Introduction
This Privacy Policy ("Policy") governs the collection, storage, processing, and disclosure of personal data by 77evo ("the Platform", "we", "us", or "our") in connection with the website accessible at 77evo.cam. The platform is directed primarily at adult users in Malaysia and is operated in compliance with applicable personal data protection principles.
By registering an account, using the platform, or submitting any personal information to 77evo, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.
This Policy forms part of the broader agreement between you and 77evo and should be read together with the Terms & Conditions and the Responsible Gambling policy. Where there is a conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.
Definitions
For the purposes of this Policy, the following definitions apply:
- "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, contact details, financial information, and device identifiers.
- "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means 77evo as the entity that determines the purposes and means of Processing Personal Data collected through the platform.
- "Data Processor" means any third party engaged by 77evo to Process Personal Data on its behalf.
- "User" means any individual who accesses, registers with, or uses the 77evo platform.
- "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the Processing of their Personal Data.
- "KYC" means the Know Your Customer identity verification procedures required prior to processing withdrawals or unlocking certain account features.
- "Cookies" means small text files placed on a user's device by the platform to enable functionality, analytics, and session management.
Data We Collect
77evo collects Personal Data that users provide directly and data generated automatically through use of the platform. The categories of data collected include:
Identity and contact data:
- Full legal name and date of birth;
- Malaysian identification number (MyKad number) or passport number for KYC purposes;
- Residential address, including city (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam);
- Email address and mobile telephone number.
Financial and payment data:
- Payment method details sufficient to process deposits and withdrawals, including account names associated with e-wallets (Touch 'n Go eWallet, Boost, GrabPay), Malaysian bank accounts (Maybank, CIMB, Public Bank, Hong Leong), DuitNow registrations, FPX identifiers, and card details where applicable;
- Transaction history, including deposit amounts, withdrawal requests, and balances denominated in Malaysian Ringgit (MYR).
Technical and usage data:
- IP address, device type, operating system, and browser version;
- Session duration, pages visited, click-path data, and feature interactions;
- Login timestamps and geographic location data derived from IP address.
Communication data:
- Records of support interactions via live chat, email, or messaging platforms;
- Feedback, complaint submissions, and account-related correspondence.
How Data Is Collected
77evo collects Personal Data through the following channels:
- Direct submission: data provided by the user during account registration, KYC document upload, deposit or withdrawal requests, support ticket submissions, or bonus claim forms;
- Automated collection: data collected automatically via cookies, web beacons, log files, and session tracking tools when a user interacts with the platform;
- Third-party sources: identity verification data from KYC service providers, fraud detection services, and payment processors where necessary to fulfil legal or operational obligations;
- Device and network data: technical information transmitted automatically by the user's browser or mobile device upon accessing the platform.
Data Processing & Use
77evo processes Personal Data for the following purposes:
- Account management: creating, verifying, and maintaining registered user accounts;
- Identity verification (KYC): confirming that users are aged 21 or above and meet eligibility requirements;
- Payment processing: facilitating deposits and withdrawals via eligible Malaysian payment channels including DuitNow, FPX, e-wallets, and bank transfers;
- Regulatory compliance: meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable compliance obligations;
- Customer support: responding to enquiries, resolving disputes, and providing account assistance;
- Platform security: detecting, preventing, and investigating fraud, unauthorised access, and abuse of platform features;
- Responsible gambling: monitoring usage patterns to identify potential problem gambling behaviours and applying self-exclusion or limit requests;
- Service improvement: analysing aggregate usage data to improve platform performance, navigation, and the overall user experience;
- Communication: sending account-related notifications, transaction confirmations, security alerts, and where consent has been obtained, promotional communications.
77evo does not use Personal Data for automated decision-making that produces legal or similarly significant effects on users without human review, except where required by applicable legal or regulatory obligations.
Legal Basis for Processing
Processing of Personal Data by 77evo is conducted on one or more of the following legal bases:
- Contractual necessity: Processing is required to perform the contract between 77evo and the user, including account registration, payment processing, and service delivery;
- Legal obligation: Processing is required to comply with applicable laws and regulations, including KYC, AML, and data protection obligations;
- Legitimate interests: Processing is carried out in pursuit of the legitimate interests of 77evo, including fraud prevention, platform security, and service improvement, where these interests are not overridden by the rights and freedoms of the user;
- Consent: Processing is based on the user's explicit, freely given consent, particularly in relation to marketing communications and non-essential cookies. Consent may be withdrawn at any time.
