Privacy Policy K77 — Your Personal Data Protection

K77 is a trusted online entertainment platform enjoyed by many players across Malaysia. We understand that your trust is our most valuable asset, and that trust begins with transparency in how we handle your personal data.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices for user privacy protection. We are committed to ensuring that every piece of information you share with us is handled with full responsibility, transparency, and the highest level of security.

We encourage you to read this Privacy Policy carefully. If any section is unclear or you have any questions, do not hesitate to contact our support team, who are ready to assist at any time.

K77 collects your personal information through several means to ensure we can deliver the best, most secure, and legally compliant service. The types of information we collect are as follows:

K77 does not collect any information that is irrelevant or beyond what is necessary for the specified purposes. We only process data that is genuinely required to deliver a safe, trustworthy, and legally compliant service.

The personal data we collect is used responsibly and solely for the following purposes:

• Account Management: To create, verify, and manage your k77 account, including the registration process, login, and identity verification (KYC).
• Transaction Processing: To securely and efficiently process deposits, withdrawals, and any other financial transactions made through the k77 platform.
• Security & Fraud Prevention: To monitor account activity in order to detect and prevent fraud, money laundering, and any other suspicious activity.
• Legal Compliance: To fulfill the legal and regulatory obligations imposed on k77, including AML (Anti-Money Laundering) and KYC requirements.
• Service Communications: To send important account notifications, security updates, and transaction information via email or SMS.
• Platform Improvements: To analyze aggregated usage patterns in order to improve the user experience, platform stability, and the development of new features.
• Customer Support: To provide accurate and effective assistance when you contact the k77 support team.
• Promotions & Offers: To send information about promotions, bonuses, and exclusive offers — only if you have opted in to receive marketing communications from us.

K77 will not use your data for any purpose not stated in this policy without first obtaining your consent.

K77 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where k77 may need to share your information with certain parties, namely:

• Payment Providers: Required financial information will be shared with approved payment providers such as banks, digital wallet providers (Touch 'n Go, GrabPay, ShopeePay), and FPX payment processors to enable transactions to be processed securely.
• Game Providers: Limited game data may be shared with third-party game software providers solely to enable a smooth and fair gaming experience.
• Legal Authority: K77 will disclose required information to law enforcement authorities, regulatory bodies, or courts when mandated by law or a valid court order.
• Security Services: Technical information such as IP addresses may be shared with cybersecurity service providers we use to detect and prevent security threats.
• Professional Advisors: In certain circumstances, information may be shared with legal advisors, accountants, or auditors bound by professional confidentiality obligations.

K77 invests seriously in data security infrastructure to ensure your personal information remains protected at all times. The key security measures we practise are:

• Data-in-Transit Encryption: All communications between your device and k77 servers use TLS 1.3 protocol with AES-256-bit encryption, ensuring no data can be intercepted during transmission.
• Data-at-Rest Encryption: Sensitive data such as passwords and financial information is stored in encrypted form using robust encryption algorithms, never in plain text.
• Two-Factor Authentication (2FA): k77 supports and encourages users to enable two-factor authentication to add an extra layer of protection to their accounts.
• Real-Time Monitoring: Our systems monitor account activity and transactions continuously, 24 hours a day, 7 days a week, to detect any anomalies or suspicious activity.
• Internal Access Controls: Access to user data within K77's internal systems is restricted to authorised personnel only, based on the principle of least privilege.
• Regular Security Assessments: k77 conducts regular penetration testing and security audits to identify and address any system vulnerabilities.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage users to also take personal security measures, such as using a strong password and not sharing login credentials with anyone.

K77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login, session management, and security. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to collect aggregated and anonymised information about how users interact with our platform, helping us identify areas for improvement.
• Functional Cookies: Allows the platform to remember your preferences such as language and display settings to deliver a more personalized experience.
• Analytics Cookies: Helps us understand overall platform usage patterns through analytics tools for continuous improvement purposes.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect some functions of the K77 platform.

As a k77 platform user, you have the following rights regarding your personal data in accordance with Malaysia's Personal Data Protection Act 2010:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 30 working days.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure: You may request deletion of your personal data under certain circumstances, subject to K77's legal obligations to retain specific records.
• Right to Restrict Processing: You may request that we restrict how we process your data under certain circumstances as provided by law.
• Right to Withdraw Consent: For data processing based on your consent (such as receiving marketing emails), you may withdraw that consent at any time.
• Right to Complain: If you believe your privacy rights have been violated, you have the right to lodge a complaint with the relevant data protection authority.

K77 retains your personal data only for as long as necessary for the specified purposes, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active and within the duration of your service relationship with k77.
• Financial Transaction Records: Minimum 7 years after the transaction date, in line with Malaysia's accounting and AML legal requirements.
• KYC Documents: Minimum 5 years after the verification or account closure date, whichever is later, in accordance with legal compliance requirements.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Support Communication Data: Customer support interaction records are retained for 2 years for reference and service improvement purposes.

Once the specified retention period has ended and there is no legal requirement to retain the data, k77 will securely delete or anonymize your personal data in accordance with approved data disposal procedures.

The k77 platform may contain links to third-party websites or services such as payment providers or partner gaming platforms. Please note that this k77 Privacy Policy applies solely to the k77 platform.

K77 is not responsible for the privacy practices or content of third-party websites you may access through our platform. We encourage you to read the privacy policy of each third-party website you visit before providing any personal information to them.

Third-party game providers operating within the k77 platform are bound by contractual agreements requiring them to comply with data protection standards aligned with k77's privacy policy. However, k77 has no direct control over how those third-party providers handle data and therefore cannot fully guarantee their practices.

K77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your privacy.

When material changes are made to this Privacy Policy, K77 will notify you through the following means:

• Prominent notice on the platform's home page or during login.
• A notification email sent to your registered address.
• Updates the "Last Updated" date displayed at the top of this page.

Continued use of the k77 platform after changes are published constitutes your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account by contacting our support team.

We encourage you to check this Privacy Policy page periodically to ensure you are always aware of the latest ways k77 protects your personal information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how K77 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly from the k77 platform for immediate response.
• Email: [email protected] — response within 24 hours on business days.
• Telegram: The official k77 Telegram channel for fast support.

For requests relating to personal data rights (access, correction, deletion), please clearly state the type of request and include sufficient account verification details so our team can process your request efficiently and accurately.