1. Home
  2. Privacy Policy
KL77 Official Documents

Privacy Policy kl77 —
Data Protection &
Member Privacy Malaysia

Kl77 takes seriously the privacy of every member who entrusts us with their personal information. This document clearly outlines what data we collect, why it is collected, how it is protected, and what rights you have as a member to control that data. Please read it carefully.

🚀 Register Now 📋 Terms & Conditions

Updated: January 2026  |  SSL 256-bit Encryption  |  Bahasa Melayu (ms-MY)

Privacy Policy Contents
Last updated: 1 January 2026 · Version 3.1

Kl77's Privacy Commitment to Malaysian Members

Six data protection principles we uphold in every aspect of kl77's operations

Bank-Grade Encryption

All personal and financial data belonging to KL77 members is protected by SSL 256-bit encryption — the same standard used by Maybank, CIMB, and other major Malaysian banks. Data transmitted between your device and KL77's servers cannot be read by any third party.

SSL 256-bit · TLS 1.3
No Data Sales

Kl77 never sells, rents, or trades member personal data to any third party for marketing or commercial purposes. Your information belongs to you, and we use it solely for the purposes clearly stated in this Privacy Policy.

No Sales · No Sharing
Full Control in Your Hands

You have the right to access, correct, delete, or restrict the processing of your personal data at any time. KL77 provides a privacy management panel within your account settings so you can make informed choices about your data easily, without needing to contact customer support.

Access · Correct · Delete
Secure & Protected Servers

KL77 member data is stored in data centres that meet the ISO 27001 international security standard. Access to the member database is restricted to staff who require it for their job functions, and all access is logged and regularly audited by our internal security team.

ISO 27001 · Regular Audits
Minimum Data Collection

KL77 only collects data that is genuinely necessary to provide our platform services. We do not collect irrelevant or excessive information. The principle of collecting the minimum required ensures we do not retain your data longer than necessary for service delivery and legal compliance purposes.

Minimum Data · Retained Only as Needed
Rapid Breach Notification

In the event of any data breach that may affect your personal information, KL77 is committed to notifying affected members within 72 hours of becoming aware of the incident — exceeding the notification standard set by most platforms in this industry in Malaysia.

72-Hour Notification

Types of Data We Handle

An overview of the categories of personal data collected and processed by kl77

Identity & Contact Data

👤 Full name
📱 Phone number
📧 Email address
🎂 Date of birth
🏠 Residential address
🪪 MyKad Number (KYC)

Financial & Transaction Data

💳 Payment method
💰 Deposit history (RM)
🏦 Withdrawal history
📊 Transaction records
🎁 Bonus usage
🏆 Winnings records

Gaming Activity Data

🎰 Games played
⚽ Sports Betting & e-sports
⏱️ Session duration
📈 Betting patterns
🎯 Game options

Technical & Device Data

🌐 IP address
📲 Device type & OS
🔍 Browser type
📍 Approximate location
🍪 Session cookie data
Quick Navigation
Important Note
By using the kl77 platform, you agree to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform. For any questions about how we handle your data, contact the kl77 Privacy Officer at support@kl77.click.
1
KL77 Privacy Introduction & Commitment

Kl77 ("We", "Platform") is fully committed to protecting the privacy and security of every member's personal data on our platform at kl77.click. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards.

Privacy is not merely a legal requirement for kl77 — it is a core value. We understand that when you register as a member and make deposits via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX, you are entrusting us with sensitive personal and financial information. We take that trust seriously and handle it with full responsibility.

