Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by Para77 ("Para77", "we", "us", "our") and applies to all personal data collected from users ("you", "Player", "User") of the para77 online gaming platform, accessible at para77.cam (the "Website") and any associated applications or services.

Para77 is committed to protecting the privacy of our players and to handling personal data responsibly. This Policy explains in plain terms what data we collect, why we collect it, how we use it, who we share it with, and the rights you have in relation to your own data.

By registering an account, accessing the Website, or making use of any para77 service, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the overall agreement between you and para77, alongside our Terms & Conditions and Responsible Gambling Policy.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes, but is not limited to, name, date of birth, email address, phone number, residential address, MyKad or passport number, IP address, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Para77.
• "Data Processor" means a third party that processes Personal Data on behalf of Para77, under written instruction and subject to data processing agreements.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including identity document numbers and financial account information.
• "KYC Data" means identity verification documents and supporting information submitted by a player in connection with the Know Your Customer process, including identity cards, passports, proof of address, and selfie verification photographs.
• "Cookies" means small data files stored on a player's device by the Website, used to maintain session state, improve platform performance, and analyse usage patterns.
• "Third Party" means any entity other than you and Para77, including payment processors, game providers, KYC verification services, and analytics providers.

Personal Data We Collect

Para77 collects the following categories of Personal Data from players:

3.1 Account Registration Data

When you register a para77 account, we collect: full legal name, date of birth, gender, nationality, residential address (including city, state, and postcode), email address, mobile phone number, and username and password credentials (passwords are stored in hashed, non-reversible form).

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and anti-money laundering (AML) requirements, we collect copies of identity documents (e.g., Malaysian MyKad, passport, or driver's licence), proof of address documents (e.g., utility bills, bank statements), selfie photographs for liveness verification, and payment method verification evidence where required.

3.3 Financial Transaction Data

We collect records of all deposits and withdrawals made to and from your account, including the payment method used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank2u, CIMB Clicks, or cryptocurrency), transaction amounts in MYR, timestamps, and transaction reference identifiers. We do not store full bank account numbers or card numbers; payment processing is handled by third-party payment gateways.

3.4 Gaming Activity Data

We collect records of your gaming activity on the platform, including games played, bet amounts and outcomes, session durations, sports betting selections, bonus usage, and win/loss history. This data is used for account management, responsible gambling monitoring, and dispute resolution.

3.5 Technical & Device Data

We automatically collect technical data when you access the platform, including: IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and geolocation data (country and region level only, derived from IP address).

3.6 Communications Data

We retain records of all communications between you and the para77 support team, including live chat transcripts, email correspondence, and support ticket history. These records are used to resolve disputes, improve service quality, and maintain compliance records.

How We Collect Your Data

Para77 collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or otherwise interact with the platform.
• Automatically via the platform: Through server logs, cookies, session tracking, and analytics tools that operate when you access the Website or use its features.
• From third-party verification providers: KYC and identity verification information may be cross-referenced with third-party identity verification services to confirm the accuracy and authenticity of submitted documents.
• From payment processors: Payment status confirmations, transaction reference numbers, and failure or decline notifications from integrated payment gateway partners including e-wallet providers and FPX banking channels.
• From fraud prevention and AML screening services: Para77 may receive flagged data from third-party fraud prevention, sanctions screening, and anti-money laundering services used to protect the platform and its players.

Legal Basis for Processing

Para77 processes Personal Data on the following legal bases:

How We Use Your Personal Data

Para77 uses the Personal Data we collect for the following purposes:

6.1 Account Operation

To create and maintain your player account, authenticate your identity at login, process deposits and withdrawals in MYR, administer bonus credits, and communicate account-related information including transaction confirmations and security alerts.

6.2 Compliance & Regulatory Obligations

To fulfil our obligations under our international gaming licence, including conducting KYC identity verification, performing age verification to enforce the 21+ requirement, screening against sanctions and politically exposed persons (PEP) lists, and maintaining records as required by AML and financial crime prevention standards.

6.3 Platform Security & Fraud Prevention

To detect and prevent fraudulent activity, unauthorised account access, collusion between players, bonus abuse, money laundering, and any other activity that may harm para77 or its players. Technical and device data — including IP addresses — is used to identify suspicious access patterns.

