Official Document

Privacy Policy m77 — Our Commitment to Protecting Your Personal Data

Your privacy is our priority. This document transparently explains how m77 collects, uses, stores, and protects the personal information of every member on our platform.

Last Updated: 1 January 2026  |  Effective in Malaysia

This Privacy Policy Protects YouBy using the m77 platform, you agree to how we handle your personal data as described in this document. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

1Introduction and Scope of This Policy

M77 ("we", "the platform" or "m77") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy applies to all registered members, website visitors, and anyone who interacts with the m77 platform through our official website, mobile app, or any of our official communication channels.

This document details the types of personal information we collect, the purposes of collection, parties who may have access to that information, data retention periods, and the rights you hold as a data subject under Malaysian law.

If you have any questions regarding this Privacy Policy, our data protection team is available via m77's official support channels, operating 24 hours a day, 7 days a week.

2Types of Personal Information We Collect

We only collect information that is genuinely necessary to provide you with high-quality service. Data collection occurs through three main methods: information you provide directly, information generated automatically, and information we receive from authorised third parties.

Data Category Examples of Information Collection Methods
Identity Data Full name, date of birth, MyKad or passport number Account registration, KYC process
Contact Data Email address, mobile phone number Registration, profile updates
Financial Data Bank account details, digital wallets, deposit and withdrawal records Payment processing, KYC verification
Technical Data IP address, device type, operating system, web browser Automatic logs, cookies
Gaming Data Betting history, wins, game session duration Automatic platform activity
Communication Data Support chat records, inbound/outbound emails Customer support interactions

We never collect sensitive information such as passwords in plain text, biometric data, or medical information. All passwords are stored in an irreversible hashed format.

3How We Use Your Information

Every piece of information we collect is used for legitimate and transparent purposes. We do not use your data for any purpose unrelated to the provision of m77's services without first obtaining your consent.

  • Account management: Create, verify, and maintain your member account, including mandatory KYC processes.
  • Transaction processing: Process deposits, withdrawals, and all financial transactions on the platform securely and accurately.
  • Platform Security: Detect and prevent fraud, money laundering, multi-account usage, and any activity that violates our terms of use.
  • Service communications: Send important notifications related to your account, transactions, security updates, and changes to our terms.
  • Targeted marketing: Send relevant promotional information and bonus offers — only if you have given consent to receive marketing communications.
  • Platform improvement: Analyse aggregate usage patterns to improve the performance, interface, and overall user experience of m77.
  • Legal compliance: Fulfil reporting and record-keeping obligations required by law and relevant regulatory authorities.

4Information Sharing and Disclosure

M77 does not sell, rent, or trade your personal information to any third party for their own commercial purposes. Your information is only shared in the following limited circumstances:

  • Payment service providers: Payment processors such as the FPX gateway, DuitNow, and digital wallets that require transaction data to process your deposits and withdrawals.
  • Technical service providers: Hosting companies, data analytics providers, and technology infrastructure partners that help us operate the platform — all bound by strict confidentiality agreements.
  • Legal authorities: Disclosure of information to authorities such as the police, courts, or regulatory bodies when required by court order or applicable law.
  • Fraud prevention: Sharing information with gambling industry security networks to identify and block fraudulent activity across platforms.

All third parties who receive your data must comply with the same strict data protection standards as m77's internal policies. We conduct regular compliance checks on all vendors and partners.

5Our Data Security Measures

M77 continuously invests in industry-grade cybersecurity infrastructure to ensure your personal data is always protected against unauthorized access, data breaches, and cyberattacks.

  • 256-bit SSL encryption: All data transmitted between your device and m77's servers is encrypted using the latest TLS 1.3 protocol — the same standard adopted by leading financial institutions.
  • Encrypted data storage: Sensitive information is stored in encrypted databases with multi-layer access controls, accessible only by authorised personnel.
  • 24/7 Monitoring: Automated intrusion detection systems monitor all platform activity around the clock and trigger immediate alerts whenever an anomaly is detected.
  • Periodic security audits: Penetration testing and independent security audits are conducted quarterly by certified third-party cybersecurity firms.
  • Internal access controls: The principle of least privilege is enforced — each m77 staff member can only access the data necessary to carry out their specific role.

