Privacy Policy sand77 — Personal Data Protection for Malaysia Members

Introduction

Welcome to the Privacy Policy page sand77. We understand that your trust is our most valuable asset, and one of the best ways to maintain that trust is to be transparent about how we handle your personal information.

This Privacy Policy applies to all users and visitors of the Sand77 website at sand77.vin, including those who register as members, use our mobile app, or simply browse the platform without registering. By continuing to use the Sand77 platform, you confirm that you have read and understood this policy.

If you have any questions about how we handle your data, the sand77 customer support team is always available via live chat, operating 24 hours a day, 7 days a week.

Data Collected

Sand77 collects various types of information to enable us to provide a safe, seamless, and high-quality service to all members. The data we collect falls into two main categories:

Data you provide directly:

• Full name as it appears on your official identity document.
• Date of birth for age verification purposes.
• Email address and mobile phone number for account communications.
• Residential address for verification and compliance purposes.
• Bank account or digital wallet details for processing deposits and withdrawals.
• Copies of identity documents (KYC) such as a national ID, passport, or driver's licence.

Data collected automatically:

• IP address and geographical location information.
• Device type, operating system, and web browser used.
• Game activity logs including wagering, wins, and session duration.
• Cookie data and similar tracking technologies.
• Financial transaction details including deposit and withdrawal history.

Data Usage

All personal data collected by sand77 is used responsibly and only for legitimate purposes. Here is how we use your information:

Sand77 will not use your data for any purpose not stated above without obtaining your consent first. If you do not wish to receive marketing communications, you may withdraw your consent at any time by contacting our customer support team.

Data Sharing

sand77 does not sell your personal data. However, in certain situations, we may need to share your information with selected and trusted third parties to enable us to deliver our services properly. Those third parties are only permitted to use your data for purposes designated by sand77.

Third parties that may receive your data:

• Payment service providers — to securely process deposits and withdrawals via methods such as DuitNow, FPX, Touch 'n Go, Boost, GrabPay, and local bank transfers.
• Game software providers — to manage gaming sessions and ensure the integrity of fair game outcomes.
• Identity verification service providers — to complete the KYC process and ensure only verified users can access the platform.
• Regulatory authorities and law enforcement agencies — when required by law or a valid court order.
• Technical infrastructure and cybersecurity service providers — to maintain stable and secure platform operations.

Data Security

Protecting your personal data from unauthorized access, theft, or leakage is our highest priority sand77. We have invested significantly in a comprehensive cybersecurity infrastructure to ensure your information is always protected.

Security layers we use:

• 256-bit SSL encryption on all data communications between your device and sand77 servers, ensuring no third party can intercept the information transmitted.
• Two-factor authentication (2FA) available for all member accounts, adding an extra layer of protection against unauthorized access.
• Intrusion Detection System (IDS) that continuously monitors platform traffic to detect and block suspicious activity in real time.
• Regular security audits by accredited independent third parties to identify and address any vulnerabilities that may exist.
• Encrypted data storage — all sensitive data is stored in encrypted databases with strict access controls, accessible only by authorized personnel.
• 24/7 Monitoring by a dedicated security team ready to respond to any security incident at any time.

While we have taken all reasonable steps to protect your data, no system in the world can be guaranteed one hundred percent secure. Should any security breach occur that affects your data, sand77 will notify you in a timely manner as required by applicable law.

You also play an important role in protecting your account. Make sure you use a strong and unique password, do not share your login credentials with anyone, and notify us immediately if you suspect any unauthorized activity in your account.

Cookies & Tracking Technologies

sand77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website.

Types of cookies we use:

• Essential cookies — Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting your use of the platform.
• Performance cookies — Collects information on how users interact with the platform, helping us identify areas that need improvement.
• Functional cookies — Stores your preferences such as language, currency, and display settings to provide a more personalized experience.
• Analytics cookies — Helps us understand overall platform usage patterns for service improvement purposes.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and user experience of the Sand77 platform.

User Rights Regarding Personal Data

As a member sand77, you have full rights regarding your personal data. We respect these rights and are ready to help you exercise them easily and without unnecessary obstacles.

Your rights include:

• Right to access — You have the right to obtain a copy of all personal data we hold about you at any time.
• Right to rectification — If any information we hold is inaccurate or outdated, you have the right to request that we update it.
• Right to erasure — Under certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained to fulfil legal obligations.
• Right to object — You may object to the processing of your data for direct marketing purposes at any time.
• Right to restrict processing — In certain situations, you may request that we restrict the way we process your data.
• Right to data portability — You have the right to receive your personal data in a machine-readable format for transfer to another platform.
• Right to withdraw consent — For data processing based on your consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact the sand77 customer support team via live chat. We will process your request within a reasonable timeframe, not exceeding 30 working days.

Data Retention Period

Sand77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, your data will be securely deleted or anonymised.

General data retention periods at sand77:

• Active account data — Retained for the duration your account is active and up to 5 years after account closure.
• Financial transaction records — Retained for a minimum of 7 years to comply with financial and taxation legal requirements.
• KYC Documents — Retained for the period required by anti-money laundering compliance obligations.
• Customer support communication logs — Retained for 3 years for reference and complaint resolution purposes.
• Cookie and analytics data — Retention period varies by cookie type, ranging from the current session to a maximum of 2 years.

Children's Privacy

sand77 is an online gaming platform intended solely for individuals aged 18 and above. We do not intentionally collect or process personal data from any individual under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who believe their child has registered an account on sand77 are urged to contact us immediately through our customer support.

Changes to the Privacy Policy

Sand77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. Any material changes to this policy will be communicated to you via:

• Notices prominently displayed on the sand77 platform's home page.
• An email will be sent to your registered email address at least 7 days before the changes take effect.

Your continued use of the sand77 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of the latest version.

The current version of this Privacy Policy is effective from January 1, 2026. Previous versions can be requested from our customer support team for reference purposes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact our team.

You can reach the Sand77 team via live chat on our platform, which operates 24 hours a day, 7 days a week. Our trained support team is ready to assist you with any privacy and data security inquiries in the shortest time possible.