Alfa77 Privacy Policy — Malaysian Player Data Protection Commitment

Introduction & Scope of This Policy

This Privacy Policy explains how alfa77 ("we", "Platform") collects, uses, stores, and protects your personal information when you register, log in, or use any services on the alfa77.bio website and our mobile app.

We take privacy extremely seriously. In the online casino industry, player trust is everything — and that trust begins with ensuring every piece of data you entrust to us is handled with complete integrity and professionalism. This policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

By registering or using the alfa77 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account. This Policy applies to all alfa77 platform users, including website visitors, registered members, and VIP programme participants.

Types of Personal Data We Collect

Alfa77 collects your personal data through several means depending on your interactions with our platform. Below is a detailed breakdown of the data categories collected:

We collect only the data strictly necessary to deliver our services, fulfil legal obligations, and enhance your user experience. We actively avoid collecting excessive or irrelevant data.

How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. alfa77 uses your personal data for the following purposes:

• Account Management: Creating, verifying, and managing your member account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Legal Compliance: Meeting AML (Anti-Money Laundering), KYC, and reporting requirements mandated by the relevant authorities.
• Platform Security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
• Service Improvement: Analyzing usage patterns to improve the platform's interface, speed, and overall experience.
• Service Communications: Sending important notifications regarding your account, transactions, and policy changes.
• Customer Support: Resolving inquiries and issues you report to our support team.
• Responsible Gaming: Monitoring gaming habits to identify early signs of problem gambling and offer appropriate assistance.

Data Sharing & Disclosure to Third Parties

Alfa77 does not sell, rent, or trade your personal data to third parties. However, there are limited situations where we may need to share your data with certain parties for operational and platform security purposes:

• Service Providers: Payment processing providers, gaming platforms, and technical infrastructure services bound by strict data protection agreements with alfa77.
• Regulatory Authority: Government agencies, law enforcement bodies, or licensing authorities requiring information based on legitimate legal obligations.
• Identity Verification Service: A third-party provider that helps us conduct KYC checks and age verification automatically and securely.
• Fraud Prevention: Fraud detection services and security analytics companies that help us identify suspicious activity.

All third parties that receive your data from alfa77 are required to comply with data protection standards equal to or higher than our own. We do not permit any third party to use your data for purposes other than those contractually specified.

Data Security Measures

Data security is alfa77's number one priority. We continuously invest in high-grade security infrastructure to ensure your data remains protected at all times.

• 256-bit SSL Encryption: All data transmitted between your device and alfa77 servers is protected with industry-standard SSL/TLS encryption.
• Data at Rest Encryption: Sensitive data stored in our databases is also encrypted using the AES-256 algorithm.
• Two-Factor Authentication (2FA): An additional security layer is available on all member accounts to prevent unauthorized access.
• 24/7 Monitoring: Continuous security monitoring systems detect and respond to any threats in real time.
• Regular Security Audits: Independent security assessments are conducted periodically by qualified third parties to identify and patch any vulnerabilities.
• Internal Access Controls: Access to user data by alfa77 staff is strictly limited on a need-to-know basis.

Cookies, Tracking & Similar Technologies

Alfa77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use cookies for the following purposes:

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve site speed and responsiveness.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for your convenience.
• Analytics Cookies: Helping us understand aggregated, anonymized usage patterns for product improvement purposes.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the alfa77 platform. For mobile app users, tracking permission management can be done through your device's privacy settings.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by alfa77. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of these rights, contact our data protection team via Live Chat or support email. We will respond to your request within 30 calendar days.

Data Retention Period

Alfa77 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. General retention period guidelines are as follows:

• Active Account Data: For the duration your account remains active, plus any period required by law following account closure.
• Financial Transaction Records: Minimum 7 years from the transaction date as required by Malaysian tax and financial laws.
• KYC and Verification Logs: Minimum 5 years after the termination of the business relationship to comply with AML requirements.
• Support Communication Logs: 2 years after the closure of the related support ticket.
• Technical Log Data: Between 90 days and 12 months depending on log type and security requirements.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you as an individual.

Cross-Border Data Transfers

In operating a global platform, your data may be processed or stored on servers located outside Malaysia. When this occurs, alfa77 ensures that such data transfers are carried out with adequate safeguards.

• All international data transfers are carried out under valid protection mechanisms such as Standard Contractual Clauses (SCC) or equivalent mechanisms.
• We only engage cloud service providers and third parties in countries that maintain adequate data protection standards or have signed binding data protection agreements with us.
• You have the right to obtain information about the safeguards applied to cross-border data transfers by contacting our team.

Amendments to This Privacy Policy

Alfa77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform technology developments.

When significant changes occur, we will:

• Displaying a clear notice on the platform's home page at least 14 days before changes take effect.
• Sending notification emails to all active registered members.
• Updating the "Last Updated" date at the top of this document.

Continued use of the alfa77 platform after changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

This Privacy Policy was last updated on January 2026.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how we handle your personal data, or if you wish to exercise any of the rights stated in this Privacy Policy, please contact our team:

We are committed to responding to all privacy-related inquiries within 3–5 business days, and to data rights requests within 30 calendar days from the date of receipt of a complete request.