Official Platform Documents

Privacy Policy goto77 — Full Data Protection for Malaysian Players

Goto77 takes your privacy seriously. This policy clearly explains what information we collect, why we need it, how it is protected, and your rights as a Malaysian player over your personal data.

Updated: January 2026
goto77 Data Protection Summary
256-bit SSL Encryption No Data Sales Your Data Access Rights Right to Data Deletion Fully Encrypted Data Malaysian PDPA Compliance 24/7 Privacy Support Cookie Controls Available
SSL-Protected Data
PDPA Compliance
No Data Sold
Full Player Control
24/7 Support

Six Privacy Principles goto77

The data protection principles that goto77 upholds across every aspect of our platform's operations for Malaysian players.

Bank-Grade Encryption

All data you submit to goto77 — from registration details to transaction information — is encrypted using 256-bit SSL protocol. This is the same encryption technology used by Maybank2u and CIMB Clicks to protect your online banking.

No Sale of Data to Third Parties

Goto77 has never sold, rented, or traded players' personal information to any third party for marketing or commercial purposes, and never will. Your data belongs to you — goto77 holds it solely in trust to enable you to use our services.

Minimum Data Collection

Goto77 only collects information that is strictly necessary to provide you with our services. We do not request irrelevant data and do not retain information beyond the period required for platform operations and Malaysian legal obligations.

Full Control in Your Hands

As a goto77 player, you have the right to access, correct, download, or request the deletion of your personal data at any time. The process for exercising these rights is straightforward and can be handled through goto77's customer support, available 24 hours a day.

Malaysian PDPA Compliance

Goto77 operates within the framework of Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection, processing and storage practices at goto77 are designed to comply with PDPA requirements, fully safeguarding the interests of Malaysian players.

Marketing Communication Controls

Goto77 respects your communication preferences. You can choose to receive or unsubscribe from any marketing communications — promotions, special offers, platform news — at any time via your account settings or by contacting goto77 support directly.

What Data Does goto77 Collected?

Goto77 only collects data that is necessary to operate the platform safely and fairly for Malaysian players.

Personal Identity Data

Full name, date of birth, Malaysian MyKad or passport number — collected during registration and the KYC (Know Your Customer) process to verify the identity of goto77 members and confirm that players are aged 18 and above.

Contact Information

A valid Malaysian mobile number and email address — used for OTP verification during login, transaction notifications, customer support responses, and other important communications relating to your goto77 account.

Financial Transaction Data

Deposit and withdrawal records, including payment methods used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks), transaction amounts, and timestamps — retained for financial audit purposes, KYC verification, and AML compliance.

Gaming Activity Data

Game history — including blackjack tables played, sports bets placed on the Malaysia Super League or EPL, slot sessions, wins and losses — is used to provide your gaming history, calculate VIP points, and detect problem gambling patterns.

Device Technical Data

IP address, device type, operating system, web browser, and other technical information — collected automatically for account security, fraud detection, and optimising your goto77 experience across Android and iOS devices.

Support Communication Data

Live chat transcripts, email tickets, and other customer support interactions — retained to help the goto77 team deliver more effective assistance and resolve any disputes based on accurate, complete records.

Step Security goto77 Data

Goto77 continually invests in its cybersecurity infrastructure to ensure that the personal and financial data of Malaysian players is protected to the highest standard. The following is an overview of the security measures goto77 has put in place:

Data Encryption in Transit256-bit SSL
Stored Data EncryptionAES-256
Real-Time Fraud DetectionActive 24/7
Two-Factor Authentication (2FA)Available
Regular Security AuditsEvery Quarter
Internal Data Access ControlsNeed-to-Know Basis Only

Rights You over Personal Data

As a goto77 player who is a Malaysian citizen or resident, you have the following rights over the personal data we hold about you:

Right of Access

You may request a copy of all personal data goto77 holds about you at any time. goto77 will provide this information within 14 working days.

Right of Rectification

If any personal data we hold about you is inaccurate or outdated, you have the right to request immediate correction through customer support or your account settings.

Right to Erasure

You may request deletion of your personal data after closing your goto77 account, subject to the minimum record retention requirements under Malaysian financial law.

Data Portability Rights

You may request an export of your personal data and transaction history in a machine-readable format for your own personal use.

Right to Object to Processing

You may object to the use of your data for direct marketing purposes at any time, and goto77 will stop immediately, no questions asked.

Important Notice Regarding goto77's Privacy Policy

This Privacy Policy explains how goto77 collects, uses, discloses and protects your personal information when you use our platform and services. By registering or using goto77, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside Terms & Conditions goto77 forms part of the overall agreement between you and our platform.

1
Introduction — goto77 & Our Privacy Commitment
Who We Are and Why Your Privacy Matters

Goto77 is an online casino and Sports Betting platform serving Malaysian players. In providing our services, goto77 acts as the data controller responsible for the personal information you provide to us or that we collect automatically when you use the platform.

