Mino77 Privacy Policy – Malaysian User Personal Data Protection

Mino77 is an online casino platform that operates with full responsibility and transparency. As a company serving users in Malaysia, we are bound by and committed to complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia, as well as internationally recognised data protection principles.

We understand that your trust is the most valuable asset we hold. Every time you register an account, make a deposit, play a game, or simply browse our website, there is certain information we need in order to deliver a safe, seamless, and trustworthy experience to you.

This Privacy Policy is designed to give you a clear and honest overview of:

• What personal data we collect and why it is needed.
• How that data is used in our day-to-day operations.
• Who may have access to your data and under what circumstances.
• Your rights as a user with regard to your personal data.
• How we ensure your data remains safe and protected at all times.

We do not treat privacy as a box to be ticked – it is a core value that shapes every system design and operational decision we make at mino77.

Mino77 only collects data that is strictly necessary for the stated purposes. We do not collect data excessively or for irrelevant purposes. The following are the categories of data we may collect:

Automatically collected data: When you use the mino77 platform, our systems automatically record certain technical information such as your IP address, web browser type and version, device operating system, pages visited, session duration, and cookie data. This information is collected solely for security, fraud detection, and user experience improvement purposes.

Data from third parties: In certain situations, we may receive additional information about you from third-party identity verification service providers appointed for KYC compliance purposes, or from payment gateways processing your transactions. All such third parties are bound by strict confidentiality and data protection agreements.

Every piece of data we collect has a clear and legitimate purpose. mino77 uses your personal data for the following purposes:

• Account Management: Creates, verifies, and manages your account on the mino77 platform, including the KYC process required under anti-money laundering regulations.
• Transaction Processing: Processes deposits, withdrawals, and all other financial transactions accurately and securely through your preferred payment method.
• Security & Fraud Prevention: Detects, investigates, and prevents any suspicious activity, fraud, or security breaches that may affect you or our platform.
• Legal Compliance: Fulfils our legal obligations under the PDPA 2010, anti-money laundering (AML) regulations, and other applicable regulatory requirements.
• Service Improvement: Analyses platform usage patterns in aggregate and anonymised form to improve design, performance, and the overall user experience.
• Customer Support: Enables our support team to assist you with any enquiries, technical issues, or complaints you submit.
• Marketing Communications: Sends you information about promotions, offers, and platform updates – only where you have given explicit consent to receive such communications.

In accordance with the principles of Malaysia's PDPA 2010, mino77 only processes your personal data on a valid legal basis. These bases are:

• Your Consent: For marketing and promotional communications, we only process your data upon receiving your explicit consent. You may withdraw this consent at any time.
• Contract Fulfilment: To provide you with the mino77 platform services in accordance with the Terms and Conditions you agreed to upon registration.
• Legal Obligation: To comply with legal and regulatory requirements applicable to the operation of an online gambling platform, including KYC and AML obligations.
• Legitimate Interests: For platform security, fraud prevention, and service improvement purposes – where mino77's legitimate interests do not override your fundamental rights and freedoms.

Mino77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is only shared in the following limited circumstances:

• Licensed Service Providers: We share the necessary data with payment gateway providers, KYC verification vendors, and technology service providers that help us operate the platform – all bound by strict confidentiality agreements.
• Regulatory Authority: Where required by law or court order, we will disclose the necessary information to relevant authorities such as Bank Negara Malaysia or law enforcement agencies.
• Fraud Investigators: To fraud prevention agencies or cybersecurity firms appointed to help us detect and prevent fraudulent activity that may affect you.
• Group Sharing: Within the mino77 group of companies, data sharing is limited to what is necessary to deliver a seamless service to you.

Mino77 invests seriously in security infrastructure to ensure your personal data is protected at every level – whether in transit or at rest. The security measures we implement include:

• 256-bit SSL Encryption: All communications between your browser and the mino77 servers are encrypted using the latest TLS protocol, ensuring no third party can intercept your data in transit.
• Stored Data Encryption: Sensitive data such as financial information and identity documents are stored in encrypted format on secure servers with strictly restricted access.
• Layered Access Control: Only staff with a legitimate business need are permitted to access user data, and every access is logged and continuously monitored.
• Regular Security Audits: The mino77 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
• Two-Factor Authentication (2FA): Users are encouraged and supported to enable two-factor authentication to protect their accounts from unauthorised access.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect any unauthorised access attempts or unusual activity.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. In the event of a data breach affecting your information, we are committed to notifying you in a timely manner in accordance with legal requirements.

Mino77 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by Malaysian law. The following are our general data retention guidelines:

• Active Account Data: For the duration your account remains active, plus any period required by law following account closure.
• Financial Transaction Records: Minimum seven (7) years from the transaction date, in line with Malaysia's accounting and AML legal requirements.
• KYC Documents: Five (5) years after account closure or the date of the last transaction, whichever is later.
• Security Logs: Twelve (12) months for standard access logs; up to five (5) years for logs related to security incidents.
• Marketing Data: Until you withdraw your consent or request deletion of your marketing data.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with established data disposal procedures, ensuring no trace that could personally identify you remains.

Under PDPA 2010 and mino77's internal policies, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights: