Official Documents

Privacy Policy kopi77 — Member Personal Data Protection

Your privacy is our priority. This policy clearly explains how kopi77 collects, uses, stores, and protects your personal information — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026
256-bit SSL Encryption
PDPA 2010 Compliance
24/7 Monitoring
0 Data Sales
Introduction and Scope of Privacy Policy
SECTION 01

Kopi77 is an online entertainment platform operating in Malaysia and is fully committed to protecting the privacy of every member who uses our services. This Privacy Policy has been formulated to meet the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia, and explains our data handling practices in a transparent and comprehensive manner.

By registering and using the kopi77 platform — whether via the website, mobile app, or other channels we provide — you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform and contact our support team to close your account.

This policy applies to all information we collect from you, directly or indirectly, when you use the kopi77 platform — including during the registration process, identity verification (KYC), financial transactions, and interactions with our customer support team.

This Privacy Policy should be read together with Terms and Conditions and policies Responsible Gaming for a full understanding of your responsibilities and rights as a kopi77 member.
Types of Personal Data We Collect
SECTION 02

Kopi77 only collects data that is genuinely necessary to provide a secure, fair, and legally compliant service. We do not collect information beyond what is required. Below are the categories of data we collect:

Personal Identity Information

  • Full name as shown on your identity card or passport
  • Date of birth and identification card number (MyKad) or passport
  • Gender and nationality
  • Full current residential address
  • Photo or scan of identity document for KYC purposes

Contact Information

  • Active email address used for registration
  • Valid mobile phone number
  • Kopi77 platform username

Financial Information

  • Bank account number and bank name for withdrawal purposes
  • Registered e-wallet information (Touch 'n Go eWallet, GrabPay)
  • Deposit, withdrawal, and wagering transaction records
  • Financial activity history within the platform

Technical & Usage Data

  • IP address and estimated geographic location
  • Device type, operating system, and web browser used
  • In-platform activity logs including games played
  • Session cookies and website usage analytics data
We never store credit or debit card numbers directly on our servers. All card processing is handled through PCI-DSS certified third-party payment gateways.
How We Use Your Data
SECTION 03

Every piece of data collected by kopi77 has a clear and lawful purpose. We use your data responsibly and never for purposes unrelated to the operation of our platform. Below is a summary table of data usage purposes:

Purpose of Use Types of Data Used Legal Basis
Account registration & verification Identity, contact Contract
KYC identity verification Identity, documents Legal requirement
Processing deposits & withdrawals Financial, identity Contract
AML compliance & fraud prevention Financial, technical Legal requirement
Customer Support Contact, activity Legitimate interest
Marketing & promotions (with consent) Contact, preferences Consent
Platform improvement & analytics Technical, usage Legitimate interest

For marketing purposes, we will only send you promotional communications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time by contacting our support team.

kopi77 will never sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data belongs to you.
Information Sharing and Disclosure
SECTION 04

Kopi77 does not share your personal information with third parties except in the following limited and lawful circumstances. In all cases, we ensure that the relevant third parties adhere to data protection standards equivalent to our own.

  • Technical service providers: Cloud computing companies, server infrastructure providers, and analytics service providers that assist us in technically operating the kopi77 platform.
  • Payment gateways and financial institutions: To securely process your deposits and withdrawals. Information shared is limited to what is strictly necessary to complete the transaction.
  • Game providers: Casino and slot game software providers that require certain session data to ensure game integrity.
  • Relevant authorities: Where we are required by law, court order, or a lawful request from law enforcement authorities to disclose certain information.
  • Identity verification services: Third-party KYC service providers that assist us in verifying the identity of new and existing members.
kopi77 never have and never will sell your personal data to advertisers, data brokers, or any third parties not directly involved in the operation of our platform.

Every third-party service provider we engage is bound by strict data processing agreements and is only permitted to use your data for the specific purposes defined in those agreements.

Data Security Measures
SECTION 05

Kopi77 invests seriously in cybersecurity infrastructure to ensure your personal and financial data remains protected at all times. We employ multiple layers of protection covering technical, physical, and administrative aspects.

