Privacy Policy vr77 – Personal Data Protection for Malaysia Members

This Privacy Policy is published by VR77 ("we", "Platform") and applies to all users who access or register on the VR77 website at vr77.run, the vr77 mobile app and all related services provided under the vr77 brand.

We understand that when you register and play on our platform, you are entrusting us with valuable personal information. That trust is not something we take lightly. This policy is written in clear, plain language — not filled with confusing legal jargon — so you truly understand how we manage your data.

By using the VR77 platform, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform.

Vr77 collects various types of information depending on how you interact with the platform. The following are the main categories of data we collect:

Identity Data

Financial Data

Platform Usage Data

Technical Data

Your personal data is collected through several key channels when you interact with the VR77 platform:

• Account Registration: Information you provide during the registration process, including name, email, phone number and date of birth.
• KYC Verification: Identity documents and proof of address submitted during the mandatory identity verification process.
• Financial Transactions: Information required when processing deposits and withdrawals through supported payment methods.
• Platform Usage: Data automatically generated when you use the platform, including game records and interface interactions.
• Customer Communications: Information you share when contacting our customer support team via live chat or email.
• Cookie Technology: Data collected automatically through cookies and tracking technologies as further described in Section 7.

Vr77 uses your personal data solely for legitimate and necessary purposes. We never use your data for unrelated purposes without notifying you and obtaining your consent:

For marketing communications, you may withdraw your consent at any time through the communication preference settings in your account. Withdrawal of consent does not affect any data processing previously carried out on the basis of that consent.

Vr77 does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is our absolute commitment. However, in the course of operating the platform, there are specific circumstances where limited and controlled data sharing is necessary:

• Payment Service Providers: Required financial information is shared with payment processors and banks to complete your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Identity documents are shared with licensed identity verification services to fulfil our compliance obligations.
• Game Providers: Certain game session data is shared with third-party game providers to ensure proper game functionality and dispute resolution.
• Statutory Authority: Where required by Malaysian law or a valid court order, we may be obligated to disclose data to the relevant authorities.
• Fraud Prevention: In cases of suspected fraud investigations, certain information may be shared with law enforcement agencies or recognised fraud prevention bodies.

All third parties we share data with are bound by strict data protection agreements and are only permitted to use that data for the specifically stated purposes.

Vr77 invests seriously in security infrastructure to ensure your personal data is always protected. The key security measures we implement include:

• 256-bit SSL encryption for all data transmission between your browser and vr77 servers
• Data is stored on servers protected by multi-layered access controls and continuous monitoring
• Passwords are stored in hashed format and cannot be read in their original form
• Two-factor authentication (2FA) is available and recommended for all member accounts
• Intrusion detection system (IDS) that monitors suspicious activity in real time
• Regular penetration testing by independent security experts
• Mandatory data security training for all staff with access to personal data

The vr77 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. There are several types of cookies we use:

• Essential Cookies (Required): Required for basic platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled without affecting platform use.
• Functional Cookies: Remembering your personal preferences such as display settings, favourite games and notification preferences to provide a more personalised experience.
• Analytics Cookies: Collecting anonymised usage data to help us understand how members use the platform and identify areas for improvement.
• Security Cookies: Used to identify suspicious activity, prevent fraud and protect your account from unauthorised access.

You can manage cookie settings through your browser. However, disabling essential cookies may affect your use of the platform. For the VR77 mobile app, similar data management can be done through your device's privacy settings.

As a vr77 member and data subject, you have certain rights regarding the personal data we hold about you. We respect and facilitate the exercise of these rights:

Vr77 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active Account Data: Retained for the duration your account is active and for an additional period after closure as required by legal obligations.
• Financial Transaction Records: Retained for a minimum of 7 years to meet Malaysia's tax and financial legal requirements.
• KYC Records: Retained for the duration of the active account and for at least 5 years after account closure for AML compliance.
• Security Logs: Retained for 12 months for security incident investigation purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be identified back to you personally.

The vr77 platform is strictly for users aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18. If you believe your child or someone under 18 has registered or used the vr77 platform, please contact us immediately at [email protected] and we will take appropriate action, including the immediate deletion of the relevant data.

Vr77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or updated platform features. Whenever an amendment is made:

• The "Last Updated" date at the top of this page will be updated.
• For material amendments, we will notify members via their registered email or an in-platform notice before the changes take effect.
• Continued use of the platform after the effective date of any amendments constitutes your acceptance of the revised policy.
• We recommend you check this page periodically to stay informed on how we protect your privacy.

If you have any questions, concerns or requests regarding this Privacy Policy or the management of your personal data, you are welcome to contact our privacy team:

For general enquiries, you may also visit our FAQ us or contact our customer support team, available in Bahasa Melayu, English, and Mandarin.