Privacy Policy – mitra77 Data Protection Statement

1. Who We Are

mitra77 operates an online casino and sports betting platform accessible at mitra77.asia, primarily serving Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and other regions. In the course of operating this Platform and delivering our Services, mitra77 necessarily collects and processes certain personal data about the individuals who register and use those Services. This Privacy Policy sets out the full scope of that data processing activity, the legal grounds on which it is conducted, and the rights available to individuals whose data we hold.

This policy applies to all personal data collected through the mitra77 Platform, including data submitted during registration, data generated through use of the Services (such as betting history and transaction records), and data collected automatically through your use of the Platform (such as device and session data).

2. Personal Data We Collect

mitra77 collects the following categories of personal data from players and Platform visitors:

• Identity Data: Full legal name, date of birth, nationality, and copies of identity documents (such as your MyKad, passport, or equivalent) collected during KYC verification;
• Contact Data: Email address, mobile phone number, and residential address;
• Account Data: Username, password (stored in hashed and salted form only — we do not store plaintext passwords), account preferences, and communication preferences;
• Financial Data: Details of payment methods used for deposits and withdrawals, including masked payment account identifiers. Full card numbers or full e-wallet account credentials are not stored by mitra77;
• Transaction Data: Records of deposits, withdrawals, bonuses credited, and wagers placed, including amounts, timestamps, and payment method references;
• Gaming Activity Data: Bet history, game session logs, win/loss records, and responsible gaming tool usage (such as deposit limit settings);
• Technical Data: IP address, device type, browser type and version, operating system, referring URL, and session duration, collected automatically when you access the Platform;
• Communications Data: Records of communications between you and mitra77 support, including live chat transcripts and email correspondence.

3. How We Use Your Personal Data

mitra77 uses the personal data we collect for the following purposes:

• Account registration and management: To create, maintain, and administer your mitra77 account, verify your identity, and manage your account preferences;
• Service delivery: To provide access to the gaming and betting Services available on the Platform and to process deposits and withdrawals;
• KYC and fraud prevention: To verify the identity of players, detect and prevent fraud, money laundering, and other financial crimes, in compliance with applicable regulatory requirements;
• Age verification: To verify that all registered players are aged 21 or above, consistent with mitra77's age restriction policy;
• Responsible gaming: To monitor gaming activity for patterns consistent with problem gambling, to administer responsible gaming tools requested by players, and to enforce self-exclusion;
• Customer support: To respond to player enquiries, complaints, and dispute resolution requests;
• Compliance: To comply with applicable legal, regulatory, and licensing obligations, including record-keeping requirements;
• Security: To protect the integrity and security of the Platform and to detect, investigate, and prevent technical attacks, unauthorised access, and other security incidents;
• Platform improvement: To analyse Platform usage patterns in aggregate form (not at the individual level) to improve the user experience and service quality;
• Marketing communications: To send you promotional communications about mitra77 offers and new features where you have provided consent or where mitra77 has a legitimate interest in doing so, and in each case subject to your right to opt out.

4. Legal Basis for Processing

mitra77 processes personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the Services described in the mitra77 Terms & Conditions, including account management, payment processing, and customer support;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC and anti-money laundering obligations, age verification requirements, and regulatory record-keeping;
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where mitra77's legitimate interests are not overridden by your rights and interests;
• Consent: Processing for direct marketing communications, where applicable, and for any processing activities not falling within the above bases. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third Parties

5.1 mitra77 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances.

5.2 mitra77 may share your personal data with the following categories of third parties, strictly to the extent required for the relevant purpose:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, and other licensed payment service providers used to process your deposit and withdrawal transactions. Data shared is limited to what is required to process the specific transaction;
• Identity verification providers: Third-party KYC service providers engaged to assist with identity document verification during the account opening and withdrawal verification process;
• Game providers: mitra77's certified game studio partners (such as Evolution Gaming, Pragmatic Play, and others) receive session data necessary for the delivery and integrity monitoring of their games. These providers are bound by contractual data processing obligations consistent with this policy;
• IT infrastructure providers: Cloud hosting and security service providers who process data on mitra77's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where mitra77 is required by applicable law, court order, or regulatory directive to disclose personal data, mitra77 will comply with such requirements and, where legally permissible, will notify the affected player.

