Privacy Policy – sirap77

1. Introduction and Data Controller

sirap77 ("we", "us", "our") operates the online gaming platform accessible at sirap77.club (the "Platform"). sirap77 acts as the data controller in respect of the personal data of registered members and visitors to the Platform.

This Privacy Policy describes how sirap77 collects, uses, stores, and discloses personal data in connection with the operation of the Platform. It should be read alongside the sirap77 Terms & Conditions. By using the sirap77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

sirap77 is committed to handling personal data in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2. Information We Collect

sirap77 collects personal data from you in the following ways and categories:

a) Information You Provide Directly

• Registration data: full name, date of birth, email address, residential address, phone number, and username;
• Identity verification documents: government-issued photo identification (e.g., Malaysian National Identity Card, passport), proof of address, and, where required for payment verification, copies of payment instruments;
• Financial data: bank account details, eWallet identifiers (e.g., Touch n Go eWallet, Boost), transaction history, and deposit/withdrawal records;
• Communications: messages sent to sirap77 customer support via live chat or email, including the content of those communications and metadata associated with them.

b) Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone;
• Usage data: pages visited, game sessions played, bet amounts, session duration, navigation paths, and Platform feature interactions;
• Cookie and tracking data: as further described in Section 5 below.

c) Information from Third Parties

• Identity verification data from third-party KYC and anti-money laundering (AML) service providers;
• Fraud detection and risk scoring data from payment processors and financial intelligence partners;
• Responsible gaming data from self-exclusion registries where sirap77 is a participating operator.

3. How We Use Your Information

sirap77 uses the personal data we collect for the following purposes:

• Account management: to register, maintain, and administer your sirap77 member account, including processing deposits, withdrawals, and bonus allocations;
• Identity and age verification: to verify that you are who you say you are and that you meet the minimum age requirement of 21 years as required by sirap77's operating terms;
• Legal and regulatory compliance: to comply with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under applicable international gaming regulations;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, collusion, bonus abuse, and other prohibited activities on the Platform;
• Customer support: to respond to your enquiries, resolve disputes, and provide assistance with your sirap77 account;
• Responsible gaming: to monitor gaming behaviour and deliver responsible gaming interventions, including deposit limit reminders, reality checks, and self-exclusion enforcement;
• Platform improvement: to analyse usage patterns and improve the functionality, design, and content of the sirap77 Platform;
• Marketing communications: where you have given consent or where sirap77 has a legitimate interest, to send you promotional offers, bonus notifications, and product updates relevant to your sirap77 membership. You may opt out of marketing communications at any time via your account settings.

4. Legal Bases for Processing

sirap77 processes personal data on the following legal bases:

• Contractual necessity: processing necessary to perform the contract between sirap77 and the Member, including account operation, transaction processing, and customer support;
• Legal obligation: processing required to comply with applicable AML, KYC, and gaming regulatory obligations;
• Legitimate interests: processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your data protection rights;
• Consent: processing for marketing communications and certain cookie deployments, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

sirap77 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that allow the Platform to function correctly, remember your preferences, and collect analytical data about Platform usage.

The categories of cookies used by sirap77 include:

• Essential cookies: required for the Platform to operate, including session management, login authentication, and security functions. These cannot be disabled without impairing Platform functionality;
• Functional cookies: used to remember your preferences such as language settings and game lobby layout;
• Analytical cookies: used to collect aggregated data about how visitors use the Platform, helping sirap77 identify areas for improvement;
• Marketing cookies: used to deliver relevant promotional content, where you have provided consent.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of your sirap77 account.

6. Disclosure of Your Information

sirap77 does not sell your personal data to third parties. We may disclose your personal data in the following circumstances:

• Service providers: to third-party vendors engaged by sirap77 to provide KYC verification, payment processing, fraud detection, customer support technology, and data hosting services, under contractual data protection obligations;
• Gaming software providers: certain game providers receive technical session data necessary to operate their games on the sirap77 Platform; no additional personal data beyond what is technically required is shared;
• Regulatory authorities: to gaming regulators, financial intelligence units, law enforcement agencies, and other governmental authorities where disclosure is required by law or where sirap77 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm;
• Responsible gaming registries: to self-exclusion registries operated under gaming regulatory frameworks where applicable, to enforce responsible gaming obligations;
• Business transfers: in the event of a merger, acquisition, or sale of all or part of the sirap77 business, your data may be transferred to the acquiring entity subject to equivalent data protection obligations.

7. International Data Transfers

sirap77 operates internationally and your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, sirap77 ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer mechanisms, to ensure that your data is protected to a standard that is at least equivalent to the protections available in Malaysia.

8. Data Retention

sirap77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and accounting obligations. Specifically:

• Account registration data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements;
• Customer support communication records are retained for a minimum of two (2) years;
• Marketing preference data is retained until you withdraw consent or request erasure;
• Analytical and usage data in aggregated, anonymised form may be retained indefinitely.

When personal data is no longer required, sirap77 securely deletes or anonymises it in accordance with our data retention schedule.

9. Security of Your Personal Data

sirap77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL encryption for all data transmitted between your device and sirap77 servers, two-factor authentication for account access, access controls limiting internal data access to authorised personnel only, and regular security audits and penetration testing of Platform infrastructure.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. If you become aware of any security vulnerability or unauthorised use of your sirap77 account, please notify us immediately at [email protected].

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by sirap77:

• Right of access: the right to request a copy of the personal data sirap77 holds about you;
• Right to rectification: the right to request correction of inaccurate or incomplete personal data;
• Right to erasure: the right to request deletion of your personal data where retention is no longer legally required;
• Right to restrict processing: the right to request that sirap77 limits the processing of your personal data in certain circumstances;
• Right to data portability: the right to receive personal data you have provided in a structured, machine-readable format;
• Right to object: the right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: where processing is based on consent, the right to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact sirap77 support at [email protected]. sirap77 will respond to verified requests within a reasonable timeframe. sirap77 may require identity verification before processing a data rights request.

11. Children and Minors

The sirap77 Platform is strictly for adults aged 21 and above. sirap77 does not knowingly collect or process personal data from individuals under the minimum age threshold. If sirap77 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be closed immediately. If you believe an underage individual has registered a sirap77 account, please notify us at [email protected].

12. Changes to This Policy

sirap77 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform functionality, or applicable law. Material changes will be communicated to registered members via the Platform or by email. The effective date of the current version is stated at the top of this document. Continued use of the sirap77 Platform following any update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by sirap77, please contact our data protection team via live chat on the Platform or by email at [email protected]. Our support team is available 24 hours a day, 7 days a week.