At max77, protecting your personal data is a core responsibility — not a formality. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold over your own data as a user of our platform.
Privacy at a Glance
max77 does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data belongs to you.
All data transmitted to and from the max77 platform is protected by TLS 1.3 and 256-bit SSL encryption. Stored personal data is encrypted at rest using industry-standard protocols.
You have the right to access, correct, port, and request deletion of your personal data at any time. We respond to all verified data requests within 30 days.
We collect only the data that is genuinely necessary for account operation, payment processing, KYC verification, and platform security. We do not collect data speculatively or in excess of what is required.
Promotional communications are only sent to players who have explicitly opted in. You may withdraw marketing consent at any time through your account settings or by contacting our support team.
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Retention periods for each data category are specified in Section 7 of this Policy.
max77 ("we", "us", "our", "the Company") operates the online gambling platform accessible at https://max77.lat ("the Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It applies to all users of the Platform, including registered players, visitors who browse without an account, and any person who contacts our customer support team.
We are committed to processing personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is intended to give you a clear, honest account of our data practices — in plain language wherever possible, whilst retaining the legal precision necessary for a document of this nature.
Your Consent: By creating a max77 account, making a deposit, or continuing to use the Platform after having been made aware of this Policy, you acknowledge that you have read and understood its contents. Where consent is required as a legal basis for processing, we will seek it separately and explicitly.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together form the complete framework governing your use of the max77 Platform.
The following terms carry the meanings assigned below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, email address, phone number, IP address, device identifiers, and payment details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this case, max77. |
| "Data Processor" | A third party that processes personal data on behalf of max77 under a binding data processing agreement. |
| "KYC Data" | Identity and age verification documents submitted by a Player, including government-issued ID, proof of address, and payment method verification. |
| "Cookies" | Small text files placed on your device by the Platform for functionality, analytics, and session management purposes. |
| "Special Category Data" | Sensitive personal data including information about health, financial vulnerability, or gambling behaviour that requires heightened protection. |
max77 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes for which your personal data is processed and ensuring that such processing is carried out lawfully, fairly, and transparently.
Where we engage third-party service providers to process data on our behalf — for example, payment processors handling MYR transactions via DuitNow, FPX, Touch 'n Go eWallet, or Maybank2u — those providers act as Data Processors and are contractually bound to process data only in accordance with our instructions and applicable data protection obligations.
Data Protection Queries: For any questions or requests relating to the processing of your personal data, please contact our Data Protection team. Contact details are provided in Section 16 of this Policy.
max77 collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy.
When you create a max77 account, we collect:
To comply with age verification and anti-money laundering obligations, we may collect:
| Data Category | Legal Basis for Processing |
|---|---|
| Registration Data | Contract performance; account creation and management. |
| KYC Data | Legal obligation; age verification and AML compliance. |
| Financial Data | Contract performance; payment processing and fraud prevention. |
| Gambling Activity | Contract performance; responsible gambling monitoring. |
| Technical Data | Legitimate interests; platform security and fraud detection. |
| Communications Data | Legitimate interests; customer support and dispute resolution. |
| Marketing Preferences | Consent; where you have opted in to promotional communications. |
max77 collects personal data through the following means:
max77 processes your personal data for the following purposes:
To create and administer your player account, verify your identity and age, manage your MYR balance, and provide access to all Platform features.
To process deposits and withdrawals via your chosen payment method, including e-wallets, FPX bank transfers, and cryptocurrency, and to maintain accurate financial records of all transactions.
To fulfil our obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any directions issued by relevant regulatory authorities. This may include retaining transaction records for a prescribed minimum period and reporting suspicious activity where legally required.
To monitor gambling activity for indicators of problem gambling, apply deposit limits and self-exclusion measures where requested or required, and comply with our responsible gambling obligations. Gambling behaviour data may be processed to identify players who may benefit from support interventions.
To detect, investigate, and prevent fraudulent transactions, duplicate accounts, bonus abuse, account takeover, and other prohibited conduct as described in our Terms & Conditions. This processing is based on our legitimate interests in maintaining the security and integrity of the Platform.
To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
To analyse aggregated, anonymised usage data to improve Platform performance, enhance the user experience, and develop new features. Individual players are not identified in this analysis.
Where you have provided explicit consent, to send you promotional offers, bonus notifications, and Platform updates by email or SMS. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting our support team.
max77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years | Regulatory compliance, dispute resolution |
| KYC Documents | 5 years post account closure | AML legal obligation |
| Financial Transaction Records | 7 years | Financial record-keeping requirements |
| Gambling Activity Logs | 3 years post account closure | Dispute resolution, responsible gambling |
| Support Correspondence | 3 years | Quality assurance, dispute evidence |
| Technical / Device Logs | 90 days | Security monitoring, fraud investigation |
| Marketing Consent Records | Until withdrawal of consent + 1 year | Proof of consent compliance |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised, aggregated data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.
max77 does not sell or rent your personal data to third parties. We may share your data with the categories of recipients listed below, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
We share transaction-related personal data with our payment processing partners — including providers of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and cryptocurrency payment gateways — solely to process your deposits and withdrawals.
