Privacy Policy

TKO77 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at tko77.lat. We are committed to protecting the personal data of all individuals who interact with our Services, including registered players, prospective players, and website visitors (collectively, "you", "the User", "the Player").

This Privacy Policy ("Policy") describes how TKO77 collects, processes, stores, shares, and protects personal data in connection with the provision of our Services. It also describes the rights available to you regarding your personal data and the mechanisms through which you may exercise those rights.

TKO77 serves players predominantly in Malaysia — including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, Ipoh, and beyond — and we recognise the importance of handling personal data responsibly under internationally recognised data protection principles.

This Policy should be read alongside our Terms & Conditions, which govern the broader relationship between you and TKO77.

The following definitions apply throughout this Privacy Policy:

• "Controller" means TKO77, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Subject" means any natural person whose personal data is processed by TKO77, including registered players and website visitors.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, financial information, and IP address.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, retrieval, use, disclosure, and deletion.
• "Processor" means any third party that processes personal data on behalf of TKO77 under a contractual agreement.
• "Sensitive Personal Data" means personal data concerning racial or ethnic origin, health status, financial details, identity document numbers, and similar categories warranting heightened protection.
• "Services" means all gaming, betting, customer support, payment processing, and account management features provided by TKO77 through its platform.
• "Third Party" means any natural or legal person other than you and TKO77.

TKO77 collects personal data through multiple channels, including directly from you during registration and account management, automatically through your use of the Platform, and in some cases from third parties such as payment processors and identity verification providers. The categories of data we collect include:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification purposes — 21+ required)
• Email address and mobile phone number
• Residential address (including postcode and state — e.g., Selangor, Kuala Lumpur, Penang)
• Preferred username and encrypted account password
• Preferred currency (Malaysian Ringgit / MYR)

• Government-issued photo ID (MyKad, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• Payment method documentation (e.g., screenshot of registered e-wallet or bank account in your name)
• Selfie or facial verification image (where required for enhanced due diligence)

• Deposit and withdrawal amounts and timestamps
• Payment method details (e-wallet IDs, bank account references — we do not store full card numbers)
• Transaction histories and account balances
• Bonus and promotion redemption records

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation patterns
• Game history, betting records, and wager amounts
• Login timestamps and account activity logs

• Support chat transcripts (Live Chat and WhatsApp interactions)
• Email correspondence sent to [email protected]
• Survey responses and feedback submissions
• Marketing communication preferences

TKO77 processes your personal data for the following specific purposes. We collect no more data than is necessary for each stated purpose, consistent with data minimisation principles.

TKO77 does not use personal data for purposes beyond those stated above without first obtaining your explicit consent or unless required to do so by a competent legal authority.

TKO77 relies on one or more of the following legal bases when processing your personal data:

• Performance of a Contract: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted upon registration — including providing access to games, processing payments, and managing your account.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) obligations, and responsible gambling regulatory duties.
• Legitimate Interest: Processing undertaken for TKO77's legitimate business interests where those interests are not overridden by your rights — such as fraud prevention, platform security, product improvement, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting [email protected] or updating your account preferences.

TKO77 does not sell your personal data to third parties under any circumstances. We may, however, share your data with the following categories of recipients for the purposes described in this Policy:

TKO77 engages third-party processors to assist in delivering our Services. These include payment gateway providers (processing MYR transactions via DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and Hong Leong Connect); identity verification and KYC service providers; game content providers; cloud infrastructure and hosting providers; and customer support software platforms. All processors are bound by contractual data protection obligations and may not use your data for any purpose other than the specific service they provide to TKO77.

TKO77 may disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts of law where we are legally required to do so, or where disclosure is necessary to protect TKO77's legal rights or to prevent fraud and money laundering.

In the event of a merger, acquisition, restructuring, or sale of all or part of TKO77's business, personal data held by TKO77 may be transferred to the successor entity, subject to equivalent data protection commitments. You will be notified of any material change to the data controller's identity.

TKO77 uses cookies and similar tracking technologies to improve platform functionality, analyse user behaviour, and personalise your experience. A cookie is a small text file stored on your device when you visit our website.

