Privacy Policy

§1 Introduction

This Privacy Policy ("Policy") describes how ea77 ("ea77", "we", "us", "our"), operator of the website located at ea77.casa, collects, processes, stores, and protects personal data relating to registered players, website visitors, and other individuals who interact with the Platform ("you", "User", "Player").

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection standards. By registering an account on ea77.casa, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, which form part of the overall agreement between you and ea77.

§2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can identify a natural person, directly or indirectly — including name, email address, phone number, IP address, device identifier, and financial account details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, ea77.
• "Data Processor" means a third party that processes personal data on behalf of ea77 under a contractual arrangement and subject to ea77's instructions.
• "KYC" means the Know Your Customer identity verification process undertaken to confirm a Player's identity and age.
• "Cookies" means small text files placed on your device by a website to store information about your session and preferences.
• "Platform" means the ea77.casa website, its mobile-optimised interface, and all associated services.

§3 Data Controller Information

ea77 acts as the Data Controller with respect to personal data collected through the Platform. All data rights requests, complaints, and enquiries relating to data protection should be directed to the ea77 Data Protection contact as set out in Section 15 of this Policy.

Where ea77 engages third-party service providers (such as payment processors, KYC verification services, and cloud infrastructure providers) to process data on its behalf, such providers act as Data Processors under written agreements that obligate them to maintain equivalent data protection standards.

§4 Personal Data We Collect

ea77 collects personal data in the following categories, through the means described:

Category	Data Collected	Collection Method
Registration Data	Full name, date of birth, email address, phone number, residential address, username	Provided by Player during account registration
Identity Verification (KYC)	Government-issued ID (e.g., Malaysian MyKad or passport), selfie photograph, proof of address, payment method documentation	Submitted by Player to fulfil KYC requirements
Financial Data	Deposit and withdrawal records, payment method identifiers (e.g., partial bank account numbers, e-wallet IDs for Touch'n Go, Boost, DuitNow, Maybank, CIMB), transaction history in MYR	Generated through Platform transactions
Gaming Activity	Game session logs, betting history, sports market selections (including EPL and Liga Super Malaysia bets), bonus usage records	Automatically recorded during Platform use
Technical Data	IP address, device type, browser type and version, operating system, referring URL, session duration	Automatically collected via server logs and cookies
Communications Data	Records of live chat, email, and WhatsApp support interactions; support ticket content	Generated through customer support channels
Marketing Preferences	Promotional opt-in status, preferred communication channels, language preference	Provided by Player or inferred from Platform activity

ea77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data beyond what is necessary for age verification, or health data, unless you voluntarily disclose such information in the context of a responsible gambling self-assessment.

§5 Lawful Basis for Processing

ea77 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to provide the services you have registered for — including account management, deposits, withdrawals, and game access. Without this processing, we cannot provide you with the Platform.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification requirements, and licensing conditions imposed by our international gaming regulator.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gambling monitoring, and aggregate analytics — where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for non-essential marketing communications and certain analytics cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

§6 How We Use Your Personal Data

ea77 uses personal data for the following specific purposes:

1. Account Creation and Management: To create, maintain, and administer your player account, including processing login credentials and enabling account recovery.
2. Payment Processing: To facilitate deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and bank transfers to Maybank, CIMB, Public Bank, and Hong Leong accounts in MYR.
3. Identity and Age Verification (KYC): To verify that you are who you say you are and that you meet the minimum age requirement of 21 years, as required by our licensing obligations.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other forms of financial crime affecting the Platform.
5. Customer Support: To respond to enquiries, resolve complaints, and provide assistance in English, Bahasa Melayu, and Mandarin through live chat, email, and WhatsApp channels.
6. Responsible Gambling: To monitor gaming activity for signs of problem gambling behaviour and to administer player-requested tools such as deposit limits, self-exclusion, and cooling-off periods.
7. Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve game performance, user interface, and overall player experience.
8. Marketing Communications: To send you relevant promotional offers, festival bonus campaigns (e.g., Hari Raya, Chinese New Year, Deepavali promotions), and platform updates, subject to your marketing preferences and applicable consent requirements.
9. Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws, and to respond to lawful requests from regulatory authorities.

