Privacy Policy

Koplo77 ("Koplo77", "we", "us", "our") operates the online gaming platform accessible at koplo77.cam (the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses, registers on, or interacts with the Platform ("you", "your", "User", "Player").

This Privacy Policy ("Policy") describes in detail what personal data we collect, how we collect it, the purposes for which we use it, the circumstances in which we may share it with third parties, how long we retain it, the security measures we apply to protect it, and the rights you hold as a data subject.

By accessing the Platform, creating a player account, or using any service offered by Koplo77, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy is incorporated by reference into Koplo77's Terms and Conditions and forms part of the agreement between you and Koplo77.

If you do not agree with any part of this Policy, you should discontinue your use of the Platform and request the closure of your account.

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more factors specific to that person's identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, Koplo77.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instructions of Koplo77.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data for one or more stated purposes.
• "Cookies" means small text files placed on your device by a website, used to remember session state, preferences, and browsing behaviour for analytics and personalisation purposes.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process required by anti-money laundering regulations.

Koplo77 collects the following categories of personal data from Users:

Koplo77 applies the principle of data minimisation — we collect only what is necessary for the stated processing purposes and do not retain data beyond the period required by applicable law or our legitimate operational interests.

Koplo77 collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Technical data collected automatically when you visit the Platform, including IP address, device fingerprint, session data, and cookie-based identifiers.
• Payment processors: Transaction confirmation data, payment status, and limited financial identifiers received from Malaysian payment partners including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major bank gateways (Maybank, CIMB, Public Bank, Hong Leong).
• Identity verification providers: Confirmation results from third-party KYC and age verification services used to validate documents submitted during account onboarding.
• Fraud and AML screening tools: Risk scoring data from third-party fraud prevention and anti-money laundering monitoring services used to assess transaction legitimacy.

Koplo77 processes your personal data for the following purposes:

• To create, maintain, and operate your player account, including authentication and account recovery.
• To process financial transactions — deposits, withdrawals, and associated currency calculations in Malaysian Ringgit (MYR).
• To verify your identity, age (21+ requirement), and source of funds in compliance with applicable KYC and AML obligations.
• To deliver our gaming and sports betting services, including game provision, live casino streaming, and sports market data.
• To administer bonuses, promotions, and loyalty programme rewards applicable to your account.
• To monitor platform activity for fraud, collusion, bonus abuse, money laundering, and other prohibited conduct.
• To provide customer support and resolve disputes, complaints, and technical issues.
• To comply with legal and regulatory obligations, including record-keeping, audit, and reporting requirements.
• To enforce our Terms and Conditions and protect the legitimate interests of Koplo77 and its players.
• To improve the performance, security, and user experience of the Platform through anonymised analytics and testing.
• To send you service-related communications, including account notifications, security alerts, and transactional confirmations.
• To send you marketing communications about promotions, new games, and platform features — subject to your separately given consent and your right to opt out at any time.

Koplo77 processes your personal data only where a valid lawful basis exists. The following bases apply to our processing activities:

• Contractual necessity: Processing required to perform the contract between you and Koplo77, including account operation, payment processing, and game service delivery.
• Legal obligation: Processing required for Koplo77 to comply with applicable law, including anti-money laundering obligations, age verification requirements, fraud reporting duties, and regulatory record-keeping mandates.
• Legitimate interests: Processing carried out to pursue the legitimate interests of Koplo77 or third parties, such as fraud prevention, platform security, network integrity, and responsible gambling monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes such as direct marketing communications, optional analytics cookies, and any other purpose where we have obtained your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Koplo77 does not sell, rent, or trade your personal data to any third party for their independent commercial use. We may share your data only in the circumstances described below:

