Privacy Policy GACR77 —
Player Personal Data Protection

GACR77 ("we", "Platform", or "company") is fully committed to protecting the privacy and security of every player's personal data. This Privacy Policy is built on strict data protection principles and details how we handle your information.

This policy applies to all GACR77 services — including the official website at gacr77.app, mobile apps for Android and iOS, and all communication channels we use to interact with players. By registering an account or continuing to use our platform, you confirm that you have read and understood this Privacy Policy.

We believe privacy is a fundamental right of every individual. Beyond a legal obligation, protecting your data is part of the core values of GACR77 as a trusted gaming platform in Malaysia. Every decision we make regarding player data always prioritises your interests and safety.

We collect various types of information depending on how you use the GACR77 platform. Generally, the information we collect falls into three main categories:

a) Information you provide directly:

• Full name as shown on your identification document.
• National identity card number (MyKad) or passport for KYC verification purposes.
• Email address and mobile phone number.
• Date of birth for age verification.
• Current residential address.
• Bank account and e-wallet information for processing deposits and withdrawals.
• Images or documents uploaded for identity verification purposes.

b) Information collected automatically:

• IP address and device information (device type, operating system, browser version).
• Activity log data including pages visited, session duration, and in-game actions.
• Geolocation information at the country or region level.
• Technical performance data to identify and resolve system issues.

c) Information from third-party sources:

• Identity verification through accredited KYC service providers.
• Verification information from payment providers and financial institutions.
• Blacklist screening data to ensure compliance with legal requirements.

Every piece of information we collect is used for clear and lawful purposes. Below is a summary table of data usage purposes and their corresponding legal bases:

We never use your data for purposes unrelated to providing GACR77 services or legal compliance. If you have consented to receiving promotional communications, you may withdraw that consent at any time through your account settings or by contacting our support team.

GACR77 does not sell, rent, or trade players' personal information to any third party for commercial purposes. This is a fundamental principle that cannot be compromised. However, there are limited situations where we may need to share your information:

• Payment service providers: Transaction information required to process your deposits and withdrawals via licensed banks and e-wallets.
• KYC service providers: Identity verification data is submitted to certified KYC providers to meet compliance requirements.
• Legal authority: When required by court order, official investigation, or legitimate legal obligation.
• Platform technology providers: Technical partners supporting platform operations, subject to strict data protection agreements.
• Gaming service providers: Minimum information required to enable access to third-party games within our platform.

Player data security is a top investment for GACR77. We implement comprehensive layers of technical protection and procedures to ensure your information remains safe at all times:

• 256-bit SSL Encryption protect all data transmitted between your device and GACR77's servers.
• Two-factor authentication (2FA) available for all accounts as an added layer of security.
• 24/7 security monitoring detect and respond to any suspicious activity in real time.
• Encryption of data at rest ensure sensitive information such as passwords is stored in an unreadable format.
• Regular security audits by an independent party to identify and address any system vulnerabilities.
• Strict internal access controls ensure that only authorised personnel can access player data, with every access recorded.

While we take all reasonable precautions, no system is completely immune to cyber threats. We therefore encourage you to practise good security habits as well — such as using strong passwords, not sharing your login credentials, and keeping your device up to date.

In the event of any data breach affecting your personal information, we will notify you within the timeframe required by applicable law and take immediate action to contain the impact of the breach.

GACR77 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, display settings, and game choices for a more personalised experience.
• Analytics Cookies: Helps us understand how players use the platform so we can make meaningful improvements. This data is collected in aggregate and does not identify individuals.
• Performance Cookies: Tracks page load times and technical issues to ensure the platform runs smoothly at all times.

You can manage cookie settings through your web browser. Please note that disabling essential cookies may affect platform functionality. We do not use third-party cookies for targeted advertising or to track your activity outside the GACR77 platform.

You have full control over your personal data. GACR77 respects and supports the exercise of the following rights:

To exercise any of the above rights, contact our support team via Live Chat or email. We will process your request within 30 business days. For complex cases, this period may be extended to up to 60 days with written notice to you.

We retain your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by law. The following are general guidelines on data retention periods:

• Active account data: Retained for the entire duration your account is active on GACR77.
• Data after account closure: Transaction records and KYC information are retained for a minimum of 5 years after account closure to comply with anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years for reference and service improvement.
• Analytics data: De-identified data is retained indefinitely for long-term trend analysis.
• Login and security data: Retained for 1 year for security investigation purposes if required.

As part of our global operations, some of your personal data may be processed or stored on servers located outside Malaysia. When this occurs, GACR77 ensures that such data transfers are carried out with adequate safeguards, including:

• Use of recognised standard contractual clauses to protect data during transfers.
• Transfers only to countries or organisations that provide an equivalent or higher level of data protection.
• Binding data processing agreements with all overseas service providers.
• Data protection impact assessments are conducted prior to any new data transfer.

We endeavour to process your data within Malaysia or in regions with equivalent privacy protections. If you have questions about where your data is stored, please contact us directly.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we strongly encourage you to contact us directly first.

Our Data Privacy Team is ready to assist through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the GACR77 platform
• Response Time: We aim to respond to all privacy inquiries within 5 business days

We take every complaint seriously and conduct thorough investigations. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

This Privacy Policy is subject to periodic review and will be updated as necessary. Any material changes will be communicated via a clear notice on the platform or by email. The effective date of the latest version is always displayed at the top of this page.