Buaya77 Privacy Policy – Malaysian Player Data Protection

Buaya77 ("we", "our platform") takes the responsibility of protecting players' personal data seriously. This Privacy Policy has been prepared in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and explains transparently how we handle the information you provide to us when using our online casino platform.

We believe every player has the right to know exactly what information we hold about them, what it is used for, and who can access it. This policy is more than a legal document — it is our commitment to you that your privacy will always be protected throughout your time with Buaya77.

This Privacy Policy applies to all services provided through the buaya77.my, the Buaya77 mobile app (if available), and all communication channels between you and the Buaya77 team, including email, live chat, and phone.

Buaya77 collects several categories of personal information from users of our platform. All data collection is carried out lawfully, fairly, and transparently:

We does not collect information that is not required for the platform's operation or that you have not voluntarily provided. For players who browse the site without registering, we only collect basic technical data necessary to ensure the website functions properly.

Every piece of information Buaya77 collects serves a clear and legitimate purpose. We use your personal data for the following:

• Account management: Creating and maintaining your player account, processing registrations, and verifying your identity through the KYC process.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other Malaysian payment methods, as well as managing your winnings withdrawals.
• Platform security: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and any other security threats.
• Legal compliance: Meeting the legal and regulatory obligations applicable to Buaya77's operations, including anti-money laundering (AML) requirements.
• Service improvement: Analysing usage patterns to improve the gaming experience, user interface, and overall platform performance.
• Service communications: Sending important notifications related to your account, transactions, and relevant platform updates.
• Marketing (with consent): Send promotional information, bonuses, and special offers to players who have consented to receive marketing communications.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and provide appropriate assistance to players who need it.

Buaya77 will not use your personal data for any purpose beyond those stated above without first obtaining your consent.

Buaya77 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited situations where we may need to share your data with certain parties:

• Payment service providers: Providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and banks operating FPX receive only the minimum transaction information needed to process your payment.
• Game providers: Game software providers may receive the game data necessary to operate the games you play.
• IT service providers: Companies providing cloud computing, hosting, cybersecurity, and analytics services to Buaya77, subject to strict confidentiality agreements.
• Legal authorities: Where required by Malaysian law, court order, or a competent regulatory authority.
• Identity verification services: Third parties that assist with the KYC process and document verification.

All third parties who receive Buaya77 player data are bound by data processing agreements that require them to protect that information to the same standard we hold ourselves to.

Protecting your personal data from unauthorised access, loss, or disclosure is a top priority for Buaya77. We implement multiple layers of technical and operational security protection:

• 256-bit SSL Encryption: All communication between your browser and Buaya77's servers is encrypted using the latest TLS protocol, ensuring that transmitted data cannot be intercepted by third parties.
• Encryption of data at rest: Sensitive data stored in our databases is encrypted using the industry-recognised AES-256 encryption algorithm.
• Layered access controls: Access to player data is restricted to staff who genuinely need it to carry out their legitimate work duties, with all access logged and monitored.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA to protect their accounts from unauthorised access.
• Regular security audits: Our security systems are regularly reviewed and tested by both internal and independent external security experts.
• Real-time threat monitoring: Our automated threat detection system operates 24 hours a day to identify and respond to any suspicious activity promptly.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the event of a data breach affecting your personal information, we are committed to notifying you within the timeframe required by applicable Malaysian law.

Buaya77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect certain functions of the Buaya77 platform. We do not use third-party cookies for external advertising purposes.

Buaya77 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements:

• Active account data: Retained for as long as your account remains active and for the required period following account closure for legal record-keeping purposes.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's financial and anti-money laundering regulations.
• Security logs: Retained for 12 months for investigation purposes in the event of a security incident.
• Support communication records: Retained for 3 years for reference and service quality purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

When data is no longer needed, it will be securely deleted or anonymised in accordance with our established data deletion procedures. Anonymised data may be retained for aggregate analytics purposes in a form that cannot identify any individual.

Under Malaysia's PDPA 2010 and buaya77's commitment to user privacy, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact us at support@buaya77.my by clearly stating your request. We will process your request within 21 working days in accordance with PDPA 2010 requirements.

In the course of operating the platform, some of your personal data may need to be transferred to or accessed from countries outside Malaysia, particularly in the context of cloud computing services and international game providers.

Buaya77 ensures that all international data transfers are carried out with adequate safeguards in place:

• Transfers are only made to countries or organisations that provide a level of data protection equivalent to or higher than Malaysia's standards.
• Binding data processing agreements are established with all international data recipients.
• Internationally recognised standard contractual clauses are used to safeguard your rights even when data is held outside Malaysia.

You may contact us for more information about the safeguards in place for specific international data transfers.

The Buaya77 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

If we discover that personal information belonging to someone under the age of 18 has been collected without our knowledge, we will immediately take the following steps:

• Immediate closure of the relevant account.
• Delete all personal data belonging to that individual from our systems.
• Return any remaining balance in the relevant account in accordance with established procedures.

Parents or guardians who suspect their child has registered on the Buaya77 platform may contact us at support@buaya77.my for immediate action.

Buaya77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. The "Updated" date at the top of this page will always reflect the most current version.

For significant changes that materially affect your privacy rights, we will:

• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Display a clear notice on the main page of the Buaya77 platform.
• Seeking your consent again where changes require a new legal basis for consent under applicable law.

Your continued use of the Buaya77 platform after the amendment's effective date constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to get in touch with us:

• Privacy Email: support@buaya77.my
• Live Chat: Available 24 hours a day, 7 days a week via the Buaya77 platform
• Response time: Under 5 minutes (live chat) or 2 business days (email)

You also have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia if you believe your privacy rights have been violated and Buaya77 has failed to address your concerns to your satisfaction.