Data Protection

R77 Privacy Policy — Malaysia Player Personal Data Protection

R77 takes your privacy very seriously. This document clearly outlines how we collect, store, use, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026 PDPA Malaysia Compliant 256-bit SSL

R77's Privacy Commitment to You

Six core principles that guide how we handle every player's personal data

Full 256-bit SSL Protection

All data transmitted between your device and r77's servers is protected by 256-bit SSL encryption — the same level of security used by major banks in Malaysia. No sensitive data travels in plain text.

Data is Not Sold to Third Parties

R77 does not sell, rent, or disclose your personal information to any third party for marketing purposes. Your data belongs to you, and we respect that privacy fully.

Malaysia PDPA Compliance

The entire data management policy of r77 is designed and implemented in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), giving you clear legal rights over your personal data.

Right to Data Erasure

You have the right to request r77 to delete your personal data. Once your account is closed and all legal obligations are fulfilled, your data will be removed from our systems in accordance with established procedures.

Strict Access Controls

Only authorised r77 staff with a legitimate business need may access player personal data. All access is logged and automatically monitored by our internal security systems.

Data Breach Notification

In the event of any security incident involving your personal data, r77 will notify you within the timeframe required under the applicable Malaysia PDPA regulations.


This document describes the privacy policy applicable to all users of the r77 platform, including the r77.bz website and the r77 mobile app. By using our platform, you agree to the collection and use of information as described in this policy.

1. Introduction

R77 ("we", "the platform", or "r77") is committed to protecting the privacy of all users on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the services we offer.

We handle your personal data in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and recognised international security standards. Our goal is to ensure your information remains secure at all times, used only for legitimate purposes, and never misused.

If you have any questions regarding this policy, the r77 customer support team is always ready to assist. Contact details can be found in the final section of this document.

2. Types of Personal Data We Collect

R77 collects several categories of personal data depending on the nature of your interaction with our platform. Below is a summary of the data collected:

Data Categories Sample Information Mandatory / Optional
Personal Identity Full name, date of birth, ID card number, KYC selfie photo Required for verification
Contact Information Email address, phone number, residential address Required for registration
Financial Data Payment methods, bank name, deposit and withdrawal transaction history Required for transactions
Technical Data IP address, device type, web browser, operating system, access logs Automatically collected
Activity Data Game history, betting types, session duration, game preferences Automatically collected
Communication Data Customer support chat records, feedback and complaints Where applicable

We only collect data that is strictly necessary to provide our services. We do not collect sensitive data such as medical information, political views, or religious beliefs.

3. How We Collect Data

Your personal data is collected through several channels depending on how you interact with the r77 platform:

3.1 Directly from You

  • During the account registration process — name, email, phone number and password.
  • During the identity verification (KYC) process — a copy of your ID card and a photo of yourself.
  • When making a deposit or withdrawal — bank account or eWallet details.
  • When contacting customer support — conversation records and reported issues.

3.2 Automatically

  • Technical data such as IP address, device type, and browser information is collected automatically via cookies and server logging technologies.
  • Gaming activity data such as wagers placed, games played, and session duration are collected through our platform systems.
  • General location data (not precise GPS location) is used for regional verification and account security.

3.3 From Third Parties

  • Payment service providers may share transaction verification information required to process deposits and withdrawals.
  • Third-party identity verification agencies may provide information for KYC and fraud prevention purposes.

4. Purpose of Personal Data Use

R77 uses your personal data only for legitimate purposes directly related to the provision of our platform services:

  • Account management — Creating, verifying, and maintaining your user account.
  • Transaction processing — Processing deposits, withdrawals, and all other financial transactions.
  • KYC & AML Compliance — Meeting legal requirements related to identity verification and anti-money laundering.
  • Platform Security — Detecting and preventing fraud, unauthorized access, and suspicious activity.
  • Customer support — Resolving inquiries, complaints, and technical support requests.
  • Product improvement — Analyzing usage patterns to improve the overall user experience.
  • Service communications — Sending important notifications related to your account, security, and policy updates.
  • Responsible gaming — Monitoring gameplay activity to identify players who may need assistance.
r77 does not use your personal data to make automated decisions that materially affect you without human review. All significant decisions, such as account closures or withdrawal rejections, are subject to manual review by our team.

