Privacy Policy Goat77 – Personal Data Protection Commitment for Malaysian Players

Goat77 is an online sports betting and casino platform operating under the domain goat77.best and serving Malaysian players. We understand that trust is the foundation of a healthy relationship between a platform and its players — and that trust begins with how we handle the personal information you entrust to us.

This Privacy Policy transparently sets out the types of personal data we collect when you use the goat77 platform, why it is collected, how it is used, who it may be shared with and the security measures we take to protect it. It also explains your rights under the Malaysian Personal Data Protection Act 2010 (PDPA) and how to exercise them.

By registering a goat77 account, making a deposit or accessing any part of our platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, please stop using the platform and contact us to discuss the options available to you.

Goat77 collects personal information from you in several ways — when you register a new account, while you use the platform, when you contact our support team, and through automated tracking technologies. The types of data collected are:

Goat77 only collects data that is genuinely necessary for the stated purposes. We do not collect sensitive information such as biometric data, medical information or religious beliefs unless required by applicable law in very limited specific circumstances.

• Data collected during account registration includes your full name, an active Malaysian phone number and a valid email address.
• Financial data covers records of all deposits and withdrawals in Malaysian Ringgit (RM), including transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX.
• Technical data is collected automatically when you access the goat77 platform and is used solely for security purposes and to improve the user experience.

Goat77 uses the personal data collected for legitimate and transparent purposes. We do not use your data for any purpose beyond what is stated here without first obtaining your consent. The primary purposes for data use are:

• Service Provision: Managing your account, processing deposits and withdrawals in MYR, and providing access to all games and features on the Goat77 platform.
• Identity & Age Verification: Ensuring all players are aged 18 and above and that registration details are valid, in line with legal requirements and industry standards.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple account ownership and any security threats to the goat77 platform and its players.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance in accordance with our policy Responsible Gaming Goat77.
• Service Communications: Sending important notices regarding your account, transactions, security updates, and changes to our Terms & Conditions or Privacy Policy.
• Platform Improvements: Analysing aggregated, anonymised usage data to improve the user experience, platform performance and game selection on goat77.
• Legal Compliance: Meeting legal obligations under the Malaysian PDPA, anti-money laundering (AML) requirements and applicable regulatory requirements.

Goat77 does not sell or rent Malaysian players' personal data to any third party. However, in the course of operating our business and delivering the services you use, we may share limited data with certain categories of third parties who act as data processors on our behalf:

• Malaysian Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers receive the transaction data necessary to process your deposits and withdrawals in MYR. These providers maintain their own privacy policies and are subject to Bank Negara Malaysia regulations.
• Game Providers: Providers such as Pragmatic Play, PG Soft, Evolution Gaming, and JILI may receive the minimum technical data required to deliver games to you through the Goat77 platform. They do not receive your financial or personal identity information.
• Identity Verification Service: Authorised third-party identity verification providers may be used to verify identity documents during the KYC (Know Your Customer) process, particularly at the time of your first withdrawal.
• Legal Authority: goat77 is legally required to disclose personal data to the relevant authorities — such as law enforcement agencies or regulatory bodies — when directed to do so through a valid legal process. We will notify you of any such disclosure unless prohibited from doing so by law.

All third parties that receive data from Goat77 are contractually obligated to maintain its confidentiality, use it solely for the specified purpose, and adhere to security standards equal to or exceeding those that Goat77 applies to itself.

Goat77 continually invests in security infrastructure to protect the personal and financial data of Malaysian players. For us, data security is not merely a legal requirement — it is a moral responsibility to the community of players who trust us with their sensitive information.

