kas77 | Privacy Policy and Your Personal Data Protection

1. Introduction 2. Data Collected 3. How We Use Your Data 4. Data Sharing 5. Data Security 6. Cookies & Tracking 7. Data Retention 8. Your Rights 9. Children's Data 10. Policy Changes 11. Contact Us

Important Notice – Please Read Carefully

This Privacy Policy explains how kas77 collects, uses, stores and protects your personal data. By registering for or using kas77's services, you agree to the terms set out in this Privacy Policy. It should be read together with Terms & Conditions kas77.

1. Introduction

Kas77 (referred to herein as "we", "the platform" or "kas77") is an online entertainment platform operating in accordance with applicable laws and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We understand that your trust in us begins with the confidence that your personal data is handled with full responsibility, transparency and a high level of security.

This Privacy Policy applies to all personal information collected through kas77.best, its related mobile applications, and all official kas77 communication channels — including customer support email, live chat, and VIP member WhatsApp. It also applies to all data obtained through your interactions with the platform, including betting activity, financial transactions, and communications with our support team.

We are committed to ensuring that the information in this Privacy Policy is written clearly, is easy to understand, and does not rely on confusing legal language. If any section is unclear, please contact the kas77 customer support team and we will be happy to explain further.

2. Personal Data Collected

Kas77 collects personal data under two main categories — data you provide directly and data collected automatically as you use the platform.

Data You Provide Directly

Registration information: Full name, active Malaysian phone number, email address, and date of birth.
Identity verification information: Your MyKad number or other valid government-issued identification document when requested for KYC (Know Your Customer) verification.
Payment information: Your Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost, Maybank2u or CIMB Clicks account details used for deposits and withdrawals. Note: we do not store your full bank card number — only the last few digits and the cardholder's name are recorded for transaction record purposes.
Communications: Messages, enquiries and feedback you send via live chat, email or other support channels.

Automatically Collected Data

Usage data: Login records, session duration, games played, total wagers and winnings, and account preference settings.
Device and network information: IP address, device type, operating system, web browser type, and application version in use.
Geolocation data: General location information (state and city) based on your IP address, used solely for geographic eligibility verification. kas77 does not collect your precise GPS coordinates.
Cookie data: Session information and preferences stored via browser cookies — explained in further detail in Section 6.

Data Type	Primary Purpose	Retention Period
Registration information	Account management & identity verification	Throughout active account + 5 years
Financial transaction records	Payment processing & audit	7 years (legal requirement)
Game activity records	Dispute resolution & analysis	3 years after account closure
Support communication logs	Service reference & quality assurance	2 years
Technical data (IP, device)	Security & fraud detection	1 year

3. How We Use Your Data

The personal data we collect is used solely for purposes directly related to providing and improving kas77's services. These purposes are as follows:

Account management: Creating, verifying and securely maintaining your kas77 account.
Transaction processing: Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost and FPX — efficiently and securely.
Identity verification (KYC): To comply with age and identity verification requirements, ensuring only eligible users access the platform.
Provision of gaming services: Processing bets, calculating winnings, managing VIP points and ensuring the integrity of all games.
Customer support: Resolving enquiries, complaints and disputes effectively based on your account records and transaction history.
Service communications: Sending important notifications about your account, transactions, policy updates and security information via SMS or email.
Fraud detection and security: Monitor suspicious activity, prevent unauthorised access, and protect the integrity of the platform.
Platform improvements: Analysing usage patterns on an aggregate basis (without identifying individuals) to improve the kas77 user experience.
Legal compliance: Comply with reporting and compliance obligations under applicable Malaysian law.

Marketing Communications

Kas77 will only send you marketing communications (promotions, special offers, bonus information) if you have given your consent during registration or through your account settings. You may withdraw your consent at any time via the notification settings in your account or by contacting customer support.

4. Data Sharing & Disclosure

Kas77 firmly upholds the principle that your personal data belongs to you and is not a business asset of ours. We not sell, rent or trade your personal data to any third party for marketing or commercial purposes.

