Erra77 Privacy Policy – Data Protection for Malaysia Members

Erra77 collects personal information from members through several means. The type of information collected depends on your activity on the platform:

Information you provide directly:

• Full name, date of birth, and gender upon account registration.
• Email address and phone number for communication and account verification purposes.
• Residential address for identity verification (KYC) purposes.
• Copies of identity documents such as a national ID card, passport, or driving licence.
• Bank account or e-wallet details used for deposits and withdrawals.
• Any communications you send to the erra77 support team.

Information collected automatically:

• IP address and device information used to access the platform.
• Gaming activity data including betting history, wins, and losses.
• Login records including date, time, and access location.
• Cookie data and other tracking technologies as described in section 5.
• Technical information such as browser type, operating system, and screen resolution.

Information collected is used by erra77 solely for platform operations and to enhance the member experience. Below is a detailed breakdown of how your data is used:

• Process account registration and verify member identity through the required KYC process.
• Process deposit and withdrawal transactions securely and accurately.
• Detect and prevent fraud, money laundering, and other unlawful activities.
• Send important account notifications such as login confirmations, security alerts, and terms updates.
• Provide effective and responsive customer support for every member enquiry.
• Personalise your platform experience based on your preferences and gaming habits.
• Send relevant promotional offers and bonuses — provided you have consented to receive marketing communications.
• Comply with applicable legal requirements and regulatory obligations.
• Analyse platform usage patterns for product and service improvement.

Erra77 does not share members' personal information with external parties except in the following limited and controlled circumstances:

• Payment service providers: Information required to process transactions is shared with trusted payment gateway providers and is subject to strict confidentiality agreements.
• Game software providers: Minimum game data required to ensure the integrity and fairness of games is shared with software providers integrated with the erra77 platform.
• Relevant authorities: erra77 will disclose the necessary information when required to do so by a court order, directive from a law enforcement agency, or regulatory compliance obligation.
• Identity verification service providers: KYC documents may be shared with recognised third-party identity verification service providers to ensure the accuracy and security of the verification process.

All third-party partners of erra77 are required to comply with strict data protection standards and are prohibited from using member information for any purpose other than those specified in their agreement with erra77.

Erra77 continuously invests in security infrastructure to ensure member data remains protected at all times. The security measures we employ include:

• 256-bit SSL encryption for all data transmitted between the platform and member devices.
• Multi-layered firewall systems and intrusion detection operating around the clock.
• Role-based access control — only authorised staff may access member data.
• Regular security audits conducted by qualified, independent third parties.
• Established security incident response procedures to address any data breach swiftly.
• Two-factor authentication (2FA) is available for all member accounts as an additional layer of security.
• Continuous monitoring of account activity to detect any suspicious behaviour.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a security breach affecting your data, erra77 will notify you within the timeframe required by applicable law.

Erra77 uses cookies and similar tracking technologies to enhance the platform experience and understand how members interact with our services. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as maintaining login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collect information on how members use the platform, such as the most frequently visited pages. This data is used to improve performance and the overall user experience.
• Functional cookies: Allow the platform to remember your preferences — such as language and display settings — to deliver a more personalised experience.
• Analytics cookies: Help us understand aggregated, anonymised usage patterns for ongoing platform improvement.

You may manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and your experience on the erra77 platform.

As an erra77 member, you have the following rights regarding your personal information. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, please contact the erra77 support team via live chat. We will process your request within the stipulated timeframe and inform you of the outcome.

Erra77 retains members' personal information for as long as necessary to fulfil the original purpose of collection and any related legal requirements. In general:

• Active account data is retained for as long as the account remains active and for a specified period after account closure for audit and compliance purposes.
• Financial transaction records are retained for the period required by applicable financial and tax legislation.
• KYC documents are retained in accordance with applicable anti-money laundering (AML) legal requirements.
• Communication logs with customer support are retained for a reasonable period for quality control and dispute resolution purposes.

Once the retention period has expired or a valid deletion request is received, data will be securely erased using methods that ensure it cannot be recovered.

Erra77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. Any changes made will be published on this page along with a clear effective date.

For material and significant changes, erra77 will endeavour to notify members via email or in-platform notifications before the changes take effect. Continued use of the platform after changes are made will be considered acceptance of the updated policy.

We encourage you to review this page from time to time. If you have any questions or concerns regarding this Privacy Policy or how we handle your data, do not hesitate to contact the erra77 support team, available to assist you 24 hours a day.