Privacy Policy MMK77 — Your Personal Data Protection

Welcome to the MMK77 Privacy Policy page. This document transparently and thoroughly explains how MMK77 — as a responsible data controller — manages the personal information you share with us when registering, using the platform, or interacting with our support team.

This policy applies to all users of the MMK77 platform, including website visitors, registered players, and former players whose accounts have been closed. It covers all interaction channels with MMK77 — the official website, Android and iOS mobile apps, Live Chat, email communications, and any other digital channels we operate.

MMK77 is committed to protecting your privacy at every stage of your journey with us. We continuously review our data protection practices to keep pace with technological developments, regulatory changes, and the evolving needs of our players.

MMK77 collects your personal information through several key channels, depending on how you interact with our platform. We only collect data that is genuinely necessary and has a clearly defined purpose for each category of information gathered.

Information you provide directly:

• Full name as per valid identification document.
• Identity card number (MyKad) or passport number.
• Date of birth for age limit verification.
• Email address and mobile phone number.
• Current residential address for verification purposes.
• Bank account or digital wallet information used for transactions.
• Copies of documents uploaded during the KYC process.

Information collected automatically:

• IP address and estimated geographic location.
• Device type, operating system, and web browser version.
• Platform usage patterns, including games played and session duration.
• Complete transaction history including deposits, withdrawals, and wagering.
• Cookie data and session identifiers for secure login management.
• Communication logs with our customer support team.

MMK77 processes your personal data on several valid legal bases under Malaysia's PDPA 2010. Each processing purpose has a clear justification and is not used for any other purpose without your prior consent.

The primary purposes for processing your personal data include:

• Account management: Creating, maintaining, and securely managing your player account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions accurately and promptly.
• Identity verification (KYC): Verifying that you meet the age and eligibility requirements to use the platform, and preventing identity fraud.
• Regulatory compliance: Fulfilling legal obligations under PDPA, AML, and our licensing body requirements.
• Platform security: Detecting and preventing fraudulent activity, hacking, and other security threats.
• Customer support: Providing effective assistance when you contact our team.
• Product enhancements: Analysing usage patterns to improve the overall gaming experience.
• Marketing communications: Sending promotional information and exclusive offers — only if you have agreed to receive such communications.

MMK77 will not process your personal data for any purpose not stated above without first obtaining your explicit consent.

MMK77 understands that your trust is our most valuable asset. We therefore do not sell, rent, or transfer your personal data to third parties for marketing purposes without your consent. However, in the course of legitimate business operations, we may share certain information with the following categories of parties:

• Payment service providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost require minimum transaction information to process payments securely.
• Game software providers: Companies providing slot games, Live Casino, and sports may receive anonymous session identifiers for technical purposes.
• Cloud service providers: Our server infrastructure is managed by certified cloud providers bound by strict confidentiality agreements.
• Audit and compliance firms: Independent auditors may review certain records as part of licensing and compliance requirements.
• Legal authorities: MMK77 will disclose information to the police, courts, or regulatory bodies when required by law or a valid court order.

MMK77 continually invests in the latest security infrastructure to protect your personal data from unauthorised access, loss, misuse, or disclosure. Our security approach is multi-layered — employing multiple mutually reinforcing protection mechanisms.

The technical security measures we employ include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
• Data encryption at rest using the AES-256 standard.
• Two-factor authentication (2FA) system for all account logins.
• 24/7 security monitoring by our Security Operations Centre (SOC) team.
• Regular penetration testing conducted by independent cybersecurity firms.
• Intrusion Detection System (IDS) that detects and blocks threats in real time.
• Periodic data backups with encryption stored at geographically separate locations.
• Role-based access control (RBAC) ensures that only authorised staff can access specific data.

While we take all reasonable precautions, no security system is 100% guaranteed. We encourage you to play your part in keeping your account secure by using a strong password, enabling 2FA, and notifying us immediately if you suspect any suspicious activity.

Under Malaysia's PDPA 2010, you have several important rights regarding the personal data held by MMK77. We fully respect these rights and provide easy channels for you to exercise them.

MMK77 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and understand aggregate usage patterns. Cookies are small text files stored on your device when you visit our website.

The following are the categories of cookies we use:

• Essential Cookies: Required for core platform operations such as login session management, account security, and transaction integrity. These cookies cannot be disabled.
• Analytics Cookies: Helping us understand how players interact with the platform so we can make meaningful improvements. This data is collected anonymously.
• Functional Cookies: Storing your preferences such as language, display settings, and location to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant offers and promotions. You may opt out of these cookies without affecting the core functionality of the platform.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality and user experience of the MMK77 platform.

In the course of our global operations, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs when we use cloud services, technical infrastructure, or operational partners based in other countries.

MMK77 ensures that every cross-border data transfer meets protection standards equal to or higher than those required under Malaysia's PDPA. The safeguards we apply include:

• Standard Contractual Clauses with all overseas service providers.
• A Data Protection Impact Assessment is conducted before any new data transfer is implemented.
• End-to-end data encryption during transfer to ensure the confidentiality of your information.
• Continuous monitoring of service providers' compliance with agreed data protection standards.

We only transfer data to countries or organisations that maintain adequate data protection standards, or where appropriate safeguards have been established.

MMK77 does not retain your personal data longer than necessary for the purpose for which it was collected, or longer than required by law. Our data retention policy is designed to balance operational needs with your privacy rights.

In general, our data retention periods are as follows:

• Active account data: Retained for the duration your account remains active and for 7 years after account closure to meet regulatory requirements.
• Financial transaction records: Retained for 7 years after the last transaction as required by Malaysian financial laws.
• KYC Documents: Retained for the duration of the active account and 7 years after account closure.
• Support communication logs: Retained for 3 years for quality control and dispute resolution purposes.
• Analytics and cookie data: Retained for a maximum of 12 months before being deleted or anonymised.
• Security logs: Retained for 90 days for threat monitoring and incident investigation purposes.

When data is no longer needed and there is no legal obligation to retain it, MMK77 will delete or anonymise that data securely and irreversibly.

The MMK77 platform is exclusively for users aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18. A strict age verification process is carried out during account registration to ensure compliance with this minimum age requirement.

If you believe a minor has provided personal data to us without parental or guardian consent, please contact us immediately at [email protected]. We will take immediate action to remove such information as quickly as possible and close the relevant account.

The MMK77 platform may contain links or references to third-party websites or services. This Privacy Policy applies solely to the MMK77 platform and does not cover the privacy practices of any third parties. We are not responsible for the privacy policies or content of those external websites.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. The presence of a link on our platform does not imply that we endorse or validate the privacy practices of that website.

MMK77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or new platform features. We will notify you of any significant changes via in-platform notifications, an email to your registered address, or a prominent notice displayed on our website.

The "Last Updated" date at the top of this document will always reflect the date of the latest revision. We encourage you to review this page periodically to stay informed about how we protect your information.

Continued use of the MMK77 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account by contacting our support team.