Privacy Policy myb77 – Personal Data Protection for Malaysia Players

Myb77 collects various types of information from members in order to provide a secure, efficient, and personalised service. This information is organised into several main categories:

Registration and Identity Information: When you register a myb77 account, we collect the username you choose, your email address, a valid Malaysian phone number, date of birth, and an encrypted password. This information forms the basis for creating and managing your myb77 account.

Identity Verification (KYC) Information: In certain situations, such as withdrawals exceeding a specified threshold or where compliance requirements apply, myb77 may request additional identity verification documents. These may include a copy of your Malaysian Identity Card (MyKad), a photo of your face, a utility bill, or other documents confirming your identity and address. These documents are stored securely and accessed only by authorised staff.

Financial & Transaction Information: myb77 records all financial activity in your account, including deposits, withdrawals, bets, and winnings. However, for payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX (Maybank2u, CIMB Clicks), we only retain the transaction information necessary to process your payments — not your full account number or e-wallet password. All financial transactions are carefully recorded to support customer service and regulatory compliance.

Technical Information: When you access myb77, our systems automatically collect certain technical information, including your device's IP address, browser type and version, operating system, screen resolution, and session-related data. This information is used primarily for security purposes, technical troubleshooting, and improving the overall user experience.

Game Activity Information: myb77 records your gaming activity, including the games you play, bet amounts, game outcomes, time spent per session, and playing patterns. This data is used to deliver a better experience, offer relevant promotions, and support responsible gambling efforts by identifying playing patterns that may require attention.

Myb77 uses the personal data collected solely for legitimate purposes relating to the services we offer. The following are the primary purposes for which your data is used:

• Account Management & Verification: To create, verify, manage, and protect your myb77 account. This includes the identity verification (KYC) process required to ensure account security and compliance with anti-money laundering regulations.
• Financial Transaction Processing: To process deposits and withdrawals using your preferred local Malaysian payment methods, ensure transactions are completed smoothly and securely, and resolve any payment-related issues that may arise.
• Provision of Gaming Services: To give you access to and allow you to play all games available on myb77, including slots, Live Casino, blackjack, poker, sports betting on leagues such as the Malaysia Super League and EPL, badminton, e-sports, and more.
• Service Communications: To send you important account-related communications, such as transaction confirmations, security notifications, policy update notices, and responses to your customer support enquiries.
• Platform Improvements: To analyse usage patterns on an aggregated basis (not at an individual level) in order to understand how members use myb77 and make improvements that enhance the overall platform experience.
• Risk Management and Security: To detect and prevent fraud, money laundering, system abuse, and suspicious activity that may affect the platform or other myb77 members.
• Responsible Gambling: To monitor gaming patterns and identify members who may be showing signs of gambling-related issues, and to provide appropriate support through the responsible gambling tools available.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including Malaysia's Personal Data Protection Act 2010 and anti-money laundering reporting obligations.

Myb77 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where myb77 may need to share your information with certain parties:

Trusted Third-Party Service Providers: myb77 works with a number of service providers who help us operate the platform — including payment processors, gaming software providers, data hosting companies, and cybersecurity service providers. All these providers are bound by strict confidentiality agreements and are only permitted to process your data in accordance with myb77's instructions for specified purposes.

Authorities and Legal Requirements: myb77 may be required to disclose certain information to the relevant authorities — such as the police, courts, or regulatory bodies — when mandated by Malaysian law, a court order, or in connection with a legitimate criminal investigation. In all such cases, myb77 will disclose only the minimum information necessary.

Protection of Vital Interests: In circumstances where it is necessary to protect someone's safety or life, myb77 may share the required information with the relevant authorities.

• Myb77 does not share your betting history with employers, family members, or any other individuals without your consent.
• Payment providers such as Touch 'n Go eWallet or GrabPay only receive the transaction information necessary to process a payment — not your gaming information.
• Any data sharing not described in this Privacy Policy will not take place without prior notice to you, unless required by law.

Protecting your personal data is myb77's highest technical and organisational priority. We continuously invest in security infrastructure and staff training to maintain a high standard of data protection at all times.

Data Encryption in Transit: All communications between your browser or mobile application and myb77's servers are encrypted using the latest TLS (Transport Layer Security) protocol with 256-bit encryption. This ensures that any party intercepting your network traffic cannot read the information being transmitted.

Data Encryption at Rest: Sensitive data stored in myb77's databases — including passwords, financial information, and identity documents — is encrypted using strong encryption algorithms. Your password is stored in a hashed form that cannot be decrypted, meaning even myb77 staff cannot view your original password.

