Privacy Policy

1. Introduction & Data Controller Identity

mitra77 ("we", "us", "our") operates the online casino and sports betting platform accessible at mitra77.club (the "Platform"). In connection with your use of the Platform, mitra77 collects and processes personal data about you. mitra77 is the data controller in respect of personal data collected directly from Players and site visitors via the Platform.

This Privacy Policy is issued pursuant to mitra77's obligations under its international gaming authority licence and applicable data protection principles. It should be read alongside the mitra77 Terms & Conditions, which govern your use of the Platform generally.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by mitra77 through:

• The mitra77 Platform at mitra77.club and any associated subdomains.
• Account registration and KYC verification processes.
• Deposit, withdrawal, and payment processing interactions.
• Customer support communications via Live Chat or email.
• Promotional and bonus programme participation.
• Passive data collection via cookies and analytics tools on the Platform.

This Policy does not apply to third-party websites or services that may be referenced on the Platform. mitra77 is not responsible for the privacy practices of third-party game providers, payment processors, or other external entities whose services are accessed through or in connection with the Platform.

3. Categories of Personal Data Collected

mitra77 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, government-issued identification number (e.g., Malaysian MyKad number or passport number).
• Contact Data: Email address, mobile telephone number, residential address (including city, state, and postcode).
• Account Data: Username, password (stored in hashed form), Account preferences, communication preferences, and self-imposed responsible gaming limits.
• Financial Data: Payment method details (e.g., Touch n Go eWallet identifier, Boost account reference, bank account name and last four digits), deposit and withdrawal transaction history, and Account balance history.
• Gaming Data: Bet history, game session logs, wager amounts, win/loss records, bonus redemption activity, and in-play event data.
• Verification Data: KYC documents submitted, verification status, and source-of-funds documentation where applicable.
• Technical Data: IP address, device type and identifier, browser type and version, operating system, session timestamps, and Platform navigation logs.
• Communications Data: Records of Live Chat interactions, email correspondence, and any other communications with mitra77 support.

4. Legal Bases for Processing

mitra77 processes personal data on the following legal bases:

• Contract performance: Processing necessary to register and operate your Account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with gaming licence conditions, anti-money laundering (AML) regulations, age verification requirements, and applicable data retention laws.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and general business analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. How mitra77 Uses Personal Data

mitra77 uses the personal data it collects for the following purposes:

• To create, verify, and administer your mitra77 Account.
• To process MYR deposits and withdrawals via your chosen payment method.
• To conduct age verification and identity checks as required by our gaming licence.
• To operate responsible gaming tools, including enforcing self-exclusions and deposit limits.
• To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited activities.
• To provide customer support via Live Chat and email.
• To administer bonuses, promotions, and loyalty programmes in accordance with their stated terms.
• To improve the Platform, including game selection, payment processing performance, and user interface.
• To send account-related transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).
• To send marketing communications where you have provided consent, subject to your stated communication preferences.
• To comply with reporting obligations to our gaming regulatory authority.

6. Cookies & Tracking Technologies

The mitra77 Platform uses cookies and similar tracking technologies to deliver and improve the Platform experience. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login state persistence, and security tokens. These cannot be disabled without materially impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players navigate and use the Platform, enabling mitra77 to identify areas for improvement.
• Functional Cookies: Used to remember your Platform preferences, including language settings, lobby display preferences, and responsible gaming limit configurations.
• Marketing Cookies: Used, where you have consented, to deliver relevant promotional content and to measure the effectiveness of mitra77 promotional campaigns.

You may manage cookie preferences via your browser settings. Note that disabling certain cookie categories may affect the functionality of the mitra77 Platform.