KYC documents and identity data may be shared with accredited third-party verification services engaged to authenticate your identity documents against authoritative records.
We may share technical and behavioural data with fraud detection service providers for the purpose of identifying and preventing fraudulent activity, account takeover, and other security threats to the Platform.
max77 will disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. We will notify affected users of such disclosure where we are legally permitted to do so.
We may share data with our legal advisers, auditors, and accountants on a strictly confidential basis, where necessary for the conduct of our business operations.
No Unsolicited Third-Party Marketing: max77 will never share your personal data with third-party advertisers or marketing companies for the purpose of sending you unsolicited communications. Any promotional messages you receive from max77 will only be sent on the basis of your explicit consent.
Some of our third-party service providers, including certain payment processors, cloud infrastructure providers, and fraud detection partners, may be located in or operate from jurisdictions outside Malaysia. Where personal data is transferred internationally, max77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under applicable Malaysian data protection requirements.
Safeguards used for international transfers include contractual data processing agreements incorporating standard data protection clauses, adequacy assessments, and where applicable, binding corporate rules.
Your data's primary processing location is on servers configured to serve the Malaysian market. Cross-border transfers occur only where operationally necessary and are subject to the protections described above.
max77 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, personalise your experience, and gather analytical data about Platform usage. By using the Platform, you consent to the use of cookies in accordance with this Policy.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens. Required for the Platform to function correctly. | Session |
| Functional | Remembering your language preference (BM / EN / 中文), display settings, and responsible gambling limit configurations. | Up to 12 months |
| Analytical | Aggregated, anonymised data about how players navigate the Platform, which features are used, and where errors occur. Used to improve Platform performance. | Up to 24 months |
| Security / Fraud Detection | Device fingerprinting and behavioural signals used to detect fraudulent logins, duplicate accounts, and bot activity. | Up to 12 months |
You may configure your browser to refuse all cookies or to alert you when cookies are being sent. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or completing transactions. Analytical cookies can be disabled without affecting core Platform functionality.
max77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:
Your Role in Security: The security of your account also depends on keeping your login credentials confidential. max77 will never ask for your password via email or live chat. If you suspect your account has been compromised, contact our support team immediately.
As a data subject, you hold the following rights in relation to your personal data processed by max77. To exercise any of these rights, please contact us using the details in Section 16. We will respond to all verified requests within 30 calendar days.
You may request a copy of the personal data we hold about you and information about how it is being processed.
You may request correction of any inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to overriding legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances, such as while a rectification request is under review.
Where processing is based on consent or contract, you may request your personal data in a structured, machine-readable format for transfer to another service.
You may object to processing based on our legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling grounds.
Verification Requirement: To protect your privacy, we will verify your identity before processing any data rights request. Requests may be submitted via live chat or by emailing [email protected] (plain text — not a clickable link). We aim to resolve all requests within 30 days; complex requests may take up to 90 days, in which case we will notify you of the extended timeline.
The max77 Platform is strictly for persons aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor has registered an account or provided personal data to max77, please contact our support team immediately via live chat or at [email protected] (plain text — not a clickable link) so that we can take appropriate action.
🔞 Strict Age Policy: max77 enforces age verification as a condition of account activation. No withdrawal will be processed on any account that has not passed KYC age verification confirming the player is 21 years of age or older.
The max77 Platform does not contain links to third-party external websites. All navigation on the Platform directs users exclusively to pages within the max77 domain. This Policy therefore governs all personal data collected within the max77 Platform environment.
Where payment processors or identity verification partners operate via redirect flows or embedded iframes, those service providers operate under their own privacy policies in respect of data collected directly through their own interfaces. max77 exercises contractual oversight of such partners to ensure data protection standards are maintained.
max77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes — defined as any change that significantly affects the way we collect, use, or share your personal data — will be notified to registered players via email to the address on file at least fourteen (14) days before the change takes effect.
Non-material changes, such as corrections of typographical errors or minor clarifications that do not affect your rights, may be made without prior notification. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the Platform following notification of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you should cease using the Platform and may request account closure in accordance with Section 15.1 of our Terms & Conditions.
For all privacy-related queries, data rights requests, or concerns about our data processing practices, please contact the max77 Data Protection team through the following channels:
We are committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.
Play with Confidence
Now that you understand how we handle your personal data, you can play knowing that max77 treats your privacy with the same seriousness as your winnings. Fast MYR deposits, real-time withdrawals, and 24/7 trilingual support — all backed by a platform that takes data protection seriously. For players aged 21 and above only. Play responsibly.