Monte77 Privacy Policy – Player Data Protection in Malaysia

At monte77, we believe that player trust is our most valuable asset. That trust is not built solely through a great gaming experience or seamless payouts — it is also built through how we handle the information you entrust to us. This Privacy Policy is written in plain language, not confusing legalese, so you can genuinely understand what happens with your data.

Monte77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are legally obligated to protect your personal data, use it only for the purposes we have disclosed, and ensure you retain control over your own information. Compliance is not optional for us — it is both a legal requirement and a moral responsibility.

1. Personal Data We Collect

Monte77 only collects data that is genuinely necessary to deliver our services safely and effectively. We do not collect excessive or irrelevant data. Below are the categories of data we collect and how each is gathered:

Data you provide directly:

• Full name, MyKad identification number, date of birth, and gender (for identity verification)
• Email address and Malaysian mobile number
• Bank account or eWallet details for deposits and withdrawals (account number, account holder name, bank type)
• Username and password (stored in encrypted hash form — we cannot view your actual password)
• Additional information you provide during the KYC (Know Your Customer) verification process

Data collected automatically during platform use:

• IP address and network information
• Device type, operating system and browser version
• Records of all login sessions, including date, time, and duration
• A complete record of all gaming activity — bets placed, games played, wins and losses
• Records of all financial transactions including deposits, withdrawals and bonus adjustments
• Cookie data and tracking technologies as described in Section 5

2. Purpose of Data Collection and Processing

Monte77 only processes your personal data for legitimate, disclosed purposes. We do not use your data for any purpose beyond what is stated here without informing you in advance. Below is a complete list of data processing purposes and the legal basis supporting each:

Monte77 uses gameplay activity records for responsible gambling purposes — if our system detects patterns that may indicate a gambling problem, our team may reach out to the player in question to offer support. This is a use of data we consider both important and responsible, not mere passive monitoring.

3. How Monte77 Protects Your Personal Data

Player data security is an ongoing investment at monte77 — not a cost we look to minimise. We employ multiple layers of protection to keep your data safe from both external and internal threats:

• 256-bit SSL Encryption: All communications between your browser and monte77's servers are encrypted using TLS 1.3 with 256-bit keys — the same standard used by Malaysia's leading banking institutions
• Data-at-rest encryption: Sensitive data stored in our databases — including identity and financial information — is encrypted even at rest, not only during transmission
• Internal access controls: Only authorised staff with a legitimate operational need may access player data. All access is logged and monitored automatically
• Encrypted passwords: Account passwords are stored using the bcrypt hashing algorithm — meaning even we cannot see your actual password; only you know it
• Regular security audits: Monte77 undergoes regular security audits by independent firms to identify and address vulnerabilities before they can be exploited
• 24/7 anomaly monitoring: Our automated systems monitor for unusual activity patterns around the clock and will proactively flag or block any suspicious behaviour
• Protected infrastructure: monte77 servers are hosted in certified data centres with physical security, disaster recovery and documented incident response procedures

4. Data Sharing with Third Parties

Monte77 does not sell, rent, or trade players' personal data with any third party for commercial purposes. This is an unwavering principle. That said, there are limited situations where sharing data is necessary to operate the platform properly:

Approved service processors (service providers, not data owners):

• Payment gateway providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay — information shared is limited to what is necessary to process the transaction. We do not share your gaming records or activity history with payment providers
• Gaming software providers: Companies providing slots, Live Casino, and table game content may receive the minimum technical data required to operate those games. This data does not include your full identity
• Cloud and infrastructure services: Technical infrastructure providers used to operate the monte77 platform — all of whom are bound by strict data protection agreements
• Identity verification services: Third-party KYC providers who assist in verifying player identities for legal compliance

Legally required disclosure:

• Malaysian law enforcement authorities where a valid court order or lawful request has been made in accordance with legal procedure
• The Financial Intelligence Unit under Bank Negara Malaysia in cases involving suspected money laundering
• Malaysian tax authorities where applicable reporting obligations are in force

5. Cookies & Tracking Technologies

Monte77 uses cookies and similar tracking technologies to keep the platform running smoothly and to improve your user experience. Cookies are small text files stored on your device when you visit the monte77 website. The following are the types of cookies we use:

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may prevent certain monte77 platform functions — including login — from working properly. Monte77 does not use third-party cookies for advertising or cross-site tracking purposes.

6. Your Rights Under Malaysia's PDPA

As a data subject protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by monte77. Monte77 is committed to helping you exercise these rights free of charge and within a reasonable timeframe:

• Right to Access: You may request a copy of all personal data we hold about you. We will provide this within 21 business days of receiving your request
• Right to Rectification: If any of your personal data is inaccurate or out of date, you may request that we correct it. Amendments relating to your name or identity information may require supporting documentation
• Right to Erasure: You may request the deletion of your personal data under certain circumstances. Please note that we may be required to retain some data to fulfil legal obligations (such as transaction records for AML compliance) even after account closure
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. We will honour this objection immediately
• Right to Portability: You may request your data in a structured, machine-readable format (such as JSON or CSV) for transfer to another platform
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. This does not affect the validity of any processing carried out before the withdrawal

7. Data Retention & Deletion

Monte77 does not retain personal data for longer than necessary. Retention periods depend on the type of data and the applicable legal requirements:

• Active account information: Retained for as long as your monte77 account remains active
• Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysian financial compliance requirements
• Game activity records: Retained for 3 years for dispute resolution and internal audit purposes
• Security logs: Retained for 90 days for threat detection and security incident investigation purposes
• Support communication records: Retained for 2 years from the date of last communication
• Identity verification data (KYC): Retained for 5 years after account closure in accordance with AML legal requirements

Once a retention period expires, data is automatically deleted or anonymised in accordance with documented procedures. Anonymised data (where your identity has been fully removed) may be retained longer for aggregate statistical purposes and platform improvement.

8. Contact Us & Privacy Complaints

If you have any questions, concerns or complaints about how monte77 handles your personal data, we encourage you to reach out to us directly in the first instance. Our team will work to resolve any privacy issues promptly and to your satisfaction:

• Email: support@monte77.biz (subject: "Privacy Enquiry")
• Live Chat: Available 24 hours a day within the monte77 platform
• Response time: We are committed to responding to all privacy enquiries within 3 business days

If you are unsatisfied with our response or believe that monte77 has violated your privacy rights under Malaysia's PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (PDPD) through the official channels provided by the Ministry of Communications and Digital.

Monte77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or platform improvements. Any material amendments will be communicated to players via an in-platform notice at least 7 days before taking effect. The "Updated" date at the top of this document will always reflect the latest version.