6.4 Responsible Gambling

Gaming activity data and account behaviour patterns are monitored to identify potential indicators of problem gambling. This allows para77 to reach out proactively, apply responsible gambling tools where warranted, and enforce self-exclusion requests in accordance with our Responsible Gambling Policy.

6.5 Customer Support

To handle enquiries, resolve disputes, investigate complaints, and improve the quality of our support service. Communications records are retained to provide context for ongoing or future interactions and to protect both parties in the event of a dispute.

6.6 Marketing & Promotions (Opt-In Only)

Where you have provided explicit consent, we may use your contact information to send promotional communications about para77 bonuses, new games, sportsbook promotions, and other platform updates. You may withdraw this consent at any time — see Section 12 for details.

6.7 Platform Analytics & Improvement

Aggregated and anonymised usage data is analysed to understand how players interact with the platform, identify areas for improvement, test new features, and optimise performance — particularly during high-traffic periods such as EPL match weekends and Liga Super Malaysia fixtures.

Data Sharing & Disclosure

Para77 does not sell, rent, or otherwise disclose Personal Data to unaffiliated third parties for their own commercial or marketing purposes. We share Personal Data with third parties only in the circumstances described below.

7.1 Payment Processors

Personal Data necessary to process your deposits and withdrawals — including name, account identifiers, and transaction amounts — is shared with our integrated payment gateway partners. These include e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX banking channels (Maybank, CIMB, Public Bank, Hong Leong, RHB), and cryptocurrency processing partners. All payment partners are subject to contractual data processing obligations.

7.2 KYC and Identity Verification Providers

KYC documentation submitted by players may be processed by third-party identity verification service providers engaged by para77 to authenticate identity documents and perform liveness checks. These providers operate under strict data processing agreements and are not permitted to use KYC data for any purpose other than verification on para77's behalf.

7.3 Game Content Providers

Some gaming activity data (player session identifiers, bet amounts, game outcomes) may be shared with our third-party game providers for the purpose of game functionality, jackpot pool calculations, and RNG certification audits. No directly identifying Personal Data is disclosed to game providers beyond what is technically necessary.

7.4 Fraud Prevention & AML Services

Para77 uses third-party fraud screening and anti-money laundering services. Relevant data — including transaction patterns, device identifiers, and IP addresses — may be submitted to these services as part of our ongoing fraud prevention and compliance programme.

7.5 Legal & Regulatory Disclosure

Para77 may disclose Personal Data to competent legal authorities, regulators, courts, or law enforcement agencies where required to do so by applicable law, court order, or regulatory instruction. In such circumstances, we will disclose only the data specifically required and will, where legally permitted, notify the affected player of the disclosure.

International Data Transfers

Para77 operates under an international gaming licence and its server infrastructure may be located outside of Malaysia. As a result, your Personal Data may be transferred to, stored in, or processed in countries other than Malaysia, including jurisdictions where data protection laws may differ from those applicable in Malaysia.

Where Personal Data is transferred internationally, para77 takes steps to ensure that appropriate safeguards are in place to protect the data in transit and at its destination. These safeguards include contractual data transfer agreements with data processors and service providers, requiring them to handle data to a standard consistent with this Policy.

By using the para77 platform, you consent to the international transfer of your Personal Data as described in this section.

Data Retention

Para77 retains Personal Data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law, regulatory obligation, or our licensing conditions. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual, unless a longer retention period is required by specific legal obligation.

Cookies & Tracking Technologies

Para77 uses cookies and similar tracking technologies on the Website to ensure platform functionality, improve user experience, and gather aggregated analytics data. This section explains how we use these technologies.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function correctly. These include session cookies that keep you logged in during your visit and security tokens. These cannot be disabled without disrupting core platform functionality.
• Performance & Analytics Cookies: Used to understand how players navigate the platform — which pages are visited most, how long sessions last, and where technical issues occur. Data collected is aggregated and anonymised.
• Functional Cookies: Remember your preferences, such as display settings, preferred game categories, and language settings, to personalise your experience on return visits.
• Responsible Gambling Cookies: Store locally your session timer start time and active responsible gambling settings to ensure these features work consistently across your session.

10.2 Managing Cookies

You may control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies may prevent some core features of the platform from functioning correctly, including the ability to stay logged in during a session. Disabling functional cookies will reset your personal preferences on each visit.

