Privacy Policy — How gtb77 Handles Your Data

1. Introduction

This Privacy Policy ("Policy") describes how gtb77 ("gtb77", "we", "us", "our"), the operator of the online gaming platform accessible at gtb77.asia, collects, uses, stores, and discloses personal data relating to individuals who register for and use the gtb77 platform ("you", "your", "Player").

gtb77 is committed to protecting the privacy of all users in accordance with applicable data protection legislation. For users based in Malaysia, this includes obligations arising under the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions.

By creating a gtb77 account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not create an account or use the platform.

This Policy should be read alongside our Terms & Conditions. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2. Data We Collect

gtb77 collects personal data in three principal ways: directly from you when you register or interact with the platform; automatically through your use of the platform; and from third-party verification services where required for compliance purposes.

2.1 Registration and Account Data. When you create a gtb77 account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (to verify you meet the 21+ age requirement).
• Email address and mobile phone number.
• Residential address (including postcode and state within Malaysia).
• Preferred language and currency settings.
• Username and hashed password (passwords are never stored in plain text).

2.2 Identity Verification (KYC) Data. Before processing withdrawals, we collect copies of identity documents including:

• Malaysian Identity Card (MyKad) or passport scan.
• Proof of residential address (utility bill, bank statement, or equivalent document dated within 3 months).
• Proof of payment method ownership where required (e.g., screenshot of e-wallet account, bank statement).

2.3 Financial Data. We collect data related to financial transactions on the platform, including deposit and withdrawal records, transaction amounts, timestamps, and payment method identifiers. We do not store full bank account numbers or full e-wallet credentials; payment processing is handled by our certified payment processor partners.

2.4 Gaming Activity Data. We maintain records of your gaming activity on the gtb77 platform, including games played, bet amounts, win/loss outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data. When you access the gtb77 platform, we automatically collect certain technical information, including:

• IP address and geolocation data (country and region level).
• Device type, operating system, and browser version.
• Session start/end times and pages visited.
• Referral source if you arrived via an internal link.

2.6 Communication Data. If you contact gtb77 customer support, we retain records of those communications, including live chat transcripts, email correspondence, and any documents or screenshots you share with us.

3. How We Use Your Data

gtb77 uses the personal data we collect for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your account profile throughout your relationship with gtb77.
• Service delivery: To provide access to the platform's casino, sportsbook, and related features; to process deposits and withdrawals; and to administer bonuses and promotions.
• Security and fraud prevention: To detect and investigate suspicious activity, unauthorised access attempts, and potential fraud or money laundering activity. This includes automated risk-scoring systems that analyse transaction and behaviour patterns.
• Regulatory compliance: To meet anti-money laundering (AML), know-your-customer (KYC), and other legal and regulatory obligations applicable to our operations.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling and to enforce player-set limits and self-exclusion requests.
• Customer support: To respond to your inquiries, investigate complaints, and resolve disputes.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the gtb77 platform.
• Marketing communications: To send promotional emails or SMS messages about gtb77 offers, where you have consented to receive such communications and have not subsequently opted out.

4. Legal Basis for Processing

gtb77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, transaction processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations and data retention requirements.
• Consent: Processing based on your explicit consent, including consent to receive marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests: Processing undertaken to protect the security of the platform, prevent fraud, and improve our services, where these interests are not overridden by your data protection rights.

5. Data Sharing & Disclosure

gtb77 does not sell or rent your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: To facilitate deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, Maybank2u, CIMB Clicks, FPX, DuitNow, GrabPay, and others.
• Identity verification providers: Third-party KYC services used to verify documents submitted during the account verification process.
• Fraud and AML screening services: Providers who assist gtb77 in identifying and preventing financial crime.
• Game and technology providers: Software providers whose games are hosted on the gtb77 platform may receive limited technical data necessary for game session management.
• Regulatory and law enforcement authorities: Where we are legally required to disclose personal data by court order, regulatory direction, or applicable law.

All third-party processors engaged by gtb77 are contractually bound to process personal data only for the specified purpose and in compliance with applicable data protection law.

6. Cookies & Tracking

The gtb77 platform uses cookies and similar tracking technologies to operate the site, maintain login sessions, remember preferences, and analyse usage patterns. The following categories of cookies are used:

• Essential cookies: Necessary for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the platform. This helps us identify areas for improvement.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in or using core platform features.

7. Data Retention

gtb77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to regulatory minimum retention periods. Specifically:

• Account and transaction records are retained for a minimum of 5 years from the date of the last transaction, in accordance with AML compliance requirements.
• KYC documents are retained for the duration of the account relationship and for a minimum of 5 years following account closure.
• Customer support communications are retained for 3 years unless relevant to an ongoing dispute or investigation.
• Marketing consent records are retained for as long as the consent remains active and for 12 months following withdrawal of consent.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

8. Data Security

gtb77 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for personal data stored in our databases.
• Two-factor authentication available for all player accounts.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the platform infrastructure.
• Incident response procedures with defined escalation and notification timelines.

Notwithstanding these measures, no system is entirely immune to security risks. Players are encouraged to use strong, unique passwords for their gtb77 account and to enable two-factor authentication.

9. Your Rights

Under applicable data protection law, including the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to our use of it.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations as described in Section 7.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a valid request.

10. Children & Minors

The gtb77 platform is strictly for persons aged 21 and above. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a minor, we will immediately suspend the associated account, delete the data, and return any deposits subject to verification.

Parents and guardians who become aware that a minor has created a gtb77 account should contact us immediately at [email protected].

11. International Data Transfers

Your personal data may be processed and stored on servers located outside of Malaysia. Where such transfers occur, gtb77 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require overseas recipients to apply equivalent data protection standards to those required by Malaysian law.

12. Marketing Communications

With your consent, gtb77 may send you promotional communications about platform features, bonuses, and special offers via email or SMS. You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Updating your communication preferences in Account → Notification Settings.
• Contacting customer support and requesting removal from our marketing list.

Please note that opting out of marketing communications does not affect transactional notifications such as deposit confirmations, withdrawal approvals, and security alerts, which are sent as part of your account service.

13. Policy Changes

gtb77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email and/or by a prominent notice on the platform at least 7 days before taking effect. The current version of this Policy is always available at gtb77.asia/privacy-policy.

Your continued use of the platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you should cease using the platform and may request account closure.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection team:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week via live chat on the platform.

If you are not satisfied with our response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For Malaysian residents, this is the Personal Data Protection Department (JPDP) under the Ministry of Digital.