Privacy Policy idee77 – Your Data Protection

1 Introduction

Idee77 Entertainment Ltd ("idee77", "we") understands that privacy is of the utmost importance to every user of our platform. We do not treat your personal data as mere numbers or records — it is personal information you have entrusted to us, and we take that responsibility seriously.

This Privacy Policy describes our practices regarding the collection, use, storage, and protection of personal data you provide when registering for or using the idee77 platform. This document applies to all users of our platform, including the website idee77.com and the idee77 mobile app for iOS and Android.

We comply with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA). If you have any questions about how we handle your personal data, do not hesitate to contact our support team.

2 Data We Collect

We collect various types of data depending on how you interact with the idee77 platform. The following are the main categories of data we collect:

We do not collect unnecessary information. Every piece of data collected has a clear purpose, and you will be informed of how it is used.

3 How We Use Your Data

The data we collect is used solely for legitimate purposes necessary to operate idee77 services effectively. The following are the primary purposes for which your data is used:

• Service provision: To create and manage your account, process deposits and withdrawals, and enable access to all platform features.
• Identity verification (KYC): To comply with legal requirements related to anti-money laundering (AML) and counter-terrorism financing (CFT).
• Account security: To detect and prevent fraudulent activity, unauthorised access, or misuse of the platform.
• Service communications: Sending important notices regarding your account, transactions, policy changes, or security information.
• Marketing (with consent): Informing you about promotions, bonuses, and the latest offers — only if you have given consent to receive marketing communications.
• Platform improvements: Analysing usage patterns in aggregate to improve performance, design, and user experience.
• Legal compliance: To fulfil legal obligations, court orders, or requests from lawful authorities.

We will not use your data for any purpose other than those stated above without first obtaining your additional consent.

4 Legal Basis for Data Processing

Idee77 processes your personal data on a solid legal basis under Malaysia's Personal Data Protection Act 2010. The following are the processing grounds we rely on:

• Contract performance: Processing required to deliver the services you request — including account registration, deposit processing, and wagering management.
• Legitimate interests: For purposes such as fraud prevention, network security, and service improvement that do not compromise your fundamental privacy rights.
• Consent: For marketing communications and non-essential cookie use — you may withdraw this consent at any time.
• Legal obligation: When we are legally required to process or disclose data to the relevant authorities.

5 Data Sharing with Third Parties

Idee77 does not sell your personal data to any third party. However, to keep the platform running smoothly, we share data with select parties under limited and controlled circumstances:

• Payment processing providers: Approved payment partners receive only the information necessary to securely process your deposits and withdrawals.
• Gaming service providers: Third-party gaming companies that provide Live Casino content or Slot Games may receive minimal session data for technical purposes.
• Identity verification services: Our integrated KYC provider helps us verify user identities in accordance with compliance requirements.
• Regulatory authority: Where required by law, we will disclose data to regulatory bodies, law enforcement agencies, or courts.
• Technology service providers: Cloud infrastructure and cybersecurity providers that help us operate the platform securely, subject to strict confidentiality agreements.

6 Data Security

Protecting your data is our technical priority. idee77 implements comprehensive security layers to ensure your information is always protected against unauthorised access, leaks, or unauthorised modifications.

• Data encryption in transit: All communications between your device and our servers are secured with TLS 1.3 encryption, an industry-standard security protocol.
• Stored data encryption: Sensitive data such as passwords are stored using irreversible one-way hashing algorithms; financial information is encrypted with AES-256.
• Two-factor authentication (2FA): All user accounts are protected by 2FA via SMS or an authenticator app for an added layer of security.
• 24/7 monitoring: Our continuous security monitoring system detects and blocks suspicious activity in real time.
• Regular security audits: Our platform undergoes regular independent penetration testing and security audits.
• Internal access controls: Only authorised personnel may access user data, and every access is logged for audit purposes.

7 Data Retention Period

Idee77 does not retain your personal data longer than necessary for the stated purposes or as required by law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and for a reasonable period following account closure.
• Financial records and transactions: Retained for a minimum of seven (7) years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• KYC data: Retained for five (5) years after the account closure date or as required by regulatory obligations.
• Support communication logs: Retained for three (3) years for dispute resolution and service improvement purposes.
• Technical log data: Typically retained for 90 days and then automatically deleted unless required for security investigations.

Upon expiry of the retention period, personal data will be securely deleted or anonymised so that individuals can no longer be identified from the data.

8 Your Rights Under PDPA

As an idee77 user based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA). We respect and facilitate the exercise of these rights:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If your data is inaccurate or incomplete, you have the right to request a correction.
• Right to withdraw consent: You may withdraw consent for consent-based processing, including marketing communications.
• Right to object: In certain circumstances, you may object to the processing of your data for legitimate interest purposes.
• Right to erasure: In certain circumstances, you may request that your personal data be deleted, subject to our legal obligations.
• Right to restrict processing: You may request that we restrict how we use your data under certain circumstances.

To exercise any of the above rights, contact our support team via Live Chat or email. We will process your request within 30 business days.

9 Cookies & Tracking Technologies

Idee77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

• Essential cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Collecting anonymised information about how visitors use the platform to help us improve functionality and performance.
• Preference cookies: Remembering your settings and preferences, such as language selection and display settings.
• Analytics cookies: Used with our internal analytics tools to understand aggregate usage patterns — no individual data is shared.

You can manage cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of some parts of our platform.

10 Children's Data Protection

The idee77 platform is strictly for individuals aged 18 and above. We do not accept registrations from anyone under 18 years of age, and we do not knowingly collect personal data from minors.

Should we become aware or suspect that a user is under 18 years of age, the account will be suspended immediately and all related data will be deleted following secure procedures. If you believe we may have inadvertently collected data from an underage individual, please contact us immediately.

11 Amendments to the Privacy Policy

Idee77 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When we make significant changes, we will:

• Sending email notices to all registered users at least seven (7) days before changes take effect.
• Displaying clear notices on the platform's home page and login page.
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform after any changes take effect will be considered your acceptance of the revised Privacy Policy. If you disagree with any changes, please stop using the platform and close your account before the changes take effect.

12 Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by idee77, you may reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get a response.
• Email: [email protected] — for formal enquiries relating to privacy and data protection.
• General support: [email protected] — for general enquiries relating to your account and services.

We are committed to responding to all privacy-related enquiries within 72 business hours. For more complex data subject rights requests, the full response period is 30 business days.