Table of Contents
- 01 Introduction
- 02 Definitions
- 03 Data We Collect
- 04 How We Collect Data
- 05 Data Processing & Purpose
- 06 Legal Basis for Processing
- 07 Data Sharing & Disclosure
- 08 Cookies & Tracking
- 09 Data Retention
- 10 Data Security
- 11 International Transfers
- 12 Your Rights
- 13 Children & Minors
- 14 Third-Party Links
- 15 Policy Amendments
- 16 Contact Us
DW77 ("we", "us", "our", or "the Platform") operates the online casino and sports betting service available at dw77.cam and any associated mobile interfaces. DW77 is operated under an international gaming licence and provides services to eligible players, including those located in Malaysia.
We take the privacy of our users seriously. This Privacy Policy describes the categories of personal data we collect from players and visitors, the purposes for which that data is processed, the parties with whom it may be shared, the safeguards we apply to protect it, and the rights available to you as a data subject. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the DW77 Platform.
By accessing the DW77 Platform, registering an account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data in accordance with the practices described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.
The following terms, as used in this Privacy Policy, shall have the meanings set out below:
- "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, residential address, financial account details, and device identifiers.
- "Processing" — any operation performed on personal data, whether automated or manual, including collection, recording, organisation, storage, adaptation, retrieval, disclosure, or deletion.
- "Data Controller" — DW77, the entity that determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" — any third party engaged by DW77 to process personal data on DW77's behalf and under DW77's documented instructions.
- "User" / "Player" — any natural person who accesses, registers on, or uses the DW77 Platform.
- "Cookies" — small text files placed on a user's device by a website to store session information, preferences, and analytics data.
- "KYC" — Know Your Customer; the regulatory identity and age verification process applied to all registered users prior to first withdrawal.
DW77 collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the primary data categories and examples of specific data points within each.
| Category | Examples of Data Collected | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (e.g., Malaysian MyKad), selfie/photo for facial verification | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru) | Account registration; support interactions |
| Financial Data | Bank account numbers, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit and withdrawal amounts in MYR, cryptocurrency wallet addresses (BTC/USDT) | Deposit and withdrawal processing; KYC |
| Gaming & Betting Data | Bet history, game session records, wager amounts, winning and losing records, bonus usage, Liga Super Malaysia and EPL betting activity | Platform usage — automatically recorded |
| Device & Technical Data | IP address, browser type and version, device type, operating system, screen resolution, referring URL | Automatic collection via cookies and server logs |
| Usage & Behavioural Data | Pages visited, features used, session duration, click patterns, search queries within the Platform | Analytics tools; session tracking |
| Communications Data | Records of live chat conversations, email correspondence with support, complaint records | Customer support interactions |
| Compliance & Security Data | Login timestamps, failed login attempts, device fingerprints, fraud detection flags, self-exclusion records | Automatic security systems; responsible gambling tools |
We do not intentionally collect sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs unless strictly required for compliance with responsible gambling obligations (e.g., vulnerability assessment records where a user voluntarily discloses such information when requesting self-exclusion support).
DW77 collects personal data through the following primary channels:
4.1 Direct Submission by You
When you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request, or participate in a promotion, you directly provide personal data to DW77. This is the primary source of identity, contact, and financial data we hold about you.
4.2 Automated Collection
When you access or use the DW77 Platform, our systems automatically record technical and behavioural data, including your IP address, device identifiers, session logs, and interaction patterns. This data is collected via server logs, cookies, and analytics tools, and is used primarily for platform security, fraud detection, and performance optimisation.
4.3 Third-Party Payment Providers
When you transact via a third-party payment channel — such as DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, or GrabPay — our payment processing partners may share transaction confirmation data with DW77 to facilitate the completion of your deposit or withdrawal. DW77 does not receive your full payment credentials (such as full bank account numbers or card details) from these providers beyond what is necessary to verify and reconcile transactions.
4.4 Identity Verification Services
DW77 may engage third-party KYC and identity verification service providers to assist in confirming the identity, age, and residence of registered users. These providers process the identity documents you submit through secure, encrypted channels.
