Privacy Policy Galaxy77 – Malaysian Player Data Protection

Information You Provide Directly

When you register an account or use Galaxy77's services, we collect information that you provide directly. This includes personal identity information such as your full name, date of birth, and Malaysian identity card number (MyKad) or passport for age and identity verification purposes. We also collect contact information such as an active Malaysian mobile number and a valid email address for communication and account security purposes.

Financial Information

To process deposits and withdrawals, Galaxy77 collects information related to the payment method you use. This includes e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or banking account details for FPX via Maybank2u or CIMB Clicks. Galaxy77 does not store credit or debit card numbers directly — all payment processing is handled through payment gateways that comply with PCI-DSS security standards.

Automatically Collected Information

When you use the Galaxy77 platform, our systems automatically record certain technical information for security and service improvement purposes. This includes:

• IP address and approximate location data (state within Malaysia)
• Device type, operating system, and web browser version
• Gaming session records including date, time, game type, and wagering amounts
• Complete deposit and withdrawal transaction records
• Cookie data and session identifiers for login security purposes
• Activity logs to detect any unauthorised access attempts

Primary Purposes of Data Use

Galaxy77 uses the personal information collected solely for legitimate purposes directly related to the operation of our online casino platform. Below is a summary of how your data is used:

Marketing & Promotions

Galaxy77 may use your email address and phone number to send you information about promotions, new bonuses, and exclusive offers relevant to Malaysian players — but only if you have given your consent to receive such communications during registration or subsequently through your account settings. You may withdraw this consent at any time without any negative impact on your Galaxy77 account or services.

Galaxy77's Data Sharing Principles

Galaxy77 is firmly committed to the principle that members' personal information is confidential and may only be shared in very limited circumstances with clear justification. We do not sell, rent, or disclose your personal information to any third party for purposes unrelated to the provision of Galaxy77's services.

Permitted Data Sharing Scenarios

There are a limited number of situations in which Galaxy77 may need to share member data with other parties:

• Technical service providers: Companies that assist us in operating the platform, such as cloud hosting providers, payment gateway providers, and platform analytics companies — all of whom are bound by strict confidentiality agreements.
• Malaysian authorities: Where required by Malaysian law or a valid court order, Galaxy77 will disclose the necessary information to relevant authorities such as Bank Negara Malaysia or law enforcement agencies.
• Fraud prevention: In cases involving suspected fraudulent activity, Galaxy77 may share information with the relevant payment gateways or financial institutions involved in order to protect the interests of all members.
• Business transfers: Should Galaxy77 undergo a merger, acquisition, or asset sale, member data may be transferred to the new entity — and members will be notified in advance in such cases.

Third-Party Service Providers

All third parties that Galaxy77 works with in processing member data are carefully selected and required to adhere to security and privacy standards no less stringent than Galaxy77's own. They are only permitted to use member data for the specific purposes agreed upon with Galaxy77 and may not use that data for their own benefit.

Galaxy77's Security Infrastructure

Galaxy77 continually invests in security infrastructure to ensure members' personal data is protected at all times. Key security measures we have in place include 256-bit SSL encryption for all data in transit, AES-256 data encryption for data stored in our databases, a continuously updated web application firewall (WAF), an active 24/7 intrusion detection & prevention system (IDS/IPS), and regular penetration testing conducted by independent cybersecurity firms.

Internal Access Controls

Only Galaxy77 staff who require access to member data to carry out their job responsibilities will be granted that access — and only to the data strictly necessary for their role. All access to the member database is automatically logged and periodically reviewed by Galaxy77's internal security team. Staff who violate internal privacy policies will face serious disciplinary action.

Security Incident Response

While Galaxy77 takes all reasonable precautions, no system can be guaranteed 100% secure against cyber threats. In the event of a security incident involving members' personal data, Galaxy77 is committed to notifying affected members within 72 hours of confirming the incident via registered email and in-platform notification, in line with industry best practices and Malaysia's PDPA compliance requirements.

