Privacy Policy

1Introduction

GTB77 ("Company", "Platform", "We", "Us", "Our") operates the online gaming platform at https://gtb77.cam and associated services. We are committed to protecting the privacy and personal data of all individuals who interact with our platform ("Players", "Users", "You").

This Privacy Policy ("Policy") explains in clear, accessible terms how GTB77 collects, uses, stores, discloses, and otherwise processes personal data in connection with the operation of our platform. It has been written to comply with the data protection obligations imposed under our international gaming licence and with applicable data protection principles recognised internationally.

By registering an account with GTB77, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not access or use the GTB77 platform.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy.

2Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, identification documents, IP address, and financial data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, and destruction.
• "Data Controller" means GTB77, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of GTB77 under contractual instructions.
• "Sensitive Data" means personal data of a more sensitive nature, including financial information, identity document details, and data relating to health where processed in the context of responsible gaming tools.
• "Cookie" means a small text file placed on your device by the GTB77 platform to enable functionality, analytics, and session management.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance.
• "AML" means Anti-Money Laundering — legal obligations requiring financial platforms to identify and prevent money laundering.

3Data We Collect

GTB77 collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of data we collect and the context in which each arises:

4How We Collect Your Data

4.1 Directly from You

The majority of personal data we hold is provided directly by you during the registration process, when completing KYC verification, when making deposits or withdrawals, when setting responsible gaming preferences, and when contacting our support team.

4.2 Automatically via Platform Technology

When you access the GTB77 platform, we automatically collect technical data including your IP address, device identifiers, browser type, and session information. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 8.

4.3 From Third Parties

GTB77 may receive personal data from the following third-party sources:

• Payment processors: confirmation data from Malaysian payment providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank
• Identity verification services: where we engage third-party KYC providers to validate identity documents
• Fraud detection services: risk signals and device fingerprinting data from third-party fraud prevention partners
• Analytics providers: aggregated and pseudonymised usage data for platform performance analysis

5Lawful Basis for Processing

GTB77 processes personal data only where a lawful basis exists for doing so. The following bases apply to our principal processing activities:

• Contractual necessity: processing required to perform the contract with you (account operation, processing deposits and withdrawals, providing gaming services)
• Legal obligation: processing required to comply with our international licensing obligations, including KYC, AML screening, age verification, and responsible gaming requirements
• Legitimate interests: processing necessary for fraud prevention, platform security, internal analytics, and improving the quality of our services, where these interests are not overridden by your privacy rights
• Consent: where you have provided explicit consent, such as for receiving marketing communications (which you may withdraw at any time by contacting our support team)

6How We Use Your Data

GTB77 uses personal data collected from players for the following purposes:

6.1 Account Management

To create, maintain, and administer your GTB77 player account, including processing your registration, verifying your identity, managing your login credentials, and enabling account features such as deposit limits and self-exclusion tools.

6.2 Transaction Processing

To process deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay) and cryptocurrency networks (BTC, USDT). Financial data shared with payment processors is limited to what is strictly necessary for transaction completion.

6.3 Regulatory Compliance

To fulfil our obligations under our international gaming licence, including age verification (21+ enforcement), KYC identity checks, AML transaction monitoring, and responsible gaming programme implementation.

6.4 Fraud Prevention & Security

To detect, investigate, and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited activities. Technical data including IP addresses and device fingerprints are processed as part of our risk management systems.

6.5 Customer Support

To respond to your enquiries, resolve disputes, and provide assistance through our live chat, WhatsApp, and email support channels — available in English, Bahasa Melayu, and Mandarin.

6.6 Platform Improvement

To analyse platform usage patterns, identify technical issues, test new features, and generally improve the quality and stability of the GTB77 gaming experience. Analytics data used for this purpose is aggregated and pseudonymised where possible.

6.7 Marketing Communications

To send you information about promotions, bonuses, and platform updates where you have consented to receive such communications. You may opt out of marketing communications at any time without affecting your right to use the platform.

