Mclub77 Privacy Policy — Protection of Your Personal Data

Mclub77 takes our responsibility to protect every member's personal data seriously. This Privacy Policy explains in detail how we collect, process, store and protect your information when you use the mclub77 platform — whether through our website at mclub77.vu or our mobile app.

By registering an mclub77 account, accessing our platform, or using any of our services, you agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we recommend that you discontinue use of our platform and contact our support team for further clarification.

This Privacy Policy applies to all users of the mclub77 platform, including registered members, visitors browsing our website without an account, and any individual interacting with our customer support services. We are committed to keeping this document up to date and reflective of our current personal data management practices.

Mclub77 only collects information that is genuinely necessary to provide a safe, fair and regulatory-compliant service. The information we collect falls into three main categories:

A. Information You Provide Directly

• Full name as shown on your identification card or passport.
• Date of birth for age verification (must be 18 years or older).
• Active email address for account communications and notifications.
• Phone number for two-factor authentication and essential communications.
• Current residential address for KYC compliance and identity verification.
• Identity verification documents such as a copy of your national ID or passport during the KYC process.
• Proof of address such as a bank statement or utility bill dated within the last three months.
• Payment method details including the name of the bank account or e-wallet holder used.

B. Automatically Collected Information

• IP address of the device used to access our platform.
• Web browser type and device operating system.
• Gaming session history including date, time, game type and total wagering amount.
• Complete deposit and withdrawal transaction history.
• Website interaction data including pages visited and time spent.
• Communication logs with our customer support team.

C. Information from Third-Party Sources

• Identity verification data from approved eKYC service providers.
• Fraud prevention information from our payment security providers.
• Compliance data from recognised international blacklist databases.

Every piece of information we collect is used for a specific and legitimate purpose. mclub77 never uses your data beyond the scope stated in this policy without obtaining your consent first.

• Account Management: Creating, verifying and maintaining your member account, including identity and age verification through a rigorous KYC process.
• Transaction Processing: Processing your deposits, withdrawals and any financial transactions on our platform securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access and any activity that violates our terms of service.
• Customer Support: Providing effective support when you contact our team via live chat or email.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate assistance to members who need it.
• Legal Compliance: Meeting reporting obligations to the relevant authorities as required by applicable law.
• Service Improvement: Analysing aggregate and anonymised usage data to improve your gaming experience and our platform's features.
• Essential Communications: Sending account-related notifications, terms updates, security alerts and promotions you have opted in to receive.

Every personal data processing activity carried out by mclub77 has a solid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA). The following outlines the legal basis we rely on for each processing category:

• Contract Performance: Processing required to provide the services you registered for — including account management, transaction processing and access to games.
• Legal Obligation: Processing required to comply with KYC, AML (Anti-Money Laundering) and reporting obligations to authorities as mandated by Malaysian law.
• Legitimate Interest: Processing for fraud prevention, platform security and aggregate data analysis to improve our services — where our interests do not override your fundamental privacy rights.
• Consent: For optional marketing communications, non-essential cookies and data processing beyond the scope of the original contract — you may withdraw this consent at any time.

Mclub77 does not sell, rent or share your personal data to any third party for their own marketing or commercial purposes. However, there are limited situations where we need to share your information with certain parties in order to provide our services:

• Payment Providers: Transaction information required to process your deposits and withdrawals is shared with our payment providers such as FPX, Touch 'n Go, Boost, GrabPay and ShopeePay. These providers are bound by strict confidentiality agreements.
• Identity Verification Providers: KYC information is shared solely with approved and certified eKYC services for identity verification and fraud prevention purposes.
• Game Providers: Basic game session data is shared with third-party game providers only to the extent necessary to run the games and resolve any technical disputes.
• Authority: mclub77 will disclose required information to law enforcement authorities or regulatory bodies when mandated by a valid court order or applicable legal requirements.
• Professional Advisors: Lawyers, accountants or external auditors bound by strict professional confidentiality obligations.

Mclub77 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure core functions run smoothly and understand how users interact with our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate correctly.
• Performance Cookies: Collecting information on how you use our website — such as most visited pages and error messages received. All data is anonymised and used to improve the platform.
• Functional Cookies: Saving your preferences such as username, game preferences and display settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand aggregate usage patterns for product improvement purposes. This data is not linked to your personal identity.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect the functionality of the mclub77 platform and you may be unable to log in or use certain features properly.

The security of your personal data is mclub77's highest priority. We implement multiple layers of technical and organisational protection to keep your information safe from unauthorised access, disclosure, alteration or destruction.

• Encryption of Data in Transit: All communications between your device and mclub77 servers are secured by TLS 1.3 protocol with 256-bit SSL encryption — any data intercepted during transmission cannot be read by any party.
• Encryption of Data at Rest: Sensitive information such as passwords, KYC documents and financial details is stored in encrypted format using the latest industry-standard encryption algorithms.
• Two-Factor Authentication (2FA): An additional security layer is available for your account — we recommend all members activate this feature.
• Internal Access Controls: Access to members' personal data within mclub77 is restricted to staff who require it to perform their duties, following the principle of least privilege.
• Periodic Audits: Our security systems undergo regular audits and penetration testing by certified independent cybersecurity firms.
• 24/7 Monitoring: Our security team continuously monitors the platform to detect and respond to any security threats promptly.

Under Malaysia's PDPA and the mclub77 privacy policy, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights within a reasonable timeframe:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
• Right to Rectification: If your personal data is inaccurate or outdated, you have the right to request a correction. You may also update basic information through your account profile settings.
• Right to Erasure: You may request deletion of your personal data under certain conditions — for example, when the data is no longer needed for its original purpose or when you withdraw your consent. Please note that some data may need to be retained to fulfil legal obligations.
• Right to Restrict Processing: You may request that we stop processing your data for specific purposes, such as direct marketing, at any time.
• Right to Data Portability: You have the right to receive the personal data you provided to us in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data based on our legitimate interests in certain circumstances.

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We may need to verify your identity before processing your request to ensure data security.

Mclub77 retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by law. Retention periods vary depending on the type of data and applicable legal requirements.

• Identity and KYC data is retained for five years after account closure to fulfil AML and regulatory requirements.
• Financial transaction records are retained for seven years in accordance with Malaysia's accounting and tax legal requirements.
• Game history and platform activity are retained for three years for responsible gaming and dispute resolution purposes.
• Technical logs and IP data are retained for a rolling 12-month period before being automatically deleted.
• Customer support communication records are retained for two years after the resolution of the relevant issue.

Once the retention period expires, your data will be securely deleted or permanently anonymised so it can no longer be linked to you as an individual. Our deletion process follows internationally recognised data erasure standards.

Mclub77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or added platform features. We are committed to keeping you informed of any material changes.

If we make significant changes to how we process your personal data, we will provide clear notice via your registered email or an in-platform notification at least 14 days before the changes take effect — unless the changes are immediately required for security or legal reasons.

The "Last Updated" date at the top of this page always reflects the date of the most recent amendment. We recommend reviewing this page periodically. Continued use of the mclub77 platform after an amendment is published will be considered as your acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly within the mclub77 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for formal complaints or data subject rights requests, please state "Data Privacy Request" in your email subject line.

We aim to respond to all privacy-related enquiries within three business days. For more complex requests such as data portability or account deletion, processing may take up to 14 business days.