This Privacy Policy applies to all users of the kl77 platform, including website visitors, registered members, and any individual who interacts with our platform through any device or channel. It explains:

  • What personal data we collect and how it is collected.
  • Why we need that data and how it is used.
  • Who your data may be shared with and under what circumstances.
  • How we protect your data from unauthorised access, use, or disclosure.
  • Your rights over your personal data and how to exercise them.
2
Personal Data We Collect

KL77 collects personal data through several channels — online registration forms, platform activity during play sessions, financial transactions, and interactions with our customer support team. The following are the categories of data we collect:

Identity & Contact Data: Your full name as stated on your MyKad, an active Malaysian mobile number, a valid email address, date of birth, and residential address. For the Know Your Customer (KYC) process, we may request a copy of your MyKad for identity verification purposes as required by legal compliance procedures.

Financial & Transaction Data: Information relating to the payment method you use for deposits — including the account name for Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX — as well as your deposit and withdrawal transaction history. We do not store full credit card numbers or complete banking details directly; all transactions are processed through licensed third-party payment providers.

Gaming Activity Data: Records of the games you play, bet amounts, wins and losses, session duration, and platform usage patterns. This data is used for abuse detection, VIP programmes, and to ensure compliance with responsible gambling principles.

Technical Data: Your device's IP address, device type and operating system, web browser type, login session information, and cookie data generated during your visits to the kl77 platform.

Data We Do NOT Collect
kl77 does not collect biometric data, health information, political or religious views, trade union membership, or any other special category of sensitive data — except in very limited circumstances and only with your explicit consent. We also do not collect information about minors; our platform is strictly for individuals aged 18 and above.
3
Purpose of Data Collection & Processing

KL77 processes your personal data on a valid legal basis — whether to fulfil a service contract, comply with legal obligations, pursue the platform's legitimate interests, or act on consent you have provided. The following are the specific purposes for which we process your data:

  • Service Provision: Creating and managing your account, processing deposits and withdrawals in Malaysian Ringgit (RM), processing game bets and winnings, and providing access to all kl77 game categories.
  • Identity Verification (KYC): Meeting legal obligations related to member identity verification, fraud prevention, and compliance with anti-money laundering (AML) procedures as required.
  • Account Security: Identifying and preventing unauthorised access, fraud, or platform abuse — including detection of multiple accounts, bonus abuse, and suspicious activity.
  • VIP Programme & Promotions: Determining your VIP tier (Bronze, Silver, Gold, Diamond) based on cumulative deposit activity, and ensuring you receive the promotions and bonuses you are entitled to based on your activity history.
  • Responsible Gaming: Monitoring gameplay patterns to identify potential signs of problem gambling and to ensure that the self-control tools you have set (such as deposit limits or play breaks) are functioning correctly.
  • Service Communications: Sending you important notifications related to your account, transactions, policy changes, or relevant security information via email or SMS.
  • Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve platform performance, introduce new games, and enhance the user experience.

KL77 does not use your personal data for third-party marketing purposes or sell user profiles to advertisers. Any marketing communications we send are directly related to KL77 services only, and you may opt out of marketing communications at any time through your account settings.

4
How We Protect Your Data

Member data security is kl77's highest technical priority. We implement multiple layers of technical and organisational protection to keep your data safe at all times:

  • Transmission Encryption: All data transmitted between your device and kl77's servers is protected by TLS 1.3 with 256-bit SSL encryption. This means that even if someone were to intercept your network traffic, they would be unable to read the data being transmitted.
  • Storage Encryption: Sensitive data stored in kl77's databases — including identity information and financial records — is encrypted using AES-256 algorithm while at rest.
  • Strict Access Controls: Only KL77 staff who require access to specific data to perform their job duties are authorised to do so. All access to member data is recorded in audit logs maintained for a minimum of 12 months.
  • Two-Factor Authentication: Staff access to kl77's internal systems requires two-factor authentication (2FA). We also encourage all members to enable 2FA on their accounts for an added layer of security.
  • Regular Security Testing: KL77's security team conducts regular penetration testing and security audits to identify and address potential vulnerabilities before they can be exploited.
  • Incident Response Plan: kl77 maintains a documented security incident response plan, enabling us to respond swiftly and in an organised manner should any security incident occur.
Shared Responsibility
While KL77 takes all reasonable steps to protect your data, account security also requires your cooperation. Make sure your password is strong and unique, enable 2FA, never share your login credentials with anyone, and report any suspicious account activity to the KL77 support team immediately via live chat.
5
Sharing Data with Third Parties

