GCR77 Privacy Policy — User Personal Data Protection

1 Personal Data We Collect

GCR77 collects your personal data through various transparent and lawful methods. The type of data collected depends on how you interact with our platform.

1.1 Data You Provide Directly

• Registration details: Full name, mobile number, email address, date of birth
• Bank account details: Bank name, account number, account holder name for deposit and withdrawal purposes
• KYC documents: A copy of your MyKad, passport, or valid identification document when required for verification
• Support communication: Any messages, complaints, or enquiries you submit to our support team

1.2 Data Collected Automatically

• Device data: IP address, device type, operating system, browser type and version
• Session data: Pages visited, access times, session duration, in-platform actions
• Transaction data: Records of deposits, withdrawals, wagering, and wins made through your account
• Cookies: Preference settings, language preferences, and session data stored in your browser

2 How Your Data Is Used

Every piece of data we collect has a clear and lawful purpose. gcr77 does not use your data for any purpose outside the scope stated below:

3 Data Sharing with Third Parties

GCR77 adheres to the principle of data minimisation — we only share information that is strictly necessary, with parties who genuinely need to know, in situations that truly require it.

We may share your data with the following parties in limited circumstances:

• Payment service providers: To securely process your deposits and withdrawals via FPX, eWallet, and bank transfer
• Game software providers: Minimum data required to run games, such as session ID and account balance
• Licensed authority: When required by law, court order, or official investigation by a regulatory or enforcement authority
• Audit partner: Independent audit firms that help us ensure platform compliance and integrity

All third parties working with gcr77 are required to comply with strict confidentiality agreements and data protection standards that are equivalent to or exceed our own.

4 Cookies and Tracking Technologies

The gcr77 platform uses cookies and similar tracking technologies to enhance user experience and ensure the security of your session. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saves your preferences such as language, time zone, and display options for a smoother repeat experience.
• Analytics Cookies: Helps us understand how users interact with the platform so we can continuously improve our services.
• Security Cookies: Helps detect and prevent suspicious activity such as unauthorised login attempts or account fraud.

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies may affect certain functions on the GCR77 platform.

5 Data Retention Period

GCR77 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data: Retained for as long as your account remains active on the GCR77 platform
• Financial transaction data: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering requirements
• KYC documents: Retained for 5 years after account closure or the date of the last transaction, whichever is later
• Security logs: Retained for 12 months for incident investigation and threat detection purposes
• Support communication: Retained for 2 years to facilitate follow-up and service improvement

Upon expiry of the retention period, your data will be securely deleted or anonymised using methods that meet industry standards.

6 Your Rights as a User

As a gcr77 platform user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the gcr77 customer support team via live chat. We will process your request within 30 working days from the date the request is received.

7 Data Security and Protection Measures

GCR77 invests seriously in security infrastructure to ensure your data remains protected at all times. Key security measures we implement include:

• Data encryption at rest: All data stored on our servers is encrypted using AES-256
• Data encryption in transit: All communication between your browser and our servers uses TLS 1.3
• Two-factor authentication (2FA): Available and encouraged for all user accounts
• Real-time threat monitoring: An active intrusion detection system (IDS) monitors suspicious traffic 24 hours a day
• Regular security audits: Vulnerability assessments and penetration testing are conducted periodically by independent parties
• Role-based access control: Only authorised personnel may access user data, and all access is carefully logged

8 Children's Privacy

The gcr77 platform is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors.

If we determine that we have collected data from a minor without proper age verification, we will take immediate steps to delete that data and close the relevant account. If you believe a child has registered on our platform, please contact us immediately via customer support.

9 Privacy Policy Amendments

GCR77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever we make significant changes, we will:

• Displaying a clear notice on the platform homepage for at least 14 days
• Sending notifications to your registered email address (for material changes)
• Updating the "Last Updated" date at the top of this document

Continued use of the gcr77 platform after the effective date of any amendment will be deemed as your acceptance of the updated Privacy Policy. If you do not agree to the amendments, you have the right to close your account and request deletion of your data.

10 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how gcr77 handles your personal data, our Data Protection Officer (DPO) team is ready to assist you.

You may reach us through the following methods:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform
• Email: Send your enquiry to [email protected] (email only, not a clickable link)

We are committed to responding to all privacy-related enquiries within 72 hours from business hours. For cases requiring further investigation, we will update you on the progress within 14 business days.