PRIVACY POLICY

Privacy Policy mclub77 — Member Personal Data Protection

Your privacy is not just a priority — it is our responsibility. mclub77 is committed to protecting every piece of personal information you share with us, in full compliance with Malaysia's Personal Data Protection Act 2010.

Updated: January 2026

Why Your Privacy Is Safe at mclub77

Six key pillars that make personal data protection at mclub77 among the most transparent and robust of any online gaming platform in Malaysia.

256-bit SSL Encryption

All data transmitted between your device and mclub77 servers is protected by military-grade 256-bit SSL encryption. Your personal and financial information cannot be stolen or intercepted in transit.

Secure Data Storage

Member personal data is stored on servers protected by multi-layered access controls. Only specifically authorised staff can access sensitive information, and all access is logged and monitored.

Secure KYC

Your identity verification (KYC) process is conducted through a secure, integrated system. Identity documents such as national ID cards or passports are processed in an encrypted environment and are never shared with third parties.

No Data Sales

Mclub77 has never and will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your data belongs to you — it is not our business commodity.

PDPA 2010 Compliance

The mclub77 privacy policy is fully structured in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). We adhere to all data processing principles prescribed by law, including the principles of security, integrity, and access.

Data Breach Notification

Should any security incident occur that affects your personal data, mclub77 is committed to notifying affected members within 72 hours. We will take immediate remedial action to protect your interests.

This Privacy Policy explains how mclub77 collects, uses, stores, and protects your personal data. By using our platform, you agree to the terms set out in this policy.

1 Introduction

Mclub77 is an online gaming platform operating under the domain mclub77.cc, dedicated to players in Malaysia. We take the protection of members' personal data very seriously. This Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail how we manage the information you share with us.

As a platform trusted by hundreds of thousands of members across Malaysia, mclub77 understands that your trust is our most valuable asset. We do not merely comply with existing data protection laws — we consistently strive to go beyond the minimum standards set, to ensure your personal data remains in the safest hands.

This policy applies to all registered members, website visitors, and anyone who interacts with the mclub77 platform through any channel, including our website, mobile app, and customer support channels.

mclub77 is appointed as the Data Controller under Malaysia's PDPA 2010. Our Data Protection Officer can be reached via our official support email for any privacy-related enquiries.

2 Data We Collect

Mclub77 collects personal data necessary to provide a safe, fair, and legally compliant online gaming platform. We only collect data that is genuinely required and do not gather excessive information beyond the stated purposes.

A. Registration and Identity Data

  • Full name as shown on official identification documents
  • Malaysia national identity card number (MyKad) or passport number
  • Date of birth to verify age eligibility (18 years and above)
  • Active email address for account communications
  • Active Malaysian mobile phone number
  • Current residential address (for certain KYC processes)

B. Financial Transaction Data

  • Bank account holder name and account number for withdrawal processing
  • Digital wallet information (Touch 'n Go, GrabPay) linked to your account
  • Complete records of all deposit and withdrawal transactions, including date and time
  • Account balance history and game credit movement

C. Platform Usage Data

  • IP address and city-level geolocation data (not precise GPS)
  • Device type, operating system, and web browser version used
  • Game activity logs including bets, wins, and session duration
  • Records of interactions with the customer support team
  • mclub77 does not collect precise GPS data, personal email content, or information from your social media accounts

3 How We Use Your Data

Every piece of data collected by mclub77 is used for clearly defined and lawful purposes. We do not process your personal data beyond the scope of the following purposes without first obtaining your additional consent.

Purpose of Use Legal Basis Data Involved
Identity verification and KYC Legal obligations Name, ID, date of birth, documents
Deposit and withdrawal processing Contract performance Banking details and transaction records
Member account management Contract performance Email, phone number, password
Fraud prevention and AML Legitimate interests / legal obligations IP, activity logs, transactions
24/7 customer support Contract performance Communication records and account information
Promotional and bonus notifications Member consent Email, phone number
Platform analytics and improvement Legitimate interests Anonymised usage data

For direct marketing purposes such as exclusive bonus promotions and special offers, we will obtain your explicit consent at registration. You may withdraw this consent at any time via your account settings or by contacting our support team.

4 Third-Party Disclosure

Mclub77 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes under any circumstances. However, there are limited situations where we need to share certain information with trusted parties to enable the platform to operate safely and in compliance with the law.

  • Payment service providers — transaction information is shared with FPX, Touch 'n Go, and GrabPay providers solely to process your deposits and withdrawals
  • Licensed game providers — username and session ID are shared with game providers to enable gameplay; no sensitive financial information is shared
  • Identity verification services — KYC information is shared with licensed identity verification providers for MyKad or passport verification processes
  • Regulatory authorities — we comply with lawful information requests from Malaysian government agencies such as Bank Negara Malaysia or law enforcement authorities when required by law
  • We do not share data with advertising companies, data aggregators, or any third parties for third-party marketing purposes
  • We do not disclose information to social media platforms or subsidiaries unrelated to mclub77 operations
All third parties that receive personal data from mclub77 members are bound by strict data protection agreements. They are prohibited from using that data for any purpose other than what is specified in their agreement with mclub77.

