Hi77 Privacy Policy — Data Protection & Information Security

1Information We Collect

Hi77 collects personal information from you in several different situations when you interact with our platform. The types of information we may collect include:

Account Registration Information:

• Full name, mobile number, and email address.
• Malaysia identity card number (MyKad) for KYC verification purposes.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Account passwords are stored in hashed form — we never store passwords in plain text.

Financial Transaction Information:

• Bank account number or e-wallet details (Touch 'n Go, GrabPay) for deposit and withdrawal purposes.
• Transaction history records including deposits, withdrawals, and claimed bonuses.
• Debit or credit card details if the relevant payment method is used.

Technical & Usage Information:

• IP address, browser type, operating system, and device used.
• Access logs, session timestamps, and in-platform activity records.
• Cookies and similar tracking technologies to enhance user experience.

2How We Use Your Information

Every piece of information we collect has a clear and lawful purpose. hi77 uses your personal data for the following purposes:

For personalised marketing or promotional purposes, we will obtain your consent beforehand. You may withdraw that consent at any time through your account settings or by contacting the hi77 support team.

3Sharing Information with Third Parties

Hi77 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in certain limited situations, we may share your information with trusted third parties:

• Payment Providers: Required transaction information is shared with payment providers such as FPX, Touch 'n Go, and the relevant banks solely to process your transaction.
• Technical Service Providers: Companies providing server infrastructure, cloud services, or technical support — all bound by strict confidentiality agreements.
• Regulatory Body: Information required by law or directives from relevant regulatory bodies will be shared strictly as required by law.
• Identity Verification Providers: KYC information may be verified through certified third-party identity verification systems for fraud prevention purposes.

4Cookies and Tracking Technologies

Hi77 uses cookies and similar technologies such as web beacons and local storage to enhance the user experience on our platform. Cookies allow us to recognise you on return visits, remember your preferences, and deliver more relevant content.

There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform — pages visited, time spent, and errors encountered — to help us improve our services.
• Functional Cookies: Remembering your preferences such as language, display settings, and login information (if you choose to be remembered).
• Marketing Cookies: Used to display relevant promotions and advertisements based on your interests — only activated with your consent.

You can control or disable cookies through your browser settings. However, please note that disabling essential cookies may affect the functionality and security of the hi77 platform.

5Data Security & Protection Measures

Hi77 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted between your device and hi77 servers.
• AES-256 encryption for sensitive data stored in our database.
• Intrusion detection systems (IDS) and multi-layered firewalls monitored 24/7.
• Two-factor authentication (2FA) is available for all member accounts for added security.
• Regular security audits conducted by independent cybersecurity experts.
• Internal access to member data is restricted to staff who genuinely require it, based on the principle of least privilege.
• Security and privacy awareness training is provided to all hi77 staff on a regular basis.

6Data Retention Period

Hi77 retains your personal data for as long as your account is active or as long as is necessary to provide services to you. Following account closure, your data may be retained for a longer period based on the following requirements:

• Financial Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and tax legal requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering (AML) requirements.
• Security Logs: Retained for 1–2 years for security investigation and fraud detection purposes.
• Gaming Data: Retained for 2 years after the date of the game session for dispute resolution purposes.

Once the specified retention period has lapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

7Your Rights Under PDPA

As a data subject under the Malaysia Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by hi77:

To exercise any of the above rights, please contact the hi77 customer support team via live chat on the platform or email us. We will process your request within 21 business days in accordance with PDPA requirements.

8International Data Transfers

In the course of its operations, hi77 may store or process your data on servers located outside Malaysia. Any such data transfer is carried out with adequate safeguards in place, including:

• Ensuring the recipient country maintains an equivalent or higher level of data protection.
• Implementing internationally recognised standard contractual clauses for data transfers.
• Ensuring all data recipients are subject to strict security obligations.

9Children's Privacy

The hi77 platform is strictly for adult users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18. Should we become aware that a child's personal data has been collected without parental or guardian knowledge or consent, we will take immediate steps to delete that information from our records.

If you believe your child has registered or is using the hi77 platform, please contact our support team immediately for prompt action.

10Changes to This Privacy Policy

Hi77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The "Last Updated" date at the top of this document will be revised whenever changes are made.

For material changes — such as significant changes to how we use your data — we will notify you via an in-platform notice or email at least 14 days before the changes take effect. Continued use of the platform after that notice period constitutes acceptance of the updated Privacy Policy.

11How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the hi77 Privacy Officer through the following channels:

• Live Chat: Available 24/7 directly within the hi77 platform or app — the fastest way to get a response.
• Email: [email protected] — we aim to respond within 2 business days.