7. Disclosure of Personal Data to Third Parties

mitra77 does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data may be disclosed to the following categories of third party solely to the extent necessary:

• Licensed Game Providers: Game session data is transmitted to licensed providers (e.g., PG Soft, Pragmatic Play, Habanero) to the extent technically necessary to deliver game content and settle game outcomes.
• Payment Processors: Financial transaction data is shared with payment service providers (including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, and USDT network operators) to process deposits and withdrawals.
• KYC & AML Service Providers: Identity and verification data may be shared with licensed third-party identity verification services to fulfil KYC obligations.
• Regulatory & Law Enforcement Authorities: mitra77 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by applicable law or regulatory obligation.
• Platform Technology Partners: Technical data may be shared with infrastructure and security service providers (e.g., cloud hosting, DDoS protection, fraud detection) under data processing agreements that prohibit independent use of the data.

All third parties with whom mitra77 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those specified by mitra77.

8. International Data Transfers

Personal data collected through the mitra77 Platform may be transferred to and processed in countries outside Malaysia, including the jurisdiction in which mitra77 holds its gaming licence and the locations of mitra77's infrastructure and service providers. mitra77 takes appropriate measures to ensure that such transfers are conducted in accordance with applicable data protection principles, including the use of contractual safeguards where required.

9. Data Security

mitra77 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• All data in transit between your device and mitra77's servers is encrypted using SSL/TLS (minimum 256-bit encryption).
• Passwords are stored in cryptographically hashed form and are never transmitted or stored in plaintext.
• Access to personal data within mitra77's systems is restricted on a need-to-know basis, with access logs maintained.
• Regular security assessments, penetration testing, and vulnerability scanning are conducted on Platform infrastructure.
• mitra77 maintains an incident response plan for potential data security incidents, including notification procedures where applicable law requires Player notification.

While mitra77 takes all reasonable precautions, no data transmission over the internet or storage system can be guaranteed as completely secure. Players are encouraged to use strong, unique passwords for their mitra77 Account and to notify mitra77 immediately if they suspect unauthorised access.

10. Data Retention

mitra77 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by legal and regulatory obligations:

• Active Account data: Retained for the duration of the Account relationship.
• Closed Account data: Retained for a minimum of five (5) years following Account closure, as required by anti-money laundering regulations and gaming licence conditions.
• KYC documentation: Retained for a minimum of five (5) years following the last transaction or Account closure, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.
• Anonymised analytics data: May be retained indefinitely, as it no longer constitutes personal data following anonymisation.

11. Your Data Subject Rights

Subject to applicable law and legitimate overriding interests (including AML compliance), you have the following rights in relation to your personal data held by mitra77:

• Right of Access: You may request a copy of the personal data mitra77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: You may request that mitra77 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to mitra77, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact mitra77 via Live Chat or by email (address displayed in the footer). mitra77 will respond to all data subject requests within 30 calendar days of receipt, subject to identity verification.

12. Children & Minors

The mitra77 Platform is strictly intended for persons aged 21 and above. 21+ mitra77 does not knowingly collect or process personal data from individuals under the age of 21. If mitra77 becomes aware that an Account has been registered by an underage individual, that Account will be immediately closed, all personal data will be deleted (subject to any mandatory retention obligations), and any funds returned in accordance with mitra77's account closure procedures.

Parents or guardians who believe that a minor has registered on the mitra77 Platform are strongly encouraged to contact mitra77 support immediately via Live Chat.

13. Marketing Communications

mitra77 may send promotional communications — including bonus offers, tournament announcements, and platform updates — to Players who have provided explicit marketing consent during or after registration. Each marketing communication will include a clear and accessible opt-out mechanism. Players may also update their marketing preferences at any time via the Account settings panel or by contacting Live Chat.

Withdrawal of marketing consent will not affect your ability to use the mitra77 Platform or receive transactional account communications (e.g., deposit confirmations, security alerts, KYC requests).

14. Amendments to This Policy

mitra77 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered Players via the email address on file or via a prominent notice on the Platform, with at least seven (7) days' notice before the amended Policy takes effect. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

15. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact mitra77 through any of the following channels:

• Live Chat: Available 24/7 directly on the mitra77 Platform.
• Email: The mitra77 support email address is displayed in the footer of this page. Please use the subject line "Privacy Request" for all data-related enquiries.

mitra77 will acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 calendar days, subject to the complexity of the request and identity verification requirements.