Privacy Policy Para77 – Malaysia Player Data Protection

1 Introduction & Scope of Para77's Privacy Policy

Para77 ("we", "platform", "company") is fully committed to protecting and respecting the privacy of every player who uses our platform. This Para77 Privacy Policy is designed to explain transparently and clearly how we handle your personal data, why we need it, how long we retain it, and what rights you have in relation to that data.

This document applies to all users of the Para77 platform, including the para77.biz website, the Para77 mobile app (if available), and all Sports Betting, slots, lottery, Live Casino, e-sports, virtual sports, Roulette, and Live Match games and services offered by Para77.

Para77 operates as a data controller under the Malaysian Personal Data Protection Act 2010 and is fully responsible for processing your personal data in accordance with the principles set out in that Act.

By registering an account on Para77, using any of our services, or browsing para77.biz, you confirm that you have read, understood, and fully accepted this Para77 Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of the Para77 platform.

2 Personal Data We Collect

Para77 collects only the data strictly necessary to provide a secure, compliant, and high-quality service. The categories of data we collect are as follows:

Para77 not collect sensitive information such as biometric data, medical records, religious beliefs, or political views. Should you voluntarily disclose such information (for example, during a customer support interaction), it will not be stored in your main profile and will be disposed of once the immediate need has been addressed.

3 How Data Is Collected

Para77 collects your personal data through the following means:

• Account registration: When you register a Para77 account, you provide basic information directly, such as your name, email address, and phone number.
• Identity verification (KYC): When you upload verification documents such as your MyKad or passport for the KYC process.
• Financial transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, your transaction details are recorded automatically.
• Platform usage: Every bet placed, game played, and session conducted on Para77 is recorded for security, legal compliance, and service improvement purposes.
• Cookies and tracking technologies: Cookie technology and server logs are used to automatically collect technical data as you browse the Para77 platform.
• Communications with us: When you contact Para77 customer support via live chat, email, or phone.
• Third-party sources: In certain cases, we may receive information from payment providers (such as transaction status notifications) or identity verification agencies.

4 Purpose of Personal Data Use

Para77 uses your personal data only for legitimate and transparent purposes, namely:

• Account management: To create, manage, and maintain your Para77 account securely.
• Service delivery: Enabling you to access and enjoy all games and betting services on Para77, including Sports Betting, slots, lottery, Live Casino, and e-sports.
• Transaction processing: Processing deposits and withdrawals in MYR via your chosen payment method.
• Identity verification: To verify that you meet our eligibility requirements (aged 18 and above) and to prevent fraud, money laundering, and terrorism financing.
• Customer support: Processing your enquiries, complaints, and support requests efficiently and effectively.
• Platform security: Detecting and preventing fraud, bot activity, duplicate accounts, and other prohibited activities.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance.
• Legal compliance: To fulfil reporting and compliance obligations under the PDPA, anti-money laundering laws, and other applicable regulations in Malaysia.
• Marketing (with consent): Sending you promotional information, bonuses, and Para77 offers where you have given consent. You may unsubscribe at any time.
• Analytics and improvements: Understanding how the Para77 platform is used in order to improve the player experience, interface, and technical performance.

5 Sharing of Data with Third Parties

Para77 does not sell your personal data to any third party. However, under limited and controlled circumstances, your data may be shared with the following parties:

• Payment service providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks) – to process your financial transactions. These providers maintain their own privacy policies, and Para77 ensures they adhere to equivalent data protection standards.
• Game software providers: Casino and slot game platform providers that partner with Para77 solely for the technical operation of games.
• Identity verification agencies: For KYC (Know Your Customer) requirements and identity document verification.
• Malaysian government authorities: When required by law, court order, or direction from a legitimate law enforcement authority in Malaysia.
• Professional advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations, when required for legal or financial matters.

6 Data Storage & Security Measures

Para77 takes data security extremely seriously. The following technical and organisational measures are in place to protect your personal data:

• 256-bit SSL encryption: All data communications between you and Para77's servers are encrypted using the latest TLS/SSL protocols.
• Password hashing: Your account password is stored in hashed form and cannot be read by anyone, including Para77 staff.
• Access controls: Only Para77 staff with a legitimate business need are permitted to access your personal data, and all access is logged and audited.
• Intrusion detection system: Para77 operates a 24/7 monitoring system to detect and respond to any unauthorised access attempts.
• Secure data backups: Your data is regularly backed up to separate servers to ensure service continuity and recovery in the event of an incident.

Data Retention Period: Para77 retains your personal data for as long as your account remains active. Following account closure, core data is retained for seven (7) years to meet anti-money laundering legal requirements and financial reporting obligations. Marketing and technical data that is no longer required is deleted within a shorter timeframe.

7 Para77 Cookie Policy

Para77 uses cookies and similar tracking technologies to enhance your experience. Below are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of some Para77 platform features. Para77 not uses third-party cookies for external advertising purposes.

8 Your Rights Under the PDPA

As a data subject under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding the personal data Para77 holds about you:

To exercise any of the above rights, please contact Para77's Data Protection Officer at privacy@para77.biz, stating the type of request and your account details. Para77 will respond within 30 days from the date the request is received.

9 Child Data Protection

The Para77 platform is NO appropriate for or intended for individuals under the age of 18. Para77 does not knowingly collect or process the personal data of minors.

10 Cross-Border Data Transfers

In the course of its operations, Para77 may need to transfer your personal data to servers or service providers located outside Malaysia. Any such cross-border data transfer will only take place where:

• The recipient country provides a level of data protection equivalent to or higher than that of Malaysia.
• A satisfactory data processing agreement has been established with the recipient.
• The transfer is necessary for the performance of Para77's service contract or compliance with applicable law.

Para77 ensures that all cross-border data transfers comply with the provisions of the Malaysian Personal Data Protection Act 2010 and do not expose your data to unreasonable risk.

11 Payment Methods & Financial Data

Para77 pays particular attention to the security of your financial data. When you make deposits or withdrawals using Malaysian local payment methods, the following information is relevant:

• Your bank account number, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow details are not stored directly in Para77's primary database. This information is managed through encrypted tokens by authorised payment providers.
• Para77 does not have access to your e-wallet or banking account passwords or PINs.
• All FPX transactions (Maybank2u, CIMB Clicks) are processed directly by the respective banks; Para77 receives only the transaction status confirmation.
• Your financial transaction history at Para77 (deposits and withdrawals) is retained for seven (7) years to comply with Malaysia's financial and tax regulatory requirements.

12 Changes to This Privacy Policy

Para77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or improvements to the way we protect your data.

• You will be notified of any material changes via your registered email or an in-platform Para77 notification at least 14 days before the changes take effect.
• The "Updated" date at the top of this document will always reflect the date of the most recent revision.
• Your continued use of the Para77 platform after any changes take effect will be considered acceptance of the revised policy.
• You are encouraged to review Para77's Privacy Policy page periodically.

13 Contact Para77's Data Protection Officer

If you have any questions, concerns, or complaints regarding Para77's Privacy Policy or the handling of your personal data, we encourage you to contact us:

• Privacy Email: privacy@para77.biz
• General Support Email: support@para77.biz
• Live Chat: Available 24/7 on the Para77 platform
• Response Time: Within 30 business days for privacy-related complaints

If you are dissatisfied with Para77's response to your privacy complaint, you have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner (PDPC) through the official channels designated by that authority.