific examples:

We do not collect sensitive data such as health information, religious beliefs, or political views unless you voluntarily disclose such information in a responsible gambling context (for example, submitting supporting medical documentation for a self-exclusion programme on medical grounds).

Kl77 uses the personal data collected solely for legitimate and necessary purposes. The following outlines how that data is used:

• Service Provision: Processing account registration, verifying identity, handling deposits and withdrawals via local Malaysian payment methods, and enabling access to all kl77 games and services.
• Identity Verification (KYC): Complying with anti-money laundering (AML) legal requirements and industry compliance obligations to verify member identity before processing withdrawals.
• Account Security: Detecting and preventing unauthorised access, fraud, bonus abuse, and other unlawful activity that could compromise the security of the kl77 platform or its members.
• Platform Improvement: Analysing usage patterns in aggregate (not at an individual level) to understand the most popular features, identify technical issues, and plan improvements to the KL77 user experience.
• Service Communications: Sending important account-related notifications such as transaction confirmations, policy updates, and security alerts via SMS or email.
• Marketing Communications: Sending information about promotions, new bonuses, and exclusive kl77 offers — only if you have given explicit consent to receive marketing communications. You may withdraw this consent at any time.
• Responsible Gambling: Using your gameplay activity data to identify patterns that may indicate problem gambling and, where necessary, to enforce the limits you have set for yourself.
• Legal Compliance: Maintaining records required by Malaysian law, complying with court orders, and cooperating with relevant authorities when required by law.

KL77 does not sell, rent, or trade your personal data to any third party for their commercial purposes. This is an absolute commitment on our part. However, in certain limited situations, KL77 may share your data with carefully selected third parties:

• Payment Providers: Transaction information that must be shared with payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and banks that support FPX (Maybank, CIMB, and others) to process your deposits and withdrawals. This data sharing is limited strictly to the information required to complete each transaction.
• Game Providers: Minimum technical information necessary to allow you to access games from third-party providers such as Pragmatic Play, NetEnt, Microgaming, and others integrated into the kl77 platform. These providers are bound by strict confidentiality agreements.
• Technical Service Providers: Companies that provide IT infrastructure, cloud computing services, or technical support to kl77 may have access to your data to the limited extent necessary to perform their functions. All such providers are bound by data processing agreements that comply with Malaysia's PDPA.
• Legal Authorities: KL77 will disclose the necessary data to relevant authorities when required by a court order, valid legal process, or regulatory obligation. In all such cases, we will endeavour to notify you unless prohibited by law.
• Fraud Prevention: In cases of suspected fraud or serious misuse, KL77 may share relevant information with other platforms in the industry or with the relevant authorities to protect the broader player community.

Protecting your personal and financial data is one of kl77's highest technical priorities. Here are the security measures we have in place:

• 256-bit SSL Encryption: All communications between your device and kl77's servers are encrypted using TLS protocol with 256-bit encryption — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB.
• Data-at-Rest Encryption: Sensitive data such as passwords, identification card numbers, and bank account information is stored in encrypted form on KL77's servers. Your password is never stored in plain text — it is hashed using a one-way hashing algorithm that cannot be reversed.
• Financial Data Segregation: kl77 members' funds and financial data are stored in systems that are physically and logically isolated from the company's operational systems. This ensures that any operational issues cannot affect members' financial assets.
• 24/7 Monitoring: KL77's cybersecurity team continuously monitors the platform around the clock using automated intrusion detection systems (IDS) and real-time threat monitoring tools.
• Internal Access Controls: Access to member data among KL77 staff is restricted on a least-privilege basis — each employee can only access the data necessary to perform their specific role. All access is logged and monitored.
• Regular Penetration Testing: KL77 conducts regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all kl77 accounts and is strongly recommended as an additional layer of security for your account.

While kl77 implements comprehensive security measures, no online system can guarantee absolute 100% security. You also play an important role in protecting your account — use a strong, unique password, never share your login credentials, and contact us immediately if you suspect any suspicious activity.

