Privacy Policy planet77 – Your Personal Data Protection

Planet77 collects members' personal information in several different situations throughout their use of our platform. Collecting this information is necessary to enable us to provide a secure, personalised, and high-quality service to every member.

Information you provide directly:

• Full name as shown on your official identification document.
• Date of birth – to verify that you meet the minimum age requirement of 18 years.
• Active email address used as the primary communication channel.
• A Malaysia mobile number registered in your name.
• Current residential address including postcode and state.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Identity verification (KYC) documents such as a copy of your MyKad or passport during the verification process.
• The username and password you choose for your planet77 account.

Information collected automatically:

• IP address of the device used to access the platform.
• Device type, operating system, and web browser version.
• Session log data including login time, logout time, and in-platform activity.
• Complete financial transaction records including deposits, withdrawals, and betting history.
• General geolocation data based on IP address (not precise GPS location).
• Cookie data and tracking technologies as further described in Section 6.

We only collect information that is strictly necessary for legitimate purposes. We do not collect sensitive information such as biometric data, health data, or religious beliefs unless specifically required by law.

The personal information we collect is used responsibly and only for legitimate purposes. Below is a full description of how planet77 uses your data:

Planet77 will not use your information for any purpose beyond those stated above without first obtaining your consent. If you do not wish to receive marketing communications, you may unsubscribe at any time through your account settings or by contacting our support team.

Every personal data processing activity we carry out has a solid legal basis. planet77 processes data on one or more of the following grounds in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract performance: Data processing required to fulfil the service agreement between you and planet77, including account management and transaction processing.
• Legal obligation: Data that must be processed to comply with the legal and regulatory requirements binding on planet77, such as anti-money laundering (AML) requirements and identity verification (KYC).
• Legitimate interest: Processing required for the legitimate interests of planet77 or third parties, such as detecting and preventing fraud and ensuring platform security, provided those interests do not override your fundamental rights.
• Consent: For data processing activities not covered by the categories above, such as sending marketing communications, we will obtain your explicit consent. You are free to withdraw this consent at any time.

Planet77 takes a highly cautious and limited approach to sharing member information. We does not sell your personal data to any party for commercial purposes. Disclosure to third parties only occurs in the following situations:

• Payment service providers: Required transaction information is shared with payment gateway providers such as FPX, DuitNow, Touch 'n Go, GrabPay and USDT to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game software providers: Minimum required information may be shared with third-party game providers solely to enable you to access and play their games on our platform.
• Authorities and regulatory bodies: planet77 will disclose required information to legitimate authorities when required to do so by law, court order, or regulatory directive.
• Technology service providers: Companies that help us manage the platform's technical infrastructure, including cloud computing services, may process your data as part of the services they provide to us, subject to binding data processing agreements.
• Identity verification (KYC): Identity verification documents may be processed through trusted third-party KYC service providers to verify the accuracy of the information provided.

All third parties working with planet77 are subject to rigorous security assessments and are bound by confidentiality and data protection agreements. They are permitted to use your data solely for agreed purposes.

The security of your personal data is planet77's top priority. We continuously invest in the latest security infrastructure to ensure your information is always kept under the best possible protection.

Technical security measures we implement:

• 256-bit SSL/TLS encryption for all data communications between your device and planet77's servers.
• Encryption at rest for all sensitive information stored in our databases.
• Two-factor authentication (2FA) available to all member accounts for an additional layer of security.
• 24/7 security monitoring by an experienced cybersecurity team to detect any suspicious activity.
• Multi-layer firewall and an intrusion detection system (IDS) that is continuously updated.
• Penetration testing conducted periodically by independent third-party security experts.
• Role-based access control (RBAC) ensuring staff can only access the data needed for their specific roles.

While we take all reasonable precautions, no security system can be guaranteed 100% foolproof. We encourage you to also play your part in keeping your account secure by using a strong password, not sharing your login credentials, and enabling two-factor authentication.

Planet77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform operations such as login session management, security, and navigation. These cookies cannot be disabled as they are essential components of the platform's functionality.
• Performance cookies: Collect information about how you use the platform — pages visited, time spent and any errors encountered — to help us improve the overall user experience.
• Functionality cookies: Save your preferences such as language, display settings and login details (if you select "remember me") for ease of use.
• Analytics cookies: Used to understand how members interact with our platform in aggregate. This data helps us make data-driven decisions for continuous improvement.

You can control and manage cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality and security of the platform, and you may not be able to access certain features fully.

As a planet77 member, you have clear rights protected under Malaysia's Personal Data Protection Act regarding your personal information. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact the planet77 support team via the platform's live chat or email. We will process your request within 30 working days. For more complex cases, this period may be extended to up to 60 days with advance notice to you.

Planet77 does not retain your personal information longer than necessary for lawful processing purposes or to comply with applicable legal requirements.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to your identity. This deletion process is carried out in accordance with industry standards to ensure data cannot be recovered.

The planet77 platform integrates third-party services such as game providers, payment gateways, and analytics tools to deliver a richer and more enjoyable experience for our members.

Important things you need to know:

• Every third-party provider integrated with the planet77 platform has its own Privacy Policy governing how they handle user data.
• Planet77 conducts thorough security and data protection assessments before integrating any third-party service into our platform.
• We are not directly responsible for the privacy practices of third-party providers, although we endeavour to ensure they comply with standards comparable to our own requirements.
• All third-party integrations access only the minimum data required for their function – we apply the principle of data minimisation.

If you have concerns about how a specific third-party provider handles your data, we encourage you to read that provider's Privacy Policy directly.

If you have any questions, concerns, or complaints regarding our Privacy Policy or how we handle your personal data, please do not hesitate to contact our team. We take every privacy-related enquiry seriously.

If you are not satisfied with our response, you have the right to lodge a formal complaint with the relevant data protection authority in Malaysia. We will fully cooperate with any investigation carried out by the competent authority.