PERSONAL DATA PROTECTION · UPDATED JANUARY 2026

SPY77 Privacy Policy — Our Commitment to Protecting Your Personal Data

At SPY77, your privacy is more than a legal obligation — it is a core value we have upheld from day one. Find out exactly how we collect, use, store, and protect your personal information as a member of our platform.

Updated: 1 January 2026 256-bit SSL Protected Language: Malay
Policy Summary
Data collected solely for stated purposes
Not sold or shared without consent
256-bit SSL encryption for all transactions
You have the right to access and delete your data
Compliant with Malaysia's PDPA

SPY77's Six Data Protection Principles

Your privacy is built on six pillars we never compromise, under any circumstances.

Minimum Data Collection

Spy77 only collects data that is strictly necessary to provide our services to you. We do not request excessive or irrelevant information — only what is needed to verify your identity, process payments, and improve your experience.

Secure Data Storage

All spy77 member data is stored on servers protected by 256-bit SSL encryption, multi-layered firewalls, and a 24-hour intrusion detection system. Access to member data is restricted to authorised personnel only and is subject to regular audits.

No Data Selling

SPY77 has never and will never sell, rent, or trade member personal data to any third party for marketing or commercial purposes. Your data belongs to you — not to us as a business asset.

Full Control in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data at any time. Contact the spy77 team and your request will be processed within 30 working days.

Malaysia PDPA Compliance

The spy77 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We take these legal obligations seriously and undergo periodic compliance reviews conducted by independent legal counsel.

Data Breach Notification

In the event of any security incident affecting member data, spy77 is committed to notifying affected members within 72 hours and taking immediate remedial action — in accordance with industry best practices.

This Privacy Policy explains how SPY77 how we handle your personal information when you use our platform. By registering or continuing to use the services SPY77, you agree to the data protection practices set out in this document.

1

Introduction & Policy Scope

This Privacy Policy is issued by SPY77 ("we", "Platform") and applies to all registered members and users browsing the SPY77 website and mobile platform. This document outlines the types of personal data we collect, how it is used, who may receive it, and your rights as the owner of that data.

As an online betting platform operating and serving users in Malaysia, SPY77 committed to complying with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international data protection practices. We take every aspect of privacy seriously and make it a priority in every operational decision we make.

This Policy applies to all channels of interaction with spy77 — the website, mobile platform, email, live chat, WhatsApp, and any other communication medium we use to engage with members.

2

Types of Personal Data We Collect

SPY77 collects several categories of personal data to provide a secure, fair, and quality service. The following are the main categories of data we collect:

Identity Data

Full name, MyKad/Passport number, date of birth, gender, nationality

Contact Data

Email address, Malaysian phone number, mailing address

Financial Data

Bank account details, e-wallet information (TNG, GrabPay, DuitNow), transaction history

Game Data

Betting history, games played, wins and losses, session duration

Technical Data

IP address, device and browser type, operating system, cookie data, access logs

Communication Data

Records of conversations with our support team, feedback, and complaints you have submitted

Some data is collected directly from you during registration or when you update your profile. Other data is collected automatically through the technologies used within the platform. SPY77 as you interact with our services.

3

Purposes for Using Your Personal Data

SPY77 uses the data collected for lawful and limited purposes. We will not use your data for any purpose beyond what is stated here without obtaining your additional consent:

Purpose of UseData InvolvedLegal Basis
Member account managementIdentity data, contact dataContract fulfilment
Deposit & withdrawal processingFinancial data, identity dataContract fulfilment
Identity verification (KYC)Identity data, official documentsLegal obligation
Fraud prevention & anti-money launderingFinancial data, technical dataLegitimate interests & legal obligations
Customer supportCommunication data, account dataContract fulfilment
Responsible gamingGame data, activity historyLegal obligation
Platform improvementTechnical data, usage dataLegitimate interest
Marketing communications (with consent)Email, phone numberConsent
4

Sharing Data with Third Parties

SPY77 does not sell, rent, or trade members' personal data to any third party for commercial purposes. However, in the following limited circumstances, we may need to share your data:

  • Payment service providers: Authorised payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX operators, and banking institutions, to securely process your financial transactions;
  • Authorised game providers: Evolution Gaming, Pragmatic Play, Microgaming, and other authorised game providers who require minimal data to verify fair game sessions;
  • Statutory authorities: Where required by Malaysian law or a valid court order, spy77 may be obligated to disclose data to the relevant authorities — and we will notify you whenever permitted by law;
  • Technology service providers: Hosting companies, cybersecurity services, and analytics providers bound by strict data confidentiality agreements with spy77;
  • Responsible gaming programme enforcement: An independent body that assists in implementing the self-exclusion programme upon request by members.

All third parties that receive SPY77 member data are bound by data processing agreements requiring them to protect that information to the same or higher standards that we ourselves uphold.

5

Data Security & Protection Measures

Member data security is an investment, not a cost, for SPY77. We apply multiple layers of technical and operational security to ensure your data is always protected:

Technical Security
  • 256-bit SSL encryption for all data in transit
  • AES-256 encryption for data stored in the database
  • Two-factor authentication (2FA) is available for all accounts
  • Multi-layered firewall and intrusion detection system
  • Regular security vulnerability scanning
  • Daily data backups to geographically separate server locations
Operational Security
  • Member data access is restricted to authorised personnel only
  • Regular security awareness training for all staff
  • Independent security audits twice a year
  • Role-based access control (RBAC) policy
  • Clear security incident response procedures
  • Audit logs for all access to sensitive data

While spy77 employs robust security measures, no system is 100% immune to breaches. We strongly encourage you to protect your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

6

Cookies, Analytics & Tracking Technologies

Platform SPY77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform.