• Strictly Necessary Cookies: Essential for the operation of the platform — including maintaining your logged-in session, remembering your language preference, and processing transactions securely. These cannot be disabled without affecting core functionality.
• Performance & Analytics Cookies: Collect anonymised information about how visitors interact with the site — such as which pages are visited most frequently and where errors occur. This data is used to improve platform performance.
• Functional Cookies: Enable enhanced functionality such as remembering your game preferences, display settings, and recently visited sections.
• Marketing Cookies: Used where you have provided consent to receive personalised promotional offers and communications relevant to your activity on TKO77. These can be disabled via your account settings.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core platform features such as logging in and making transactions.

TKO77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for such longer period as may be required by applicable law or regulation. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a period of at least five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the customer relationship, or longer where required by the relevant regulatory authority.
• Transaction Records: Retained for a minimum of five (5) years, consistent with financial record-keeping obligations.
• Support Communications: Retained for a minimum of two (2) years following the resolution of a support query.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus one (1) year, or until consent is withdrawn.
• Technical and Usage Data: Aggregated analytics data may be retained indefinitely in anonymised form; identifiable technical logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an individual.

TKO77 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the TKO77 platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by Malaysian banks including Maybank and CIMB.
• Data Encryption at Rest: Sensitive personal data — including identity documents and financial information — is encrypted in storage using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorised TKO77 personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked immediately upon role change or departure.
• Two-Factor Authentication (2FA): Available on all player accounts and mandatory for administrative access to TKO77's internal systems.
• Penetration Testing: TKO77 engages independent security professionals to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, TKO77 will notify affected individuals and relevant authorities within the timeframes prescribed by applicable law.

As a data subject, you hold the following rights in relation to your personal data held by TKO77. You may exercise any of these rights by submitting a written request to [email protected]. TKO77 will respond within thirty (30) days of receiving a valid request.

• Right of Access: You have the right to request a copy of the personal data TKO77 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis exists. Note that certain data must be retained by TKO77 to fulfil legal obligations (e.g., AML record-keeping) even after account closure.
• Right to Restriction of Processing: You may request that TKO77 restrict processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on TKO77's legitimate interests, including profiling, at any time. TKO77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing.

TKO77 may request identity verification before processing a data subject request to ensure we do not disclose information to an unauthorised party. Where a request is declined, TKO77 will provide a written explanation.

TKO77's Services are strictly intended for adults aged 21 years and above. TKO77 does not knowingly collect personal data from individuals under the age of 21. As part of our registration and KYC process, we verify the age of every player before permitting access to real-money gaming services.

If TKO77 becomes aware that personal data has been collected from an individual who does not meet the age requirement, we will take immediate steps to suspend the account, delete the associated personal data, and return any deposited funds to the payment method from which they originated.

Parents or guardians who believe that a minor may have registered on TKO77 are encouraged to contact our support team immediately at [email protected] or via live chat. We take underage gambling extremely seriously and will act without delay on any credible report.

The TKO77 platform may contain references to or integrations with third-party services — such as payment processors (e.g., Touch 'n Go eWallet, GrabPay, DuitNow) and game providers. While these integrations are necessary for the delivery of our Services, TKO77 is not responsible for the privacy practices of third-party organisations.

Each third-party service provider operates under its own privacy policy, which governs how they handle any data shared with them in the course of delivering their service. TKO77 recommends that you review the privacy policies of any third-party service you interact with in connection with your TKO77 account.

TKO77 does not control the content, security practices, or privacy policies of third-party websites or services and accepts no liability for any consequences arising from your interactions with them.

TKO77 reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in our data processing practices, regulatory requirements, or business operations. Where changes are material, TKO77 will provide advance notice via a platform notification and, where practicable, by email to your registered address.

The "Last Updated" date at the top of this page will be revised with each amendment. Your continued use of TKO77's Services following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using our Services and may request account closure in accordance with our Terms & Conditions.

We encourage all players to review this Policy periodically to remain informed about how TKO77 protects their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by TKO77, please contact our Data Protection team using any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for prioritised handling
• Live Chat: Available 24/7 on tko77.lat — average response time 3–5 minutes
• WhatsApp: Available in English, Bahasa Melayu, and Mandarin — 24/7

TKO77 will acknowledge all privacy-related enquiries within five (5) business days and will endeavour to fully resolve your request within thirty (30) days. Where a request is complex or involves a large volume of data, this period may be extended by up to a further sixty (60) days, with notification provided to you.

For information about your rights as a TKO77 player more broadly, please also review our Terms & Conditions and our Responsible Gambling page.