Personal Data Protection

Vr77 Privacy Policy — Protection of Your Personal Data

Vr77 is committed to protecting the privacy and personal data of every member. This policy clearly outlines how we collect, use, store, and protect your information in accordance with Malaysian data protection laws.

Updated: 1 January 2026
Malay
SSL 256-Bit
PDPA Compliant

Vr77's Commitment to Your Privacy

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect necessary data, store it securely, and will never sell your personal information to any third party for commercial purposes without your consent.

1

Introduction & Scope of This Privacy Policy

Vr77 ("we", "Platform") takes your privacy very seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using the vr77 website, mobile app, and all related services.

This policy applies to all users of the vr77 platform, including website visitors, registered members, and anyone who interacts with our services through any channel — whether via web browser, Android app, or iOS. By using the vr77 platform, you agree to the terms set out in this Privacy Policy.

Important Note: If you disagree with any part of this Privacy Policy, please discontinue use of the vr77 platform and contact our support team to request account closure and deletion of your personal data.

We reserve the right to update this Privacy Policy from time to time in line with changes to legislation, technology, or our business operations. Any amendments will be posted on this page and, if the changes are significant, we will notify you via email or in-app notification.

2

Types of Personal Data We Collect

Vr77 collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

2.1 Information You Provide Directly

  • Registration information: Full name, phone number, email address, date of birth, and encrypted password.
  • Identity verification documents (KYC): A copy of your MyKad, passport, or valid identification document, a facial verification selfie, and proof of residential address.
  • Financial information: Bank account number, account holder name, e-wallet details (Touch 'n Go eWallet, Boost, GrabPay), and USDT crypto wallet address for withdrawal purposes.
  • Support communications: All conversations with the vr77 customer support team via Live Chat, email, or other channels.

2.2 Information Collected Automatically

  • Device & technical data: IP address, browser type, operating system, device model, screen resolution, and language settings.
  • Usage data: Pages visited, time spent, games played, session frequency, and wagering patterns.
  • Transaction data: Deposit history, withdrawal history, wagering activity, wins, losses, and bonus usage.
  • Approximate location data: General location based on IP address for geographic zone verification purposes.
Data Category Example Mandatory / Optional
Identity Name, MyKad, date of birth Mandatory
Contact Email, phone number Mandatory
Financial Bank accounts, e-wallets Mandatory (for withdrawals)
Technical IP address, device type Automatic
Usage Game history, transactions Automatic
Marketing Promotion preferences, language preferences Preferences
3

Purposes for Using Your Personal Data

Vr77 uses your personal data for legitimate and necessary purposes in order to deliver high-quality services to you. We will not use your data for any purpose not stated below without first obtaining your consent.

3.1 Account Management & Services

  • Creating and managing your member account on the vr77 platform.
  • Verifying your identity through the KYC process as required by the authorities.
  • Processing deposits, withdrawals, and other financial transactions securely and accurately.
  • Crediting bonuses, promotions, and VIP reward points to your account.
  • Providing responsive and effective customer support.

3.2 Security & Fraud Prevention

  • Detecting and preventing unauthorised access, fraud, money laundering, and bot usage.
  • Monitoring transaction patterns to identify suspicious activity.
  • Verifying that users meet the minimum age requirement of 18 years.
  • Complying with reporting obligations to relevant authorities as required by law.

3.3 Platform Improvement & Marketing

  • Analysing usage patterns to improve the platform's design, performance, and features.
  • Sending promotional notifications, personalised offers, and product updates — if you have consented to receive them.
  • Conducting internal market research to better understand member needs.
Right to Withdraw Consent: You may stop receiving marketing communications at any time by updating your preferences in your account settings or by contacting our support team. Withdrawing marketing consent will not affect your ability to use core vr77 services.
4

Data Storage & Security Measures

Vr77 continually invests in sophisticated cybersecurity infrastructure to ensure your personal data is always protected against unauthorised access, loss, or accidental disclosure.

4.1 Data Protection Technology

  • 256-bit SSL encryption: All communications between your device and vr77 servers are protected by bank-grade encryption.
  • Data encryption at rest: Sensitive data such as identity card numbers, banking information, and passwords are stored in encrypted format using AES-256 algorithms.
  • Two-factor authentication (2FA): An additional security layer for account access and high-value withdrawals.
  • 24/7 Monitoring: Intrusion detection systems (IDS) and enterprise-grade firewalls operate around the clock to protect our infrastructure.