However, in the following limited circumstances, data sharing may occur with specific parties:

Technical service providers: Companies that provide the platform's technical infrastructure (server hosting, payment processing, cybersecurity) may access certain data strictly within the scope required. All such providers are bound by strict confidentiality agreements and are not permitted to use the data for any other purpose.
Payment processors: Transaction details are shared with the relevant payment providers (such as Touch 'n Go or DuitNow platform providers) solely for the purpose of processing transactions requested by you.
Legal requirements: kas77 will disclose data where required by a valid court order, a directive from a competent Malaysian authority, or other legally binding obligations.
Protection of vital interests: In cases involving security threats or fraud by third parties, minimal and relevant disclosure of data to the relevant authorities may be necessary to protect the interests of all parties.

In all of the situations above, kas77 will ensure that only the minimum necessary and relevant data is disclosed, and will endeavour to notify you if a disclosure occurs – unless we are legally prohibited from doing so.

5. Data Security Measures

Protecting your personal data from unauthorised access, loss or misuse is a core technical and operational priority at kas77. The following security measures are in place:

256-bit SSL encryption: All data transmitted between your device and kas77's servers is encrypted using TLS 1.3 with 256-bit key length — a standard equivalent to that used in online banking.
Secure password storage: Account passwords are never stored in plain text – we use strong cryptographic hashing algorithms with a unique salt for each account.
Two-factor authentication (2FA): An additional layer of protection is available for all accounts via OTP codes sent to your registered phone number.
24/7 security monitoring: An automated monitoring system operates around the clock to detect and respond to any suspicious activity or unauthorised access attempts.
Restricted internal access: Only kas77 staff who require access to specific data to carry out their duties are permitted to access it — based on the principle of least privilege.
Regular data backups: Data is regularly backed up to a secure, separate location to ensure swift recovery in the event of a system failure.

Shared Security Responsibility

While kas77 implements robust security measures on the platform's end, the security of your account also depends on your own actions — use a strong and unique password, never share your login credentials with anyone, enable two-factor authentication, and report any suspicious activity to us immediately.

6. Cookies & Tracking Technologies

Kas77 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

Essential Cookies: Required for the platform's core functions — session login, security, and navigation. Without these cookies, the platform cannot operate. Cannot be disabled.
Functional Cookies: Storing your preferences such as your chosen language, display settings and saved login details. Enhances the overall usability of the platform.
Analytics Cookies: Collecting aggregated statistical data on how users interact with the platform — pages visited, time spent, and navigation paths. This data does not identify individuals and is used solely for platform improvement purposes.
Security Cookies: Helping identify suspicious sessions, prevent fraud and protect your account from unauthorised access.

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the platform's functionality. For guidance on managing cookies in popular browsers (Chrome, Firefox, Safari), refer to the help section of the respective browser.

7. Data Retention & Disposal

Kas77 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or for as long as required by applicable Malaysian law.

Active account data is retained for the duration your account remains active and for 5 years after account closure, to allow for the resolution of any disputes that may arise at a later date.
Financial transaction records are retained for 7 years in accordance with legal requirements relating to anti-money laundering and audit obligations.
Live casino session video recordings are retained for 90 days and used solely for dispute resolution purposes. After 90 days, recordings are automatically deleted unless there is an active unresolved dispute.
Customer support communication logs are retained for 2 years for quality assurance purposes and historical service reference.

Once the retention period has expired or the data is no longer required, kas77 will securely delete or anonymise it using industry-standard methods for irreversible data disposal.

8. Your Rights Under Malaysia's PDPA

As a kas77 user residing in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA):

Right of Access

Request a copy of all personal data we hold about you. Processed within 14 working days.

Right to Rectification

Request corrections to any inaccurate or incomplete data. Account updates can be made directly in your profile settings.

Right to Erasure

Request the deletion of your personal data, subject to applicable legal retention requirements.

Right to Object

Object to the processing of your data for specific purposes, in particular direct marketing communications.

Right to Data Portability

Request your data in a machine-readable format for transfer to another service provider.

Right to Restrict Processing

Request that we restrict the processing of your data in certain circumstances while an investigation or dispute is ongoing.