Kl77 does not sell or disclose members' personal data to third parties for marketing purposes. However, there are limited situations where kl77 needs to share data with certain parties to ensure the platform operates reliably and securely:

  • Payment Service Providers: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and to facilitate winnings withdrawals, we are required to share the necessary transaction details with the relevant payment providers. These providers maintain their own privacy policies and are bound by data protection agreements with KL77.
  • Game Software Providers: The slot, live casino, and Sports Betting software providers that KL77 works with may receive game data necessary to operate the relevant games. Data shared is kept to a minimum and limited strictly to what is required for gameplay functionality.
  • Legal Authorities: KL77 complies with lawful requests from Malaysian law enforcement authorities where required by law. Any such disclosure will be carried out in accordance with proper legal procedures, and we will notify you of such requests to the extent permitted by law.
  • Identity Verification Services: For KYC purposes, we may use licensed third-party identity verification services. Data shared is limited strictly to what is required for verification purposes only.
  • Technical Infrastructure Providers: The cloud hosting services and technical infrastructure used by kl77 process our data in accordance with strict data processing agreements and agreed security standards.

All third parties that receive KL77 member data are bound by contractual agreements requiring them to protect that data to a standard no less than what we have set out in this Privacy Policy. KL77 does not permit any third party to use our member data for their own purposes, except in the delivery of services they perform on behalf of KL77.

6
Use of Cookies & Tracking Technologies

The KL77 platform uses cookies and similar tracking technologies to ensure a smooth and secure user experience. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functionality — including maintaining your login session, processing transactions securely, and enforcing security settings. These cookies cannot be disabled as they are essential to platform operation.
  • Performance Cookies: We collect information on how you use the kl77 platform — pages visited, session duration, and actions taken. This data is used in aggregated form to improve platform performance and user experience.
  • Functional Cookies: Saving your preferences such as interface language, display settings, and login details you choose to store, so you do not have to re-enter them each time.
  • Security Cookies: Helping us identify suspicious activity, unauthorised login attempts, and usage patterns that may indicate platform abuse.

You can manage and delete cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the kl77 platform and you may not be able to access all platform features properly. For guidance on managing cookies in your browser, refer to the help documentation of your web browser.

7
Data Storage & Retention Period

KL77 retains your personal data for as long as it is needed for the purposes outlined in this Privacy Policy, or as required by applicable law. The following is a general guide to our data retention periods:

  • Active Account Data: Personal data of members with active accounts is retained for as long as the account remains active and is needed to provide our services.
  • Data After Account Closure: After an account is closed at a member's request, personal data will be retained for a minimum of 5 years to fulfil legal obligations relating to financial records and AML compliance — as required under applicable Malaysian law.
  • Financial Transaction Records: All transaction records in Malaysian Ringgit (RM) — including deposits, withdrawals, and betting records — are retained for a minimum of 7 years in accordance with Malaysia's financial legal obligations.
  • Security Logs: Access logs and security activity records are retained for 12 months to support the investigation of potential security incidents.
  • Support Communication Records: Live chat conversation transcripts and emails with our support team are retained for 24 months for quality control and dispute resolution purposes.

Once the data retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to your identity. Early deletion requests can be submitted by following the process described in Section 8 below, subject to any legal obligations that may prevent immediate deletion.

8
Your Rights as a Data Subject

As a KL77 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data. We take every request relating to these rights seriously and will respond within the stipulated timeframes.

