Privacy Policy KM77 –
Your Data Security is Our Priority

KM77 ("we", "the platform") takes your privacy very seriously. This Privacy Policy explains in detail how we handle personal information collected from you when you visit, register, or use any services on the KM77 platform.

This document is drafted in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA) and global data protection best practices. Our goal is simple — you have the right to know what we do with your data, and we are committed to being transparent about it.

Km77 collects several categories of personal data depending on how you interact with our platform. Here is a detailed breakdown:

This includes all information you enter yourself when registering an account, completing KYC verification, contacting customer support, or filling in any profile details. You have full control over this data.

When you visit our platform, our systems automatically record certain technical information such as your IP address, device type, operating system, and usage patterns. This data is used solely for security and platform improvement purposes.

Km77 uses collected data for the following purposes. We do not use your data for any purpose beyond what is stated here without obtaining your consent first:

• Service Delivery — To allow you to register, log in, make deposits, play games, and make withdrawals.
• Identity Verification — To meet KYC requirements and verify that you meet the age and citizenship eligibility criteria.
• Security & Fraud Prevention — To detect and prevent unauthorised access, fraud, money laundering, and other suspicious activities.
• Service Communications — To send important notifications relating to your account, transactions, and policy updates.
• Customer Support — To identify you and help resolve any issues or enquiries you raise.
• Legal Compliance — To fulfil reporting obligations and compliance requirements with relevant authorities when required.
• Platform Improvement — To analyse aggregated usage patterns in order to improve the interface, performance, and user experience.

KM77 do not sell your personal data to any third party. This is our absolute commitment. However, under certain limited circumstances, we may need to share your data with the following parties:

We work with trusted service providers to support platform operations — including payment gateway providers, game software providers, and cloud infrastructure services. All providers are bound by strict confidentiality agreements and may only use your data for the purposes we specify.

Km77 may disclose your data to government authorities or law enforcement bodies when required to do so by applicable law, court order, or in investigations involving fraud, money laundering, or other illegal activities.

If km77 is involved in any merger, acquisition, or asset sale, user data may be transferred as part of that transaction. Users will be notified in advance and have the option to close their account if they do not agree.

Km77 consistently invests in security infrastructure to ensure your data remains protected at all times. The technical and organizational measures we apply include:

• 256-bit SSL/TLS Encryption — All communications between your device and our servers are fully encrypted.
• Hashed Password Storage — Your password is never stored in plain text. We use a one-way cryptographic hashing method that cannot be decrypted.
• Two-Factor Authentication (2FA) — An additional security layer is available for all user accounts.
• 24/7 Security Monitoring — Our security team monitors the platform around the clock to detect any threats or suspicious activity.
• Regular Security Audits — Our platform undergoes regular penetration testing and security audits by independent experts.
• Internal Access Controls — Internal staff access to user personal data is restricted to those who genuinely need it to carry out their responsibilities.

While we take all reasonable measures, no security system in the world can guarantee 100% protection under all circumstances. We encourage you to also take precautions such as using a strong password and not sharing your login details.

Km77 uses cookies and similar tracking technologies to enhance your experience on the platform. The types of cookies we use are as follows:

These cookies are required for the platform's core functions — such as maintaining your login session and ensuring transaction security. The platform cannot function properly without them and they cannot be disabled.

These cookies help us understand how users interact with the platform — which pages are visited most often, how long play sessions last, and so on. This data is used in aggregate and does not identify individuals.

These cookies remember your preferences such as your chosen language and display settings so you do not need to reconfigure them each time you visit the platform.

You can manage and delete cookies through your browser settings. Please note that disabling essential cookies may affect platform functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. KM77 respects and facilitates the exercise of these rights:

To exercise any of the above rights, contact our support team via live chat or email. We will respond to your request within 30 calendar days. Any required identity verification will be requested to protect your privacy.

Km77 retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by applicable law.

Active account data is retained for as long as your account remains active. After account closure, we retain certain records for a minimum of five (5) years for legal compliance, dispute resolution, and fraud prevention purposes.

When you request data deletion, we will delete or anonymise all data no longer required for legal compliance purposes. Data that must be retained for legal reasons will be isolated and not used for any other purpose.

Your data is stored on secure servers. Any cross-border data transfers are carried out with appropriate safeguards to ensure equivalent security standards are maintained.

KM77 is a platform designed exclusively for users aged 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that someone under the age of 18 has registered an account, we will immediately close the account and delete all related data. Parents or guardians who believe their child has registered on our platform without permission are asked to contact us immediately.

The km77 platform is integrated with third-party services such as game providers and payment gateways to deliver a complete experience to you. Each provider has their own privacy policy that governs how they handle data passing through their systems.

Km77 is not responsible for the privacy practices of these third parties. However, we only work with providers that have undergone security reviews and maintain robust data protection standards. All providers are bound by strict data processing agreements as a condition of working with km77.

KM77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features.

When we make material changes, we will:

• Updating the "Last updated" date at the top of this document.
• Displaying clear notices on the platform to inform users of changes.
• Sending notifications to registered members through relevant channels for significant changes.

Continued use of the platform after changes take effect indicates your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help. There are several ways to reach us:

• Live Chat — The fastest method. Available 24/7 directly from the km77 platform.
• Email — [email protected] (reply within 1 business day).
• Via account settings — You can manage most data requests directly from your account dashboard.

For requests related to your data protection rights (access, correction, deletion, and others), please clearly state the type of request when contacting us. We may require identity verification before processing the request to protect your account security.