DW77 processes personal data only for specific, documented purposes that are necessary for the operation of the Platform and compliance with applicable legal and regulatory obligations. The primary purposes for which we process your personal data are as follows:
- Account Creation and Management: To create, maintain, and administer your DW77 user account, including authentication, account settings, and communication preferences.
- Identity Verification (KYC): To verify your identity, age (21+), and payment method ownership as required by our licensing obligations before processing withdrawals or where required for compliance.
- Transaction Processing: To facilitate, record, and reconcile deposits and withdrawals in MYR and other supported currencies, including communications with payment service providers such as Maybank, CIMB, FPX, and DuitNow.
- Service Delivery: To provide access to the games, betting markets, live casino products, and other Platform services you use.
- Customer Support: To respond to your enquiries, resolve disputes, and manage complaints raised through live chat, email, or other support channels.
- Fraud Prevention and Security: To detect, investigate, and prevent fraud, money laundering, account takeover, duplicate account abuse, and other prohibited conduct.
- Responsible Gambling: To operate responsible gambling tools including deposit limits, self-exclusion records, and session monitoring, and to identify and assist players who may be at risk of gambling-related harm.
- Legal and Regulatory Compliance: To comply with applicable laws, licensing conditions, anti-money laundering obligations, and any lawful orders from competent regulatory or law enforcement authorities.
- Platform Improvement: To analyse usage patterns and technical performance data to improve the DW77 user experience, address bugs, and develop new features.
- Marketing Communications: Where you have provided separate consent, to send you promotional communications about DW77 offers, bonuses, and new features. You may opt out of marketing communications at any time.
DW77 processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which DW77 relies are:
- Contractual Necessity: Processing required to perform the contract between DW77 and the User — including account management, transaction processing, and service delivery.
- Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering checks, and lawful authority requests.
- Legitimate Interests: Processing necessary for DW77's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service analytics — provided such interests are not overridden by the User's fundamental rights.
- Consent: Where consent is the applicable basis (primarily for optional marketing communications), processing will only occur where the User has provided a clear, affirmative, and freely given consent. Consent may be withdrawn at any time.
DW77 does not disclose personal data to third parties except in the circumstances described below. All third-party recipients of personal data are required to process it in accordance with applicable data protection standards and under contractual data processing agreements with DW77 where relevant.
7.1 Service Providers and Data Processors
DW77 engages certain third-party service providers to assist in the operation of the Platform. These include payment processors (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processors), identity verification providers, IT infrastructure providers, and customer support platform operators. These parties act as data processors under DW77's instructions and are not permitted to use your personal data for their own independent purposes.
7.2 Regulatory and Law Enforcement Authorities
DW77 will disclose personal data to competent regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by law, court order, or applicable licensing obligations. Such disclosures will be limited to what is strictly required by the applicable legal instrument.
7.3 Anti-Money Laundering and Fraud Prevention Networks
Where required for compliance with anti-money laundering obligations, DW77 may share relevant transaction and identity data with financial crime prevention agencies, screening databases, or inter-platform fraud prevention networks. Such sharing is conducted solely for the purposes of preventing financial crime and protecting the integrity of the Platform and its users.
7.4 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of DW77's business, personal data held by DW77 may be transferred to the acquiring or successor entity as part of the transaction. Users will be notified of any such transfer via a Privacy Policy update and, where required, will be provided with the option to object to the transfer before it occurs.
The DW77 Platform uses cookies and similar tracking technologies to support the operation, performance, security, and analytics of the service. The primary categories of cookies deployed on the Platform are as follows:
- Strictly Necessary Cookies: Required for the Platform to function — these include session authentication tokens, security cookies, and cookies that maintain your logged-in state. These cannot be disabled without disrupting Platform functionality.
- Analytics Cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform, including pages visited, session duration, and click paths. This data is used to improve the Platform experience and identify technical issues.
- Preference Cookies: Used to remember user settings and preferences, such as language selection and display settings, to enhance the user experience on return visits.
- Security & Fraud Prevention Cookies: Used in conjunction with DW77's fraud detection and risk management systems to identify unusual or potentially fraudulent access patterns.