Goto77 recognises that trust is the foundation of our relationship with Malaysian players. Without confidence that your information is kept securely and used responsibly, you would not feel comfortable using our platform. That is why we took the time to write this Privacy Policy in plain, easy-to-understand language — not in legal jargon that requires a lawyer to interpret.

Goto77 operates in accordance with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA). While online casino platforms may operate in a legally complex space, goto77 chooses to uphold the highest applicable data protection standards in our operations to fully safeguard the interests of Malaysian players.

2
Personal Information goto77 Collects
Data Types, Collection Methods & Purposes

Goto77 collects two main categories of data: information you provide to us directly, and information collected automatically as you use the platform.

Data You Provide Directly:

  • Account Registration: Full name, date of birth, valid Malaysian MyKad or passport number, active Malaysian mobile number, and a valid email address.
  • Identity Verification (KYC): MyKad copy, selfie with MyKad, Malaysian bank statement or proof of address — requested when required to verify identity before large withdrawals are processed.
  • Financial Information: Details of the Malaysian payment methods you use — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks — along with a full record of all deposit and withdrawal transactions.
  • Communications: Any information you share when contacting goto77 customer support via live chat, email, or other communication channels.

Automatically Collected Data:

  • Technical Data: IP address, web browser type, operating system, device model, screen resolution, and other technical information related to the device you use to access goto77.
  • Usage Data: Pages you visit within the goto77 platform, time spent, actions taken, navigation patterns, and game preferences.
  • Approximate Location Data: General geographic location derived from your IP address, used solely to verify that you are accessing the platform from Malaysia.
  • Cookie Data: Information stored via cookies and similar tracking technologies — further details are outlined in Section 5.
3
How goto77 Uses Your Data
Lawful Purposes for Data Processing

Goto77 only uses your personal data for the following purposes, each of which has a valid legal basis:

  • Service Provision: To manage your goto77 account, process deposits and withdrawals via Malaysian payment methods, enable you to play casino games and bet on sports, and calculate and credit your VIP Rewards points.
  • Identity Verification & Security: To verify your age and identity (KYC), detect and prevent fraud, money laundering, and other illegal activities, and to protect your goto77 account from unauthorised access.
  • Legal Compliance: To fulfil our legal obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and relevant financial reporting requirements.
  • Platform Improvement: To analyse usage patterns and technical vulnerabilities for the purpose of improving the performance, stability and user experience of the goto77 platform.
  • Service Communications: To send you important account-related notifications — transaction confirmations, security alerts, changes to terms of service, and other information essential to managing your account.
  • Responsible Gambling: To monitor gameplay patterns that may indicate signs of problem gambling and to ensure that self-exclusion and responsible gaming tools function effectively in protecting player wellbeing.
  • Marketing (With Consent): To send you promotions, bonus offers, and the latest goto77 news — only to players who have opted in to receive marketing communications. You may unsubscribe at any time.
What goto77 Does Not Use Your Data For…

Goto77 does not use your personal data to make decisions based solely on automated processing that significantly affect you personally, does not use it for profiling that could discriminate against you, and never shares it with third-party advertisers for targeted advertising without your explicit consent.

4
Data Sharing with Third Parties
When, With Whom, and Why Data May Be Shared

Goto77 does not sell players' personal data. However, in the course of operating the platform, there are certain situations where goto77 needs to share your personal information with trusted third parties:

  • Payment Service Providers: Minimum transaction details required are shared with Malaysian digital wallet operators and banks (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks) solely for the purpose of processing your deposits and withdrawals.
  • Game Providers: Minimum technical information (player ID without full name) is shared with game software providers to enable games to function within the goto77 platform. These providers are bound by strict confidentiality agreements.
  • KYC Service Providers: During the identity verification process, the identification documents you submit may be processed by a verified third-party identity verification service provider, subject to equivalent data protection controls.
  • Legal Authorities: goto77 may be required to disclose personal information to the Royal Malaysia Police, the Insolvency Department, Bank Negara Malaysia, or other authorities when required to do so by Malaysian law or a valid court order.
  • Fraud Investigation: In cases of suspected fraud or criminal activity, goto77 may share relevant information with Malaysian law enforcement authorities for investigation purposes.
goto77 Does Not Share Data for These Purposes

Goto77 does not share player data with third-party advertisers for targeted advertising, does not sell email lists or phone numbers to any party, and does not share players' personal financial information beyond what is necessary to process the relevant transaction. All third parties that receive goto77 data are bound by contractually enforceable data protection agreements.