7Sharing Your Personal Data

GTB77 does not sell or rent personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients strictly as necessary for the purposes described in this Policy:

• Payment service providers: Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay), and payment networks (DuitNow, FPX) to process deposits and withdrawals
• Identity verification providers: third-party KYC service providers that assist with document verification and biometric checks under contractual data processing agreements
• Fraud prevention partners: risk and fraud detection service providers operating under strict data security and confidentiality obligations
• Legal and regulatory authorities: where required by our international licence conditions, by court order, or by applicable law — including disclosure to anti-money laundering authorities where suspicious activity is identified
• IT infrastructure providers: cloud hosting and data storage providers operating under contractual data processing agreements with appropriate security standards

8Cookies & Tracking Technologies

GTB77 uses cookies and similar tracking technologies to enable platform functionality, improve user experience, and support our security and analytics operations. The following categories of cookies are used:

Essential cookies cannot be disabled as they are required for the platform to function. You may manage functional and analytics cookies through your browser settings; however, disabling cookies may affect your ability to use certain features of the GTB77 platform.

9Data Retention

GTB77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account data and transaction records: retained for a minimum of 5 years from the date of account closure, in accordance with AML compliance requirements under our international licence
• KYC documentation: retained for 5 years from the date of submission or account closure, whichever is later
• Customer support communications: retained for 2 years from the date of the interaction
• Technical and usage data (logs): retained for up to 12 months unless required for ongoing fraud investigation
• Marketing consent records: retained for the duration of consent plus 2 years

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

10International Data Transfers

GTB77 operates under an international gaming licence and may store or process personal data on servers located outside Malaysia. Where personal data is transferred to countries that may not provide the same level of data protection as Malaysia's PDPA or internationally recognised standards, GTB77 implements appropriate safeguards including:

• Contractual clauses with data processors requiring compliance with data protection standards equivalent to those applicable in the originating jurisdiction
• Technical and organisational security measures appropriate to the sensitivity of the data being transferred
• Limitations on access to personal data by third-party processors to the minimum necessary for the specified purpose

By using GTB77, you acknowledge and consent to the transfer of your personal data in accordance with this section, subject to the safeguards described above.

11Your Rights as a Data Subject

Subject to applicable law and our legal retention obligations, you hold the following rights in respect of your personal data held by GTB77:

To exercise any of the above rights, please contact GTB77's compliance team at [email protected] (plain text — not a clickable link) with the subject line "Data Subject Request" and a description of the right you wish to exercise. We will acknowledge your request within 5 business days and complete it within 30 calendar days.

12Children's Privacy

The GTB77 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21.

Age verification is conducted as part of the KYC process prior to the processing of any withdrawal. Where GTB77 becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the associated personal data (subject to any legal retention obligations), and return any deposits made subject to investigation.

13Security Measures

GTB77 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers
• Encryption at rest for sensitive personal and financial data stored on our servers
• Role-based access controls limiting employee access to personal data to those with a specific operational need
• Two-factor authentication available for all player accounts and required for internal admin access
• Regular security audits and penetration testing conducted by third-party security professionals
• Incident response procedures including notification protocols in the event of a data breach affecting player data

While GTB77 employs robust security measures, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your GTB77 account and to enable two-factor authentication where available.

14Amendments to This Policy

GTB77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing activities, legal obligations, or operational practices. Where amendments are material — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — we will provide at least 7 days' advance notice via email to your registered address or via a prominent notice on the platform.

Non-material amendments (such as clarifications of existing practices or corrections of typographical errors) may take effect immediately. The date at the top of this document will always reflect the most recent revision.

Continued use of the GTB77 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended terms, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

15Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the personal data GTB77 holds about you, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24/7 via the on-site live chat widget — select "Privacy & Data" as the enquiry category
• Email: [email protected] with subject line "Privacy Policy Enquiry" or "Data Subject Request"
• Response Times: Live chat within 3–5 minutes; email within 24 business hours; data subject requests within 30 calendar days
• Support Languages: English, Bahasa Melayu, and Mandarin

When submitting a data subject request, please include your registered email address, account username, and a clear description of the right you wish to exercise or the concern you wish to raise. This helps us locate your records and respond as efficiently as possible.