KL77 does not retain your personal data any longer than necessary. Retention periods depend on the data category and applicable legal requirements:

• Active Account Data: For as long as your account remains active with KL77, your personal data will be retained for the purposes of service delivery, account security, and legal compliance.
• Financial Transaction Data: Financial transaction records are kept for a minimum of 7 years as required under Malaysia's Anti-Money Laundering Act (AMLA). This is a legal requirement that cannot be waived even if you close your account.
• Game History Data: Your gameplay activity history is retained for 2 years from the date of play for dispute resolution, audit, and compliance purposes.
• Support Communications Data: Customer support session records and emails are retained for 1 year after a case is resolved, for quality control purposes and reference should a related issue arise.
• Data After Account Closure: When your account is closed at your own request, KL77 will delete or anonymise personal data that is no longer required within 30 days. Data that must be retained for legal compliance will be held in a separate, restricted-access system.

To request the deletion of your personal data (to the extent permitted by law), please contact the KL77 support team by email at support@kl77.xyz with the subject line "Data Deletion Request". KL77 will process your request within 30 days and notify you of the action taken.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and kl77's Privacy Policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Submit your request to support@kl77.xyz and we will provide a data report within 14 business days.
• Right to Rectification: If the data we hold is inaccurate or out of date, you have the right to request a correction. Basic information such as your phone number and email address can be updated directly in your kl77 account profile.
• Right to Erasure: You have the right to request the deletion of your personal data that is no longer needed for the purpose for which it was collected, subject to applicable legal retention requirements.
• Right to Withdraw Consent: If you have given consent for marketing communications or specific uses of your data, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly for direct marketing. Contact us to exercise this right.
• Right to Complain: If you believe kl77 has not complied with the PDPA or this Privacy Policy, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, contact the KL77 privacy team at support@kl77.xyz with the subject line "Privacy Rights Request". Please include your full name and account number to help expedite the process. KL77 will respond within 14 business days.

Kl77 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyze usage patterns. The following are the types of cookies we use:

You can manage cookie settings through your web browser settings. However, disabling essential cookies may cause some KL77 platform features to not function properly. Disabling analytics or preference cookies will not affect your access to any games or services.

The KL77 platform is intended exclusively for adults aged 18 and above. KL77 does not knowingly collect, store, or process the personal data of individuals under the age of 18.

If we discover that we have inadvertently collected data from someone under 18 years of age, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian who believes your underage child has registered a KL77 account, please contact us immediately at support@kl77.xyz and we will respond within 24 hours.

The kl77 platform may contain links to third-party websites or services in certain contexts, such as payment method information. kl77 is not responsible for the privacy practices or content of those third-party websites.

Once you leave the KL77 platform and browse third-party websites, KL77's Privacy Policy no longer applies. We encourage you to read the privacy policy of every website you visit, especially if you share any personal information with them. KL77 has no control over how third parties collect or use your data on their own websites.

KL77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The latest version will always be available on this page with the "Updated" date clearly displayed.

For significant changes to how we process your personal data, KL77 will endeavour to provide advance notice via in-platform notifications or an email to your registered address before the changes take effect. For minor changes such as language corrections or clarifications, we may update the policy without separate notice.

Your continued use of the kl77 platform after any policy amendments are published will be taken as your acceptance of the latest version of the Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data by contacting us at support@kl77.xyz.

If you have any questions, concerns, or requests regarding this Privacy Policy or how kl77 processes your personal data, please contact us through the following channels:

• Privacy Email: support@kl77.xyz (use the subject line "Privacy Enquiry" for faster handling)
• Live Chat: Available on the kl77 platform, 24 hours a day, 7 days a week
• Target Response Time: 3 business days for general privacy enquiries; 14 business days for formal data requests

KL77 also encourages you to read the relevant pages to fully understand your rights and responsibilities as a platform member — in particular Terms & Conditions and guidelines Responsible Gaming us.