  • 256-bit SSL/TLS encryption: All communications between your browser and kopi77's servers are encrypted using the latest TLS 1.3 protocol, ensuring that data in transit cannot be intercepted by third parties.
  • Secure password storage: Your account password is never stored in plain text. We use a strong one-way hashing algorithm with a unique random salt for each password.
  • Two-factor authentication (2FA): kopi77 members are encouraged to enable two-factor authentication for an added layer of protection during login.
  • 24/7 security monitoring: Our automated monitoring system detects and alerts on any suspicious or unusual account activity at any time.
  • Certified data centres: Your data is stored in enterprise-grade data centres that comply with international physical and cybersecurity standards.
  • Regular security audits: We conduct regular penetration testing and security audits carried out by independent cybersecurity firms.
While we take all reasonable precautions, no system can be guaranteed 100% secure. You are also responsible for keeping your kopi77 account password and login credentials confidential.
Cookies, Tracking Technologies & Analytics
SECTION 06

Kopi77 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure smooth technical functionality, and understand how members interact with our content. Below are the types of cookies we use:

Cookie Types Function Duration
Essential Cookies Maintaining login sessions and account security Session only
Functional Cookies Saving your language and display preferences 1 year
Analytics Cookies Understanding usage patterns for platform improvement 2 years
Performance Cookies Optimising page load time and performance 30 days

You may manage or delete cookies through your web browser settings at any time. Please note that deleting or blocking essential cookies may affect the functionality of the kopi77 platform and your login experience.

We also use third-party analytics services that help us understand website traffic in aggregate and anonymised form. This data cannot be linked back to the identity of any individual member.

Your Rights as a Data Subject
SECTION 07

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, you have the following rights regarding your personal data held by kopi77. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to legal requirements that obligate us to retain certain records.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request restriction of data processing under certain circumstances, such as during a dispute about data accuracy.

To exercise any of the above rights, contact our data protection team via the support email listed in the footer of this website. We will process your request within 14 business days.
Data Retention Period
SECTION 08

Kopi77 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or for as long as required by applicable Malaysian law. Once the retention period has ended, your data will be securely deleted or anonymised.

Data Category Retention Period Reason
Active account data For the duration of the active account Service operations
Financial transaction records 7 years AML legal requirement
KYC Documents 5 years after account closure PDPA & AML Compliance
Game activity logs 3 years Dispute resolution
Support communication records 2 years Service quality
Analytics cookie data 2 years Platform improvement

Once your account is closed, most of your personal data will be deleted within 30 days, except for records that must be retained under legal requirements — such as financial records and KYC documents subject to the retention periods stated above.

Links to Third-Party Websites
SECTION 09

Kopi77 may contain links or integrations with third-party services such as game providers and payment gateways. Please note that kopi77's Privacy Policy applies only to the kopi77 platform itself and does not cover the privacy practices of those third-party websites or services.

When you leave the kopi77 platform and access third-party websites, you are subject to those websites' privacy policies. kopi77 is not responsible for the data collection practices of any third party, and we encourage you to review the privacy policy of every website you visit.

All game providers and payment gateways we work with are selected based on strict data security and privacy standards. However, their privacy practices remain their own responsibility.
Contact Us & Privacy Complaints
SECTION 10

If you have any questions, concerns, or complaints regarding how kopi77 handles your personal data, or if you wish to exercise any of the rights stated in this Privacy Policy, please contact our Data Protection Officer.

We are committed to addressing all privacy-related enquiries and complaints seriously and will respond within 14 working days from the date of receipt. For more complex cases, we may require up to 30 days and will notify you if this is the case.

Our data protection team's contact details can be found in the footer of this website. You may also reach us via Live Chat, available 24/7, for immediate queries regarding your privacy and personal data.

kopi77 takes every privacy complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Personal Data Protection Act 2010.

Kopi77's Six Pillars of Privacy Protection

Privacy is more than a legal document to us — it is a core value that underpins every technical and operational decision at kopi77.

Highest-Level Encryption

All data transmitted between your device and kopi77's servers is encrypted using 256-bit SSL/TLS — the same standard used by Malaysia's leading banking institutions.

Secure & Trusted KYC

Our identity verification process uses advanced integrated KYC technology. Your documents are processed in a secure environment and are never shared without your consent.

PCI-DSS Payment

All financial transactions are processed through PCI-DSS certified payment gateways. Your card number never touches kopi77's servers — full security guaranteed.

Zero Data Sales

Kopi77 has never and will never sell your personal data to any party for advertising or marketing purposes. Your data remains entirely yours.

Full PDPA Compliance

The kopi77 platform is built from the ground up to fully comply with Malaysia's Personal Data Protection Act 2010, ensuring your rights as a user are always protected.

Regular Security Audits

Our systems undergo independent security audits on a regular basis. Penetration testing is conducted by external experts to ensure there are no vulnerabilities that could compromise your data.

Play with Peace of Mind — Your Data is Protected

Kopi77 offers the best online casino experience in Malaysia with robust personal data protection. Register now and enjoy thousands of slot games, live casino, sports betting, and more — in a safe and trusted environment.

PDPA-Protected Data 256-bit SSL 24/7 Support Trusted Platform
SSL
256-bit Encryption
PDPA
Full Compliance
24/7
Active Monitoring
0
Data Sales
Bahasa Melayu