6Cookies and Tracking Technologies

M77 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
  • Performance cookies: Collect information on how you use the platform to help us identify and resolve technical issues.
  • Functional cookies: Save your preferences such as language and display settings so you don't have to reconfigure them each time you log in.
  • Analytical cookies: Helps us understand aggregate usage patterns for product improvement — this data does not identify you individually.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the m77 platform.

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by m77:

You have the right to request a copy of all personal information we hold about you. Data access requests can be submitted via m77 live chat or support email. We will process your request within 21 business days as required by the PDPA.

If any of your personal information is inaccurate, incomplete, or outdated, you may request a correction through your account profile settings or by contacting customer support. Changes to your name or identity information may require supporting documents for verification purposes.

You may withdraw consent to receive marketing communications at any time via the unsubscribe link in our promotional emails or through the notification settings in your account. Withdrawing marketing consent does not affect data processing required for your account operations.

You may request deletion of your personal data upon account closure. However, certain data may need to be retained for a specified period to fulfil legal obligations, including anti-money laundering (AML) requirements and tax reporting as mandated by Malaysian authorities.

8Data Retention Period

M77 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law.

  • Active account data: Retained for the duration your account is active plus 7 years after account closure to meet AML requirements.
  • Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's Income Tax Act and Anti-Money Laundering Act requirements.
  • Communication logs: Customer support chat records are retained for 3 years for reference and dispute resolution purposes.
  • Technical log data: Server logs and IP data are retained for 90 days for security and incident investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

9Changes to This Privacy Policy

M77 reserves the right to update or amend this Privacy Policy from time to time in line with legislative changes, industry best practices, or changes in how we handle data. All updates will be published on this page with a clear revision date.

For amendments that materially affect how we handle your data, we will send a notification to the email registered with your account at least 14 days before the changes take effect. Continued use of the m77 platform after the effective date constitutes your acceptance of the updated policy.

10Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how m77 handles your personal data, or if you wish to exercise any of the rights stated in this policy, please contact our team:

  • Live Chat: Available 24/7 via the chat icon at the bottom corner of the m77 platform
  • Support Email: [email protected] (response within 1 business day)
  • Official Channels: Via the "Contact Us" section in your account settings

We are committed to resolving all privacy-related enquiries within 5 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Data Protection Commitment

Six Ways m77 Safeguards Your Privacy and Data Security

A Privacy Policy is more than just a document — it is our promise to every member that your data is always in responsible hands.

Bank-Grade Encryption

All data transmitted between your device and m77's servers is protected with 256-bit SSL encryption using TLS 1.3 protocol — the same standard used by major banking institutions in Malaysia to secure financial transactions.

Strict Access Control

Only specifically authorised personnel may access members' personal data, and only for purposes related to their role. All access is automatically logged and audited to ensure no internal misuse occurs.

Malaysia PDPA Compliance

M77 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal Data Protection Officer (DPO) responsible for ensuring all our data handling practices remain compliant with the latest legislation.

Independent Security Audit

Every quarter, m77 engages certified independent cybersecurity firms to perform penetration testing and comprehensive security reviews across our entire platform infrastructure. Audit reports are retained and followed up systematically.

Account Activity Notifications

You will receive instant notifications via email or SMS whenever a login occurs from a new device, a password change is made, or a suspicious access attempt is detected. This allows you to respond quickly should your account be compromised.

You Control Your Data

Through your m77 account settings, you can manage communication preferences, review the data we hold, or request data deletion at any time. You're in control — we only retain what you permit and what is required by law.

A Secure and Trusted Platform

Play with Peace of Mind at m77 — Your Data Is Always Protected

Your security and privacy are the foundation of the trust we build with every m77 member. Register today and experience the difference of a platform that truly puts you first.

256-bit SSL PDPA Compliance No Data Sharing 24/7 Support
Bahasa Melayu