Your Rights Description Response Time How to Submit a Request
Right of Access Requesting a copy of the personal data we hold about you 21 business days Email/Live Chat
Right to Rectification Correcting inaccurate or outdated personal data 7 business days Account Settings
Right to Erasure Requesting deletion of your data when it is no longer needed 30 business days Formal Email
Right to Restrict Restricting how your data is processed in certain circumstances 14 working days Formal Email
Right to Portability Receiving your data in a machine-readable format 21 business days Email/Live Chat
Right to Object Objecting to the processing of your data for specific purposes 14 working days Formal Email
9
Cross-Border Data Transfers

In certain circumstances, personal data belonging to KL77 members may be transferred to or processed in countries other than Malaysia — for example, when we use international cloud infrastructure services or gaming software providers operating from multiple locations.

Kl77 ensures that all international data transfers are carried out with adequate safeguards, including:

  • We only work with service providers operating in countries with data protection standards equivalent to or higher than Malaysia's.
  • Ensuring comprehensive Data Processing Agreements are in place with all data recipients.
  • Applying contractual standards that require receiving parties to protect data in accordance with the standards set out in this Privacy Policy.

You have the right to obtain information about the protection mechanisms applied to any international data transfers involving your data. Contact the kl77 Privacy Officer at support@kl77.click for more details on this matter.

10
Changes to the Privacy Policy

Kl77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, technologies used, new legal requirements, or member feedback. Any significant amendments will be communicated to members via in-platform notifications or their registered email address at least 14 days before the changes take effect.

We encourage you to review this Privacy Policy page regularly — at least once every three months — to stay informed about how we handle your personal data. The "Last Updated" date at the top of this document will be revised whenever amendments are made. Your continued use of the KL77 platform after any policy changes take effect will be considered your acceptance of the updated policy.

The full version history of this Privacy Policy is available upon request from KL77's Privacy Officer. If you disagree with any changes to the Privacy Policy, you have the right to close your account and request deletion of your data in accordance with the procedures set out in Section 8.

11
Contact KL77's Privacy Officer

If you have any questions or concerns, or wish to exercise your rights regarding your personal data, the kl77 Privacy Officer can be reached through the following channels:

  • Email: support@kl77.click — use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure a faster response from our privacy team.
  • Live Chat: Direct access via the KL77 platform — available 24 hours a day, 7 days a week in Bahasa Malaysia for general privacy-related enquiries.
  • Formal Request: For formal data rights requests (access, correction, deletion), please send an email with the subject line "Official Data Rights Request" along with your full name, account number, and details of your request.

KL77 is committed to handling all privacy-related enquiries and requests with full professionalism, within the stipulated timeframes, and with meaningful responses — not generic template replies. We value every piece of feedback that helps us raise our data protection standards for all Malaysian members.

Complaints to Regulatory Authorities
If you are not satisfied with how KL77 has handled your personal data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant data protection authority in your jurisdiction. KL77 will cooperate fully with any official investigation conducted by the competent authorities.

Why Privacy Matters to KL77 and Malaysian Members

In today's digital age, personal data is among the most valuable assets an individual holds. When you register with kl77 and begin making deposits via Touch 'n Go eWallet or GrabPay, you are entrusting us with highly sensitive information — your name, phone number, date of birth, and financial transaction records. kl77 takes that trust seriously, which is why privacy protection is not merely a compliance obligation for us, but a core part of this platform's identity.

Many online entertainment platforms operating in Malaysia write privacy policies that are lengthy and filled with legal jargon that the average user finds difficult to understand. At KL77, we take a different approach — we've written this Privacy Policy in plain, straightforward language so that every Malaysian member knows exactly what happens to their information without having to decode complex legal text.

Kl77 and Malaysia's Personal Data Protection Act 2010

Kl77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing how private organisations handle the personal data of Malaysians. The PDPA establishes seven key principles: the general principle, the notice and choice principle, the disclosure principle, the security principle, the retention principle, the data integrity principle, and the access principle. Every section of this kl77 Privacy Policy reflects our compliance with all seven of these principles.

