Privacy Policy kass77 – Member Personal Data Protection

Thank you for trusting kass77 as your preferred online entertainment platform. We understand that personal information is a highly valuable asset, and we are fully committed to ensuring your data is handled with care, security, and responsibility. This Privacy Policy applies to all members who register, browse, or use any services provided by kass77, including access via web browser, mobile app, and our customer support channels.

1Information We Collect

When you register and use the kass77 platform, we collect several categories of information to ensure our services run smoothly, securely, and in line with your needs. This data collection is solely for platform operation, legal compliance, and improving the user experience.

1.1 Information You Provide Directly

• Registration information: Full name, date of birth, email address, mobile number, and account password
• Identity information (KYC): A copy of your national identity card (MyKad), passport, or government-recognised identification document
• Financial information: Bank account number, e-wallet details (TnG, Boost, GrabPay) for deposit and withdrawal purposes
• Physical address: Required for full KYC verification compliance
• Support communications: Records of conversations with our customer support team

1.2 Information Collected Automatically

• Device data: Device type, operating system, phone model, screen size, and hardware information
• Browsing data: IP address, browser type, pages visited, session duration and referral links
• Game data: Wagering history, game types played, active session times, and usage patterns
• Location data: Country and region based on IP address for geo-compliance purposes
• Cookies and tracking technologies: Session cookies, preference cookies, and platform performance analytics

2How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. kass77 uses your personal data for the following purposes:

3Data Sharing with Third Parties

Kass77 takes a highly cautious approach to sharing personal data. We does not sell or rent your personal data to any third party. However, in certain limited situations, we may need to share information with the following parties:

• Trusted payment processors: Providers such as FPX, DuitNow, and e-wallet partners involved in processing your financial transactions. They receive only the information necessary to complete the relevant transaction.
• Technical service providers: Companies that help us manage our platform infrastructure, such as cloud services and IT support, are bound by strict confidentiality agreements.
• Regulatory bodies and legal authorities: When required by Malaysian law or a valid court order, we will disclose the necessary information to the relevant authorities.
• Anti-fraud service providers: To detect and prevent illegal activity, certain behavioural data may be shared with approved third-party fraud detection systems.

Every third party working with us is required to sign a data processing agreement that meets or exceeds our own data protection standards.

4Cookies and Tracking Technologies

Kass77 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Session Cookies: Required to maintain your login session and ensure the platform's core functions run smoothly. These cookies are automatically deleted when you close your browser.
• Preference Cookies: Saves your preferences such as language, theme, and display settings to streamline future sessions.
• Analytics Cookies: Helps us understand how members use the platform so we can continuously improve the overall user experience.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some sections of the kass77 platform.

5Data Security and Protective Measures

Kass77 continuously invests in security infrastructure to ensure your personal data remains protected at all times. The following are some of the security measures we practise:

• 256-bit SSL/TLS Encryption for all communications between your device and our servers
• Encryption of data at rest — sensitive data such as passwords is stored in encrypted form using secure hashing algorithms
• Two-Factor Authentication (2FA) available for all accounts as an added layer of security
• 24/7 Monitoring by our cybersecurity team to detect any unusual activity
• Regular security testing including penetration testing by certified independent parties
• Role-based access control ensuring only relevant personnel can access specific data

6Data Retention Period

Kass77 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for as long as your account is active and for up to 5 years after account closure for AML compliance purposes
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and financial legal requirements
• Support communication records: Retained for 3 years from the date of last interaction
• Security access logs: Retained for 12 months for investigation purposes if required
• Cookie data: Depends on the type of cookie; session cookies are deleted immediately, while preference cookies are retained for up to 12 months

7Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by kass77:

• Right of Access: You have the right to know what personal data we hold about you and how it is used
• Right to Rectification: You may request that we correct any data that is inaccurate or incomplete
• Right to Erasure: In certain circumstances, you may request that we delete your personal data ("right to be forgotten")
• Right to Restrict Processing: You may request that we temporarily suspend the processing of your data in certain situations
• Right to Withdraw Consent: For processing that relies on your consent (such as marketing), you may withdraw that consent at any time
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated

To exercise any of the above rights, please contact the kass77 privacy team through the available customer support channels. We will process your request within 14 business days and may request identity verification before processing any data deletion or access requests.

8International Data Transfers

In the course of platform operations, some of your personal data may be transferred to servers located outside Malaysia, particularly for cloud infrastructure support services. However, kass77 ensures that any such data transfer is carried out with adequate safeguards, including:

• Data transfer agreements compliant with data protection standards equivalent to Malaysia's PDPA
• Use of standard contractual clauses recognised for protecting data during transfers
• Selection of technical partners holding internationally recognised security certifications such as ISO 27001

9Children and Age Protection

The kass77 platform is exclusively for users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18. If we discover that a child's data has been inadvertently collected, we will promptly delete that data and close the associated account.

If you are a parent or guardian and believe your child under the age of 18 has registered on our platform, please contact us immediately and we will take action without delay.

10Changes to This Privacy Policy

Kass77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technological developments, or new legal requirements. Any significant changes will be communicated to members via:

• In-platform notifications while you are logged in
• Email notification to the address registered to your account
• Updates to the "Last Updated" date shown at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the platform after changes take effect constitutes your acceptance of the updated terms.

11Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by kass77, our privacy team is ready to assist you. You may refer to the FAQ for answers to frequently asked questions, or visit the Responsible Gaming for information on the self-exclusion controls we provide.

The kass77 customer support team operates 24 hours a day, 7 days a week, and is committed to addressing every privacy-related enquiry seriously and promptly.