Pop77 Privacy Policy – Malaysia Member Personal Data Protection

1Introduction

Welcome to the pop77 Privacy Policy. This document is an agreement between you as a member ("you" or "user") and pop77 ("we", "Platform") regarding how we handle your personal information when you use our online casino platform at pop77.vu.

Pop77 operates with full commitment to transparency and accountability in the handling of personal data. We adhere to internationally recognised data protection principles, including data minimisation, clear purpose, secure storage, and the right of users to control their own information.

By registering for or using pop77 services, you agree that your personal information will be processed in accordance with the terms set out in this Privacy Policy. Please read this document carefully and contact our support team if you have any questions.

2Information We Collect

Pop77 only collects information necessary to provide a safe, seamless, and responsible service to our members. The following are the categories of information we collect:

A. Information You Provide Directly

• Identity Information: Full name, date of birth, identity card or passport number (for the KYC process).
• Contact Information: Email address, phone number and residential address.
• Financial Information: Bank account number, e-wallet details, and transaction history on our platform.
• Verification Documents: Copies of your ID card, passport, utility bill, or other documents required for the identity verification process.
• Account Information: Username, password (stored in hashed form), and account preferences.

B. Automatically Collected Information

• Technical Data: IP address, device type, operating system, browser type and screen resolution.
• Usage Data: Pages visited, session duration, games played and wagering habits.
• Cookie Data: Session information, language preferences, and display settings stored via cookies.
• Location Data: General location information based on IP address for compliance and security purposes.

3How We Use Your Data

The information we collect is used for clear and lawful purposes. pop77 does not use your data for any purpose beyond the scope stated below:

Pop77 will not use your personal data for any other purpose without informing you first and, where required, obtaining your renewed consent.

4Data Storage & Security

The security of your personal data is pop77's top priority. We implement multiple layers of technical and organisational protection to keep your information safe from unauthorised access, disclosure, or modification.

• 256-bit SSL Encryption: All data transmitted between your device and pop77's servers is protected by 256-bit SSL encryption — the same standard used by leading banks worldwide.
• Secure Password Storage: Member passwords are never stored in plain text. We use a robust hashing algorithm with a unique salt for each account.
• Access Control: Only staff with a legitimate business need who have undergone strict background checks are permitted to access member personal data.
• Continuous Monitoring: Our systems are monitored 24 hours a day, 7 days a week to detect any suspicious activity or intrusion attempts.
• Secure Backup: Data is regularly backed up to secure, encrypted server locations to ensure service continuity.
• Security Audits: pop77 conducts regular independent security audits to identify and address any system vulnerabilities.

5Information Sharing

Pop77 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes without your consent. However, in certain situations, your information may be shared with the following parties:

• Payment Service Providers: To process deposits and withdrawals, required transaction information is shared with verified payment gateway providers under strict confidentiality agreements.
• Game Providers: Third-party game operators may receive session data required to run the games. This data is kept to a minimum and is protected by contractual agreements.
• Relevant Authorities: pop77 will comply with any lawful request from law enforcement authorities or regulatory bodies with valid jurisdiction.
• Analytics Partners: Anonymised usage data may be shared with analytics services to help us understand and improve the user experience.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to a new entity subject to equivalent privacy protections.

In all data sharing instances, pop77 ensures that data recipients are bound by confidentiality and data protection obligations equal to or greater than our own standards.

6Cookies & Tracking Technologies

Pop77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled.
• Preference Cookies: Saves your preferred settings such as language, display theme, and account configuration so you don't have to repeat them every time.
• Analytics Cookies: Helps us understand which pages are most frequently visited, average session duration, and user navigation flow for platform improvement purposes.
• Marketing Cookies: Used to display relevant offers and promotions based on your activity and preferences on the platform. You may withdraw your consent at any time through your account settings.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the full functionality of the pop77 platform.

7Your Privacy Rights

As a pop77 member, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact the pop77 privacy team via email at [email protected]. We will process your request within 30 calendar days from the date of receipt. For complex cases, this period may be extended by up to 60 days with prior notice to you.

8Children's Data

Pop77 is an adult entertainment platform restricted to individuals aged 18 years and above only. We do not knowingly collect any personal information from individuals under 18 years of age.

Should we discover that personal information from an underage individual has been inadvertently collected, we will take immediate action to delete that information and close the relevant account. Any deposits made through such an account will be refunded to the original payment method.

Parents and guardians who suspect their child has registered for or used the pop77 platform are asked to contact our support team immediately for prompt account closure action.

9Cross-Border Data Transfers

To deliver a smooth and secure service, your personal data may be processed or stored on servers located outside Malaysia. In all such cases, pop77 ensures that:

• Data transfers are only made to countries or entities that provide an equivalent or higher level of data protection.
• Legally binding data processing agreements have been signed with all overseas data recipients.
• Additional safeguards are applied for transfers to countries considered to have a lower level of data protection.

Pop77 takes full responsibility for the security of your data even when cross-border transfers occur.

10Data Retention Period

Pop77 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for AML compliance and financial record purposes.
• Transaction Records: Retained for a minimum of 7 years in line with financial reporting legal requirements.
• KYC Documents: Retained for 5 years after the business relationship with the member ends, or longer if required by law.
• Anonymous Analytics Data: Can be retained indefinitely as it contains no personally identifiable information.
• Security Logs: Retained for 12 months for security incident investigation purposes.

When personal data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise the information.

11Third-Party Links

The pop77 platform may contain links or integrations with third-party services such as game providers and payment processors. This Privacy Policy applies solely to the pop77 platform and does not cover the privacy practices of those third-party services.

Pop77 is not responsible for the privacy policies or data handling practices of any third party. We recommend that you review the privacy policy of each third-party service you use separately. However, all third-party partners integrated with the pop77 platform have undergone security assessments and comply with the standards we set.

12Privacy Policy Amendments

Pop77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. All changes will be posted on this page with a clear effective date.

For amendments involving material changes to how we process your personal data, pop77 will notify you via in-platform notification or email to your registered address at least 14 days before changes take effect. Continued use of the platform after the amendment's effective date constitutes your acceptance of the revised policy.