Gacr77 Privacy Policy – Malaysia Member Personal Data Protection

Introduction & Scope of This Policy

Welcome to the gacr77 website and platform (gacr77.pro). This Privacy Policy has been prepared to give you a clear and comprehensive understanding of how we handle your personal information — from the moment you register as a member through every interaction you make on our platform.

We at gacr77 understand that entrusting personal data to any online platform requires a high level of trust. That is why we take every aspect of privacy protection seriously and have continuously invested in robust security infrastructure to keep your information safe at all times.

This Privacy Policy applies to all users who access or use gacr77's services, including the website, mobile app (Android & iOS), games, payment systems, and all other platform features. By registering or continuing to use any gacr77 service, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy.

This policy should be read together with Terms & Conditions and Responsible Gaming Policy gacr77, which together form the complete protection framework for our platform users.

Personal Data We Collect

Gacr77 follows a minimum data collection principle — we only collect information that is strictly necessary to provide our services, fulfil legal obligations and ensure platform security. The categories of data we collect are as follows:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

When you use the gacr77 platform, our systems automatically record the following technical information for security and service improvement purposes:

• IP address and approximate geographic location (city level only).
• Device type, operating system, phone model, and app version in use.
• Web browser type and version, and screen resolution.
• Session activity logs including login time, logout time, and in-game actions.
• Complete wagering records and financial transaction data.
• Records of communications with the customer support team.

2.3 Data from Third-Party Sources

In certain cases, gacr77 may receive data from trusted partners, such as digital identity verification providers and payment service providers, for the purpose of verifying the accuracy of information you have provided to us. Such data is processed in accordance with the relevant third party's privacy policy and used only for the stated purpose.

How We Use Your Data

Gacr77 uses collected personal data solely for lawful, relevant and proportionate purposes aligned with service requirements. The primary purposes for which your data is used are as follows:

• Account Management: Creating, verifying, managing, and protecting your member account on the gacr77 platform.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions related to your activity on the platform.
• KYC & AML Compliance: Meeting identity verification and anti-money laundering obligations as required by Malaysian law.
• Platform Security: Detecting, investigating, and preventing fraudulent activity, hacking, system abuse, and other security threats.
• Service Provision: Keeping the gacr77 platform running smoothly, including games, payments, customer support, and all other features.
• Service Communications: Sending important notices related to your account, transactions, policy updates, and security information.
• Marketing Communications: Delivering promotional information, bonuses, and special offers — only to members who have consented to receive such communications.
• Service Improvement: Analyzing aggregate and anonymized usage patterns to help us improve the user experience on the gacr77 platform.
• Legal Compliance: Maintaining records required by law and fulfilling any valid orders or requests from competent authorities.

Data Sharing & Disclosure

Gacr77 takes a highly cautious approach to sharing member personal data. We will not disclose your data to third parties except in the following limited situations:

4.1 Trusted Service Providers

Gacr77 works with carefully selected third-party service providers to help operate our platform. These include payment service providers, licensed game providers, digital identity verification services and cloud computing infrastructure. All such providers are bound by strict confidentiality agreements and are only permitted to process your data in accordance with gacr77's specific instructions.

4.2 Legal Obligations

Gacr77 may be required to disclose member personal data to Malaysian government authorities or relevant regulatory bodies where there is a valid legal obligation to do so, such as in financial crime investigations, court orders or requests from the relevant authorities.

4.3 Platform Protection

In cases involving serious threats to the security of the platform or other users — such as large-scale fraud, hacking, or system abuse — gacr77 reserves the right to share necessary information with relevant parties, including law enforcement agencies.

Data Security Measures

Gacr77 continually invests in comprehensive security infrastructure to protect member personal data. The key security measures we implement include:

• 256-bit SSL Encryption: All communications between your device and gacr77 servers are encrypted using the latest TLS protocols.
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and verification documents, is encrypted using AES-256 standard.
• Two-Factor Authentication (2FA): An additional security layer that protects your account from unauthorized access even if your password is compromised.
• 24/7 Security Monitoring: An automated monitoring system that detects and alerts on suspicious activity in real time.
• Strict Access Controls: Only specifically authorized and trained gacr77 staff may access member personal data, and only to the extent required for their duties.
• Regular Security Audits: Penetration testing and independent security audits are conducted regularly by certified third-party specialists.

Cookies & Tracking Technologies

Gacr77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how members use our platform. Cookies are small text files stored on your device when you visit the gacr77 website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality, including login session management, security, and transaction processing. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous statistical data on how members use the platform to help us identify and resolve technical issues.
• Functional Cookies: Storing user preferences such as language, display theme, and account settings to deliver a more personalized experience.
• Analytics Cookies: Helping us understand aggregate usage patterns for continuous platform improvement.

6.2 Cookie Controls

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality and security of the gacr77 platform. For more information on managing cookies in your browser, refer to your browser's official documentation.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and gacr77's policy, you have the following rights regarding your personal data:

Data Retention Period

Gacr77 retains member personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with relevant legal obligations. The following are general data retention guidelines:

• Active Account Data: Retained for the duration of active membership and until the account is officially closed.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the termination of the business relationship, in line with AML compliance requirements.
• Security Logs: Retained for 2 years for security investigation and fraud prevention purposes.
• Support Communication Records: Retained for 3 years for reference and dispute resolution purposes.
• Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.

Once the specified retention period has ended, your personal data will be securely deleted or permanently anonymised in accordance with industry-standard procedures.

Changes to This Privacy Policy

Gacr77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, current legal requirements or improvements to the services we offer. Any material changes will be communicated to members via:

• Notices displayed prominently on the gacr77 website and app before changes take effect.
• Push notifications via the gacr77 mobile app to all active members.
• Email notification to the member's registered email address for significant changes.

The "Updated" date shown at the top of this page indicates when the latest version of this Privacy Policy came into effect. Your continued use of the gacr77 platform after any changes are published will be considered your acceptance of the updated Privacy Policy.

Contact Our Privacy Team

If you have any questions, concerns or wish to exercise your privacy rights, the gacr77 Data Protection team is ready to assist you.

You may also refer to the FAQ us for answers to the most frequently asked questions about privacy and account security on the gacr77 platform.