KYC & Verification Data

Identity verification is a mandatory requirement under para77's international gaming licence. KYC data — comprising government-issued identity documents, proof of address, and supporting verification materials — is handled with the highest level of care and is subject to specific protections beyond those applied to other categories of Personal Data.

11.1 Storage of KYC Documents

All KYC documents submitted to para77 are stored in encrypted form on access-controlled servers. Access to KYC documents is restricted to authorised compliance personnel and, where required, to our third-party KYC verification partners under strict data processing agreements.

11.2 Verification by Third Parties

Para77 uses third-party identity verification platforms to authenticate submitted documents. These platforms perform automated and manual checks against identity document databases and liveness detection systems. KYC data submitted to these partners is processed solely for verification purposes and is not retained by these partners beyond the period necessary to complete the verification.

11.3 Document Security

If you believe your identity documents submitted to para77 have been compromised or accessed without authorisation, please contact our support team immediately at [email protected]. We will investigate and respond promptly.

Marketing Communications

Para77 will only send you promotional and marketing communications where you have explicitly opted in to receive them during registration or at a later point through your account settings. Marketing communications may include: information about new bonus offers and promotions, new game launches, sportsbook enhancements, VIP programme updates, and other platform news relevant to your account.

12.1 Opting Out

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email sent by para77;
• Updating your communication preferences in your account settings; or
• Contacting our support team via live chat or email and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the sending of transactional communications — including deposit confirmations, withdrawal notifications, security alerts, and KYC-related correspondence — which are sent in connection with the operation of your account and cannot be disabled while your account is active.

12.2 Data Use for Marketing

Marketing communications are personalised based on your gaming activity, preferred game categories, deposit history, and account tier. This personalisation is conducted by para77 internally using data already held in your account and is not shared with third-party marketers for this purpose.

Data Security

Para77 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the para77 platform is encrypted in transit using TLS 1.2 or higher.
• Encrypted Data Storage: Sensitive Personal Data, including KYC documents and payment information, is stored in encrypted form at rest.
• Access Controls: Access to Personal Data is restricted on a need-to-know basis. Staff who access player data are bound by confidentiality obligations and receive data security training.
• Password Security: Account passwords are stored using one-way cryptographic hashing. Para77 staff cannot view your password and will never ask you to disclose it.
• Penetration Testing & Security Audits: The para77 platform undergoes regular security assessments to identify and remediate vulnerabilities.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.

Your Data Rights

As a player on the para77 platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact our support team via live chat or email.

Para77 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days, of which you will be notified. There is no charge for exercising any of the above rights, unless requests are manifestly unfounded or excessive.

Children & Minors

Para77 operates a strict 21+ only policy. The platform is not directed at, and does not knowingly collect Personal Data from, individuals under the age of 21. Age verification is conducted as part of the KYC process, and accounts belonging to individuals found to be underage will be closed immediately.

If you believe that a minor has registered an account on para77 or that para77 has inadvertently collected Personal Data from a person under the age of 21, please contact us immediately at [email protected]. We will investigate promptly and take all appropriate steps, including deletion of any data collected from minors and return of any deposits to source.

Third-Party Links

The para77 platform may, from time to time, contain references or informational mentions of third-party services such as payment providers (Touch 'n Go, DuitNow, Maybank2u, CIMB Clicks) or game providers. Where the platform links to third-party websites or services, those services operate under their own independent privacy policies, over which para77 has no control.

Para77 is not responsible for the privacy practices, data handling procedures, or content of any third-party website or service. Players who interact with third-party services linked from or integrated into the para77 platform do so at their own risk and subject to those third parties' own privacy policies.

Policy Amendments

Para77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory obligations, or the services we offer. The revised Policy will be published on the Website with an updated "Last updated" date.

Where amendments to this Policy are material — meaning they substantially affect how we collect, use, or share your Personal Data — para77 will provide advance notice to registered players via email or a prominent on-site notification. For non-material amendments (such as clarifications or formatting changes), publication of the revised Policy on the Website will constitute sufficient notice.

Your continued use of the para77 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you must cease using the platform and contact our support team to request account closure.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by para77, please contact us using the following details:

Data rights requests and formal privacy complaints should be submitted in writing via email to the address above. Para77 will acknowledge receipt within 48 hours and provide a substantive response within 30 calendar days. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant supervisory authority in our licensing jurisdiction.