To exercise any of the rights above, contact us by email at support@kas77.best specifying the type of request, your full name and registered account number. We will process all data rights requests within 14 business days from the date of receipt of the completed request.

9. Children's Privacy

Kas77 is a platform designed exclusively for adults aged 18 years and above. We do not knowingly collect, store or process any personal data from individuals under the age of 18.

A strict age verification system is implemented during the registration process. If we determine that data collected belongs to a minor – whether through the verification process, third-party reports or any other means – we will:

Suspend the relevant account immediately.
Delete all data collected from that user within 48 hours.
Voiding all transactions and winnings associated with that account.

If you suspect that someone underage has registered a kas77 account, please contact us at support@kas77.best for immediate action.

10. Changes to This Privacy Policy

Kas77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or relevant technological developments.

Any significant changes to how we collect or use personal data will be communicated to all active members via email and in-platform notifications at least 14 days before the effective date.
Minor changes such as spelling corrections or terminology clarifications may be made without prior notice.
The "Updated" date shown at the top of this page will always reflect the date the latest version came into effect.
Continued use of the platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.
If you do not agree with the changes, you have the right to close your account before the effective date — any real money remaining in your account will be returned in accordance with standard procedures.

11. Contact Us Regarding Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact kas77's Data Privacy Officer through the following channels:

Privacy Email: support@kas77.best (include "Privacy Request" in the subject line)
Live Chat: Available on the kas77 platform, 24 hours a day, 7 days a week
Response time: We aim to respond to all privacy-related enquiries within 48 working hours

For formal requests relating to PDPA rights (access, correction, or deletion), please include your full name, registered account number, and a clear description of your request. This allows us to process your request more efficiently and accurately.

Document Version Information

This Privacy Policy is Version 3.1, effective 1 January 2026. It supersedes all previous versions. This document is written in Malay as the official language of the kas77 platform for Malaysian players. This version complies with Malaysia's Personal Data Protection Act 2010 (PDPA).

Why Data Privacy Matters at kas77

When you decide to register an account with kas77, you are not simply opening a gaming account — you are also entrusting us with sensitive personal information. Your name, phone number, digital wallet details, and your activity records on the platform are all data that must be handled with the utmost responsibility. We at kas77 fully understand the weight of that trust, and this Privacy Policy is the written expression of our commitment to you.

One of the questions we hear most often from Malaysian users concerns the security of their payment information. It is a very legitimate concern, as financial transactions involve highly sensitive data. When you deposit funds via Touch 'n Go eWallet, DuitNow or GrabPay into your kas77 account, all transaction data is encrypted with 256-bit SSL encryption from the moment you click the confirmation button until the transaction is fully processed on our servers. This means that even if someone were to intercept the data in transit – which is extremely difficult to do – they would only obtain data that is completely unreadable and unusable.

A subtler but equally important issue is the use of data for marketing. Many Malaysian users have had the unpleasant experience of having their data shared with third parties, only to start receiving unsolicited promotional messages from companies they never signed up with. At kas77, we strictly never sell, rent or share our members' personal data with any party for marketing purposes. Every promotional communication you receive from kas77 is based on consent you have given yourself – and you may withdraw that consent at any time with no impact on your account.

Legal compliance is another dimension of privacy that we take seriously. Malaysia's Personal Data Protection Act 2010 (PDPA) sets out user rights and the responsibilities of companies in handling personal data. kas77 conducts regular PDPA compliance reviews to ensure that all our data handling practices remain aligned with current legal requirements. This is not merely a legal obligation – it is the foundation of the trust we have built with more than 100,000 registered members.

Kas77 fully respects your rights as a data owner. You may request a copy of all data we hold about you, ask for corrections if any information is inaccurate, or even request the deletion of your data should you decide to close your account — provided that certain legal retention requirements have first been satisfied. These requests are handled by our data privacy team within 14 working days, and we do not charge any fee for processing legitimate data rights requests.

