Privacy Policy ide77 – Your Data Protection

Welcome to the ide77 Privacy Policy. This document explains in detail how the ide77 platform ("we", "our", or "ide77") collects, processes, stores, and protects your personal information when you use our website at ide77.onl, the ide77 mobile app, or any other services we offer.

This Privacy Policy applies to all users of the ide77 platform, including unregistered visitors, registered members, and anyone who interacts with our customer support services. By using any part of the ide77 platform, you agree to the collection and processing of your personal data as described in this document.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take data protection responsibilities very seriously, as we understand that the trust placed in us by over 500,000 ide77 members across Malaysia is our most valuable asset.

Ide77 collects various types of information to enable us to provide a secure, efficient service and meet legal compliance requirements. Below are the main categories of information we collect:

2.1 Information You Provide Directly

• Full name as shown on your Malaysian identity card (MyKad).
• Identity card (IC) number or passport number for KYC verification purposes.
• Active email address and mobile phone number.
• Date of birth to verify age eligibility (18 years and above).
• Full residential address including postcode and state.
• Bank account or e-wallet information for processing deposits and withdrawals.
• Identity verification documents such as a copy of your MyKad, bank statement, or utility bill.

2.2 Information Collected Automatically

• Your device's IP address and associated geolocation information.
• Web browser type, operating system, and device information.
• Session data including pages visited, time spent, and navigation patterns.
• Game activity logs including date, time, game type, and wagering value.
• Complete records of all financial transactions carried out on the platform.

2.3 Information from Third Parties

• Identity verification from authorized KYC service providers.
• Compliance information from anti-money laundering (AML) databases.
• Verification data from relevant gambling self-exclusion lists.

Ide77 uses the information collected for lawful and transparent purposes. Every use of data is grounded in a solid legal basis — whether contractual obligation, legal duty, legitimate interest, or your consent.

Ide77 will not use your data for purposes unrelated to platform service delivery, legal compliance, or the improvement of the member experience. You will be notified in advance of any new material use of your data.

Ide77 applies a "need-to-know" principle to all data sharing. This means your information is only shared when strictly necessary and with parties that have a legitimate reason. We do not sell your personal data to any third party for marketing or commercial purposes.

4.1 Trusted Service Providers

We share necessary data with third parties who help us deliver our services, including payment processing providers, KYC verification companies, licensed gaming software providers, and server infrastructure providers. All third parties are bound by strict data protection agreements and are not permitted to use your data for their own purposes.

4.2 Legal Requirements

Ide77 will disclose your personal information to the authorities when required by law, including requests from law enforcement agencies, court orders, or reporting obligations under anti-money laundering legislation. In such situations, we will inform you to the extent permitted by law.

4.3 Corporate Transfers

In the event of a merger, acquisition, or sale of ide77 assets, member personal data may be transferred as part of those assets. You will be notified of any such changes, and the new company's privacy policy will ensure equivalent or greater protection for your data.

The security of your personal data is an absolute priority at ide77. We continuously invest in the latest security infrastructure to ensure your data is always protected against unauthorized access, loss, or misuse.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data stored in our database.
• Multi-layered firewall system and Intrusion Detection System (IDS) operating 24/7.
• Network segregation between payment systems, databases, and public-facing servers.
• Regular security audits by independent, licensed third parties.
• Real-time monitoring of suspicious activity with automated incident response.

5.2 Operational Security Measures

• Role-based access control (RBAC) for all ide77 staff.
• Two-factor authentication (2FA) mandatory for all internal staff accounts.
• Regular data protection training programmes for all ide77 employees.
• Security incident response procedures that are regularly tested and updated.

The ide77 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and help us understand how our platform is used. Below is an explanation of the types of cookies we use:

6.1 Essential Cookies

These cookies are essential for the basic functionality of the ide77 platform and cannot be disabled. They include login session cookies, security tokens, and language preference settings. Without these cookies, the platform will not function properly.

6.2 Performance & Analytics Cookies

These cookies help us understand how members use the platform, which pages are visited most frequently, and where technical errors occur. This information is used in aggregate and does not identify you individually. It helps us continuously improve platform performance and usability.

6.3 Functional Cookies

Functional cookies store your preferences such as display language, game settings, and display mode, enabling a more personalized experience each time you browse the ide77 platform.

6.4 How to Manage Cookies

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect platform functionality. For detailed instructions, refer to your browser's help section.

Ide77 member personal data is stored on secure, continuously monitored servers. We adhere to the principle of data minimisation — retaining only the information that is strictly necessary, for only as long as needed.

7.1 Data Retention Period

• Active account data: Retained for the duration of the active account and up to 7 years after account closure to meet financial and tax regulatory requirements.
• Financial transaction records: Retained for a minimum of 6 years in accordance with Malaysia's PDPA requirements and financial laws.
• Customer support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

7.2 Cross-Border Data Transfers

In some cases, your data may be processed or stored outside Malaysia by our third-party service providers. Any such cross-border data transfer is only made to countries or entities that provide an equivalent or higher level of data protection, and is based on lawful data transfer mechanisms.

7.3 Data Deletion

When data is no longer needed for the purpose it was collected, and there is no legal obligation requiring its retention, ide77 will securely delete or anonymise that data using established procedures.

Under Malaysia's PDPA and ide77's privacy commitments, you have several important rights regarding your personal data. We respect and facilitate the exercise of these rights:

The ide77 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under 18. Our registration process is designed to verify applicant age through rigorous KYC procedures.

If we discover that personal data of an underage child has been collected without the knowledge or consent of a parent or legal guardian, we will take immediate action to delete that data and close the account in question. Parents or guardians with concerns about this are encouraged to contact us promptly.

The ide77 platform may from time to time contain links to third-party websites or services, such as game providers or payment partners. Please note that ide77's Privacy Policy applies only to our own platform and does not cover the privacy practices of those external websites.

Ide77 is not responsible for the content, privacy policies, or security practices of third-party websites. We encourage you to read and understand the privacy policy of every website you visit, especially before providing any personal information. Your visits to third-party websites are at your own risk and subject to their own terms.

Ide77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. The "Updated" date at the top of this document will be revised each time a change is made.

For material changes — that is, changes that significantly affect how we process your personal data — we will provide clearer notice, whether through an in-account notification, an email to your registered address, or a prominent announcement banner on the ide77 platform homepage.

Continued use of the ide77 platform following any changes to this Privacy Policy will be considered your acceptance of the updated version. If you do not agree with the changes, please discontinue use of the platform and contact our support team to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ide77 handles your personal data, please do not hesitate to contact our team. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

You may contact the ide77 Data Protection Officer (DPO) through the following channels:

• 24/7 Live Chat available directly on the ide77.onl platform — the fastest way to get a response.
• Ide77 official email: [email protected]
• Via the "Contact Us" section in your member account after logging in.

We aim to respond to all privacy-related enquiries within 5 business days. For more complex cases requiring in-depth investigation, we will keep you updated on progress within 14 business days.