Privacy Policy
How Jet77 Protects Your
Personal Information

This Privacy Policy ("Policy") issued by Jet77 ("we", "us", "our", "jet77", "the Platform") and applies to all personal data collected from individuals ("you", "User "Member") who access and use the jet77 website athttps://jet77.casa and all associated gaming services, payment interfaces, and promotional communications (collectively, the "Services").

Jet77 is committed to protecting your personal data and respecting your privacy in accordance with applicable data protection legislation, including the principles of the Malaysian Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards where applicable.

By registering an account, depositing funds, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Services and contact us to close your account.

For the purpose of this Privacy Policy, the following terms carry the meanings specified below:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, either alone or in combination with other data. This includes names, identification numbers, contact details, financial information, and online identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — Jet77, which determines the purposes and means by which your personal data is processed.
• "Data Processor" — A third party that processes personal data on behalf of jet77 under a contractual data processing agreement (e.g., payment service providers, KYC verification providers).
• "Cookies" — Small text files placed on your device by the Platform to remember preferences, analyse usage patterns, and support authentication.
• "KYC" — Know Your Customer — the identity verification process required for account verification and withdrawal processing.
• "Sensitive Personal Data" — A subset of personal data warranting heightened protection, including data relating to physical or mental health, financial circumstances, and government-issued identification numbers.

Jet77 collects personal data across several categories, as outlined in the table below. We collect only what is necessary for the legitimate purposes described in this Policy.

Jet77 collects personal data through the following channels:

Data you provide directly when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact our support team, or submit any form on the Platform. This includes your name, identification documents, contact details, and payment method information.

Data that is collected automatically when you access the Platform, including your IP address, device identifiers, browser type, referring URL, pages visited, session duration, and cookies. This data is collected via standard web analytics technologies and server logs.

We may receive personal data from third-party sources in specific, limited circumstances, including:

• KYC / identity verification service providers that process your identification documents;
• Payment service providers (e.g., Touch n Go eWallet, Boost, FPX operators, Maybank, CIMB) that confirm transaction details;
• Fraud detection and anti-money laundering screening services;
• Advertising partners (limited to click-through attribution data — no behavioural profiling).

Jet77 processes your personal data on the following lawful bases, which vary depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms and Conditions, including account registration, payment processing, KYC verification, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, responsible gambling monitoring, and service analytics — where these interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as personalised marketing communications, where you have provided explicit opt-in consent. You may withdraw your consent at any time by contacting support or updating your account preferences.

Jet77 uses the personal data it collects for the following specific purposes:

• To create and manage your Member account on the jet77 platform;
• To process deposits and withdrawals in MYR via your chosen payment method (Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20);
• To verify your identity and age (21+ minimum) in compliance with our KYC obligations;
• To monitor transactions for anti-money laundering (AML) compliance and to detect, prevent, and investigate fraud;
• To provide customer support and respond to your queries, complaints, and account requests;
• To deliver account and transactional notifications (e.g., deposit confirmations, withdrawal status updates, security alerts);
• To send promotional communications and personalised bonus offers — only where you have consented to receive such communications;
• To operate responsible gambling tools including deposit limits, session timers, and self-exclusion, and to identify Members who may need support;
• To comply with applicable legal and regulatory requirements, including responding to lawful requests from Malaysian authorities or relevant international regulators;
• To improve, personalise, and secure the Platform through usage analytics and technical monitoring.

Jet77 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and always with appropriate contractual protections in place:

We engage trusted third-party service providers to assist in delivering our Services. These providers act as Data Processors and are contractually bound to process your data only on our instructions and in accordance with applicable data protection law. Categories of service providers include: KYC / identity verification platforms, payment processors (including gateway operators for Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other Malaysian banks), cloud hosting and IT infrastructure providers, and customer support platform operators.

Jet77 may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, a court order, or regulatory obligation — including connection with anti-money laundering investigations, fraud enquiries, or age verification enforcement.

In the event of a merger, acquisition, restructuring, or sale of all or part of jet77's business, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. Affected Members will be notified of any such transfer and of any material changes to this Policy that may result from it.

Jet77 will not share your personal data with any other third party without your explicit prior consent, except as described in this Policy.