Data Sharing & Disclosure
77evo does not sell Personal Data to third parties. Personal Data may be shared in the following limited circumstances:
- Payment processors and e-wallet providers: data necessary to facilitate transactions via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, and card processors is shared with the respective providers;
- Identity verification providers: KYC documentation is processed by authorised third-party verification services operating under confidentiality obligations;
- Fraud and security services: technical and behavioural data may be shared with fraud detection providers to protect the platform and its users;
- Legal and regulatory authorities: Personal Data may be disclosed to Malaysian regulatory bodies, law enforcement agencies, or courts where required by applicable law or a valid legal order;
- Professional advisors: data may be disclosed to legal counsel, auditors, or compliance consultants operating under professional confidentiality obligations.
Where Personal Data is shared with third-party Data Processors, 77evo ensures that appropriate contractual safeguards are in place to govern the Processing and protect the rights of users.
Cookies & Tracking Technologies
77evo uses cookies and similar tracking technologies to operate the platform, maintain user sessions, and analyse aggregate traffic patterns. The categories of cookies used include:
- Essential cookies: required for core platform functionality including login session management and security features. These cannot be disabled without impairing platform operation;
- Analytical cookies: used to collect aggregate data on page visits, user flows, and feature usage to improve the platform. Data is processed in anonymised or pseudonymised form;
- Preference cookies: store user settings such as language preferences and display configurations to improve the experience on return visits.
Users may manage non-essential cookie preferences through their browser settings. Disabling analytical or preference cookies will not prevent access to the platform but may affect the quality of some features.
Data Retention
77evo retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations. General retention principles include:
- Account and identity data is retained for the duration of the account's active status and for a period of up to seven years following account closure, in compliance with AML and record-keeping obligations;
- Transaction records are retained for a minimum of seven years from the date of the transaction;
- Support and communication records are retained for up to three years from the date of the interaction unless a longer retention period is required for dispute resolution;
- Technical and session data is retained in aggregated or anonymised form for analytical purposes and may be held indefinitely in that form.
Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.
Data Security
77evo implements industry-standard technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between users and the platform;
- Encrypted storage of sensitive account and financial data at rest;
- Access controls limiting Personal Data access to authorised personnel with a demonstrated operational need;
- Regular security assessments and monitoring to detect and respond to potential vulnerabilities or incidents;
- Staff training on data protection obligations and secure handling procedures.
In the event of a data security incident that poses a risk to user rights and freedoms, 77evo will take prompt remedial action and notify affected users in accordance with applicable obligations.
User Rights
Subject to applicable law, users of the 77evo platform have the following rights in relation to their Personal Data:
- Right of access: you may request a copy of the Personal Data held about you by 77evo;
- Right to rectification: you may request correction of any inaccurate or incomplete Personal Data we hold;
- Right to erasure: you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
- Right to restriction: you may request that Processing of your Personal Data be restricted in certain circumstances, such as where you contest its accuracy;
- Right to object: you may object to Processing of your Personal Data where that Processing is based on 77evo's legitimate interests;
- Right to withdraw consent: where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior Processing;
- Right to data portability: where technically feasible and legally applicable, you may request that Personal Data be provided in a structured, machine-readable format.
Requests to exercise any of the above rights should be submitted in writing to the 77evo support team via the official website email address. 77evo will respond to verified requests within a reasonable timeframe, typically within 30 days.
Minors
Where 77evo becomes aware that Personal Data has been collected from an individual under the age of 21, that data will be deleted promptly and the associated account will be permanently closed. Any funds held in such an account are subject to forfeiture in accordance with the Terms & Conditions.
If you believe that a minor may have registered an account or submitted Personal Data to 77evo, please contact the support team immediately so that appropriate action can be taken.
Third-Party Services
The 77evo platform may integrate with third-party services including payment gateways, identity verification providers, and analytics platforms. Each third-party service operates under its own privacy policies, and 77evo is not responsible for the data handling practices of external providers.
Where third parties act as Data Processors on behalf of 77evo, they are contractually required to process Personal Data only in accordance with 77evo's instructions and applicable data protection obligations. Third-party providers are selected on the basis of their demonstrated security and compliance standards.
The 77evo platform does not contain links to external websites for commercial purposes. Where internal links to other pages of 77evo.cam exist, those pages are subject to this same Privacy Policy.
Policy Amendments
77evo reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or platform operations. Material changes will be communicated to registered users via the platform's notification system or by email to the registered address, with a reasonable notice period before the changes take effect.
Continued use of the 77evo platform following the effective date of any amendment constitutes acceptance of the revised Policy. The current version of this Policy is always available at 77evo.cam/privacy-policy and is identified by the "Last reviewed" date in the contents panel.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the 77evo data protection team:
- Website email: [email protected]
- Support availability: 24 hours a day, 7 days a week
- Response language: English
- Typical response time: within 30 calendar days for formal data rights requests
When submitting a data rights request, please clearly identify yourself, specify the right you wish to exercise, and provide sufficient information to enable 77evo to locate and verify your account before disclosing or modifying any Personal Data.
For matters relating to account terms and conditions, please refer to the 77evo Terms & Conditions.