Privacy Policy net77 — How We Protect Malaysian Players' Personal Data

This Privacy Policy ("Policy") is published by net77 ("we", "Platform", "net77") and applies to all users who access or use the net77 platform via net77.site and all services provided through it. This Policy describes our practices relating to the collection, use, storage, protection and disclosure of users' personal information.

Net77 takes user privacy very seriously. As a platform operating for Malaysian players, we are bound by Malaysia's Personal Data Protection Act 2010 (PDPA), which sets strict standards for the handling of individuals' personal data. We are committed to ensuring that all data you share with us is processed responsibly, securely and in accordance with applicable legal requirements.

This policy is written in Malay for the convenience of Malaysian users. Should any ambiguity arise in interpretation between the Malay and English versions, the English version shall serve as the definitive reference. We encourage you to read this document in full and to contact us if anything is unclear or requires further clarification.

Net77 collects personal data through several channels — primarily when you register an account, make financial transactions, use our customer support services or interact with our platform in general. The following are the categories of data we collect:

Net77 does not collect sensitive data categories such as biometric data, health records, political affiliations or users' religious beliefs, unless strictly necessary for a specific identity verification purpose and with the user's explicit consent.

The personal data you provide to net77 is used for the following purposes, all of which are necessary to operate the platform's services in a safe, fair and responsible manner:

• Account management and identity verification — processing registrations, verifying your identity (KYC), keeping your account details up to date and processing withdrawal requests.
• Financial transaction processing — processes deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX in Malaysian Ringgit (RM), and handles withdrawals to your account.
• Gaming service provision — enables you to access and enjoy all games and features on the net77 platform, including football Sports Betting, badminton, e-sports, slots and Live Casino.
• Customer Support — processing and responding to enquiries, complaints and support requests you submit to the net77 support team.
• Security and fraud prevention — detects and prevents fraudulent activity, money laundering, unauthorized access and platform abuse.
• Legal compliance — fulfilling the legal and regulatory obligations applicable to net77's operations, including anti-money laundering reporting requirements.
• Platform analysis and improvement — analyzes usage patterns to improve the overall user experience, platform performance and service quality.
• Service communications — sending important notifications relating to your account, transactions, security updates, and changes to terms — not for marketing purposes unless you have given specific consent.

Every instance of personal data processing by net77 is grounded in at least one valid legal basis as provided under the Personal Data Protection Act 2010 (PDPA) Malaysia:

• Contract performance — data processing is necessary to carry out the service agreement between you and net77 when you register and use the platform.
• Legal obligations — certain processing is required by applicable Malaysian law, including identity verification requirements, anti-money laundering reporting and financial record retention.
• Legitimate interests — net77 processes certain data based on our legitimate interests in operating a safe and responsible business, including fraud prevention and platform security enhancement.
• Consent — for certain types of processing such as marketing communications, net77 will request and act only on explicit consent given by you.

Net77 does not sell, rent or disclose your personal data to third parties for their commercial purposes. However, there are certain situations where we may need to share your data with selected parties for legitimate reasons:

• Service providers — third parties that provide essential services to net77 such as payment processing (TNG eWallet, DuitNow, FPX and other providers), cloud computing services, analytics and technical support. All such providers are bound by strict confidentiality agreements.
• Legal authorities — Malaysian authorities or regulatory bodies with valid legal authority to request such information, including in investigations involving financial crime or money laundering.
• Game providers — technical information required by third-party game providers operating within the net77 platform to ensure a smooth and secure gaming experience.
• Licensing regulatory body — the body that issues and oversees net77's operating licence may require access to certain information as part of their regulatory oversight process.

Protecting your personal data is a technical and organisational responsibility we take very seriously. net77 implements multiple layers of security to safeguard your data against unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL Encryption — all communications between your device and net77's servers are encrypted using the latest Transport Layer Security (TLS) technology. This means that even if someone were to intercept the data in transit, it would be unreadable without the appropriate decryption key.
• Data segregation — players' funds are held in accounts completely separate from net77's operating accounts, ensuring your money is always available and protected.
• Internal access controls — only net77 staff who require access to your data to carry out their duties are authorised to do so, and all access is logged and continuously monitored.
• Two-factor authentication (2FA) — available to all user accounts as an additional layer of protection alongside your password.
• 24/7 threat monitoring — an automated threat detection system monitors platform activity around the clock to identify and respond to any intrusion attempts or suspicious activity.
• Regular security audits — net77's security infrastructure undergoes regular independent technical audits to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system is entirely impenetrable. We encourage users to take precautions on your own end as well — particularly by using a strong, unique password and enabling two-factor authentication.

Net77 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

• Essential cookies — required for core platform functions such as login authentication, active game sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — helping us understand how users interact with the platform so we can improve the overall experience. Information collected is in aggregate form and does not identify individual users.
• Preference cookies — saving your preferences such as language settings and display options so you do not have to reconfigure them each time.
• Analytics cookies — used to analyze platform usage patterns for service improvement purposes. net77 uses only approved analytics tools that handle data in accordance with strict privacy standards.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the net77 platform and your overall experience. For more information on managing cookies, refer to the help documentation of your browser.

Under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding your personal data held by net77. All requests to exercise these rights can be submitted via email to support@net77.site or through the platform's live chat.

Net77 retains your personal data for as long as necessary for the purposes stated in this policy, subject to legal requirements that mandate retention for longer periods. The following are the general retention period guidelines we adhere to:

• Active account data — retained for as long as your account remains active on the net77 platform and for a reasonable period after account closure to allow for the resolution of any claims or disputes that may arise.
• Financial transaction records — retained for a minimum of seven (7) years in compliance with Malaysia's applicable accounting and anti-money laundering legal requirements.
• Communication and customer support logs — retained for three (3) years for reference and dispute resolution purposes.
• Technical and security logs — retained for 12 months for security analysis, intrusion detection and system audit purposes.
• KYC verification documents — retained for the period stipulated by applicable anti-money laundering legal requirements.

Once the relevant retention period has elapsed, data will be securely deleted or anonymised in accordance with procedures established by net77's security team. Anonymised data can no longer be linked to any individual and therefore no longer constitutes personal data under PDPA 2010.

Net77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or service improvements. When material changes are made to this policy, we will notify you through:

• In-platform notification on net77 upon your next login
• Email to the address registered to your account
• Updates to this Privacy Policy page with a clearly stated latest amendment date

Your continued use of the net77 platform after any such amendments take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to stop using the platform and request account closure and data deletion through the channels stated.

If you have any questions, concerns or complaints about how net77 handles your personal data, or if you wish to exercise any of the rights granted to you under the PDPA 2010, please contact us through any of the following channels:

• Email: support@net77.site — for written requests relating to data privacy, including requests for access, correction, or deletion of data.
• Live Chat: Available 24/7 within the net77 platform for general privacy and data security enquiries.
• Target response time: We aim to provide an initial response to all privacy inquiries within 5 business days and to resolve more complex requests within 21 business days.

If you feel that net77 has not handled your complaint satisfactorily, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia, established under PDPA 2010, for further investigation.