Jet77 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we deploy are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They support login sessions, security tokens, and payment flow authentication.
• Functional Cookies: These cookies remember your preferences (e.g., language, currency display, last visited game category) to personalise your experience. You may disable these without affecting core functionality.
• Analytics Cookies: Used to collect aggregated data on how Members use the Platform — which pages are visited most, which features generate the most engagement, and where technical errors occur. This data helps us improve the jet77 experience.
• Fraud Prevention & Security Cookies: Used to detect anomalous behaviour, prevent automated bot activity, and protect the integrity of the Platform.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and processing payments. By continuing to use jet77, you consent to the use of cookies as described in this section.

Jet77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:

• Account & Identity Data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Financial & Transaction Data: Retained for seven (7) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• KYC Documents: Retained for the period required under applicable AML regulations, typically five (5) years from account closure or the date of the last transaction.
• Support & Communications Data: Retained for up to three (3) years from the date of each interaction to support dispute resolution and service quality.
• Marketing Preferences & Consent Records: Retained until you withdraw consent or opt out of marketing, after which the consent record is retained for three (3) years as evidence of the applicable consent state.
• Technical / Log Data: Typically retained for up to twelve (12) months for security monitoring and analytics purposes.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in accordance with our data destruction procedures.

Jet77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include, but are not limited to:

• 256-bit SSL / TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive personal data and financial information at rest;
• Role-based access controls ensuring that internal staff access to personal data is strictly limited to those with a legitimate operational need;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication (MFA) required for administrative access to systems holding personal data;
• Firewalls, intrusion detection systems, and real-time threat monitoring;
• Staff training on data protection obligations and incident response procedures.

Notwithstanding the above, no data transmission over the internet is entirely free from risk. Jet77 cannot guarantee the absolute security of data transmitted to the Platform from your device and accepts no liability for interception occurring outside the Platform's control. You are responsible for maintaining the security of your own device and account credentials.

As a Member of jet77, you hold the following rights in relation to your personal data held by the Platform. These rights are available to all Members regardless of location, and are applied in accordance with applicable data protection law:

You have the right to request a copy of the personal data that jet77 holds about you, along with information about how it is used, who it is shared with, and how long it is retained. We will provide this information within30 days of a verified request.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings, or contact support for changes to KYC-verified information.

You may request the deletion of your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw the consent on which processing is based; or you object to processing and there are no overiding legitimate grounds. This right is subject to legal retention obligations — jet77 cannot delete data that must be retained for AML compliance or other legal requirements.

You may request that jet77 restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have contested, or where you have objected to processing and we are considering your objection.

Where processing is based on your consent or is necessary for a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

You have the right to object to processing based on legitimate interests, including processing for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing the request. We will respond within 30 days. There is no charge for exercising your rights, although jet77 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

In the course of providing the Services, jet77 may transfer your personal data to third-party service providers or infrastructure providers located outside Malaysia. Where such transfers occur, jet77 ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to that required under applicable Malaysian data protection law. These safeguards may include contractual data transfer agreements, binding corporate rules, or reliance on adequacy decisions where applicable.

By using the Services, you consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary for the purposes described in this Policy. If you have questions about the specific safeguards applicable to a particular data transfer, please contact us at [email protected].

The jet77 platform is strictly intended for individuals aged 21 years and above. Jet77 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual below this age threshold, we will immediately take steps to delete that data and close the associated account.

If you believe that a person under the age of 21 has registered on the Platform or submitted personal data to jet77, please notify us immediately at [email protected] with the subject line "Underage Account Report". We take these reports seriously and will act promptly.

Jet77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the nature of the Services. The most current version will always be published on this page with a revised "Last Updated" date.

We will notify registered Members of material changes to this Policy via the email address on file wherever practicable, and in any case at least 14 days before such changes take effect. Your continued use of the Services after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you do not agree to any amendment, you should discontinue use of the Services and contact support to initiate account closure and, where applicable, a data deletion request.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise your data rights, please contact jet77's data protection team through the following channels:

You also have the right to lodge a complaint with a relevant supervisory authority or data protection regulator if you believe that jet77's processing of your personal data does not comply with applicable law. Details of the relevant authority will be provided on request.