5
goto77 Cookies & Tracking Technologies
How We Use Cookies and Your Control Options

Goto77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your web browser or device when you visit goto77. We use several types of cookies:

  • Essential Cookies: Required for the goto77 platform to function properly — including login session cookies, security cookies, and language preference cookies. These cannot be disabled, as the platform will not operate without them.
  • Performance Cookies: Collects information on how you use the goto77 platform — which pages are visited most frequently, error messages received, and overall page performance. All information collected is anonymised.
  • Functionality Cookies: Allows goto77 to remember your preferences — such as saved username, language selection, and favourite game settings — to enhance your experience on the platform.
  • Analytics Cookies: goto77 uses internal analytics tools that collect aggregated, anonymised usage data to help us understand overall usage patterns and improve the platform.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the goto77 platform and your overall gaming experience.

6
goto77 Data Retention & Deletion
Data Retention and Deletion Procedures

Goto77 does not retain your personal data for longer than is necessary for the purposes outlined in this Privacy Policy. Our retention periods depend on the type of data and applicable legal requirements:

  • Active Account Data: Retained for as long as your goto77 account remains active and for a period of six months after the date of your last activity, to allow for account recovery if needed.
  • Financial Transaction Records: Retained for seven years from the transaction date, in line with Malaysia's financial and tax legal requirements under the Income Tax Act 1967 and applicable AML regulations.
  • KYC Documents: Retained for the duration of the active account plus five years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
  • Technical Data & Logs: Retained for a maximum of 12 months for security, fraud detection and technical troubleshooting purposes, after which it is automatically deleted.
  • Support Communication Records: Retained for two years after the final case resolution, to allow reference should the same dispute arise again.

When data reaches the end of its retention period, goto77 deletes it securely using methods that ensure it cannot be recovered or misused by any party.

7
goto77 Technical & Organisational Security Measures
Multi-Layer Data Protection

Goto77 implements comprehensive technical and organisational security measures to protect Malaysian players' personal data against unauthorised access, disclosure, alteration, or destruction:

  • End-to-End Encryption: All communications between your device and goto77 servers are encrypted using TLS 1.3 with 256-bit SSL certificates. Stored data is encrypted using AES-256.
  • Internal Access Controls: goto77 staff may only access data that is necessary for their specific job functions (need-to-know principle). Access to sensitive data requires multi-factor authentication and is fully logged.
  • 24/7 Security Monitoring: goto77's automated monitoring system operates around the clock to detect suspicious access attempts, cyberattacks, and security anomalies in real time.
  • Regular Security Audits: goto77 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
  • Staff Training: All goto77 staff who handle player data receive regular data protection training and are bound by legally enforceable confidentiality agreements.
  • Incident Response Procedures: goto77 has a documented data security incident response procedure. In the event of a material data breach, goto77 will notify affected players and the relevant authorities within the timeframe prescribed by Malaysian law.
8
goto77 Players' Rights over Personal Data
How to Exercise Your Rights

As a goto77 player, you have the following rights over your personal data, and goto77 is committed to helping you exercise them with ease:

  • Right of Access: Request a copy of all personal data goto77 holds about you — delivered to you within 14 working days of the request being received and verified.
  • Right to Rectification: Request the correction of any inaccurate or incomplete data — goto77 will update it within 7 working days.
  • Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data upon account closure, subject to the minimum record retention requirements under Malaysian law that cannot be waived.
  • Right to Restrict Processing: Request that goto77 restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of that data.
  • Right to Data Portability: Receive your personal and transaction data in a structured, machine-readable format (JSON or CSV) for your own personal use.
  • Right to Object: Object to the processing of your data for direct marketing purposes — goto77 will cease immediately, with no justification required on your part.

To exercise any of the rights above, contact goto77's Data Privacy Officer by email at support@goto77-bangla.com stating your account number and the right you wish to exercise. goto77 may need to verify your identity before processing the request in order to protect the security of your account.

9
Children's Privacy & Minor Protection
Absolute Prohibition for Users Under 18

The goto77 platform is for users aged 18 and above only. goto77 does not knowingly collect any personal information from individuals under the age of 18.

If goto77 discovers or is notified that we have collected personal information from a child or underage individual, we will take the following steps immediately: close the account in question, delete all data collected, refund any deposited balance (after deducting any invalid winnings) and report the incident to the relevant authorities if required.

Parents & Guardians — Important Notice

If you discover that your child under the age of 18 has registered for or is using the goto77 platform, please contact our customer support immediately at support@goto77-bangla.com. goto77 will close the account immediately and delete all associated data within 48 hours. goto77 also recommends using parental control software to restrict children's access to online gambling platforms.

10
Amendments to goto77's Privacy Policy
How goto77 Notifies You of Changes

Goto77 may update this Privacy Policy from time to time to reflect changes in our data practices, relevant changes in Malaysian law, or changes in how we operate the platform. The "Updated" date at the top of this page will reflect the date of the most recent revision.

When we make material changes to this Privacy Policy — particularly those affecting how we use or disclose your personal data — goto77 will notify you via a prominent notice within the platform and/or by email to the address registered on your account. We recommend reviewing this Privacy Policy periodically.

Your continued use of the goto77 platform after an amended Privacy Policy is published constitutes your acceptance of those changes. If you disagree with any changes, you have the right to close your goto77 account and request deletion of your personal data.

11
Contact goto77 — Privacy Inquiries
How to Contact Our Data Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how goto77 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@goto77-bangla.com — please state "Privacy Enquiry" in the subject line
  • Live Chat: Click the chat icon within the goto77 platform — available 24/7 for immediate privacy inquiries
  • Frequently Asked Questions: Visit the FAQ goto77 for answers to the most frequently asked privacy questions

Goto77 is committed to responding to all privacy-related inquiries within 72 business hours. For formal requests to exercise your data protection rights (access, correction, deletion), please provide your goto77 account number and identity verification to expedite the process.

Bahasa Malaysia Assistance

The goto77 support team is fluent in Bahasa Malaysia and can assist you with all data privacy inquiries in your native language. There is no need to communicate in any other language if you are more comfortable using Bahasa Malaysia.

 Related goto77 Documents

This Privacy Policy should be read alongside goto77's other platform documents: Terms & Conditions and Responsible Gaming — all three documents together form the complete contractual framework between you and goto77.

Goto77 & Data Privacy: Why It's More Than Just a Document

In today's digital world, personal data has become one of the most valuable assets in existence. Every time you sign up for an online service — whether an e-commerce platform, a banking app, or an online casino like goto77 — you are entrusting your personal information to that entity. goto77 understands the weight of that trust, which is why a privacy policy is not merely a legal formality but a true reflection of how goto77 operates every single day.

Many Malaysian players may not realise how much data they actually share with online casino platforms. From your name and date of birth at registration, to your phone number for OTP verification, to a record of every Touch 'n Go eWallet or GrabPay transaction made, to a full history of your slots play or Malaysia Super League football bets — all of this forms a fairly detailed digital profile of you. goto77 holds all this data not to exploit it, but to run a safe, fair and responsible service.

One area goto77 takes very seriously is anti-money laundering (AML) compliance. This requires us to maintain complete transaction records and, on occasion, verify the source of funds used for deposits. Some players may find this process inconvenient, but it is a legal requirement that safeguards Malaysia's broader financial ecosystem — including you as a legitimate platform user. When goto77 requests verification documents, it is not because we suspect any wrongdoing — it is standard procedure that protects all parties involved.

Regarding cookies and online tracking — goto77 uses these technologies responsibly. The cookies goto77 uses are to ensure the platform functions correctly, to recognise you when you log in so you do not have to enter your password repeatedly, and to analyse how the platform is used for improvement purposes. goto77 does not use cookies to track your activity on other websites outside our platform or to build an advertising profile about you for sale to advertisers.

Goto77 also wishes to reaffirm our commitment to Malaysia's Personal Data Protection Act 2010 (PDPA). The PDPA provides a clear legal framework for how organisations in Malaysia should handle the personal data of Malaysian citizens. While there is ongoing debate regarding the PDPA's scope over online casino platforms, goto77 chooses to comply fully with PDPA principles because it is the right thing to do — not merely because the law requires it.

In the event of a data security incident — and goto77 must be honest that no system is 100% breach-proof — goto77 has a clear response procedure in place. We will identify the scope of the incident, contain it as quickly as possible, notify affected players with clear and accurate information about what happened and what steps they should take, and report to the relevant authorities in accordance with legal requirements. goto77 will not conceal security incidents or downplay their significance to protect the platform's reputation. Transparency in difficult situations is the true test of an organisation's character.

For new goto77 players creating their first account — our registration process asks for the minimum information needed to open an account: full name, date of birth, Malaysian phone number, and email address. Once you start playing and wish to make larger withdrawals, we may need to carry out additional identity verification (KYC) — this is a security measure that protects you as well. goto77's KYC process is designed to be completed in a reasonable timeframe without inconveniencing legitimate players.

goto77's Privacy Promise to Malaysian Players

Goto77 is committed to being transparent about the data we collect and why. We will not use your data in ways you would not expect when you sign up. We will protect it to the best of our ability using the best available technology and practices. And when you want to access, correct or delete your data, we will make it easy for you to do so, no unnecessary questions asked. Your data, your rights.

Your Data Is Safe. Ready to Play at goto77?

Goto77 safeguards your privacy with industry-leading technology and an unwavering commitment to data protection. Register a free account today and enjoy a safe, fair, and rewarding online casino experience in Malaysia — with a welcome bonus credited automatically after your first deposit.

SSL
256-bit Encryption
PDPA
Malaysian Compliance
0
Data Sold
24/7
Privacy Support
Bahasa Melayu