5. Sharing Data with Other Parties

R77 limits the sharing of your personal data with third parties. Your data is not sold and not shared for third-party marketing purposes. We only share data in the following limited situations:

  • Payment service providers — Minimum transaction data required to process deposits and withdrawals through appointed payment gateways.
  • Technology service providers — Cloud infrastructure providers, transactional email services, and analytics tools that help us operate the platform — all bound by strict confidentiality agreements.
  • Regulatory authorities and law enforcement agencies — Only when required by Malaysian law, court order, or a valid request from a law enforcement agency.
  • Third-party KYC and AML providers — Identity verification information required to comply with legal compliance obligations.

All third parties that receive your personal data are required to uphold the same high security and confidentiality standards as r77 itself. We periodically review data-sharing agreements to ensure ongoing compliance.

6. Data Storage & Retention Period

Your personal data is stored on secure servers with restricted access and continuous monitoring. r77 practices a data minimisation principle — we only retain data for as long as necessary for the stated purpose or as required by law.

  • Active account data — Retained for the duration your account remains active, plus any additional period required by law.
  • Financial transaction records — Retained for a minimum of seven (7) years in accordance with Malaysia's financial legal requirements.
  • KYC records — Retained for the period specified by applicable AML/KYC compliance requirements.
  • Technical and security logs — Retained for 90 to 365 days depending on the log category.
  • Customer support records — Retained for two (2) years from the date the case is resolved.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

7. Cookies & Tracking Technologies

The r77 platform uses cookies and similar technologies to enhance user experience and ensure the platform functions correctly. The following are the types of cookies we use:

  • Essential Cookies — Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
  • Functional Cookies — Remembering your preferences such as language, display settings, and game preferences to improve ease of use.
  • Analytics Cookies — Helps us understand how players use the platform so we can make relevant improvements. Analytics data is collected anonymously.
  • Security Cookies — Detecting suspicious login activity and helping protect your account from unauthorized access.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the r77 platform and your overall user experience.

8. Your Rights Under PDPA

As a user of the r77 platform and a data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request that we correct inaccurate or outdated personal data.

Right to Erasure

Request that we delete your personal data, subject to legal obligations.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Portability

Request your data in a machine-readable format for portability.

Right to Restriction

Request that we restrict the processing of your data under certain circumstances.

To exercise any of the above rights, contact the r77 privacy team through customer support. We will process your request within 30 working days as required by PDPA. In some cases, we may need to verify your identity before processing the request.

9. Protection of Children's Data

The r77 platform is a service intended exclusively for individuals aged 18 years and above only. We do not knowingly collect any personal data from individuals under the age of 18.

If we find that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child has registered on our platform are encouraged to contact r77 customer support immediately.

10. Changes to This Privacy Policy

R77 reserves the right to amend this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any material changes will be communicated to you via your registered email or in-account notification at least 14 days before taking effect.

We encourage you to review this Privacy Policy page periodically to stay informed about how we handle your personal data. The "Updated" date at the top of this page indicates when this policy was last revised.

11. Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the r77 Data Protection Officer (DPO) team can be reached through the following channels:

  • Support email: [email protected] (include "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24/7 on the r77 platform
  • Response time: Within 5 business days for general enquiries; 30 days for formal data rights requests

You also have the right to lodge a complaint with the Malaysia Personal Data Protection Department if you believe your privacy rights have been violated and the matter cannot be resolved directly with r77.

This Privacy Policy was established on 1 January 2026. This version supersedes all previous versions. To obtain a previous version, please contact our support team.


Your Data is Safe with Us
Play with Peace of Mind — Your Privacy is Protected at r77

Create a free account today and enjoy a safe, fair, and transparent betting experience. Your personal data is always in the best of hands with r77.

Bahasa Melayu