§7 Data Sharing & Third-Party Disclosure

ea77 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Processors: We share financial data with payment processors and banking partners (including those facilitating DuitNow, FPX, and e-wallet transactions) to process deposits and withdrawals. These providers process data solely to execute payment transactions.
• KYC and Identity Verification Providers: We engage licensed third-party identity verification services to process KYC documents on our behalf. These providers are contractually bound to process your data exclusively for verification purposes.
• Cloud Infrastructure and Hosting: Your data is stored on secure cloud servers operated by reputable infrastructure providers. These providers act as data processors under strict contractual data processing agreements.
• Fraud Detection and AML Services: We may share transaction data with third-party fraud detection and anti-money laundering screening services to fulfil our regulatory obligations.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities where we are legally required or compelled to do so by a valid legal process, court order, or regulatory demand.
• Responsible Gambling Networks: Where a Player applies for cross-platform self-exclusion, limited identification data may be shared with partner responsible gambling networks to enforce the exclusion effectively.

All third-party processors engaged by ea77 are subject to data processing agreements that require them to maintain confidentiality, implement appropriate security measures, and process data only as instructed by ea77.

§8 International Data Transfers

As ea77 operates internationally and engages global service providers, your personal data may be transferred to and processed in countries outside Malaysia. These countries may have different data protection laws than those applicable in your jurisdiction.

Where such transfers occur, ea77 takes appropriate safeguards to ensure that your data receives an equivalent level of protection, including by entering into contractual clauses with receiving parties that impose binding data protection obligations.

§9 Data Retention

ea77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Data Category	Retention Period	Reason
Account and Registration Data	Duration of account + 5 years after closure	AML / regulatory compliance
Financial Transaction Records	5 years from transaction date	AML / counter-terrorism financing obligations
KYC Identity Documents	5 years from account closure	Regulatory requirement
Customer Support Records	3 years from interaction date	Dispute resolution and quality assurance
Marketing Preferences	Until consent withdrawn or account closed	Consent management
Technical Logs (IP, Device)	12 months	Security and fraud detection

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

§10 Security Measures

ea77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Transport Encryption: All data in transit is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock indicator in your browser confirms this protection is active when accessing ea77.casa.
• At-Rest Encryption: Sensitive stored data, including KYC documents and financial records, is encrypted at rest using industry-standard algorithms.
• Password Security: Account passwords are stored as salted cryptographic hashes. We never store or transmit passwords in plain text.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts as an additional layer of protection.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security training.
• Penetration Testing: ea77's infrastructure undergoes periodic security assessments by qualified third-party security professionals.

§11 Cookies & Tracking Technologies

ea77.casa uses cookies and similar tracking technologies to operate the Platform effectively and to enhance your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and game display options. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymised or aggregated data about how users navigate the Platform — including which pages are visited, how long sessions last, and which game categories are most popular. This data is used purely to improve the Platform.
• Responsible Gambling Cookies: Track session duration and activity thresholds to support responsible gambling monitoring features, including display of session time reminders.

You may manage or disable non-essential cookies through your browser's cookie settings or by adjusting preferences in your Account settings. Please note that disabling certain cookies may affect the functionality of the Platform.

§12 Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by ea77:

• Right of Access: You may request a copy of the personal data ea77 holds about you, together with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update certain information directly via your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer needed for the purposes it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to overriding legal retention obligations (see Section 9).
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to ea77, for transfer to another service, where technically feasible.
• Right to Object: You may object to processing of your personal data based on legitimate interests, and to direct marketing at any time. We will cease processing for marketing upon receipt of an opt-out request without delay.
• Right to Restrict Processing: You may request that we limit processing of your data to storage only, pending resolution of an accuracy dispute or an objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 calendar days. We may require identity verification before processing your request.

§13 Children & Minors

ea77 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly for adults aged 21 and above. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately close the account, void all transactions, and delete the associated personal data.

If you are a parent or guardian and believe that a minor has accessed ea77.casa and provided personal information, please contact our support team immediately. We take underage access extremely seriously.

§14 Amendments to This Policy

ea77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The date of the most recent revision is displayed at the top of this page.

Where changes are material, we will notify registered Players via the email address on file or by displaying a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of those changes.

We encourage you to review this Policy periodically to stay informed about how ea77 protects your personal data.

§15 Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how ea77 has handled your personal data, please contact us:

Please note that the email address above is displayed as plain text for privacy and security reasons and is not a clickable link. Please copy it manually into your email client. ea77 does not operate a telephone support line — please use live chat or email for all enquiries.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Malaysian residents may also direct concerns to the Personal Data Protection Department of Malaysia (JPDP) where applicable law permits.