• Payment service providers: Malaysian e-wallet operators, bank payment gateway providers, and card networks receive the minimum data necessary to process your transactions securely.
• Identity and KYC verification partners: Third-party verification services receive submitted identity documents and associated metadata solely for the purpose of confirming your eligibility to hold a Koplo77 account.
• Fraud prevention and AML providers: Risk and compliance platforms may receive behavioural and transactional data to generate risk scores and identify suspicious activity patterns.
• Gaming software and content providers: Game studios and live dealer platform operators may receive a session token and minimal account identifier to deliver game content and record gameplay outcomes.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulators, courts, or other governmental authorities where required by applicable law, court order, or enforceable governmental request.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of Koplo77's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors engaged by Koplo77 are contractually bound to process your data only on our documented instructions, to maintain appropriate security controls, and to refrain from any independent use of the data they process on our behalf.

The Koplo77 Platform uses cookies and similar tracking technologies to operate and improve our services. The following categories of cookies are in use:

• Essential cookies: Required for the Platform to function. They enable session authentication, security token management, and basic navigation. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and account customisations to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how Users interact with the Platform — pages visited, session duration, error events — to help us identify performance issues and improve the interface.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and credential stuffing attacks.

You may control non-essential cookies through your browser settings. However, disabling certain cookies may impair your ability to use portions of the Platform. Koplo77 does not currently use third-party advertising cookies or retargeting pixels.

Koplo77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for the minimum retention periods required by law. Our general retention framework is as follows:

• Active account data: Retained for the full duration of the account relationship.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
• Customer support and communication records: Retained for three (3) years following resolution of the matter to which they relate.
• Gameplay and wagering records: Retained for five (5) years for dispute resolution and regulatory compliance purposes.
• Marketing consent records: Retained until consent is withdrawn and for a period thereafter sufficient to demonstrate the lawful basis for prior marketing activity.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to an ongoing legal hold, litigation, or regulatory investigation will be retained until the relevant matter is fully resolved.

Koplo77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or destruction:

• Encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data at rest, including password hashes and financial identifiers, is encrypted using AES-256.
• Access controls: Access to personal data within Koplo77's systems is restricted to authorised personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Infrastructure security: Our server infrastructure operates within secure, access-controlled data centres with physical security protocols, network segmentation, and regular penetration testing.
• Incident response: Koplo77 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals promptly in accordance with applicable law.

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own account credentials. Koplo77 will never request your password via email, live chat, or any other channel.

Subject to applicable law and any overriding legal obligations Koplo77 may have, you hold the following rights with respect to your personal data:

To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Data Subject Request — [Your Account Username]". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or there are multiple requests, this period may be extended by up to a further 60 days, subject to notification.

Koplo77 is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and Koplo77 reserves the right to request documentary proof of age at any time.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, forfeit any outstanding balance in accordance with our Terms and Conditions, and permanently delete all personal data relating to that individual from our systems without further notice.

If you believe a minor has registered on the Koplo77 Platform, please contact us immediately at [email protected].

Koplo77 operates under an international gaming licence and our infrastructure, payment processors, and third-party service providers may be located in jurisdictions outside Malaysia. As a result, your personal data may be transferred to and processed in countries that may not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, Koplo77 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply equivalent data protection standards.
• Transfers only to jurisdictions recognised as providing adequate data protection by relevant regulatory authorities.
• Technical and organisational security measures commensurate with the sensitivity of the data being transferred.

By using the Koplo77 Platform, you acknowledge and consent to the cross-border transfer of your personal data under the safeguards described in this section.

Koplo77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. Material changes will be communicated to registered Users via email notification to the address on file and/or by a prominent notice posted on the Platform.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which Koplo77 processes your personal data, please contact us through the following channels:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Subject Request". Target response: within 24 hours for general enquiries; within 5 business days for formal data subject requests.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the Platform. Target response time: under 1 hour. For formal data requests, please follow up in writing via email.

Koplo77 is committed to resolving all privacy-related enquiries fairly and transparently. Where you are unsatisfied with our response, you may escalate the matter to the data protection supervisory authority in the jurisdiction under which Koplo77's licence is issued.