Privacy Policy wira77 — Our Commitment to Protecting Your Data

Wira77 is committed to protecting the privacy of every user who registers and uses our platform. This Privacy Policy has been prepared in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international standards relating to the handling of personal data in the online services industry.

This document explains in detail the types of personal data we collect, why we need it, how we use it, who may have access to it, and your rights as a data subject. Wira77 believes that transparency is the foundation of trust — we don't want users wondering what happens to their information.

This policy applies to all users accessing the Wira77 platform via the official website, Android and iOS mobile apps, and any related service channels including live chat and support email. By using any Wira77 service, you agree to the terms set out in this document.

Wira77 only collects data necessary for legitimate platform operational purposes, including identity verification, financial transaction processing, and legal compliance. We do not collect excessive or irrelevant data beyond the stated purposes. The categories of data we collect are as follows:

Technical data such as IP addresses and device information is collected automatically when you access the Wira77 platform. This is standard industry practice and is used solely for security purposes and fraud detection — not to continuously track your physical location.

Every piece of data we collect has a clear and legitimate purpose. wira77 does not use user data for purposes unrelated to platform operations or that have not been disclosed to users. The following are the specific ways we use your data:

• Identity verification and KYC: To verify that you are the real individual you claim to be, meet the minimum age requirement of 18 years, and comply with anti-money laundering (AML) regulations.
• Account management: To create, maintain, and protect your account, including password recovery and two-factor authentication.
• Financial transaction processing: To process deposits, withdrawals, and refunds accurately and securely through supported payment channels.
• Fraud detection and security: To detect and prevent fraudulent activity, money laundering, multi-account wagering, and any misuse of the platform.
• Customer support: To respond to inquiries, resolve disputes, and provide effective and accurate technical assistance.
• Legal compliance: To fulfill reporting and compliance obligations under applicable Malaysian laws, including PDPA 2010 and AML/CFT regulations.
• Service enhancement: To analyze aggregated usage patterns in order to improve the user experience, platform stability, and content relevance.
• Service communications: To send important notifications related to your account, policy changes, relevant promotions, and technical updates.

Wira77 does not sell, rent, or disclose users' personal data to third parties for marketing or any other purposes unrelated to platform operations. However, there are limited situations where data sharing is necessary and legally permitted:

• Payment service providers: Transaction information is shared with payment processors such as DuitNow, FPX, Touch 'n Go, Boost, and ShopeePay solely to process your transactions. These providers are bound by strict confidentiality agreements.
• Game software providers: Usernames and session data may be shared with integrated game providers such as Pragmatic Play, Evolution Gaming, and others for technical purposes only.
• Regulatory authorities: Where required by law, a court order, or a valid request from a law enforcement agency, Wira77 will disclose the necessary data to the relevant authorities.
• Technical service providers: Services such as cloud hosting, security monitoring, and analytics may have limited access to data within the scope of their service contracts, subject to strict data protection controls.

The security of user personal data is wira77's highest priority. We continuously invest in security infrastructure to ensure your data is protected from unauthorised access, loss, theft, or misuse.

Key security measures we practise include:

• 256-bit SSL/TLS encryption for all data communication between your browser or app and our servers.
• Encryption at rest for all databases containing sensitive personal information.
• Role-based access control (RBAC) ensuring only authorised staff can access specific data.
• Mandatory two-factor authentication (2FA) for all internal staff accounts accessing data management systems.
• Regular security audits by independent third parties to identify and patch system vulnerabilities.
• Real-time threat monitoring using a Security Information and Event Management (SIEM) system.
• A comprehensive incident response plan with a target response time of no more than 4 hours for critical incidents.

In the event of any data breach affecting your personal information, wira77 is committed to notifying affected users within 72 hours of detecting the incident, in line with international best practices.

The wira77 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login sessions, and analyze platform usage. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Stores your settings and preferences such as language, display theme, and selected layout for a more personalised experience.
• Analytics cookies: Collects aggregated and anonymised data on how users interact with the platform for continuous improvement purposes.
• Security cookies: Helps identify suspicious activity, CSRF attacks, and unauthorised access attempts.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect your ability to log in or use certain features of the Wira77 platform.

Wira77 retains users' personal data only for as long as necessary to fulfill the original purpose of collection or as required by Malaysian law. The principle we follow is "retain as little as possible, for only as long as necessary."

• Active account data: Retained for the duration the account remains active and for 7 years after account closure for financial compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's accounting and tax legal requirements.
• KYC documents: Retained for 5 years from the date of submission or account closure, whichever is longer.
• Security logs: Retained for 12 months for the purposes of security incident and fraud investigation.
• Marketing data: Retained until you withdraw your consent to receive marketing communications.

When the retention period expires or upon a valid user request (subject to legal obligations), data will be permanently deleted using secure deletion methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 and Wira77's internal policies, you have the following rights regarding your personal data. We fully respect and guarantee these rights:

Wira77 reserves the right to amend or update this Privacy Policy from time to time in line with changes in law, industry practices, or the way we operate. All amendments will be handled as follows:

• The "Updated" date at the top of this document will be changed to reflect the date of the latest amendment.
• For significant amendments that affect how we use your personal data, we will send a notification to your registered email address at least 14 days before the amendment takes effect.
• Minor amendments such as language clarifications or typographical corrections may take effect immediately without prior notice.
• Continued use of the wira77 platform after any amendments take effect will be deemed as your acceptance of the revised policy.

We encourage you to review this page regularly — at least every 3 months — to stay informed about how we handle your personal data. All previous versions of this Privacy Policy are available upon request from our support team.

If you have any questions, concerns, or complaints about how Wira77 handles your personal data, we strongly encourage you to contact us directly. We will address every enquiry seriously and respectfully.

• Privacy Email: [email protected] (use heading: Privacy Policy Enquiries)
• Live Chat: Available 24/7 via the chat icon on the wira77 platform
• Response time: Within 24 hours for general enquiries, 14 business days for personal data rights requests

Wira77 also respects your right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have not handled your personal data in accordance with the Personal Data Protection Act 2010. However, we ask that you contact us first so that we may resolve any issues directly and efficiently.