DW77 does not currently deploy third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality and security of your DW77 account session.
DW77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, taking into account applicable legal, regulatory, and operational retention obligations. The general principles governing our retention practices are as follows:
- Active Account Data: Personal data associated with active accounts is retained for the duration of the account relationship.
- Post-Closure Retention: Following the closure of an account, DW77 retains identity, transaction, and compliance data for a minimum period of five (5) years in accordance with standard anti-money laundering and licensing retention obligations. This period may be extended where required by applicable law or ongoing legal proceedings.
- Marketing Data: Marketing consent records and associated contact data are retained until consent is withdrawn, following which they are promptly deleted or anonymised.
- Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.
Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.
DW77 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes, but is not limited to:
- 256-bit SSL/TLS encryption applied to all data transmitted between user devices and DW77 servers.
- Encryption of sensitive data fields at rest within DW77's database infrastructure.
- Access controls and role-based permissions limiting internal access to personal data to authorised personnel on a need-to-know basis.
- Continuous monitoring of systems for intrusion attempts, anomalous access patterns, and data exfiltration risks.
- Regular security audits and vulnerability assessments conducted by qualified information security personnel.
- Incident response procedures in place to identify, contain, and notify affected parties in the event of a confirmed personal data breach, in accordance with applicable regulatory requirements.
Given DW77's international operating structure, personal data collected from Malaysian and other users may be transferred to and processed in countries other than Malaysia. Such transfers may include the jurisdictions in which DW77's licensing authority, server infrastructure providers, KYC verification partners, or payment processors are located.
Where personal data is transferred internationally, DW77 applies appropriate safeguards to ensure that the transferred data receives a standard of protection at least equivalent to that described in this Privacy Policy. Safeguards applied may include contractual data processing agreements, standard contractual clauses, and transfer to recipients in jurisdictions with recognised adequate data protection frameworks.
Subject to applicable law and DW77's legitimate business and compliance obligations, you hold the following rights in relation to your personal data processed by DW77:
Right of Access
Request a copy of the personal data DW77 holds about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account or DW77's records.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations.
Right to Restriction
Request that DW77 restrict processing of your data in certain circumstances, such as where accuracy is contested.
Right to Portability
Receive a structured, machine-readable copy of data you provided directly to DW77, where technically feasible.
Right to Object
Object to processing based on legitimate interests, including profiling for marketing or behavioural analytics purposes.
Withdraw Consent
Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain
Lodge a complaint with a competent supervisory authority where you believe DW77 has processed your data unlawfully.
To exercise any of the above rights, please contact DW77's customer support team at [email protected]. DW77 will respond to data rights requests within a reasonable timeframe and in accordance with applicable legal obligations. Please note that certain rights may be subject to limitations where retention of data is required for legal, compliance, or fraud prevention purposes.
DW77 strictly prohibits the registration and use of the Platform by any person under the age of 21 years. The DW77 Platform is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age.
Where DW77 becomes aware that an account has been registered by a person under 21, the account will be immediately suspended, all associated data will be preserved for compliance review, and any funds held will be handled in accordance with our applicable policies and legal obligations. Age verification is conducted during the KYC process and may be requested at any point during the account lifecycle.
The DW77 Platform may contain links to or integrations with third-party services, including payment providers and game content delivery networks. This Privacy Policy applies solely to personal data processed by DW77 in connection with the DW77 Platform and services. DW77 is not responsible for the privacy practices of third-party operators, and Users should review the applicable privacy policies of any third-party services they interact with.
DW77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or Platform operations. Where material changes are made, we will notify registered users via email or on-Platform notification prior to the revised Policy taking effect.
The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the DW77 Platform following notification of any material update constitutes acceptance of the revised Privacy Policy. Users who do not agree with a revised Policy should cease using the Platform and contact support to close their account.
If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how DW77 is handling your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and will respond to all privacy-related enquiries as promptly as possible.
Email: [email protected]
Live chat support is also available directly within the DW77 Platform during your session. For queries specifically related to responsible gambling, self-exclusion, or deposit limits, please visit our Responsible Gambling page for dedicated guidance and tools.