What Cookies Are and How Galaxy77 Uses Them

Cookies are small text files stored on your device when you visit a website. Galaxy77 uses cookies for several legitimate purposes that are essential to a good user experience. Session cookies keep you logged in during an active session — without them, you would need to sign in again every time you navigate between pages. Preference cookies save your chosen language and display settings to ensure a consistent experience each time you return to Galaxy77.

Types of Cookies Used

• Essential Cookies: Required for core platform functions including login security, session management, and CSRF protection. These cookies cannot be disabled.
• Functional Cookies: Stores user preferences such as language and display settings. Can be disabled, but may affect the user experience.
• Analytics Cookies: Helps Galaxy77 understand how players use the platform for improvement purposes. Data is collected anonymously and in aggregate.

Cookie Management

You can control and manage cookies through your web browser settings. Most modern browsers offer options to block or delete cookies. Please note that disabling essential cookies may cause certain Galaxy77 platform features to function incorrectly, including the ability to log in and run gaming sessions. Cookie management guides are available through Galaxy77 support if you need assistance.

Rights Guaranteed to Every Member

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), every Galaxy77 member has the following rights regarding their personal data. These rights may be exercised at any time by contacting the Galaxy77 support team via live chat or email at support@galaxy77.top.

• Right to Access: You have the right to request a copy of all personal information Galaxy77 holds about you.
• Right to Rectification: You have the right to request the correction of any personal information that is inaccurate or incomplete.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — particularly where the data is no longer needed for its original purpose.
• Right to Restriction: You have the right to request that Galaxy77 restrict the processing of your data under certain circumstances while a dispute is being resolved.
• Right to Object: You have the right to object to the use of your data for direct marketing purposes at any time.
• Data Portability Rights: You have the right to receive your personal data in a machine-readable format for transfer to another service provider if you choose to do so.

Data Retention Period

Galaxy77 retains member personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. Active account data is retained for the duration the account remains active and for up to 5 years after account closure to meet legal compliance requirements, including anti-money laundering (AML) and financial record-keeping obligations. Financial transaction records are retained for a minimum of 7 years in accordance with Malaysian accounting and financial legislation.

Data Deletion Upon Request

When you submit a Galaxy77 account deletion request, we will delete or anonymise your personal data that is no longer required for legal or operational purposes. However, please be aware that certain categories of data may need to be retained for a longer period even after a deletion request — including financial transaction records (for AML compliance), identity verification evidence (for audit requirements), and information related to disputes still in the process of resolution. Galaxy77 will clearly inform you of which data will be deleted and which must be retained, along with the reasons why.

Galaxy77's Right to Update the Privacy Policy

Galaxy77 may update this Privacy Policy from time to time in line with changes to our services, applicable laws in Malaysia, or evolving industry best practices in data protection. Any material updates to this Privacy Policy will be communicated to all active members via their registered email and in-platform notifications at least 7 days before the changes take effect. The date of the most recent update will always be displayed at the top of this document.

Continued Use as Acceptance

Your continued use of the Galaxy77 platform after an updated Privacy Policy comes into effect constitutes your acceptance of those changes. If you disagree with any material changes to this Privacy Policy, you have the right to close your Galaxy77 account before those changes take effect and request a refund of your remaining balance. For any questions about Privacy Policy changes, please contact Galaxy77 support before the effective date of those changes.

Galaxy77 Privacy Officer

Galaxy77 has appointed an internal privacy officer responsible for ensuring compliance with this Privacy Policy and handling all member personal data enquiries. If you have any questions, concerns, or complaints regarding how Galaxy77 manages your personal data, please reach out to us through the following channels:

• Privacy Email: support@galaxy77.top (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available on the Galaxy77 platform, 24 hours a day, 7 days a week
• Response Time: Within 2 hours via live chat, under 24 hours via privacy email

Complaint to the Relevant Authorities

If you are not satisfied with how Galaxy77 has handled your privacy enquiry after contacting us directly, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for overseeing compliance with the Personal Data Protection Act 2010 in Malaysia. Galaxy77 will cooperate fully with any investigation carried out by the JPDP.