vr77 Privacy Policy

1. About This Policy

This Privacy Policy applies to all personal data collected by vr77 ("we", "us", "our") through the vr77 Platform at vr77.asia and any related services, communications, or customer support interactions. It describes what data we collect, why we collect it, how it is used, who it may be shared with, and what rights you have in relation to your data.

By registering a vr77 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy is incorporated by reference into the vr77 Terms & Conditions. If you do not agree to this Policy, please do not use the Platform.

2. Personal Data We Collect

2.1 Registration Data

When you create a vr77 account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (for mandatory age verification — vr77 is a 21+ platform)
• Email address
• Malaysian mobile phone number
• Residential address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with regulatory KYC obligations, we may request and retain copies of:

• Malaysian MyKad, passport, or other government-issued photo identification
• Proof of address (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership where required
• Source of funds documentation in cases flagged by our AML procedures

2.3 Transaction Data

We record all financial transactions associated with your vr77 account, including deposit amounts, withdrawal requests, payment method references, bonus credits and debits, and wagering history. All transaction records are denominated in Malaysian Ringgit (MYR).

2.4 Usage & Technical Data

We automatically collect certain technical data when you access vr77, including your IP address, device type and operating system, browser type and version, session timestamps, pages and games accessed, and approximate geographic location derived from IP address. This data is used for security monitoring, fraud detection, and platform analytics.

2.5 Communications Data

We retain records of all communications between you and the vr77 support team, including live chat transcripts, email exchanges, and any documents you submit in connection with a support request or dispute.

3. How We Use Your Personal Data

vr77 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and operate your vr77 account, including processing deposits and withdrawals.
• Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with KYC obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, and other prohibited conduct.
• Regulatory Compliance: To meet our obligations under applicable gaming regulations, anti-money laundering laws, and data protection legislation.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and user experience of the vr77 Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods you have set on your account.
• Marketing Communications: Where you have opted in, to send you information about vr77 promotions, bonuses, and new features. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

vr77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform the contract between you and vr77 (i.e., operating your account, processing transactions).
• Legal Obligation: Processing required to comply with KYC, AML, and gaming regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and platform analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have provided express consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1 Service Providers

vr77 shares personal data with third-party service providers who assist in operating the Platform, including payment processors (FPX, Touch 'n Go eWallet, Boost, GrabPay, USDT TRC20 wallet providers, 7-Eleven Cliqq), identity verification providers, cloud hosting providers, and customer support platform operators. All service providers are contractually bound to process data only on vr77's instructions and to maintain appropriate security standards.

5.2 Regulatory Disclosure

vr77 may be required to disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required by applicable law or pursuant to a valid legal order. vr77 will notify affected users where legally permitted to do so.

5.3 No Data Sales

vr77 does not sell, rent, lease, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes under any circumstances.

6. Payment Data

vr77 does not directly store full payment card numbers, banking login credentials, or complete eWallet account details. Payment transactions are processed through certified third-party payment gateways operating under their own PCI DSS compliance frameworks and data security standards. vr77 retains only a tokenised or masked reference sufficient to identify the payment method for withdrawal verification purposes.

By completing a deposit transaction, you consent to the relevant payment processor receiving and processing your payment data under that processor's own privacy policy and terms of service.

7. Cookies & Similar Technologies

7.1 Essential Cookies

vr77 uses essential cookies that are strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. Essential cookies cannot be disabled without preventing core Platform functionality.

7.2 Analytics Cookies

With your consent, vr77 may use analytics cookies to collect aggregated, anonymised data about how users navigate and interact with the Platform. This data helps us identify usability issues and improve the overall player experience.

7.3 Managing Cookies

You may manage or delete cookies through your browser settings. Disabling non-essential cookies will not prevent you from accessing your vr77 account or using the Platform, though some personalisation features may be affected.

8. Data Retention

vr77 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and our regulatory obligations. As a general guide:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the last communication in a given thread.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our internal data destruction procedures.

9. Data Security

vr77 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the vr77 Platform
• AES-256 encryption for sensitive data stored at rest
• Two-factor authentication (2FA) available on all player accounts
• Automated login alerts for new device or IP address access
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing by independent third-party security firms

10. Your Data Protection Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by vr77:

• Right of Access: You may request a copy of the personal data vr77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while a disputed data accuracy matter is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, and to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact vr77 at [email protected]. We will respond to verified requests within 30 days. We may require identity verification before processing a data rights request.

11. Children's Privacy

The vr77 Platform is strictly intended for users aged 21 and above. vr77 does not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been registered by an underage individual, the account will be immediately suspended, all data associated with it will be reviewed, and the matter will be handled in accordance with our regulatory obligations.

If you believe that a minor has registered a vr77 account, please contact us immediately at [email protected].

12. International Data Transfers

Where vr77 engages third-party service providers whose operations are based outside Malaysia — for example, cloud hosting infrastructure or specialist KYC verification services — your data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, vr77 ensures that appropriate safeguards are in place, including contractual data protection obligations no less protective than those applicable under Malaysian law.

13. Changes to This Privacy Policy

vr77 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify registered users by email to their registered address and by posting a notice on the Platform. The revised Policy will take effect from the date of publication unless a later effective date is specified. Your continued use of the Platform following notification constitutes acceptance of the revised Policy.

The date of the most recent revision is displayed at the top of this page. We recommend reviewing this Policy periodically.

14. Contact Us

For all privacy-related enquiries, data access requests, or concerns about how vr77 handles your personal data, please contact our Data Protection team:

• Email: [email protected]
• Response Time: Within 30 days for formal data rights requests; within 2 hours for general privacy enquiries via email
• Support Hours: 24/7

For our full Terms of Service, please review the Terms & Conditions page.