HKB77 Privacy Policy — Our Commitment to Protecting Your Data

Welcome to the hkb77 Privacy Policy. This document is written in clear, easy-to-understand language because we believe every member has the right to know exactly what happens to their information when they register and use the hkb77 platform.

HKB77 is an online gaming platform operating under hkb77.pro, serving over 500,000 active members across Malaysia. In the course of our daily operations, we need to collect certain personal information from members to ensure our services run smoothly, securely, and in compliance with applicable laws.

This Privacy Policy describes the types of data we collect, why we need it, how we store and protect it, and your rights as a member. This policy applies to all your interactions with HKB77 — whether through the hkb77.pro website, the HKB77 mobile app, or any other communication channels we provide.

We only collect information that is genuinely necessary to provide you with the best possible service. We do not collect excessive or irrelevant data beyond what our platform operations require. The following are the categories of information we collect:

In some situations, we may also collect supporting documents such as recent bank statements or utility bills for address verification purposes as part of our internationally compliant KYC process.

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for unrelated purposes without your explicit consent. The following are the primary reasons we process your personal data:

• Creating and managing your member account and processing registrations securely
• Verifying your identity to ensure account security and comply with anti-money laundering (AML) legal requirements
• Processing deposits, withdrawals, and all financial transactions accurately and securely
• Providing access to all games and services available on the hkb77 platform
• Sending important notifications related to your account, security, promotions you have subscribed to, and service updates
• Monitoring activity to detect and prevent fraud, money laundering, and platform abuse
• Conducting internal analytics to improve overall user experience and our services
• Complying with all legal and regulatory requirements applicable to online gaming platform operations
• Supporting our responsible gaming programme by monitoring gameplay patterns that may indicate signs of a problem

The legal basis for our data processing is founded on contract performance (services you have requested), legal obligations (AML and KYC compliance), our legitimate interests (security and fraud prevention), and your consent where applicable.

Hkb77 has never sold, rented, or traded your personal data to any third party for marketing or commercial purposes. We only share your information in the limited circumstances outlined below:

• Payment service providers: Information required to process financial transactions is shared with FPX, local banks, TnG eWallet, GrabPay, DuitNow, and relevant crypto payment providers.
• Game software providers: Minimum technical data required to verify player eligibility is shared with third-party game providers integrated into our platform.
• Legal requirement: We may be required to disclose certain information to the relevant authorities when mandated by law, court order, or official investigation.
• Fraud prevention: In certain cases, limited information may be shared with industry bodies or authorities to prevent fraud and protect other members.
• Business transfer: In the event of a company merger or acquisition, member data may be transferred as part of the business assets, subject to equivalent privacy protections.

The security of your data is our highest priority. hkb77 continuously invests in the latest security infrastructure to ensure your personal and financial information is always under optimal protection.

The security measures we implement include 256-bit SSL encryption for all data transmissions, data-at-rest encryption, an intrusion detection system (IDS) operating 24/7, role-based access control (RBAC) for staff, two-factor authentication (2FA) for all internal systems, and regular security audits conducted by certified independent experts.

• Enterprise-grade firewall continuously updated with the latest rules
• Real-time threat monitoring with automated responses to suspicious activity
• Daily data backups stored at a secure, geographically separate location
• A comprehensive incident response plan that is regularly tested
• Mandatory security training for all staff handling member data

While we take all reasonable precautions, no system can guarantee 100% absolute security. In the event of a security breach affecting your data, we will notify you within the timeframe stipulated by applicable law.

Hkb77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you when you return, save your preferences, and deliver a more personalised experience.

• Essential Cookies: Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous data on how visitors use our platform to help us improve performance and navigation.
• Functional Cookies: Saving your preferences such as language, display settings, and location to deliver a more personalised experience.
• Analytics Cookies: Used internally to understand usage patterns and improve the platform's design and content.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the HKB77 platform.

Under applicable data protection laws including Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

• Right of Access: You have the right to request a copy of all personal data we hold about you at any time.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request that we correct it promptly.
• Right to Erasure: Under certain circumstances, you may request that we delete your personal data, subject to our legal obligations to retain specific records.
• Right to Restrict Processing: You may request that we restrict how we process your data under certain circumstances.
• Right to Object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to Data Portability: You have the right to receive your data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact our data protection team by email at [email protected] or via Live Chat on the platform. We will process your request within 14 business days and will notify you if additional time is required.

We retain your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we will retain certain data as required by applicable laws.

• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial regulatory requirements
• Identity verification data (KYC) is retained for 5 years after account closure for AML compliance
• Communication and customer support records are retained for 3 years
• Technical logs and security data are retained for 2 years for investigation purposes if required
• Data that is no longer required will be securely deleted or anonymised in accordance with our internal procedures

HKB77 is a gaming platform intended exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal information from individuals under the age of 18.

All account applicants must confirm they are 18 years of age or older at registration. If we find that a minor has opened an account or provided us with information, we will immediately close the account and delete all associated data.

If you believe we may have collected information from a minor, please contact us immediately at [email protected] so that prompt action can be taken.

The hkb77 platform may contain links to third-party services or content such as game providers, payment portals, and support tools. Our Privacy Policy applies only to the hkb77 platform itself and does not cover the privacy practices of those third parties.

We encourage you to read the privacy policy of any third-party service you access through our platform. hkb77 is not responsible for the privacy practices or content of third-party websites you may visit while using our platform.

All third-party providers directly integrated with the hkb77 platform — such as payment and game software providers — undergo a rigorous selection process and are bound by strict data confidentiality agreements with hkb77.

HKB77 reserves the right to modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or changes in the services we offer.

Whenever we make significant changes, we will display a clear notice on this page and notify members via their registered email or in-platform notification. The "Last Updated" date at the top of this page will always reflect the latest version of this policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, our data protection team is fully ready to assist you.

• Email: [email protected] (response within 24 business hours)
• Live Chat: Available 24/7 via the chat icon at the bottom-right corner of the platform
• Response time: We are committed to responding to all privacy-related enquiries within 14 business days.

For formal requests regarding your data rights such as access, correction, or deletion, please clearly state the type of request, your hkb77 account number, and sufficient identity verification details so we can process your request securely and accurately.