For example, when you register with KL77, we provide a clear notice of the data being collected (notice principle) and you are given the option to opt out of marketing communications (choice principle). When you make a winnings withdrawal via DuitNow or FPX Maybank2u, the transaction records are securely retained for the period prescribed by law (retention principle), and you may request access to those records at any time (access principle).

Privacy in the Context of Responsible Gaming

There is a close link between privacy and responsible gaming at kl77. The gameplay activity data we collect — betting patterns, session duration, and deposit limits you set — is used not only to deliver services, but also to help identify members who may need support related to gaming controls. This is the data use we consider most meaningful and responsible.

When kl77's systems detect gameplay patterns that may indicate a problem — such as a sudden spike in deposit amounts following a series of heavy losses — our system will trigger a review that may lead to a voluntary outreach to the member, offering information about available self-control tools. Data is used here to protect members, not to exploit them.

KL77 never uses member personal data to target vulnerable individuals with potentially harmful promotions. This is an ethical commitment — and it is explicitly stated as a prohibition in our internal marketing policy, not merely a non-binding "best practice". For more information on how we support responsible gambling, visit the KL77 Responsible Gambling.

FAQ – kl77 Privacy Policy

Answers to the most frequently asked questions about data privacy on the KL77 platform

Your deposit information via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX is shared only with the relevant payment provider that requires it to process your transaction. kl77 does not share your financial information with any other third party for marketing, external analytics, or any commercial purpose. Every payment provider we work with is bound by strict data security agreements and operates under the relevant Bank Negara Malaysia licence.

Yes, you have the right to request deletion of your personal data. However, there are a few important limitations you should be aware of. First, your account must be closed before a deletion request can be processed. Second, financial transaction records may need to be retained for a period prescribed by Malaysian law (typically 5–7 years) even after a deletion request is made — this is a legal obligation that KL77 cannot waive. All other data not subject to legal retention requirements will be deleted or anonymised within 30 working days of the request being received. Submit your formal request to support@kl77.click with the subject line "Data Deletion Request".

If you browse the KL77 website without registering, we collect standard technical data that most websites gather — your IP address, browser and device type, pages visited, and duration of your visit. This data is collected via session cookies and used in aggregated form to understand website traffic patterns and improve the user experience. We do not collect your name, contact details, or any information that could personally identify you during an unregistered visit. You can delete these cookies at any time through your browser settings.

KL77 employs multiple layers of preventive measures to minimise the risk of data breaches from cyberattacks. These include AES-256 encryption for stored data (meaning that even if an attacker were to access the database, the stolen data would be unreadable without the encryption key), SSL/TLS 1.3 encryption for all data in transit, an advanced web application firewall (WAF), 24/7 monitoring for suspicious activity, and regular penetration testing by independent security experts. In the event of a data breach that may affect member information, we are committed to notifying affected members within 72 hours of becoming aware of the incident, and will provide guidance on the steps you should take to protect yourself.

Yes — this is your right under Malaysia's Personal Data Protection Act 2010 (PDPA). You may request a copy of the personal data KL77 holds about you (known as a "data subject access request") by emailing support@kl77.click with the subject line "Data Access Request". Please include your full name and account number in the email. We will process your request within 21 working days and deliver the data in a readable format (typically PDF or CSV). The data provided will cover identity information, transaction records, gaming history, and support communications related to your account. Please note that certain data may not be disclosed for security or legal compliance reasons — we will clearly explain if any data cannot be provided and why.

Your Data Is Safe — Join kl77 with Confidence

You now know exactly how kl77 protects your privacy. Register a free account, claim your welcome bonus of up to RM888, and enjoy Malaysia's best online entertainment experience with complete confidence — your privacy and security are always safeguarded.

🚀 Register for Free Now Login
SSL 256-bit Encryption No sale of personal data Your data, your control Malaysia PDPA Compliance

By registering, you agree to the Terms & Conditions and Privacy Policy kl77. This platform is for users aged 18 and above only.

Bahasa Melayu