Internal Access Controls: A role-based access control system ensures that myb77 staff can only access data required for their specific job functions. All access to sensitive data is logged and audited on a regular basis.

• Two-factor authentication (2FA) is enforced for staff accounts accessing myb77's administration systems.
• Security and penetration testing is carried out regularly by independent appointed parties.
• The data centres storing myb77 member information are equipped with comprehensive physical and digital security measures.
• All myb77 staff who handle personal data undergo regular data security training.

Myb77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit the myb77 website.

Required Cookies (Mandatory): These cookies are essential to the basic operation of the myb77 platform and cannot be disabled. They include login session cookies that keep you signed in during an active session, security cookies that help detect suspicious activity, and basic preference cookies that store your language and region settings.

Performance and Analytics Cookies: These cookies help myb77 understand how members use the platform — which pages are visited most, how long sessions last, and where users encounter issues. This information is used in aggregate form to improve the myb77 platform as a whole. You may opt out of these cookies, though doing so may slightly affect your experience.

Functional Cookies: These cookies allow myb77 to remember your preferences (such as favourite games and display settings) and deliver a more personalised experience. No information collected through these cookies is shared with third parties.

• You can manage your cookie settings through your web browser settings at any time.
• Blocking all cookies may affect certain functions of the myb77 platform, including the ability to log in to your account.
• Myb77 does not use third-party cookies for external advertising or cross-site tracking purposes.
• Your myb77 login session cookie will expire automatically after a set period of inactivity as a security measure.

Myb77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal requirements. The following are general guidelines for different data retention periods:

Active Account Data: For as long as your myb77 account remains active, we retain all data associated with your account — including registration details, transaction history, and communication records — to enable us to provide uninterrupted service and address any enquiries that may arise.

Post-Account Closure Data: When your myb77 account is closed at your request, we retain certain records for the period required under Malaysian law — typically around 7 years for financial and transaction records, in line with tax and anti-money laundering legal requirements. After this period, data that is no longer needed will be securely deleted or anonymised.

Security Log Data: Security log records — such as login attempt logs and records of suspicious activity — are retained for a shorter period, typically between 90 days and 1 year, unless an active investigation requires longer retention.

• Customer support communication records are retained for 2 years after a case is resolved, for reference and quality improvement purposes.
• Data collected for responsible gambling purposes may be retained for a longer period to allow for ongoing monitoring where necessary.
• Once the retention period expires, data is deleted using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 and myb77's privacy policy, you have several important rights regarding your personal data. myb77 respects and facilitates the exercise of all these rights:

To exercise any of the rights above, please contact myb77's Privacy Officer by email at privacy@myb77.world or through myb77 customer support. We will endeavour to process your request within 30 business days from the date a complete request is received. In complex cases, we may require additional information from you to verify your identity before proceeding.

In operating the myb77 platform and providing services to members in Malaysia, there are situations where your personal data may need to be transferred to or processed in another country — for example, where the technical service providers or game providers we work with operate from international locations.

When cross-border data transfers occur, myb77 ensures that:

• The recipient country or organisation provides a level of data protection equivalent to or greater than that afforded under Malaysian law.
• Appropriate contractual agreements, including standard data protection clauses, are established with all parties involved in international data transfers.
• Data transfers occur only for the purposes stated in this Privacy Policy and do not exceed the scope required.
• Myb77 maintains records of all international data transfers and can provide this information to the relevant authorities upon request.

By using myb77's services, you consent to such data transfers for the purposes stated above, subject to the protective measures described. If you have concerns about international data transfers relating to your myb77 account, please contact us for further information.

Myb77 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from children or individuals under the age of 18.

All registrants are required to verify their age during the registration process, and myb77 conducts periodic age checks to ensure compliance. If myb77 discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account.

Myb77 has appointed a Privacy Officer responsible for ensuring compliance with this Privacy Policy and applicable data protection laws. If you have any questions, concerns, or complaints regarding how myb77 handles your personal data, you may reach us through the following channels:

• Privacy Email: privacy@myb77.world — for specific privacy enquiries and data rights requests
• General Support Email: support@myb77.world — for general enquiries and account assistance
• Live Chat: Available 24/7 on the myb77 platform for immediate responses in Bahasa Malaysia

Myb77 is committed to responding to all privacy enquiries and complaints within 5 business days, and to resolving more complex issues within 30 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

Amendments to This Privacy Policy: myb77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When material changes are made, we will notify you via an in-platform notification or an email to your registered address. You are encouraged to review this Privacy Policy periodically. For more information on the platform's terms of use, please refer to Terms & Conditions myb77.