Privacy Policy GTB77 – Our Commitment to Protecting Your Personal Data

Welcome to the GTB77 Privacy Policy. This document clearly and transparently explains how GTB77 ("we", "the Company") collects, processes, stores and protects your personal data when you use the GTB77 online casino platform in Malaysia.

This Privacy Policy applies to all individuals who interact with the GTB77 platform — including visitors who browse our website, prospective members in the process of registering, active members playing on GTB77, and former members who have closed their accounts. Data collected prior to account closure remains subject to this policy for as long as it is retained by GTB77.

GTB77 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of personal data handling. We only collect data that is genuinely necessary, use it solely for the stated purposes, and protect it with security measures proportionate to the sensitivity of that data.

GTB77 collects various types of personal data from members, depending on the services used and your level of interaction with our platform. The following are the main categories of data we collect:

How Data Is Collected

• Directly from You: During the GTB77 account registration process, identity verification (KYC), bonus applications, or when you contact customer support.
• Automatically: Through the use of cookies and industry-standard tracking technologies when you browse the GTB77 platform.
• From Third Parties: In certain cases, we may receive verification data from payment processors such as FPX, Maybank2u or CIMB Clicks for transaction verification purposes.

GTB77 uses your personal data only for legitimate, pre-stated purposes. We do not use your data for any purpose beyond those listed below without obtaining your additional consent.

GTB77 uses members' gameplay history solely for account management, fraud prevention and responsible gaming compliance — not to analyse your personal habits for intrusive marketing purposes.

GTB77 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. Your personal data is only shared in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment Processors: Required transaction details are shared with approved payment processors such as FPX, e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), and banking institutions (Maybank2u, CIMB Clicks) solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Minimum required gameplay data is shared with licensed game providers (such as Pragmatic Play, PG Soft, Habanero) to enable game functionality and winnings verification.
• Regulatory Authority: GTB77 will disclose personal data to the relevant Malaysian authorities when required by law or court order.
• Identity Verification: Approved third-party identity verification services may be used for the KYC process, in full compliance with the PDPA.
• Business Transfer: In the event of a merger or acquisition, personal data may be transferred to the receiving entity, provided that an equivalent or stricter privacy policy applies.

GTB77 invests seriously in security infrastructure to protect the personal data of Malaysian members. Our security approach is multi-layered — combining technology, procedures and staff training to ensure comprehensive protection.

• Data Encryption in Transit: All communications between your device and GTB77's servers are protected by TLS 1.3 protocol and 256-bit SSL encryption — the same standard used by Malaysia's major banks.
• Stored Data Encryption: Sensitive data stored in GTB77's databases — including financial information and passwords — is encrypted using strong algorithms and cannot be read even by unauthorised GTB77 staff.
• Role-Based Access Control: Only GTB77 staff with a legitimate business need are permitted to access member personal data, and all access is logged and monitored.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts or anomalies in data access.
• Periodic Penetration Testing: GTB77 conducts regular security testing by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Incident Response Procedure: GTB77 has a clear incident response procedure in place. Should a data breach occur that affects the rights and freedoms of members, we will notify the affected members within 72 hours of becoming aware of it.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and GTB77's own policies, you have several rights that you may exercise at any time in relation to the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. GTB77 will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If any personal data we hold is inaccurate or outdated, you have the right to request a correction. GTB77 will update the data within 14 working days.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that we may need to retain some data for a specified period for legal reasons (for example, financial transaction records for 7 years as required under Malaysian law).
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, with immediate effect and at no charge.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the withdrawal.

To exercise any of the rights above, please contact the GTB77 data protection team by email at privacy@gtb77.biz or via the in-app complaint form. GTB77 does not charge any fees for reasonable data rights requests.

GTB77 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic and ensure the security of your account. Cookies are small text files stored on your device when you visit the GTB77 platform.

You can manage cookie usage through your browser settings. However, disabling certain cookies may affect the functionality of the GTB77 platform. Details on the types of cookies we use are described in the Cookies section of this page.

GTB77 takes the protection of children and minors very seriously. The GTB77 platform is strictly intended for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

• The GTB77 registration process requires age verification, and GTB77 reserves the right to request proof of age at any time.
• Should GTB77 discover that personal data of an underage individual has been collected inadvertently, we will promptly delete such data and close the account in question.
• If you are a parent or guardian and become aware that your child has registered a GTB77 account, please contact us immediately at support@gtb77.biz and we will take immediate action.

In the normal course of GTB77's operations, Malaysian members' personal data is processed and stored in a secure environment. Some data may be processed by systems or services operating outside Malaysia — for example, when using licensed international gaming platform services.

• Any transfer of personal data outside Malaysia is carried out only when necessary and with safeguards equivalent to those required under Malaysia's PDPA 2010.
• All recipients outside Malaysia are required to uphold data protection standards no lower than those mandated by Malaysian law.
• GTB77 retains members' financial and identity data for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial institutions and anti-money laundering.
• Data that is no longer required for a legitimate purpose will be securely deleted using procedures that ensure it cannot be recovered.

GTB77 values the trust you place in us by entrusting your personal data. Our data protection team is ready to assist you with any queries, concerns or requests relating to your data privacy.

If you wish to exercise any of your data rights, have questions about how we process your data, or would like to submit a privacy-related complaint, you can reach us through:

• Privacy Email: privacy@gtb77.biz (dedicated to data protection enquiries)
• General Support Email: support@gtb77.biz
• Live Chat: Available 24 hours a day, 7 days a week on the GTB77 platform in Bahasa Malaysia

GTB77 will respond to all privacy-related enquiries within 14 business days. If your enquiry requires further investigation, we will keep you updated on its progress within the same timeframe.

GTB77 reserves the right to update this Privacy Policy from time to time to reflect changes in the law or our business practices. Any material changes will be communicated to members via email or platform notification at least 7 days before taking effect. Continued use of the GTB77 platform after changes take effect constitutes your acceptance of the updated policy.