Vr77 Privacy Policy – Personal Data Protection for Malaysian Online Betting Players

1. Personal Data We Collect

Vr77 collects your personal data in several ways — during registration, while you use the platform, and through your interactions with our customer support. We only collect data that is genuinely necessary to operate our services effectively and securely.

Data You Provide Directly:

• Full name as it appears on your Malaysian identity card.
• An active Malaysian phone number (used for account verification and notifications).
• Email address (if provided during registration or profile update).
• Date of birth (for age verification — you must be 21 years of age or older).
• Additional identity information may be required during the KYC (identity verification) process prior to withdrawal — typically a copy of your Malaysian identity card or passport.
• Details of your chosen payment method (e-wallet account name or bank account holder name — not your full account number).

Automatically Collected Data:

• IP address and approximate geographic location derived from that IP.
• The device type, phone model, operating system, and web browser version you are using.
• Gaming activity history — including game types played, bet amounts, session times, and outcomes.
• Transaction history — deposits, withdrawals, and account balance.
• Server log data — access times, pages visited, errors encountered, and session duration.
• Cookie data and similar tracking technologies (see Section 5 for more details).

2. How We Use Your Data

Vr77 uses the personal data collected solely for the following purposes. We will not use your data for any other purpose without first informing you and obtaining your consent where required.

If you no longer wish to receive promotional notifications from VR77, you can unsubscribe at any time through your account settings or by contacting our support team.

3. Data Storage & Security

The security of your personal data is vr77's top priority. We invest in comprehensive security infrastructure to ensure your data is always protected against unauthorized access, loss, or accidental exposure.

• All communications between your device and vr77's servers are encrypted using TLS 1.3 with 256-bit SSL certificates — the same standard used by leading financial institutions.
• Data is stored in data centres protected by multiple layers of physical and digital security controls, including biometric access management and 24-hour monitoring.
• Access to member personal data within the vr77 organisation is restricted solely to staff with a legitimate operational need — a strict least-privilege principle.
• All staff with access to member data undergo regular data security training and are bound by enforceable confidentiality agreements.
• Vr77's systems are regularly audited by independent third-party cybersecurity firms to identify and address any potential vulnerabilities.
• Member account passwords are stored in hashed form using modern cryptographic algorithms — the vr77 team cannot view your password in plain text.

Data Retention Period:

• Active account data: retained for the duration your account remains active and for up to 7 years after closure, for legal compliance and anti-money laundering purposes.
• Transaction history: retained for a minimum of 7 years in accordance with Malaysian legal requirements.
• Log and activity data: retained for 12 months for security and fraud detection purposes.
• KYC information: retained for the duration required by applicable law.

4. Sharing Data with Third Parties

Vr77 does not sell, rent, or trade member personal data to third parties for their marketing purposes. We only share data under limited and specific circumstances, as outlined below:

• Payment Service Providers: The payment gateways that process your transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive only the transaction data necessary to process deposits and withdrawals. They are bound by strict data protection agreements and may not use your data for any other purpose.
• Game Providers: For live casino and slots games, our game providers receive only the minimum session data required to operate the games – typically an anonymized member ID and betting data. They do not receive your full name or payment information.
• Identity Verification Services: During the KYC process, your identity information may be processed through licensed third-party verification services. All such providers adhere to strict data protection standards.
• Law Enforcement Authorities: VR77 will disclose data when required by a valid court order, a request from Malaysian law enforcement authorities, or other legal obligations. We will notify you of any such disclosure where permitted by law.
• Business Transfer: If VR77 is involved in any merger, acquisition, or asset sale, member data may be transferred to the relevant entity. You will be notified in advance and will have the right to withdraw if applicable.

5. Cookie Policy

Like most modern web platforms, vr77 uses cookies and similar tracking technologies to enhance your experience, secure your login session, and better understand how the platform is used. Below are the types of cookies vr77 uses:

You can manage or delete cookies through your web browser settings. However, disabling necessary cookies may affect certain platform functions, such as the ability to log in or maintain your game session.

6. International Data Transfers

Vr77 operates on a technical infrastructure that may involve the transfer and storage of data outside Malaysia. This includes servers located in other regions and service providers that may operate across multiple locations.

When Malaysian members' data is transferred overseas, VR77 ensures that equivalent or greater protection than that required in Malaysia is applied through:

• Legally binding data processing agreements with all third-party service providers, incorporating comprehensive standard data protection clauses.
• Use of service providers that comply with internationally recognised data protection standards.
• Regular security assessments of all third parties that receive vr77 member data.

7. VR77 Member Privacy Rights

As a vr77 member, you have the following rights regarding your personal data. VR77 is committed to respecting these rights and making it easy for you to exercise them without unnecessary difficulty.

• Right of Access: You have the right to request a copy of the personal data we hold about you in a readable format.
• Right to Rectification: If your data is inaccurate or incomplete, you have the right to request a correction. Basic profile information can be updated directly through your account dashboard.
• Right to Erasure: You may request the deletion of your personal data. However, we may be required to retain certain data to meet legal obligations even after a deletion request is submitted.
• Data Portability Rights: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider of your choice.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests under certain circumstances.
• Right to Withdraw Consent: Where data processing is based on your consent (such as promotional notifications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact the vr77 support team via live chat or email at support@vr77.site stating the right you wish to exercise and providing your account details for identity verification. VR77 will respond to your request within 30 business days.

8. Privacy of Children & Young Individuals

The vr77 platform is intended for individuals aged 21 and above only. VR77 does not knowingly collect personal data from individuals under the age of 21.

If we discover that personal data has been collected from a minor who registered using false information, we will promptly delete that data, close the account in question, and refund any actual deposits made once the investigation is complete.

9. Privacy Policy Updates

VR77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. We are committed to not making changes that reduce your privacy protections without providing adequate prior notice.

• For non-material changes (such as language clarifications or typographical corrections), we may update the policy without a specific notice, but the update date will be revised.
• For material changes – meaning changes that significantly affect how we use or protect your data – we will provide at least 14 days' notice before the changes take effect, via account notification, email, or SMS.
• Continued use of the VR77 platform after the effective date of any changes constitutes acceptance of the latest version of the Privacy Policy.

10. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how vr77 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@vr77.site – please mark your email subject as "Privacy Inquiry" for faster processing.
• Live Chat: VR77's Malay-speaking support team is available 24 hours a day, 7 days a week via the live chat icon on the VR77 platform.

VR77 aims to respond to all privacy-related enquiries within 3 business days, and to data rights requests within 30 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.