Data retention is an aspect of privacy that users often overlook, yet it carries important practical implications. kas77 retains financial transaction records for 7 years in accordance with anti-money laundering legislation and audit requirements. This means that should any dispute or query arise regarding past transactions — whether from you or from the relevant authorities — the necessary records are available to resolve the matter fairly. Live Casino session recordings, on the other hand, are retained for 90 days only and automatically deleted thereafter, unless there is an active dispute requiring the recording as evidence.

We believe in being fully transparent about how cookies are used on the kas77 platform. Essential cookies that keep the platform running — such as login session cookies and security cookies — cannot be disabled, as they are fundamental to the platform's security and functionality. However, analytical cookies that collect usage statistics are optional and can be managed through your browser settings. We do not use third-party cookies for marketing without your consent.

Ultimately, privacy is a shared responsibility between kas77 and you as a user. We provide robust security infrastructure, transparent policies and comprehensive data management tools. On your end, keeping your account password strong and unique, not sharing your login credentials with anyone, enabling two-factor authentication and promptly reporting any suspicious activity to us are steps that complement the protection we put in place. Together, we can ensure your gaming experience at kas77 remains safe, enjoyable and free from privacy concerns.

FAQ – kas77 Privacy Policy

The most frequently asked questions about privacy and data protection on the kas77 platform.

Yes, your payment information is completely secure at kas77. All transactions – whether via Touch 'n Go eWallet, DuitNow, GrabPay, ShopeePay, Boost or FPX – are protected with end-to-end 256-bit SSL encryption. kas77 does not permanently store your full account number or payment token in our systems – only the minimum information required to verify a transaction (such as the last few digits and the account holder's name) is retained for record-keeping purposes. Payment processing is handled by payment processors that hold industry-standard security certifications, and all such providers are bound by strict confidentiality agreements with kas77.

Yes, you have the right to request deletion of your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). To submit a request, email support@kas77.best with "Data Deletion Request" in the subject line, along with your full name and registered account number. Please be aware, however, that certain limitations apply – financial transaction records must be retained for 7 years in accordance with Malaysia's anti-money laundering legislation, and this data cannot be deleted even upon user request. Other data such as profile information and game activity records will be deleted within 14 working days of request verification. Any real-money balance remaining in the account will be refunded before the deletion process begins.

No, absolutely not. kas77 does not sell, rent or share members' personal data with any third party for advertising or marketing purposes. Your data is not a business asset we trade in. The only situations in which your data may be shared with third parties are with our technical service providers (such as payment processors and hosting infrastructure providers) within a strictly limited scope and solely for the purpose of delivering the services you have requested – and all such providers are bound by strict confidentiality agreements. Data sharing may also occur if required by a court order or a directive from a legitimate Malaysian authority. Beyond those situations, your data remains entirely under kas77's control and does not leave our platform's ecosystem.

You can opt out of marketing communications from kas77 at any time in two simple ways. The first is to log in to your kas77 account, go to "Account Settings" and then "Notification Settings" – you can disable specific categories of communications or all marketing communications from there. Changes take effect within 24 hours. The second option is to contact kas77 customer support via live chat or email at support@kas77.best and request to be removed from marketing communications. Please note that withdrawing your consent to marketing communications does not affect kas77's ability to send essential service communications – such as account security notifications, transaction confirmations and policy updates – which we are required to send for operational and legal reasons.

kas77 operates a 24/7 security monitoring system and a comprehensive incident response protocol to minimise the risk and impact of any potential data breach. In the event of a data breach involving members' personal information, kas77 is committed to: (1) detecting and containing the breach as quickly as possible; (2) notifying affected members within 72 hours of detection via email and platform notification; (3) reporting the incident to the relevant authorities in Malaysia as required by law; (4) taking immediate steps to reduce potential harm to affected members, including offering recommended protective measures. Information regarding the nature of the breach, the data potentially affected, and the actions being taken will be communicated transparently to all relevant members.

Kas77 Privacy Policy – Personal Data Protection for Malaysian Players

kas77's Privacy Commitment

Kas77's Six Data Protection Principles

Minimum Data Collection

Bank-Level Security

Explicit Consent Required

Full Access Rights Belong to You

No Direct Data Sales

Malaysia PDPA Compliance

Contents