At m77club, protecting your personal data is not a formality — it's an operational commitment. This Privacy Policy explains in plain terms what data we collect from Malaysian players, why we collect it, how it is stored and used, and what rights you hold over your information.
All data exchanged between your device and m77club — including login credentials, payment details, and personal information — is encrypted using TLS 1.3. No data travels unprotected over the network.
Player account data, transaction records, and KYC documents are stored in encrypted databases with restricted access controls. Only authorised personnel with a legitimate operational need may access personal records.
m77club does not sell, rent, or trade your personal data to third-party marketing organisations. Your information is shared only with regulated service providers directly required to operate the m77club platform.
You hold the right to access, correct, and request deletion of your personal data held by m77club, subject to legal and regulatory retention obligations. Requests are processed within 30 days of receipt.
m77club uses cookies strictly for session management, fraud detection, and platform performance analytics. No third-party advertising cookies are placed without your knowledge. Cookie use is detailed in Section 7 below.
m77club's data practices comply with the requirements of its international gaming authority licence and applicable data protection standards. Our data handling procedures are reviewed periodically by internal compliance officers.
m77club operates the online gaming platform accessible at m77club.org ("the Platform"). In this Privacy Policy, "m77club," "we," "us," and "our" refer to the operator entity holding the international gaming authority licence under which the Platform operates.
m77club is the data controller in respect of personal data collected through your use of the Platform. If you have any questions or concerns about this Privacy Policy or the way your data is handled, you may contact our Data Protection contact at [email protected].
m77club collects personal data through several channels during your registration, use of the Platform, and in the course of our legal and regulatory obligations. The categories of data collected are set out below.
| Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration & account updates |
| Financial Data | Payment method details, eWallet account identifiers, transaction amounts | Deposit & withdrawal processing |
| KYC Documents | Copies of MyKad, passport, proof of address | Identity & age verification |
| Technical Data | IP address, device type, browser, operating system, session logs | Automatic on platform access |
| Gaming Activity Data | Bet history, game sessions, bonus usage, win/loss records | Platform use |
| Communications Data | Live chat transcripts, support email content, complaint records | Customer support interactions |
m77club does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health data except where specifically required by responsible gaming obligations (for example, self-exclusion records).
m77club processes your personal data for the following purposes:
m77club processes your personal data on the following legal bases:
5.1 Regulated Service Providers. m77club shares personal data with third-party service providers who assist in operating the Platform under strict data processing agreements. These include payment processors (Touch n Go eWallet, Boost, FPX-enabled banking providers), KYC and identity verification providers, fraud detection services, customer support platforms, and cloud hosting infrastructure.
5.2 Regulatory Authorities. m77club may be required to disclose personal data to our gaming licence authority, financial intelligence units, or law enforcement agencies where compelled by law or where disclosure is necessary to protect the integrity of regulated gaming operations.
5.3 No Sale of Data. m77club does not sell, lease, or transfer personal data to third parties for their independent commercial or marketing purposes under any circumstances.
5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of m77club's business assets, personal data held may be transferred as part of that transaction. Affected players will be notified by email with reasonable advance notice.
6.1 m77club retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory minimum retention requirements.
6.2 Account data and transaction records are retained for a minimum of five (5) years from account closure or last transaction date, in accordance with standard AML record-keeping requirements applicable to licensed gaming operators.
6.3 KYC documents (identity and address verification documents) are retained for a minimum of five (5) years following the end of the business relationship.
6.4 Live chat and support communication records are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
6.5 Where a player submits a verified data deletion request, m77club will delete or anonymise data that is no longer required to satisfy legal or regulatory retention obligations.
7.1 Essential Cookies. m77club uses strictly necessary cookies to maintain your logged-in session, prevent cross-site request forgery (CSRF), and enable core platform functionality. These cookies cannot be disabled without affecting your ability to use the Platform.
7.2 Analytics Cookies. m77club uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate the Platform. This data is used to identify performance issues, optimise page load times, and improve the overall user experience for Malaysian players across devices. No individual player is identifiable from analytics data.
7.3 No Third-Party Advertising Cookies. m77club does not place third-party advertising cookies or retargeting pixels on the Platform. Your browsing activity on m77club is not shared with advertising networks.
7.4 Cookie Management. You may manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will impair your ability to access your m77club account and use the Platform's features.
Subject to applicable law and regulatory constraints, you hold the following rights in respect of your personal data held by m77club:
To exercise any of these rights, submit a written request to [email protected] from the email address registered to your m77club account. m77club will respond within 30 calendar days. We may request identity verification before processing data access or deletion requests.
9.1 m77club implements technical and organisational security measures appropriate to the nature of the personal data processed. These include TLS 1.3 encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls limiting staff access to personal data on a need-to-know basis, regular penetration testing and vulnerability assessment, and multi-factor authentication for all internal administrative systems.
9.2 In the event of a personal data breach that is likely to result in a risk to players' rights and freedoms, m77club will notify the relevant regulatory authority within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where the breach is likely to result in a high risk to them.
The m77club platform is not directed at individuals under the age of 21. m77club does not knowingly collect personal data from any person under 21 years of age. Where m77club identifies that data has been collected from a person under 21, that account will be immediately closed, all personal data will be deleted (subject only to any mandatory regulatory retention obligations), and any balance will be returned to the verified payment source.
If you believe that a person under 21 has registered for an m77club account, please contact us immediately at [email protected].
The m77club platform does not contain links to third-party websites for commercial or affiliate purposes. Where links to third-party resources appear in support or informational contexts (such as responsible gaming guidance), m77club is not responsible for the privacy practices or content of those third-party sites. Players who navigate to external sites do so at their own discretion.
12.1 m77club may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The date at the top of this document indicates when the Policy was last revised.
12.2 Where changes are material, m77club will notify registered players by email at least seven (7) days before the revised Policy takes effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Privacy Policy.
12.3 Players who do not accept a material change to this Privacy Policy may close their account and withdraw any remaining balance prior to the effective date of the change by contacting support at [email protected].
For all privacy-related queries, data access requests, or concerns about how m77club handles your personal information, please contact our data protection team:
m77club Data Protection
Email: [email protected]
Please include your registered account email address and a description of your request. We aim to respond within 30 calendar days.
For general platform enquiries, please visit our FAQ page or contact our 24/7 live chat support directly from your m77club account dashboard after logging in.
Your data is protected. Your games are fair. Your payouts arrive in 1–2 hours to your Touch n Go eWallet. Over 500,000 Malaysian players already know this. 21+ only.
By using m77club you confirm you have read and accept this Privacy Policy and our Terms & Conditions.