Stars77 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy is issued by Stars77 ("Stars77", "we", "the platform") and applies to all individuals who register for, use or browse the Stars77 platform accessible at stars77.fun and all associated subdomains ("Members", "you").

This policy explains:

• The types of personal data Stars77 collects and how it is collected.
• The purposes that form the basis for collecting and processing that data.
• Parties that may receive your personal data in limited and lawful circumstances.
• Security measures implemented by Stars77 to protect your data.
• Your legal rights regarding your personal data under Malaysia's PDPA.
• How you can contact Stars77 to exercise those rights.

This Privacy Policy should be read together with Terms & Conditions Stars77, which constitutes the entire agreement between you and our platform.

Stars77 collects personal data through various methods as you use our platform. Here are the key data collection methods:

Data you provide directly:

• During Stars77 account registration — name, phone number, email address, and password.
• During identity verification — identity documents such as MyKad or passport.
• When making a deposit or withdrawal — payment method details such as Touch 'n Go, GrabPay, DuitNow or FPX.
• When communicating with the Stars77 support team – including the content of conversations, complaints, or enquiries.
• When completing feedback forms, surveys, or contests organised by Stars77.

Data collected automatically:

• Technical data such as your IP address, browser type, operating system, and device screen resolution.
• Usage data such as pages visited, time spent, clicks, and interactions within the Stars77 platform.
• Gaming data such as betting history, games played, and game results.
• Cookie data and similar tracking technologies – detailed in Section 7.

Stars77 uses your personal data solely for the following legitimate and stated purposes:

• Account management: Creating, verifying and managing your Stars77 account, including identity verification and compliance with member eligibility requirements.
• Transaction processing: Processing deposits via methods such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your account.
• Service provision: Providing access to slots, Live Casino, lottery, poker, and Sports Betting on the Stars77 platform.
• Legal compliance: Fulfilling Stars77's legal obligations under the PDPA, anti-money laundering laws, and other applicable regulations.
• Platform security: Detecting and preventing fraud, account abuse, illegal activity, and other security threats to the Stars77 platform.
• Service communications: Sending important notifications about your account, policy changes, and necessary security information.
• Marketing (with consent): Sending information about Stars77's latest promotions, bonuses, and offers – only if you have given consent to receive such communications.
• Product improvement: Analysing aggregated and anonymised usage patterns to improve the gaming experience on Stars77.

Stars77 does not sell, rent or trade members' personal data to external parties for marketing purposes. However, in certain limited and lawful circumstances, Stars77 may share your personal data with:

• Payment service providers: E-wallet providers such as Touch 'n Go, GrabPay, Boost, ShopeePay and DuitNow, as well as FPX banking institutions such as Maybank and CIMB — solely for the purpose of processing financial transactions.
• Licensed game providers: Companies such as Pragmatic Play, Evolution Gaming, and PG Soft may process the minimum game data required to deliver their gaming services to you through the Stars77 platform.
• IT service providers: Companies that provide Stars77 with technical infrastructure, hosting, cybersecurity, and analytics services — under strict confidentiality agreements.
• Legal authorities: Law enforcement agencies, regulatory bodies, or courts when Stars77 is required to do so under applicable Malaysian law.

In all of the above data-sharing instances, Stars77 ensures that any recipient of your data is bound by data protection obligations equivalent to our own standards. Legally binding data processing agreements are established with all relevant third-party service providers.

Stars77 implements a comprehensive range of technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration, or destruction:

• Transmission encryption: All data transmitted between your device and Stars77's servers is protected by 256-bit TLS/SSL encryption. This means that even if someone were to intercept the data in transit, they would be unable to read it without the correct encryption key.
• Storage encryption: Sensitive data such as financial information and identity documents is stored in encrypted form within Stars77's secure databases.
• Internal access controls: Only Stars77 staff who require access to members' personal data to perform their authorised job functions are permitted to access it. Such access is logged and reviewed on a regular basis.
• Two-factor authentication (2FA): Stars77 supports and encourages the use of 2FA on member accounts for an additional layer of protection against unauthorised access.
• Continuous threat monitoring: Stars77's security monitoring system operates around the clock to detect and respond to any suspicious activity, intrusion attempts, or other security threats.
• Regular penetration testing: Stars77 conducts regular security assessments by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.

While Stars77 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. Members therefore also play an important role in protecting their own accounts by using strong passwords, enabling 2FA, and never sharing their login credentials with anyone.

Stars77 retains members' personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

In general, Stars77 applies the following data retention principles:

• Active account data: Retained for the duration of your active account and for a reasonable period thereafter for compliance purposes and the resolution of any disputes that may arise.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's accounting and audit legal requirements.
• Support communication logs: Retained for three (3) years for service reference and dispute resolution purposes.
• Marketing data: Retained until you withdraw consent to receive marketing communications, after which related marketing data will be deleted within a reasonable timeframe.

Once the retention period expires, Stars77 will delete or anonymise the personal data concerned using secure data disposal procedures. Anonymised data can no longer be linked to any individual and may be used for internal statistical and analytical purposes.

The Stars77 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and understand aggregated usage patterns.

Types of cookies used by Stars77:

• Essential cookies: Required for the core functions of the Stars77 platform — login, gaming sessions, and security. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance cookies: Collects information on how members use the Stars77 platform to help us improve performance and user experience. This data is gathered in aggregate and anonymised form.
• Functional cookies: Remembering your preferences such as language, display settings and game preferences to deliver a more personalised experience.
• Marketing cookies: Used to deliver promotional content relevant to your interests – only activated with your consent.

You can manage and disable most cookies through your web browser settings. Do note that disabling essential cookies may affect the functionality of the Stars77 platform. For more information on managing cookies via your browser, refer to the relevant browser's help documentation.

The Malaysian Personal Data Protection Act 2010 (PDPA) grants you several important rights in relation to your personal data held by Stars77. Stars77 respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the Stars77 Privacy Officer by email at support@stars77.fun or via Live Chat on the platform. Stars77 will process your request within a reasonable timeframe and notify you of the outcome in writing.

Stars77 Platform not intended for individuals under the age of 18 under any circumstances. Stars77 does not intentionally collect or process personal data of individuals under the age of 18.

If Stars77 discovers that personal data of a child or individual under the age of 18 has been inadvertently collected, we will take immediate steps to:

• Immediate closure of the account in question.
• Delete all personal data collected from that individual.
• Any outstanding financial balance will be returned to the original payment method used, subject to the applicable verification process.

If you have reason to believe that someone under the age of 18 has registered a Stars77 account, please contact us immediately at support@stars77.fun. Stars77 takes child protection very seriously and will respond swiftly to any such report.

Stars77 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or other legitimate reasons. Amendments take effect upon publication of the updated version on the Stars77 platform with a revised update date.

For significant and material amendments — those that substantially change how Stars77 uses or shares your personal data — Stars77 will endeavour to provide advance notice via email or in-platform notification. Nonetheless, it is best practice to review this Privacy Policy page periodically.

If you have any questions, concerns, or requests regarding Stars77's Privacy Policy or how we handle your personal data, please contact our Privacy Officer through the following channels:

When contacting us regarding a privacy rights request, please clearly state your full name, Stars77 account number (if applicable), the type of request (access, correction, withdrawal of consent, etc.), and any other relevant information. This will help us process your request more quickly and accurately.

Stars77 is committed to responding to all legitimate privacy enquiries within a reasonable timeframe and ensuring your rights under Malaysia's PDPA are fully respected.