Sirap77 Privacy Policy – Our Commitment to Protecting Malaysian Member Data

1 Introduction & Scope of This Policy

This Privacy Policy describes sirap77's privacy practices regarding the collection and use of personal data in connection with our online casino platform operating under the domain sirap77.click.

This policy applies to all individuals who interact with the sirap77 platform, including visitors who browse the website, registration applicants, and registered members actively using our services.

By registering a sirap77 account or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue your use of the sirap77 platform.

Sirap77 acts as the data controller for all personal data collected through this platform. We are responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with Malaysia's Personal Data Protection Act 2010.

2 Personal Data We Collect

Sirap77 collects various categories of data depending on your interactions with our platform. The following is a summary of the types of data that may be collected:

Sirap77 does not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, unless required by law for specific KYC purposes.

3 How We Collect Your Data

Sirap77 collects your personal data through a variety of methods:

• Account Registration: You provide your name, phone number, date of birth, and email address directly when registering a sirap77 account.
• KYC Process: For identity verification, you may be required to submit a copy of your identification card or other supporting documents.
• Payment Transactions: Transaction details related to deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks are recorded for payment processing and financial record-keeping purposes.
• Platform Activity: The sirap77 system automatically logs gameplay activity, login events, and other in-platform actions for security and operational purposes.
• Communications: When you contact our support team via live chat or email, the contents of that conversation are retained for service quality and issue resolution purposes.
• Cookies & Tracking Technologies: The sirap77 platform uses session cookies and preference cookies to ensure a smooth and functional user experience. You can manage cookie settings through your browser, although doing so may affect certain platform features.

4 How We Use Your Data

Sirap77 uses collected personal data for legitimate and specific purposes only. We do not process your data for any purpose beyond those stated here without first obtaining your consent.

The primary purposes for which we use your data are:

• Service Provision: To open and manage your account, process deposits and withdrawals in MYR, and enable you to access all games on the sirap77 platform.
• Identity Verification & KYC: To meet legal requirements related to anti-money laundering (AML) and fraud prevention, particularly for transactions exceeding certain thresholds.
• Account Security: To detect and prevent unauthorised access, fraud, and activity that violates the platform's terms of use.
• Service Communications: To send you important notifications regarding your account, security updates, transaction confirmations, and promotional alerts you have consented to receive.
• Responsible Gaming: To monitor gameplay patterns and identify early signs of problem gambling, enabling us to offer appropriate support to members who may need assistance.
• Platform Improvements: To analyse aggregated usage patterns (without identifying individuals) for the purpose of improving user experience and sirap77 platform functionality.
• Legal Compliance: To fulfil legal obligations, regulatory requirements, or directives issued by applicable authorities.

5 Data Sharing with Third Parties

Sirap77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. This is a firm policy with no exceptions.

However, in the context of our platform's operations, data may be shared with the following categories of third parties, and only to the extent necessary for the stated purposes:

• Game Providers: Companies such as Evolution Gaming, Microgaming, NetEnt, and Playtech receive the game data necessary to provide and operate their games within the sirap77 platform. All these providers are bound by strict data protection agreements.
• Payment Providers: Payment processors for Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks receive the transaction information required to process your deposits and withdrawals.
• KYC Service Provider: Third parties assisting sirap77 with the identity verification process may receive the KYC documents you submit. All such providers are certified and bound by confidentiality obligations.
• Statutory Authorities: sirap77 may be required by law to disclose personal data to Malaysian government authorities, law enforcement agencies, or courts when compelled to do so by a valid court order or legal obligation.
• Independent Audit Body: Bodies such as eCOGRA, which audit game fairness, may access certain gameplay data that does not contain your personally identifiable information.

All third parties we work with are required to uphold data protection standards equivalent to sirap77's own. We conduct regular assessments of our vendors' privacy practices.

6 Data Retention Period

Sirap77 does not retain your personal data longer than is necessary for the purposes stated in this policy, or longer than required by applicable law.

• Active Account Data: Retained for as long as your sirap77 account remains active, and for the period following account closure as required by law.
• Financial Transaction Records: Retained for seven (7) years after each transaction, in accordance with Malaysia's financial and anti-money laundering regulations.
• KYC Documents: Retained for five (5) years after account closure or after the end of the business relationship, whichever is longer.
• Security & Activity Logs: Retained for two (2) years for fraud detection and security analysis purposes.
• Support Communication Data: Records of conversations with the support team are retained for two (2) years for quality control and dispute resolution purposes.
• Cookie Data: Session cookies are deleted when you close your browser. Preference cookies are stored for the period specified in their respective cookie settings, typically between 30 days and 12 months.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked back to you as an individual.

