Myvape77 Privacy Policy – How We Protect Your Personal Data in Malaysia

1Introduction & Scope of This Policy

myvape77 is committed to protecting your privacy in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws. This policy sets out in detail the types of personal data we process, the purposes of processing, the legal bases applied, and the rights you hold in relation to your data.

As the data controller, myvape77 is fully responsible for how our users' personal data is processed within our platform. We have appointed a Data Protection Officer (DPO) who can be reached at privacy@myvape77.click for any privacy-related inquiries.

2Types of Personal Data We Collect

We collect your personal data only when it is necessary for a legitimate purpose. The following are the types of data we may collect:

3How We Collect Your Data

Your personal data is collected through various means as you interact with the platform myvape77:

• Account registration – When you complete the registration form with your name, Malaysian phone number, and email address
• Deposits & withdrawals – When you use Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX for transactions
• Identity verification (KYC) – When you submit identification documents for account verification
• Platform usage – Automatically collected while you play slots, place Sports Betting wagers, or use Live Casino
• Customer Support – When you reach out to our team via live chat, email, or WhatsApp
• Cookies and similar technologies – Through your browser or app when you visit our platform
• Third-party sources – From payment processors, fraud prevention agencies, or legitimate public sources

4How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. myvape77 uses your data for the following purposes:

• Account management – To create, maintain, and secure your account on the myvape77 platform
• Transaction processing – Processing your deposits and withdrawals via your chosen Malaysian payment methods
• Identity verification – To fulfil KYC (Know Your Customer) requirements and anti-money laundering regulations
• Service provision – Enables you to play slots, bet on EPL and Malaysia Super League Sports Betting, Live Casino, and other games
• Platform security – Detecting and preventing fraud, abuse, and unlawful activity on the platform
• Customer Support – To respond to enquiries and resolve issues you report to us
• Responsible gaming – Monitoring usage patterns to identify players who may need assistance
• Marketing communications – To send promotional information and bonuses (only if you have agreed to receive such communications)
• Platform improvements – Analysing usage data to improve the overall user experience
• Legal compliance – To fulfil applicable legal and regulatory obligations

5Sharing Your Data with Third Parties

myvape77 does not sell or trade your personal data. However, there are limited circumstances in which we may need to share your data with selected third parties:

• Payment processors – Service providers such as Touch 'n Go, GrabPay, DuitNow, and banks to process your financial transactions
• Game software providers – Game development companies that supply slots and casino games to our platform
• Cloud services & technology – Infrastructure providers that help us operate the platform securely
• Anti-fraud agencies – To verify user identity and prevent unlawful activity
• Regulatory authorities – When required by Malaysian law or court order

All third parties we share data with are bound by strict data protection agreements and are required to maintain security standards equivalent to those of myvape77. They are not permitted to use your data for any purpose beyond what has been specified.

6Data Security Measures

The security of your data is our top priority myvape77. We implement multiple layers of technical and organisational safeguards to keep your data secure:

• 256-bit SSL Encryption for all data transmitted between your device and our servers
• Data encryption at rest for all sensitive information stored in our database
• Two-factor authentication (2FA) available to all user accounts
• Intrusion detection system that monitors suspicious activity 24/7
• Strict access controls – only myvape77 staff who require data access to carry out their duties may access that information
• Regular security audits by independent and accredited third parties
• Staff training in data protection and cybersecurity practices
• Incident response plan comprehensive response plan in the event of a data breach

While we take all reasonable precautions, no system is 100% immune to breaches. We encourage you to take protective measures as well, such as using a strong, unique password and enabling two-factor authentication on your myvape77 account.

7Data Retention Period

myvape77 retains your personal data only for as long as necessary for the stated purposes, or as required by Malaysian law:

• Active account data – Retained for the duration your account remains active, plus 7 years after closure for audit purposes
• Financial transaction records – Retained for 7 years in accordance with the Companies Act and Malaysia's tax requirements
• KYC records (identity verification) – Retained for 5 years in accordance with anti-money laundering requirements
• Usage log data – Retained for 2 years for security and analysis purposes
• Customer support data – Retained for 3 years from the date of last interaction
• Marketing data – Retained until you withdraw consent or request deletion

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you.

8Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by myvape77:

9Cookies & Tracking Technologies

Platform myvape77 uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies – Required for core platform functions such as login authentication and session security. Cannot be disabled.
• Performance Cookies – Collecting anonymised information on how you use the platform to help us improve performance.
• Functional Cookies – To remember your preferences such as language and display settings for your convenience.
• Analytics Cookies – Helping us understand platform usage patterns for ongoing improvements.

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the myvape77 platform.

10Children's Data Protection

Platform myvape77 is strictly not designed for or directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

Should we discover that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on our platform are urged to contact us immediately at privacy@myvape77.click.

11Amendments to This Privacy Policy

myvape77 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. Where material changes are made, we will:

• Publishing the latest version on this page with an updated effective date
• Sending email notifications to all registered users
• Displaying a notice on the platform's homepage for a minimum of 30 days

Your continued use of the myvape77 platform after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

12Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the myvape77 Data Protection Officer (DPO):

If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority.