Privacy Policy goto77 — Personal Data Protection for Malaysian Players

Goto77 only collects personal data that is genuinely necessary to operate the platform safely and effectively. Below are the categories of data we collect, along with the justification for each:

Goto77 does not collect sensitive data such as medical information, religious beliefs, political views or biometric data (such as fingerprints or facial recognition), except in very limited cases where it is required for advanced identity verification and with your explicit consent.

Goto77 uses the personal data it collects solely for legitimate and necessary purposes. Below is the full list of purposes for which goto77 uses your data:

• Account Operations: Creating and managing your goto77 account, including identity verification, login, and account security.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and handling your winnings withdrawals securely and accurately.
• Age Verification & KYC: Ensuring all players meet the minimum age requirement of 18 years and satisfy the Know Your Customer requirements mandated by international standards.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multi-account usage, and abuse of the goto77 platform.
• Customer Support: Providing effective assistance when you contact the goto77 support team, including resolving disputes and responding to enquiries.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate intervention where necessary.
• Platform Enhancements: Analysing how players use the goto77 platform (in aggregate and anonymised form) to improve the user experience, technical stability, and product offerings.
• Marketing Communications: Sending information about promotions, new offers and platform updates — only if you have given explicit consent to receive them.
• Legal Compliance: Fulfilling legal and regulatory obligations, including responding to lawful requests from relevant authorities.

Goto77 does not sell your personal data. However, operating the platform requires sharing certain data with selected third parties in limited, controlled circumstances. Below is a complete list of situations where your data may be shared:

• Payment Service Providers: The payment gateways that process your transactions (for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) receive only the minimum transaction data required to complete the payment. These providers are bound by strict confidentiality agreements with goto77.
• Game Providers: Game providers such as Pragmatic Play, PG Soft, JILI Gaming and Evolution Gaming may receive anonymised player identifiers for game operation purposes. They do not receive your full name, phone number or financial information.
• Identity Verification Services: Third-party KYC service providers that assist goto77 in verifying player identities during the account verification process.
• Relevant Authority: goto77 will disclose required data to Malaysian authorities if compelled by a valid court order, criminal investigation, or regulatory requirement. goto77 will notify you of any such disclosure where permitted by law.
• Business Transfers: Should goto77 be involved in a merger, acquisition, or asset sale, player data may be transferred as part of that transaction. goto77 will notify players and ensure the receiving party adheres to equivalent privacy standards.

All third parties that receive data from goto77 are bound by data processing agreements that require them to protect data to an equivalent or higher standard than goto77, and prohibit them from using that data for any purpose outside the permitted scope.

Goto77 continuously invests in security infrastructure to ensure your personal data is protected to the highest standard. The technical and organisational measures we have implemented include:

• Data Transmission Encryption: All communication between your browser and goto77's servers is protected by TLS 1.3 / 256-bit SSL encryption, ensuring your data cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored in goto77's databases is encrypted using AES-256 standards, meaning that even in the event of a server breach, your data cannot be read without the encryption key.
• Layered Access Controls: Only goto77 staff who require access to specific data to perform their duties are granted that access. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): goto77 offers and actively encourages the use of 2FA for all accounts. Internal access to goto77's sensitive systems requires 2FA as mandatory.
• Regular Security Audits: Independent cybersecurity firms conduct quarterly penetration testing and security audits of the goto77 platform to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: goto77 has clear procedures in place to respond to data breaches, including notifying affected players and the relevant authorities within the timeframes required by law.

The goto77 platform uses cookies and similar tracking technologies to deliver a better and more secure experience. Below are the types of cookies used by goto77:

• Essential Cookies (Required): These cookies are required for the core functionality of the goto77 platform — including login session authentication, language preference memory and form security. Without them, the platform cannot function properly. These cookies do not require your consent as they are a minimum technical necessity.
• Preference Cookies (Functional): Cookies that store your preferences — such as favourite games, display settings and in-platform search history — to help goto77 deliver a more personalised experience without you having to reconfigure your settings every time.
• Analytics Cookies: goto77 uses aggregated, anonymised analytics data to understand how players use the platform — including the most visited pages, time spent, and navigation patterns. This data helps us improve the platform but does not allow goto77 to identify you as an individual from analytics data alone.
• Fraud Detection Cookies: Specialised tracking technology that helps goto77 identify suspicious patterns, automated usage, or fraudulent attempts. This forms part of goto77's security system and is necessary to protect all players.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the goto77 platform. For preference and analytics cookies, you can manage these through the cookie settings panel available on the goto77 platform.

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have the following rights regarding the personal data goto77 holds about you:

• Right of Access: You have the right to request a copy of all personal data that goto77 holds about you. This request will be processed within 14 business days.
• Right to Rectification: If you find that any data goto77 holds about you is inaccurate or outdated, you have the right to request an immediate correction. Most basic profile information can be updated directly through your goto77 account settings.
• Right to Erasure: You may request that goto77 delete your personal data, subject to legal compliance requirements that mandate the retention of certain records (such as financial transaction records for the minimum period prescribed by Malaysian law).
• Right to Restriction of Processing: You can request that goto77 restrict the processing of your data in certain situations — for example, while a dispute regarding data accuracy is being resolved.
• Right to Withdraw Consent: For data processed based on your consent — primarily marketing communications — you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
• Right to Complain: If you believe goto77 has violated your privacy rights, you have the right to first raise a complaint directly with goto77. If you are not satisfied with the resolution, you may escalate your complaint to Malaysia's Personal Data Protection Department.

To exercise any of the rights above, contact goto77's privacy team at support@goto77-jit.com with the subject line "Personal Data Rights Request". Please include your goto77 account number and clearly describe your request. Identity verification may be required before your request is processed.

Goto77 does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

Once the retention period has lapsed, goto77 will securely delete data using methods that ensure it cannot be recovered. For records that must be retained for legal purposes, goto77 will archive that data with more restricted access than active data.

Goto77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service improvements. The process for notifying you of changes is as follows:

• For minor changes that do not materially affect player rights, goto77 will update this page and change the "Last Updated" date at the top. You are encouraged to review this page periodically.
• For significant changes that affect how your data is used or your rights, goto77 will send a notification to your registered email at least 14 days before the changes take effect.
• If any changes require fresh consent from you — for example, using your data for a new purpose you have not previously agreed to — goto77 will seek your explicit consent separately before processing your data for that purpose.

If you have any questions, concerns, or requests regarding this Privacy Policy or how goto77 handles your personal data, please don't hesitate to reach out to us:

Goto77's privacy team consists of Malaysian staff who are fluent in Bahasa Melayu and operates 24 hours a day, 7 days a week. For requests relating to personal data rights, please include your goto77 account number and proof of identity to help expedite the process.