Privacy Policy me77 — User Data Protection

Me77 (me77.vu) is an online entertainment platform that operates with full responsibility toward its users' privacy. This Privacy Policy covers all services offered through the official me77 website, the me77 mobile app, and any related platforms operated by me77.

We understand that your trust is our most valuable asset. We are therefore committed to handling your personal data in a transparent, responsible, and secure manner. Every data-related decision we make always puts user interests and privacy first.

This policy applies to all me77 platform users regardless of access method — whether via web browser, Android app, iOS app, or any other medium provided by me77.

Me77 only collects data that is genuinely necessary to provide a quality, secure and legally compliant service. The following are the categories of data we collect:

Me77 does not collect credit/debit card information directly — all payments are processed through certified, PCI-DSS-compliant third-party payment providers.

The data we collect is used solely for legitimate, stated purposes. me77 will not use your data for any purpose beyond what is described here without obtaining fresh consent from you:

• Account management: Creating, verifying and maintaining your user account securely.
• Transaction processing: Processing deposits, withdrawals and fund transfers accurately and promptly.
• Identity verification (KYC): Ensuring compliance with anti-money laundering (AML) and fraud prevention legal requirements.
• Customer support: Handling inquiries, complaints and technical support requests effectively.
• Platform security: Detecting and preventing fraudulent activity, unauthorized access and cybersecurity threats.
• Service improvement: Analyzing usage patterns to improve overall platform quality and user experience.
• Marketing communications: Sending information about promotions, bonuses and special offers — only if you have consented to receive them.
• Legal compliance: Fulfilling obligations under Malaysian law, including PDPA 2010 and applicable financial regulations.

Me77 does not sell or rent your personal data to any third party. However, in certain limited situations, we may share your information with the following parties:

• Payment providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and crypto providers used to process your financial transactions. Data is shared only to the extent necessary to complete the transaction.
• Game providers: Companies that supply game content to me77 may receive session data required to deliver the games. These providers are bound by strict confidentiality agreements.
• Technology service providers: Companies that help us manage technical infrastructure, analytics and security — all subject to strict data processing agreements.
• Legal authorities: me77 will disclose user information to Malaysian authorities when required by law, court order or regulatory directive.
• Fraud investigators: Certified anti-fraud and anti-money laundering agency engaged when there is an active investigation into suspicious activity.

All third parties that receive me77 user data are bound by legally binding confidentiality obligations and are not permitted to use that data for any other purpose.

Your personal data security is me77's top priority. We implement multiple layers of technical and procedural protection to ensure your information remains secure at all times:

• Encryption: All data transmitted between your device and me77's servers is protected by TLS 1.3 encryption. Sensitive data stored in the database is encrypted using AES-256.
• Secure data centres: Your data is stored in ISO 27001-certified data centres with strict physical and logical access controls.
• 24/7 Monitoring: me77's cybersecurity team monitors our systems around the clock to detect any threats or unusual activity.
• Two-factor authentication (2FA): Staff accounts with access to user data are protected by multi-factor authentication.
• Regular auditing: Our security systems undergo regular audits and penetration testing by independent third parties.

Data retention period: me77 retains active account data for the duration your account remains active. Once an account is closed, basic data is retained for 7 years to meet Malaysian legal compliance requirements before being permanently deleted. KYC documents are retained for 5 years after the last verification.

Me77 uses cookies and similar tracking technologies to enhance platform functionality and user experience. Cookies are small text files stored on your device when you visit our website.

Essential cookies cannot be disabled as they are required for core platform functions. However, you can manage or delete analytics and preference cookies through your browser settings at any time. Disabling certain cookies may affect some platform functionality.

In line with Malaysia's Personal Data Protection Act (PDPA) 2010, you as a me77 user have the following rights regarding your personal data:

To exercise any of the rights above, please contact the me77 support team via 24/7 Live Chat or our official email. me77 will process your request within 14 working days. Some requests may require identity verification beforehand.

The me77 platform is exclusively for users aged 18 and above only. me77 does not knowingly collect or store any personal data from individuals under the age of 18.

If you believe that someone under the age of 18 has registered an account on our platform, please contact us immediately. me77 will investigate the report and take appropriate action, including deleting the account and all related data without delay.

Parents and guardians concerned about minors accessing online gambling platforms are encouraged to use parental control software and visit the Responsible Gaming for more information.

Me77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform improvements. Every update will be published on this page with a new "last updated" date.

For significant changes, me77 will notify users through:

• In-platform notification upon next login.
• Email to your registered address (for material changes affecting user rights).
• A prominent notice on the platform's home page for at least 7 days.

Continued use of the me77 platform after changes are published will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 7.

If you have any questions, concerns or requests regarding me77's Privacy Policy or the handling of your personal data, our team is always ready to assist.