5.3 All third parties with whom mitra77 shares personal data are required to process that data solely in accordance with mitra77's instructions and for the purposes for which it was shared, and to maintain appropriate security standards.

6. Cookies and Tracking Technologies

6.1 mitra77 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your account preferences. These cookies cannot be disabled without impairing Platform functionality;
• Performance cookies: Collect aggregate, anonymised data about how players use the Platform (e.g., which pages are visited most frequently) to help mitra77 improve the user experience. These do not identify individual users;
• Functionality cookies: Remember your language preferences, display settings, and other account customisations between sessions.

6.2 mitra77 does not use third-party advertising or behavioural tracking cookies. You may configure your browser to refuse cookies; however, disabling essential cookies will prevent you from logging in and using the Platform.

7. Data Retention

7.1 mitra77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.

7.2 For active accounts, personal data is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements applicable to online gaming operators.

7.3 Gaming activity records and transaction logs are retained for a minimum of five (5) years from the date of the transaction, for regulatory and dispute resolution purposes.

7.4 Where you have exercised your right to erasure (see Section 9), mitra77 will delete or anonymise your personal data subject to the retention requirements described above. Data subject to mandatory retention obligations cannot be deleted before the applicable retention period expires.

8. Security Measures

8.1 mitra77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mitra77 Platform;
• Encryption at rest for all databases containing personal and financial data;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Multi-factor authentication requirements for all staff with access to personal data systems;
• Incident response procedures with defined timelines for breach notification where required by applicable law.

8.2 While mitra77 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own mitra77 login credentials and for notifying mitra77 immediately if you suspect unauthorised access to your account.

9. Your Data Rights

Subject to applicable law, registered mitra77 players have the following rights in relation to their personal data:

• Right of access: You have the right to request a copy of the personal data mitra77 holds about you, together with information about how that data is used;
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held in your mitra77 account;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to mandatory retention obligations;
• Right to restrict processing: You have the right to request that mitra77 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data;
• Right to object: You have the right to object to processing based on mitra77's legitimate interests, and to opt out of direct marketing communications at any time;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or contractual necessity.

To exercise any of the above rights, please contact mitra77 customer support via live chat or by email. mitra77 will respond to valid requests within 30 days. Identity verification may be required before any request can be actioned.

10. Children and Minors

10.1 The mitra77 Platform is strictly intended for adults aged 21 years and above. mitra77 does not knowingly collect personal data from individuals under the age of 21.

10.2 If mitra77 becomes aware that personal data has been collected from a person under 21 — whether through registration, attempted registration, or any other means — mitra77 will immediately delete that data and close the associated account. Any transactions conducted through an underage account will be voided and winnings forfeited.

10.3 If you believe that personal data of a minor may have been submitted to mitra77, please contact our support team immediately via live chat so that the matter can be investigated and rectified without delay.

11. Changes to This Privacy Policy

11.1 mitra77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The updated policy will be published on this page with the revised effective date.

11.2 Where changes are material — meaning they affect how your data is used in a way that could impact your rights or expectations — mitra77 will notify registered players by email or Platform notification with a minimum of 14 days' notice before the amended policy takes effect.

11.3 Your continued use of the mitra77 Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any material change, you may close your account by contacting support before the effective date.

12. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the personal data mitra77 holds about you, please contact the mitra77 privacy team through the following channels:

• Live Chat: Available 24/7 via the Platform — fastest response channel for Malaysian players
• Email: [email protected]

mitra77's support team covers English-language queries around the clock. For privacy-specific requests, please mark your enquiry as "Privacy Request" in the subject line of your email or opening message so it is routed to the appropriate team.