5 Cookies and Tracking Technologies

Mclub77 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain login session security, and understand how members use our services so we can continuously improve them.

Types of Cookies Used

  • Necessary Cookies — required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled.
  • Functional Cookies — stores your preferences such as betting display size, favourite game mode, and notification settings for a more personalised experience.
  • Analytics Cookies — helps us understand which pages are most frequently visited, how long members play, and where technical issues occur. This data is used in aggregated and anonymised form.
  • mclub77 does not use third-party cookies for advertising or cross-site tracking purposes

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect certain functions of the mclub77 platform. For detailed guidance on managing cookies across different browsers, please refer to your browser's help documentation.

6 Data Security

Mclub77 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure. Our security infrastructure is regularly updated in line with the latest industry standards.

  • 256-bit SSL/TLS encryption for all communications between user devices and mclub77 servers
  • Member passwords are stored using bcrypt hashing with a unique salt — no one at mclub77 can ever view your original password
  • Two-factor authentication (2FA) is available for all member accounts as an additional layer of security
  • Intrusion detection system (IDS) operating 24/7 to detect and block suspicious activity
  • Automatic data backup to geographically separate data centers for disaster recovery
  • Security audits by independent third parties are conducted at least twice a year
  • Role-based access control (RBAC) ensures staff can only access data required for their specific duties
While no system can guarantee absolute security, mclub77 applies the same security standards used by banking institutions to protect our members' data and funds.

7 Data Retention and Deletion

Mclub77 retains members' personal data only for as long as needed to fulfil the purpose of collection, meet legal obligations, and resolve any disputes that may arise. Once the defined retention period ends, data will be securely deleted or anonymised.

  • Active account — all data is retained for the duration of the active account period plus 5 years after account closure, in accordance with Malaysia's financial regulatory compliance requirements
  • Transaction records — retained for a minimum of 7 years in accordance with Anti-Money Laundering (AMLA) legal requirements
  • Support communication logs — retained for 3 years for quality control and dispute resolution purposes
  • Website analytics data — deleted or anonymised after 26 months
  • Once the retention period expires, data is deleted using methods that ensure it cannot be recovered

If you close your mclub77 account, you may request early deletion of your personal data subject to our legal obligations to retain certain records. Deletion requests can be submitted to our support team.

8 Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding your personal data held by mclub77. We are committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to obtain a copy of all personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction at any time via your account settings or customer support.

Right to Erasure

You may request deletion of your personal data, subject to applicable legal obligations and active contractual requirements.

Right to Withdraw Consent

For consent-based processing such as marketing, you may withdraw your consent at any time without affecting core services.

Right to Data Portability

You may request a copy of your data in a machine-readable format (JSON or CSV) for transfer to another platform.

Right to Object

You have the right to object to the processing of your data based on our legitimate interests, including profiling for direct marketing purposes.

To exercise any of the rights above, contact the mclub77 Data Protection Officer via our support email. We will verify your identity before processing any request to ensure only you can access or modify your own data.

9 International Data Transfers

In the course of platform operations, some member personal data may be processed or stored on servers located outside Malaysia, particularly in connection with licensed international game providers. mclub77 ensures that all international data transfers are carried out with adequate safeguards.

  • All international data transfers are governed by data processing agreements that comply with international data protection standards
  • Recipient countries are confirmed to have a level of data protection equivalent to or higher than Malaysia
  • Sensitive financial data of Malaysia members is processed and stored within Malaysia in accordance with Bank Negara Malaysia requirements
  • Members may request further information about the countries where their data may be processed by contacting our support team

10 Changes to the Privacy Policy

Mclub77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform developments. Any significant changes will be communicated to members through the following methods:

  • In-platform notification upon your next login after changes take effect
  • Email notification to your registered account address at least 14 days before changes take effect
  • Notice banner on the mclub77 homepage for at least 7 consecutive days
  • The date of the most recent update is always displayed at the top of this page for your reference
  • Previous versions of the privacy policy can be requested from our support team for comparison

Continued use of the mclub77 platform after any amendments are published and take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account and request the deletion of your personal data.

Minor updates such as spelling corrections, terminology clarifications, or contact information changes may be made without specific notice, but the update date at the top of the page will always reflect the latest revision.

11 Contact Us

If you have any questions, concerns, or complaints regarding how mclub77 handles your personal data, our Data Protection Officer is ready to assist. We are committed to responding to every enquiry thoroughly and within a reasonable timeframe.

  • 24/7 live chat within the mclub77 platform — the fastest way to get an immediate response
  • Data Protection Officer Email: [email protected] — data rights requests are responded to within 21 business days
  • Section FAQ we include answers to frequently asked questions related to privacy and account security

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Malaysia Personal Data Protection Commissioner under the Ministry of Communications and Digital.

The mclub77 support team is fluent in both Bahasa Melayu and English. For formal requests relating to data rights, please include "PDPA Data Rights Request" in your email subject line so it can be handled by a qualified Data Protection Officer.
PLAY RESPONSIBLY

Your Data Is Safe — Time to Play

Mclub77 protects your privacy to the highest standard. Register your account today and enjoy a safe, fair, and enjoyable gaming experience with the Malaysian member community.

Bahasa Melayu