7 Technical Security Measures

Sirap77 continually invests in security infrastructure to ensure your data is protected against unauthorised access, loss, or damage.

• Encryption in Transit: All communications between your device and sirap77's servers are protected by TLS 1.3 with a 256-bit SSL certificate — meaning data such as your login credentials and transaction details cannot be intercepted by third parties in transit.
• Storage Encryption: Sensitive data stored in sirap77's databases is encrypted using AES-256 standards. This means that even if someone were to gain physical access to the database, they would still be unable to read the data without the decryption key.
• Access Controls: Access to player data within sirap77's internal systems is restricted to staff with a legitimate operational need, enforced through a multi-layer role-based access control system.
• Threat Monitoring: sirap77's security monitoring system operates 24 hours a day to detect suspicious activity, intrusion attempts, and traffic anomalies that may indicate an attack.
• Two-Factor Authentication: sirap77 members are encouraged to enable two-factor authentication (2FA) in their account settings for an added layer of security.
• Regular Security Audits: sirap77 conducts regular penetration testing and vulnerability assessments by independent third parties to identify and address any security weaknesses.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role — never share your password, use a strong and unique password for your sirap77 account, and notify us immediately if you suspect any suspicious activity on your account.

8 Cookies & Similar Technologies

The sirap77 platform uses cookies and similar tracking technologies to ensure core platform functionality and to enhance the user experience. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for core platform functionality — including login session cookies that keep you signed in while browsing the platform, and language preference cookies. They cannot be disabled without affecting the platform's basic functionality.
• Security Cookies: Used to detect suspicious login attempts, validate CSRF (Cross-Site Request Forgery) tokens, and support other security functions that protect your account.
• Functional Cookies: Stores your preferences such as display settings, last game played, and account configurations for convenience. These cookies can be disabled without affecting the platform's core functionality.
• Analytics Cookies (Anonymous): sirap77 uses aggregated, anonymised data to understand overall platform usage patterns — such as the most frequently visited pages and common navigation flows — for platform improvement purposes. This data contains no information that could personally identify you.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect your ability to log in or use certain features on the sirap77 platform.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by sirap77. sirap77 fully respects these rights:

10 Marketing Communications & Your Preferences

Sirap77 may send communications relating to promotions, bonus offers, new games, and other platform updates to members who have consented to receive such communications.

• During registration, you may choose whether or not to receive marketing communications from sirap77 via email or SMS.
• You can update your marketing communication preferences at any time through your account settings or by contacting the sirap77 support team.
• Even if you opt out of marketing communications, sirap77 still needs to send you essential transactional messages such as deposit confirmations, withdrawal notifications, and account security alerts — these are non-optional as they are critical to your account's security.
• Sirap77 will not use your data for marketing on behalf of any other company or service outside of the sirap77 platform itself.

To unsubscribe from marketing email communications, click the "Unsubscribe" link found at the bottom of any marketing email we send, or contact us directly at support@sirap77.click.

11 Changes to This Privacy Policy

Sirap77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to how we protect your data.

• Any significant changes to this policy will be communicated to registered members via email or in-platform notification at least 14 days before those changes take effect.
• The "Updated" date at the top of this page will always reflect the date of the latest version of this policy.
• Continued use of the sirap77 platform after the effective date of any changes will be considered your acceptance of the updated policy.
• If you disagree with any changes made, you have the right to close your sirap77 account and request the deletion of relevant data in accordance with the procedure set out in Section 9.

Sirap77 encourages you to review this Privacy Policy page periodically to stay informed about how we protect your information.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how sirap77 handles your personal data, we encourage you to get in touch with us.

• Email: support@sirap77.click — for detailed privacy requests, please include "Privacy Request" in the subject line of your email.
• Live Chat: The sirap77 support team is available 24 hours a day, 7 days a week to answer your privacy-related questions in Bahasa Malaysia.
• Sirap77 aims to respond to all privacy-related enquiries within 48 working hours from the date of receipt.
• For formal data subject rights requests (access, correction, deletion, etc.), sirap77 aims to fulfil such requests within 30 calendar days.

Sirap77 values all privacy-related feedback and is committed to addressing every enquiry thoroughly and within a reasonable timeframe.