Prim77 Privacy Policy – Malaysia Member Data Protection

Prim77 ("we", "Platform", "company") is fully committed to protecting the privacy of every member using our online casino gaming platform at prim77.app. This Privacy Policy is drafted to transparently and clearly explain how we manage your personal information from start to finish.

We understand that your trust is the most valuable asset we hold. Every decision related to data management is made with member interests and security as the top priority. This policy applies to all users of prim77.app, the prim77 mobile app, and all our official communication channels including email and live chat.

Prim77 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and the guidelines issued by the Department of Personal Data Protection Malaysia. All personal data processing is carried out on the basis of member consent, contractual necessity, legal obligation, or legitimate interests recognised by law.

Prim77 only collects personal data that is strictly necessary to provide a quality, secure, and legally compliant service. The following are the categories of data we collect:

We do not collect sensitive data categories such as health information, religious beliefs, or biometric data unless specifically required for identity verification purposes agreed to by the member.

The personal data you provide to us is used solely for legitimate, stated purposes. prim77 will not use your data beyond the scope described here without first obtaining your renewed consent.

• Account Management: Registering, verifying your identity, and securely managing your member account.
• Transaction Processing: Processing deposits and withdrawals quickly and accurately via supported payment methods.
• Legal Compliance (KYC/AML): Fulfilling anti-money laundering and age verification obligations in compliance with PDPA and regulatory authority guidelines.
• Platform Security: Detecting and preventing fraud, unauthorised access, and other suspicious activities that could harm members or the platform.
• Customer Support: Helping you resolve issues, answer enquiries, and delivering a personalised and efficient support experience.
• Service Improvement: Analysing aggregated usage data to improve platform design, introduce new features, and enhance overall performance.
• Marketing Communications: Sending relevant offers, promotions, and updates — only to members who have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offering appropriate support in line with our responsible gaming commitment.

Prim77 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, there are limited situations where data sharing is necessary to enable us to provide our services:

• Payment Providers: Minimum required transaction data is shared with licensed payment processors (such as FPX, Touch 'n Go, GrabPay) to enable deposits and withdrawals to be processed. These providers are bound by strict confidentiality agreements.
• Identity Verification Providers: KYC documents may be shared with third parties conducting identity checks and AML verification on behalf of prim77, subject to data processing agreements that comply with the PDPA.
• Technology Providers: Companies providing hosting, analytics, customer support, and cybersecurity services may process limited data on behalf of prim77. All such providers are subject to equivalent data protection requirements.
• Legal Authorities: prim77 will disclose data to the relevant authorities when required by law, court order, or a legitimate official investigation.

The prim77.app website uses cookies and similar tracking technologies to enhance the user experience, ensure session security, and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functions such as login, session management, and security. They cannot be disabled as the platform will not function without them.
• Performance Cookies: Used to collect information about how visitors use the website — most frequently visited pages, error messages, and so on. All such data is aggregated and does not identify individuals.
• Functional Cookies: Enabling the platform to remember your preferences such as language, region, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Helping us understand overall platform usage patterns for service improvement purposes. This data is processed anonymously.

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the prim77 platform. Session cookies are automatically deleted when you close your browser, while persistent cookies remain for a set period depending on their purpose.

Prim77 continuously invests in the latest cybersecurity infrastructure to ensure members' personal data remains protected against both external and internal threats. The key security measures we practise include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest using AES-256 standard.
• Round-the-clock security monitoring by a dedicated cybersecurity team.
• Regular penetration testing conducted by independent third-party security firms.
• Multi-factor access control for all internal systems that store member data.
• Data segregation — financial information, KYC documents, and gaming data are stored in separate, isolated systems.
• Secure encrypted data backups are performed periodically at an appropriate frequency.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure. You also play an important role in protecting your account — never share your password and always keep your device up to date.

As a data subject under Malaysia's PDPA, you have certain rights regarding your personal data held by prim77. We respect and facilitate the exercise of the following rights: