Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how myvape77 ("we", "us", "the Platform", "the Operator") collects, uses, stores, shares, and protects the personal data of users ("you", "Player "Data Subject") who access or register on the website located at https://myvape77.cam and all associated services (collectively, the "Platform").

myvape77 operates as an online casino and sports betting platform targeting Malaysian users. We are committed to handling personal data responsibly and in accordance with applicable data protection principles, including the Personal Data Protection Act 2010 (PDPA) of Malaysia and internationally recognised privacy standards.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which contain additional provisions relevant to your account and data.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and behavioural data associated with your account.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Controller" refers to myvape77, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of myvape77, such as payment service providers, KYC verification vendors, and cloud infrastructure providers.
• "KYC" means Know Your Customer — identity and age verification processes required by the Platform prior to withdrawal processing.
• "Cookies" means small text files stored on your device by the Platform that enable session management, analytics, and personalisation functionality.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

Data We Collect

myvape77 collects personal data through multiple channels during your interaction with the Platform. The categories of data we may collect are as follows:

3.1 Registration & Identity Data

• Full legal name as per government-issued identification.
• Date of birth (for age verification — players must be 21or older).
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor).
• Email address and mobile phone number.
• Username and encrypted password hash.

3.2 KYC Verification Data

• Copy of Malaysian MyKad (IC), passport, or other government-issued photo identification.
• Proof of address (utility bill, bank statement, or official correspondence not older than 3 months).
• Selfie or liveness check image (where required for enhanced verification).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, including amounts and timestamps.
• Payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers for Touch'n Go, Boost, GrabPay, DuitNow).
• Cryptocurrency wallet addresses used for deposits or withdrawals.
• Bonus claims, wagering history, and win/loss records.

3.4 Technical & Device Data

• IP address and approximate geolocation derived therefrom.
• Device type, operating system, browser type and version.
• Session logs, login timestamps, and access records.
• Referring URL and navigation paths within the Platform.

3.5 Communications Data

• Records of live chat conversations, email correspondence, and support ticket contents with the myvape77 team.
• Voluntary feedback, survey responses, and complaints submitted to myvape77.

How We Process Your Data

myvape77 processes your personal data for the following purposes:

Legal Basis for Processing

myvape77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfil the contract between you and myvape77 — including account creation, payment processing, and service delivery — is carried out on this basis.
• Legal Obligation: myvape77 processes certain data to comply with applicable laws and regulatory requirements, including KYC obligations, anti-money laundering (AML) regulations, and record-keeping requirements.
• Legitimate Interests: We process technical and behavioural data to detect fraud, improve Platform security, and analyse usage patterns to enhance the user experience. We have assessed these interests and determined they do not override your data protection rights.
• Consent: Where we send marketing communications or use optional cookies and analytics tools, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

myvape77 does not sell, rent, or trade your personal data. We may share your data in the following limited circumstances:

• Payment Service Providers: We share necessary financial data with payment processors operating Malaysian payment rails, including FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go, Boost, GrabPay), DuitNow, and cryptocurrency processing partners. Sharing is limited to data required to process your specific transaction.
• KYC & Identity Verification Vendors: Identity documents submitted during KYC are processed by our accredited third-party identity verification partners. These partners are contractually bound to process data solely for verification purposes and to maintain equivalent data security standards.
• Game Studio Partners: Certain gameplay data (bet amounts, game rounds, win/loss outcomes) may be shared with our licensed game studio partners for game integrity monitoring and dispute resolution purposes.
• Cloud & Infrastructure Providers: myvape77 uses cloud hosting and infrastructure providers to store and process Platform data. All infrastructure partners are bound by data processing agreements requiring equivalent security and confidentiality standards.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory obligation, myvape77 may disclose personal data to relevant legal or regulatory authorities. We will notify you of any such disclosure where legally permitted to do so.
• Fraud Prevention Networks: Where we have reasonable grounds to suspect fraud, money laundering, or other illegal activity, we may share relevant data with industry fraud prevention networks and law enforcement agencies.

Cookies & Tracking Technologies

myvape77 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security functions. These cookies cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and display options, improving your experience on return visits.
• Analytics Cookies: Used to collect anonymised data about how players navigate the Platform — pages visited, time on site, and error events. This data helps us identify areas for improvement. Analytics cookies are only placed with your consent.
• Session Cookies: Temporary cookies that expire when you close your browser, used to maintain your active session while you are logged in to myvape77.

You may manage cookie preferences through your browser settings. Disabling cookies may affect certain Platform features. Note that strictly necessary cookies cannot be disabled via browser settings without significantly impairing your ability to use the Platform.

Data Retention

myvape77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of the account plus minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 7 years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC documentation: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Communications data (support records): Retained for 2 years from the date of the final communication, unless a dispute remains outstanding.
• Technical and device data (session logs): Retained for 12 months and then anonymised or deleted.
• Analytics data: Anonymised within 26 months of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents re-identification.

Your Rights as a Data Subject

As a Player on myvape77, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting us at [email protected] or via live chat:

Data Security

myvape77 implements technical and organisational security measures appropriate to the risk level associated with processing your personal data. These measures include, but are not limited to:

• Encryption: All data in transit is protected by TLS 1.2 or higher encryption. Sensitive data at rest — including payment information and identification documents — is encrypted using AES-256 standard encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Password Security: Account passwords are never stored in plain text. They are processed using one-way cryptographic hashing with unique salts per account.
• Intrusion Detection: myvape77 operates real-time intrusion detection and monitoring systems to identify and respond to unauthorised access attempts.
• Regular Audits: We conduct periodic internal and third-party security audits of our systems, data processing infrastructure, and staff access records.
• Breach Response: In the event of a personal data breach that poses a risk to your rights, myvape77 will notify affected individuals within 72 hours of becoming aware of the breach, in accordance with applicable notification obligations.

While we maintain robust security practices, no system is entirely immune to risk. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect unauthorised access.

Minors & Age Verification

myvape77 services are strictly available to individuals aged21 years and above. We do not knowingly collect or process personal data of persons under the age of 21.

Age verification is a mandatory step in the account registration and KYC process. Where myvape77 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be suspended immediately, the data will be deleted to the extent permitted by law, and any funds will be returned through appropriate channels.

If you have reason to believe that a minor has registered on the myvape77 Platform, please contact us immediately at [email protected].

International Data Transfers

myvape77 primarily processes personal data within jurisdictions with data protection frameworks appropriate to the sensitivity of the data involved. Where data is transferred to or processed by third-party service providers in other jurisdictions, we ensure that appropriate safeguards are in place, including:

• Contractual data processing agreements that impose obligations equivalent to those described in this Policy.
• Adequacy assessments to verify that recipient jurisdictions provide sufficient data protection standards.
• Standard contractual clauses where required by applicable data protection law.

Malaysian players' data is handled in accordance with the principles of the Personal Data Protection Act 2010 (PDPA) of Malaysia. Where conflicts arise between this Policy and applicable Malaysian law, the requirements of Malaysian law shall prevail.

Policy Amendments

myvape77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to registered Players via the email address on file prior to the changes taking effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

If any amendment materially reduces your rights under this Policy, we will provide at least 30 days' prior notice and, where required by applicable law, obtain fresh consent before the changes take effect.

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how myvape77 handles your personal data, please contact us through the following channels:

We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve requests fully within 30 calendar days. Where a request cannot be fulfilled, we will provide a written explanation of our reasons.

This Privacy Policy was last updated on 1 January 2026. This version supersedes all prior versions of the myvape77 Privacy Policy.