4.2 Data Retention Period

Vr77 retains your personal data for as long as your account is active or as long as necessary to fulfil the purposes stated in this Policy. Following account closure, certain data may be retained for periods prescribed by Malaysian law, specifically:

  • KYC documents and transaction records: Retained for 7 years after account closure in accordance with anti-money laundering (AMLA) legal requirements.
  • Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
  • Technical data and access logs: Retained for 12 months for security and audit purposes.
Server Location: vr77 members' personal data is stored in secure data centres. All cross-border data transfers are subject to strict data protection agreements and comply with the requirements of PDPA 2010.
5

Sharing & Disclosure of Data to Third Parties

VR77 does not sell your personal data to any third party for commercial purposes. However, in certain situations, we may need to share your information with the following parties in order to deliver our full range of services:

5.1 Payment Service Providers

Required financial details are shared with authorised payment processors such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and USDT exchange platforms to securely process deposit and withdrawal transactions. All our payment partners are bound by strict confidentiality agreements.

5.2 Game Software Providers

Required game data is shared with our game platform providers to ensure a smooth, fair, and consistent gaming experience across all game categories, including Bingo, fish shooting games, and Live Casino.

5.3 Authorities & Legal Requirements

Vr77 will disclose personal data to the relevant authorities when required by Malaysian law, court order, or directive from a legitimate regulatory body. This includes disclosure to the Financial Intelligence and Enforcement Department (FIED), the Companies Commission of Malaysia (SSM), or any law enforcement agency making a lawful request.

Warning: vr77 will never ask you to share your password, PIN, or bank card details via email, SMS, or Live Chat. Any such request is fraudulent and should be reported to us immediately.
6

Use of Cookies & Tracking Technologies

Vr77 uses cookies and similar tracking technologies to enhance the user experience, analyse website performance, and deliver more relevant content to you.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session authentication and account security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymised usage statistics to help us understand how users interact with the platform and identify areas for improvement.
  • Functional Cookies: Saving your preferences such as language, display currency, and interface settings so you don't need to reconfigure them each time you log in.
  • Analytics Cookies: Used to understand overall website traffic patterns for internal strategic planning purposes.

6.2 Managing Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the vr77 platform and cause certain features to not work properly. For step-by-step guidance on managing cookies, refer to your web browser's help documentation.

7

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and vr77's internal policies, you have the following rights regarding the personal data we hold:

Right of Access

You have the right to request a copy of all personal data we hold relating to your account.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

You may request that the processing of your data be restricted in certain situations while a dispute is being resolved.

To exercise any of the above rights, please contact the vr77 data protection team by email at [email protected]. We will process your request within 30 days business days from the date the request is received.

8

Children's Data Protection

The vr77 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal data from children or individuals under the age of 18. Our registration process is designed with age verification steps to prevent underage sign-ups.

If we find that personal data has been collected from individuals under the age of 18 without proper verification, we will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child has registered with vr77 are urged to contact us immediately at [email protected].

Strict Age Limit: Registration and use of the vr77 platform is restricted to individuals who have reached the age of 18. Age verification via valid KYC documents is mandatory before any financial transaction is permitted.
9

Amendments to This Privacy Policy

Vr77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. We will post the latest version on this page with the most recent amendment date updated accordingly.

For amendments deemed significant — such as changes to how we use your data or your rights — we will provide advance notice of at least 14 days before the changes take effect, via in-app notification or email to your registered address.

Continued use of the vr77 platform after the effective date of any amendment will be considered your acceptance of the revised Privacy Policy. If you do not agree to the amendments, you have the right to close your account before the effective date.

10

Contact Us — vr77 Data Protection Officer

If you have any questions, concerns, or complaints regarding how vr77 handles your personal data, we encourage you to reach out to us directly. Our Data Protection Team is ready to assist you.

Data Protection Email: [email protected]
Response time: within 3 business days. For urgent account security issues, use the in-platform Live Chat for immediate 24/7 response.

You may also refer data protection complaints to Malaysia Department of Personal Data Protection (JPDP) if you are not satisfied that your complaint has been resolved adequately by vr77. Further information about the PDPA authority can be found on the official website of the Malaysian Ministry of Communications.

Six Ways vr77 Protects Your Personal Data

We don't just comply with the law — we go beyond minimum standards to keep your information safe at all times.

256-Bit SSL Encryption

All data transmitted between your device and vr77 servers is protected by the same level of encryption used by leading banks in Malaysia.

Strict & Secure KYC

Our identity verification process ensures only legitimate users can access the platform, protecting you from identity misuse.

PDPA 2010 Compliance

The vr77 privacy policy is fully drawn up in compliance with Malaysia's Personal Data Protection Act 2010, ensuring your rights are always protected.

No Data Sales

Vr77 has never and will never sell your personal data to advertisers, data brokers, or any third party for commercial purposes.

Two-Factor Authentication

An additional security layer via 2FA ensures only you can access your vr77 account, even if your password is compromised.

Round-the-Clock Monitoring

Vr77's cybersecurity team monitors the infrastructure 24 hours a day, 7 days a week to detect and neutralise threats before they affect you.

Your Data Is Safe — Join vr77 Today

With bank-grade security and a transparent privacy policy, you can play with peace of mind alongside more than 500,000 active members who trust vr77 every day.

Bahasa Melayu