The key security measures Goat77 employs include:

• 256-bit SSL Encryption: All communications between your device and Goat77 servers are encrypted using 256-bit TLS/SSL protocols, ensuring data cannot be intercepted in transit.
• Secure Password Storage: Goat77 player passwords are never stored in plain text — they are processed using strong hashing algorithms, meaning that even in the event of a server breach, actual passwords cannot be recovered.
• Two-Factor Authentication (2FA): Goat77 players are encouraged to enable 2FA, which adds an extra layer of security to their account by requiring a secondary verification code in addition to their password.
• Continuous Security Monitoring: Goat77's security team monitors the platform 24/7 to detect suspicious activity, unauthorised access attempts, and potential cyber threats.
• Internal Access Controls: Access to player personal data within the Goat77 organisation is restricted to staff who require it to perform their duties, based on the principle of least privilege.
• Regular Auditing: Goat77's security systems are regularly audited by independent cybersecurity experts to identify and address any potential vulnerabilities.

Goat77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website. Understanding the cookies we use allows you to make informed choices about your privacy.

Types of cookies Goat77 uses:

• Essential Cookies (Required): These cookies are essential for the core functionality of the Goat77 platform — such as maintaining your login session, enabling deposit processing, and managing security preferences. Without them, the platform will not function properly. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the Goat77 platform — which pages you visit, which games you play, and how long you spend in each section. This data is used in aggregate form to improve the platform. These cookies can be disabled without affecting core functionality.
• Preference Cookies: Remembering your personal preferences such as language, display settings and favourite games on goat77. This enables a more personalised experience every time you use the platform.
• Analytical Cookies: Goat77 uses web analytics tools to understand overall platform usage patterns. All analytics data is anonymised and cannot be traced back to any specific individual.

You can manage your cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality or your experience on the Goat77 platform. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you as a goat77 player have certain rights regarding your personal data. goat77 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the goat77 privacy team by email support@goat77.best specifying the right you wish to exercise and your relevant account information. We will respond within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital.

Goat77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet applicable legal obligations. Once the data is no longer required, it will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

• Active Account Data: For as long as your Goat77 account is active and for 12 months following your last activity.
• Financial Transaction Data: Transaction records in MYR are retained for a minimum of 7 years in compliance with Malaysian legal requirements on accounting and anti-money laundering.
• Identity Verification Data: KYC documents are retained for a minimum of 5 years following account closure or the last withdrawal, in accordance with anti-money laundering compliance requirements.
• Support Communication Data: Customer support conversation records are retained for 2 years for quality control and dispute resolution purposes.
• Technical Data & Logs: Access logs and technical data are retained for 90 days for security and debugging purposes.

Once the retention period expires, Goat77 will delete or de-identify the data using secure methods to ensure recovery is not possible. For accounts closed at a player's request, this process begins 30 days after closure to allow any outstanding disputes to be resolved first.

The Goat77 platform is strictly for users aged 18 and above. We do not knowingly collect, store, or process the personal data of individuals under the age of 18. This is a firm and non-negotiable position for Goat77.

Goat77 carries out age verification procedures at registration and upon the first withdrawal request to ensure compliance with the minimum age requirement. Should we become aware that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and believe your underage child has registered an account with goat77, please contact us immediately at support@goat77.best so we can take the necessary action without delay.

Goat77 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect Malaysian players' data. When significant changes are made, we will notify you via:

• Clear notices on the homepage and login page of the goat77 platform.
• Email to the address registered to your account.
• A notice will appear in your account upon login after the amendments take effect.

The "Updated" date at the top of this document reflects when this Privacy Policy was last reviewed. Your continued use of the Goat77 platform after any policy update takes effect constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed.

If you have any questions or concerns, or wish to exercise your privacy rights regarding personal data held by goat77, our team is ready to help. We take every privacy enquiry seriously and are committed to responding promptly and transparently.

• Privacy Email: support@goat77.best — state "Privacy Enquiry" in the subject line.
• Live Chat: Available 24/7 on the Goat77 platform, with a Bahasa Malaysia-speaking support team.
• Response Time: We will acknowledge receipt of your request within 2 business days and provide a full response within 21 business days.