tc77 Privacy Policy

1. Introduction

tc77 ("we", "us", "our", "the Platform") operates the online gaming platform at tc77.asia. As a data controller, tc77 is responsible for the personal data of registered Members and visitors to the Platform. This Privacy Policy applies to all personal data collected through tc77.asia and any associated services.

By creating a tc77 account, visiting tc77.asia, or using any tc77 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how tc77 processes your personal data as described here, you should not create an account or use the Platform.

tc77 processes personal data in compliance with applicable data protection legislation and in accordance with the requirements of its international gaming authority licence, which includes specific obligations around player data, anti-money laundering record-keeping, and responsible gaming safeguards.

2. Personal Data We Collect

2.1 Data You Provide to Us

When you register, verify your account, or interact with tc77's services, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality;
• Contact data: Email address, mobile phone number, residential address;
• Identity verification documents: Government-issued photo ID (MyKad, passport), proof of address, selfie or biometric confirmation;
• Financial data: Payment method details (e-wallet account reference, bank account details), transaction history, source of funds declarations;
• Account credentials: Username and encrypted password;
• Communications data: Records of Live Chat conversations, emails, and support ticket correspondence with tc77.

2.2 Data Collected Automatically

When you access tc77.asia, we automatically collect technical and usage data, including:

• IP address and approximate geolocation derived from IP;
• Device identifiers, browser type and version, operating system;
• Session timestamps, pages visited, navigation paths within the Platform;
• Game play data: games accessed, bet amounts, game outcomes, session durations;
• Cookies and similar tracking technologies (see Section 6).

2.3 Data From Third Parties

We may receive personal data about you from third parties in the following circumstances:

• Identity verification and KYC service providers who validate documents you submit;
• Payment processors and e-wallet providers (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank) who confirm transaction details;
• Fraud prevention and risk management services;
• Responsible gaming databases and self-exclusion registers, where applicable under our licence obligations.

3. How We Use Your Personal Data

tc77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing

tc77 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the tc77 Member agreement — account creation, deposit and withdrawal processing, game access, support;
• Legal obligation: Processing required to comply with applicable law and regulatory requirements, including anti-money laundering obligations, KYC requirements under our gaming licence, and responsible gaming mandates;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and business analytics, where such interests are not overridden by your rights;
• Consent: For marketing communications, non-essential cookies, and any processing not covered by the bases above. You may withdraw consent at any time by contacting support or updating your account settings.

5. Data Sharing and Disclosure

tc77 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• KYC and identity verification providers: To validate identity documents and verify your eligibility to hold a tc77 account;
• Payment processors: Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other MYR payment service providers, to process deposits and withdrawals;
• Game content providers and platform technology partners: To deliver game services within the tc77 lobby under data processing agreements;
• Fraud prevention and AML screening services: To detect and prevent financial crime in compliance with our licence obligations;
• Responsible gaming databases: To check self-exclusion registers and honour exclusion requests as required by our licensing authority;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory direction;
• Professional advisers: Legal counsel, auditors, and accountants, under strict confidentiality obligations.

All third parties who receive personal data from tc77 are required to process that data only for the specified purpose and in accordance with applicable data protection requirements.

6. Cookies and Tracking Technologies

tc77.asia uses cookies and similar technologies to operate the Platform, maintain your session, and improve your experience. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function — session management, authentication, security tokens. Cannot be disabled without breaking core functionality;
• Functional cookies: Remember your preferences such as language settings, preferred game lobby view, and notification settings;
• Analytics cookies: Collect aggregated, anonymised data about how Members use the Platform, used to improve navigation and content. No personally identifiable data is shared with analytics providers;
• Marketing cookies: Used to measure the effectiveness of campaigns and deliver relevant promotional content to Members who have opted in to marketing communications.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. tc77 does not use third-party advertising networks that track users across unrelated websites.

7. Data Retention

tc77 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods driven by legal and regulatory requirements:

• Account and identity data: Retained for a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable under our international gaming authority licence;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Responsible gaming records: Retained for the duration of any self-exclusion period plus a minimum of 3 years following expiry;
• Support communications: Retained for 3 years from the date of the communication, or longer if related to an ongoing dispute;
• Technical log data: Typically retained for 12 months, subject to security incident investigation requirements.

After applicable retention periods expire, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Your Rights

Subject to applicable law and regulatory constraints, you have the following rights regarding your personal data held by tc77:

• Right of access: Request a copy of the personal data tc77 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to our legal and regulatory retention obligations which may require us to retain certain data even after account closure;
• Right to restriction: Request that we restrict processing of your data in certain circumstances;
• Right to data portability: Request a copy of data you have provided to us in a structured, machine-readable format;
• Right to object: Object to processing based on legitimate interests, including for marketing purposes;
• Right to withdraw consent: Withdraw any consent previously given, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact tc77 at [email protected]. tc77 will respond to verifiable requests within 30 days. We may need to verify your identity before processing requests.

9. Data Security

tc77 implements and maintains technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• SSL/TLS encryption for all data in transit between your device and tc77.asia;
• Encryption of sensitive data at rest, including identity documents and payment data;
• Access controls limiting staff access to personal data to those with a legitimate need to process it;
• Two-factor authentication for account access and administrative systems;
• Regular security assessments and penetration testing;
• Incident response procedures for detecting, containing, and reporting data security incidents.

No online platform can guarantee absolute security. If you become aware of any unauthorised access to your tc77 account, notify us immediately at [email protected].

10. Children's Privacy

tc77 is strictly intended for adults aged 21 and above. tc77 does not knowingly collect personal data from individuals under the age of 21. If tc77 discovers that personal data has been collected from an underage individual, that account will be immediately closed, funds returned where appropriate, and the data deleted in accordance with applicable requirements.

If you are a parent or guardian and believe that a person under 21 has registered a tc77 account, please contact us immediately at [email protected].

11. International Data Transfers

tc77 operates under an international gaming authority licence, which may involve the storage or processing of personal data outside of Malaysia. Where data is transferred internationally, tc77 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transfers only to jurisdictions with adequate data protection standards or under contractual protections equivalent to those applicable under our licence;
• Data processing agreements with all third-party processors that include cross-border transfer provisions;
• Compliance with any applicable cross-border data transfer requirements under Malaysian law.

12. Third-Party Links

tc77.asia does not include links to third-party websites in its main content or navigation. However, tc77 is not responsible for the privacy practices of any third-party service providers whose services are integrated into the Platform (such as payment processors). We recommend reviewing the privacy policies of any third-party service you use in connection with your tc77 account.

13. Changes to This Privacy Policy

tc77 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform services. When material changes are made, tc77 will notify registered Members by posting a notice on the Platform or sending an email to the registered address. The updated Policy will be effective from the date of publication.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the publication of changes constitutes acceptance of the updated Policy.

14. Contact & Complaints

For any privacy-related queries, requests to exercise your data rights, or complaints about how tc77 handles your personal data, please contact:

• Email: [email protected]
• Live Chat: Available daily, 8am – Midnight (Malaysia Standard Time)

tc77 will acknowledge your request within 5 business days and provide a substantive response within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.