M77 takes your privacy seriously. This document clearly explains how we collect, use, store, and protect your personal information in accordance with the highest standards of digital security.
Six core pillars that shape how m77 approaches the protection of your personal data every day.
All data transmitted between your device and m77's servers is protected by 256-bit SSL encryption. This means sensitive information such as your password, bank account number, and personal details cannot be accessed by unauthorized parties.
The m77 privacy policy is built entirely in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all data protection principles set out under Malaysian law to ensure your rights are always upheld.
M77 has never and will never sell, rent, or share your personal data with any third party for marketing purposes. Your data belongs to you — we use it only to improve your experience on our platform.
We believe you have the right to know exactly how your data is used. This privacy policy is written in plain, easy-to-understand language — not confusing legal jargon. There are no hidden clauses in this document.
Your bank account details and financial transactions are stored in an isolated environment protected by multi-layered access controls. No m77 staff member can view your full bank account number in our system.
You have the right to request access, correction, or deletion of your personal data at any time. The process is straightforward and can be initiated directly through the m77 support team, which operates 24 hours a day, 7 days a week.
M77 (hereinafter referred to as "we", "our platform", or "m77") operates as a trusted online gaming platform in Malaysia. We understand that privacy is more than a legal obligation — it is the foundation of the trust you place in us every time you use this platform.
This Privacy Policy details the types of personal information we collect, why we need it, how long we retain it, how we protect it, and the rights you hold in relation to that information. It applies to all users of the m77 platform, including website visitors, registered members, and any party that interacts with our services.
By using the m77 platform, registering an account, or carrying out any transaction through our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, we recommend that you refrain from using our platform and contact us for further clarification before making a decision.
This Privacy Policy is to be read alongside the m77 Terms and Conditions and our Responsible Gaming Policy. Together, these three documents form the complete agreement between you and m77 regarding your use of our platform.
We only collect information that is strictly necessary to provide, maintain, and improve m77 services. There is no excessive or irrelevant data collection in our systems.
When you register an account or use our platform, you voluntarily provide information such as:
When you use the m77 platform, our systems automatically record certain technical information to ensure platform security and performance:
| Type of Information | Purpose of Collection |
|---|---|
| IP address and general location | Fraud detection and account security |
| Device type and operating system | User experience optimisation |
| Web browser type and version | Platform compatibility and debugging |
| Login history and session duration | Account security and unusual activity monitoring |
| Transaction records and wagering history | Legal compliance and customer support |
| Cookie data and website preferences | Personalised user experience |
In certain situations, we may receive information about you from legitimate sources such as identity verification service providers (for KYC purposes), registered payment providers, and relevant regulatory bodies. All such information is processed in accordance with this privacy policy.
M77 uses your personal information solely for lawful, stated purposes. We do not process your data for any other purpose unrelated to the operation of our platform or your rights as a member.
m77 does not use your data to make automated decisions that affect your rights without human involvement. Any decisions relating to your account involve review by our team.
M77 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This ensures that every instance of data processing has a solid and accountable justification.
For optional marketing and promotional communications, we rely on your explicit consent. You may withdraw this consent at any time without affecting your access to the core features of our platform.
Most of our data processing is necessary to fulfil the agreement between you and m77 — including providing access to games, processing financial transactions, and managing your account.
Certain data processing is mandatory under Malaysian law, including KYC/AML (Anti-Money Laundering) requirements and reporting obligations to regulatory bodies.
For platform security, fraud prevention, and internal performance analysis purposes, we rely on the legitimate interests of the company, provided those interests do not override your fundamental right to privacy.
M77 does not sell, rent, or disclose your personal data to third parties for commercial purposes without your consent. However, there are limited situations where data sharing is necessary and lawful:
M77 works with selected third-party service providers to support our platform operations. Each provider is bound by strict data confidentiality agreements and is only permitted to use your data for purposes specified by m77:
M77 may be required to disclose your information to the authorities if mandated by Malaysian law, a valid court order, or as part of cooperation with law enforcement agencies investigating suspected illegal activity.
If any transfer of your personal data occurs outside Malaysia, we ensure the receiving jurisdiction maintains an equivalent or higher level of data protection. Such transfers are only carried out when necessary and with appropriate contractual safeguards in place.
Protecting your personal data is a core technical and operational priority at m77. We continuously invest in security infrastructure to ensure your information is safeguarded to the latest industry standards.
While no security system can guarantee 100% protection, m77 takes all reasonable and practical steps to safeguard your data. In the event of any material security incident, we will notify you within the timeframe required by applicable law.
M77 retains your personal data only for as long as it is needed for the original purpose of collection, or as required by Malaysian law. Once the retention period has ended and there are no legal obligations preventing deletion, your data will be securely deleted or anonymized.
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account records | Throughout the active account period | Service operations |
| Financial transaction records | 7 years after transaction | Legal Requirements (PDPA, AML) |
| KYC Documents | 5 years after account closure | Regulatory compliance obligations |
| Support communication logs | 3 years | Dispute resolution |
| Non-essential cookie data | 13 months or until deleted | User preferences |
| Security log records | 12 rolling months | Security incident investigation |
Once the retention period ends, data is deleted using secure deletion methods that ensure it cannot be recovered. For data that cannot be fully deleted due to technical requirements of legacy systems, it will be anonymised so it can no longer be linked to your identity.
M77 uses cookies and similar tracking technologies to keep the platform functioning properly and to provide you with a better experience. Cookies are small text files stored on your device when you visit our website.
You can manage or delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the m77 platform. Third-party analytics cookies use data in aggregated and anonymised form only.
As an m77 user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) and our privacy policy. We are committed to facilitating the exercise of these rights promptly and without unnecessary disruption.
You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request.
If any information we hold about you is inaccurate or out of date, you have the right to request a correction. We will update our records within 7 business days.
You may request the deletion of your personal data, subject to legal obligations that require us to retain certain records for a specified period.
You may object to the processing of your data for direct marketing purposes at any time. We will stop such processing immediately.
You have the right to receive your personal data in a structured, machine-readable format and transfer it to another relevant service provider.
In certain circumstances, you may request that we restrict the processing of your data while your correction or objection request is under review.
To exercise any of the above rights, contact our data protection team via 24/7 live chat or support email. We may need to verify your identity before processing your request in order to protect the security of your account.
The m77 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.
If we discover or are informed that we have collected data from a minor, we will take immediate action to delete that information and close the associated account. Parents or guardians who suspect their child is using the platform are encouraged to contact us right away.
M77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any material changes will be communicated to you via:
The "Last Updated" date displayed at the top of this page indicates when this document was last reviewed. Your continued use of the m77 platform after any changes take effect constitutes acceptance of the latest version of this policy. If you do not agree with any changes, you have the right to close your account before the effective date of those changes.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by m77, please contact our team through the following channels:
The fastest way to get help. Click the chat icon at the bottom of the platform to connect directly with our team.
For more detailed written enquiries, contact us at:
[email protected]
Live chat: instant
Email: within 24 business hours
Official data requests: within 21 days
We are committed to handling all privacy-related enquiries and complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.