  • Session Cookies: Required to maintain your login during an active session. Automatically cleared when you log out or close your browser;
  • Preference Cookies: Saves your language preference, display settings, and other preferences for a more seamless experience;
  • Analytics Cookies: Helps us understand the most visited pages, time spent, and navigation patterns — without identifying any individual personally;
  • Security Cookies: Used to detect suspicious activity and protect accounts from unauthorised access.

You can manage cookie settings through your browser preferences. Please note that blocking certain cookies may affect the functionality of some parts of the platform. SPY77.

7

Financial & Transaction Data Protection

Member financial data receives the highest level of protection on the platform SPY77. All transactions are conducted in MYR (RM) through secure local payment methods:

  • Card or bank account details never stored directly within the spy77 system — all payments are processed through authorised payment gateways;
  • Transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks are each processed under the respective provider's own security protocols;
  • Every transaction has a unique reference number and can be reviewed in your account transaction history;
  • Additional verification is required for transactions exceeding certain limits as an added security measure;
  • Transaction records are retained for 7 years for legal compliance and audit purposes.

spy77 complies with PCI DSS (Payment Card Industry Data Security Standard) in the handling of all payment-related data — ensuring full adherence to global payment security standards.

8

Your Rights as a Data Subject

Under Malaysia's PDPA and data protection best practices, you as a member SPY77 have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of all personal data we hold about you. Submit your request to support@spy77.click and we will process it within 30 days.

Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction. Some data can be updated directly from your account profile section.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, when the data is no longer needed for its original purpose. Note: data required for legal compliance may need to be retained for a prescribed period.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Contact us or unsubscribe from any marketing communications you no longer wish to receive.

Data Portability Rights

You may request your data in a machine-readable format (such as CSV or JSON) for transfer to another service provider, where technically feasible.

To exercise any of the rights above, submit a formal request to support@spy77.click with the subject line "Data Privacy Rights Request". Please include your account number and a copy of your identification document for verification. spy77 will respond within 30 business days.

9

Data Retention Period

SPY77 only retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required under Malaysian law:

  • Active account data: For the duration your account is active, plus 2 years after the account becomes inactive;
  • Financial transaction records: A minimum of 7 years, in accordance with Malaysian financial compliance requirements;
  • KYC documents: 5 years after account closure, in line with anti-money laundering requirements;
  • Support communication records: 3 years for dispute resolution purposes;
  • Technical log data: 12 months for security purposes and anomaly detection;
  • Marketing data (with consent): Until you withdraw your consent or request deletion.
10

Child Protection

Platform SPY77 is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we become aware that data belonging to someone under 18 has been collected, we will take immediate steps to delete that data and close the account in question.

If you know or suspect that someone under the age of 18 has registered a spy77 account, please contact us immediately at support@spy77.click. We will respond promptly.

11

Amendments to the Privacy Policy

SPY77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or the technologies we use. When significant changes are made:

  • The "Updated" date at the top of this page will be revised;
  • Active members will receive an email notification outlining the key changes;
  • A prominent notice will be displayed on the SPY77 platform for at least 14 days;
  • For significant changes that affect member rights, we will obtain fresh consent before those changes take effect.

Continued use of the platform SPY77 after the effective date of the changes will be considered acceptance of the updated policy. We encourage you to review this page periodically.

12

Contact Us About Privacy

For any enquiries, concerns, or requests relating to your personal data and Privacy Policy SPY77, please contact us via:

Email
support@spy77.click
Live Chat
24 hours, 7 days a week
Response Time
Within 24–48 working hours

Please include in your email: your spy77 account ID number, the details of your request, and a copy of your identification document for identity verification. This ensures we can process your request securely and accurately.

For more information about your rights under Malaysia's PDPA, you may also refer to the Department of Personal Data Protection Malaysia (JPDP) via their official website.

How SPY77 Protects Your Data

From the moment you register to every transaction you make — here's how we keep your data safe.

1
Registration with Full Encryption

When you complete the spy77 registration form, all data is transmitted through channels protected by 256-bit SSL encryption. Your password is hashed using the bcrypt algorithm before storage — even we cannot view your original password.

2
Secure Identity Verification

KYC documents you upload are processed in an isolated, encrypted environment. Original files are deleted after verification, and only the necessary metadata is retained in our system.

3
Protected Financial Transactions

Every deposit and withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX is processed through an authorised payment gateway. Your banking information never touches SPY77's servers directly.

4
24/7 Continuous Monitoring

Our automated monitoring system detects any suspicious account activity — including login attempts from unfamiliar locations, account information changes, or anomalous transaction patterns.

5
Regular Security Audits

Independent penetration testers conduct security assessments twice a year across SPY77's entire infrastructure — identifying and resolving vulnerabilities before they can be exploited.

6
Rapid Incident Response

In the event of any security incident, the spy77 response team will address it within 4 hours, and affected members will be notified within 72 hours — well ahead of what is legally required.

YOUR DATA IS SAFE WITH SPY77

Play with Confidence — Your Privacy is Always Protected at spy77

Join over 500,000 members who already trust SPY77 as Malaysia's safest and most transparent online betting platform. Register for free today.

256-bit SSL Protected  ·  PDPA Malaysia Compliant  ·  Terms & Conditions

Bahasa Melayu