Privacy Policy spy77 – Your Data, Fully Protected

Spy77 ("we", "Platform", "spy77") understands how important the privacy of your personal data is to you as a user. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the spy77 website at https://spy77.ws, the mobile app, and all related services.

By accessing or using spy77's services, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue your use of the spy77 platform.

Spy77 collects various types of information from users depending on how you interact with our platform. Below are the categories of information we may collect:

Identity & Contact Information

• Full name as shown on your identity card or passport
• National identity card number (MyKad) or passport number for KYC verification purposes
• Date of birth for age verification (ensuring users are 18 years of age or older)
• Active email address
• Malaysian mobile phone number
• Current residential address

Financial Information

• Malaysian bank account number registered for withdrawals
• Digital wallet information (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Transaction records via FPX (Maybank2u, CIMB Clicks)

Activity & Usage Data

• Gaming history — slots, live casino, blackjack, football, lottery, and e-sports
• Betting and winnings records
• Gaming session times and duration
• Self-exclusion limits you have set

Technical Data

• Your device's IP address
• Browser type and version
• Device operating system (Android, iOS, Windows)
• Approximate geolocation information
• Access logs and technical error data

Spy77 uses your personal data only for legitimate, specified purposes. We do not use your data for any purpose beyond the scope stated below without first obtaining your consent.

• Account Management: Creating and managing your spy77 account, including identity verification and login credential management.
• Transaction Processing: Processing deposits and withdrawals in MYR via DuitNow, Touch 'n Go, GrabPay, FPX, and other supported Malaysian payment methods.
• Service Delivery: Enables you to enjoy all games on spy77 — slots, Live Casino, blackjack, Malaysia Super League and EPL football betting, lottery, and e-sports.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, bonus abuse, and other unlawful activities.
• Legal Compliance: To meet the legal and regulatory obligations applicable to spy77.
• Platform Improvements: Analysing usage patterns in aggregate (not individually) to improve the spy77 user experience.
• Service Communications: Sending important notifications related to your account, transactions, and security.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate assistance.

Spy77 does not sell or transfer your personal data to third parties for their commercial purposes. However, in certain limited situations, spy77 may need to share your information with the following parties:

• Payment Service Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u (FPX), and CIMB Clicks providers for processing your financial transactions in MYR only.
• Game Software Providers: Software companies that provide slots, Live Casino, and blackjack games for technical game delivery purposes. They do not receive your financial information or full identity details.
• Statutory Authorities: Malaysian government agencies or regulatory bodies that are legally entitled to obtain such information.
• Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations.

All third parties we work with are required to uphold the same data protection standards as spy77 and are not permitted to use your data for any purpose beyond what is specified in their agreement with spy77.

Spy77 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL Encryption: All data transmitted between your device and spy77's servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's major banks.
• Data-at-Rest Encryption: Sensitive data stored in spy77's databases is encrypted for added protection.
• Strict Access Controls: Only authorised spy77 staff who require access to carry out their duties may access your personal data.
• Two-Factor Authentication (2FA): spy77's internal systems use 2FA for all access to sensitive customer data.
• 24/7 Security Monitoring: Automated security systems operate around the clock to detect suspicious activity or security breaches.
• Regular Security Audits: spy77 conducts regular internal and external security audits to identify and address any vulnerabilities.

Spy77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Disabling essential cookies may affect core functionality of the spy77 platform. Disabling functional or analytical cookies will not affect your ability to play and transact on spy77.

Spy77 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law, whichever is longer.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Game Activity Logs: Retained for 3 years for dispute resolution and audit purposes.
• Customer Service Communications: Retained for 2 years after your last interaction.

Your data is processed and stored on servers located in zones that meet high security standards. Any cross-border data transfers are carried out with appropriate safeguards and in accordance with applicable legal requirements.

The spy77 platform is exclusively for users aged 18 and above. spy77 does not knowingly collect, process, or store any personal data of individuals under the age of 18.

Should spy77 discover that personal data of anyone under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

As a spy77 user subject to Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right to Access: You have the right to obtain a copy of the personal data spy77 holds about you.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete data.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time without affecting the validity of any processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
• Right to Data Portability: You have the right to receive your data in a machine-readable format.

To exercise any of the rights above, please contact spy77's Data Protection Officer (DPO) by email at privacy@spy77.ws. We will respond to your request within 30 business days.

Spy77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Act establishes seven data protection principles that spy77 fully adheres to:

1. General Principles: Personal data is processed lawfully and fairly.
2. Notice & Choice Principle: You are informed about data processing and given the choice to opt in or opt out.
3. Disclosure Principles: Data is disclosed only for the purposes stated at the time of collection.
4. Security Principles: Appropriate security measures are in place to protect your data.
5. Retention Principle: Data is not retained longer than necessary.
6. Data Integrity Principle: Data is kept accurate, complete, and up to date.
7. Access Principle: You have the right to access your data and request corrections to it.

Spy77 reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, service requirements, or applicable law. Any amendments take effect immediately upon publication on the spy77 website with an updated effective date.

For material amendments — those that significantly change how we process your personal data — spy77 will endeavour to provide advance notice of at least 14 days before amendments take effect, via email notification or in-platform.

Your continued use of the spy77 platform following any policy amendments will be considered your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by spy77, please contact us via:

• Privacy Email (DPO): privacy@spy77.ws
• General Support Email: support@spy77.ws
• Live Chat: Available 24/7 on the spy77 platform
• WhatsApp: Available after logging in to your spy77 account

Spy77's Data Protection Officer (DPO) will respond to privacy enquiries within 14 business days. For urgent matters involving a security breach or unauthorised access, please contact us via live chat for an immediate response.