Goat77 Privacy Policy – Malaysia Personal Data Protection

Goat77 takes the privacy and security of member personal data with the utmost seriousness and responsibility. Since the platform was founded in 2019, protecting the personal information of Malaysian users has been a core part of our operations — not merely a legal obligation, but a value we uphold in every platform development decision.

This Privacy Policy has been drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection standards. It clearly sets out what data we collect, why we need it, how it is used, and your rights as a goat77 member regarding that data.

This Privacy Policy applies to all goat77 platform users — including registered members, unregistered website visitors, and any individual who interacts with goat77's systems through any channel, including the website, mobile app, and email communications. By using the goat77 platform, you confirm that you have read and understood this Privacy Policy.

If there are any material changes to how goat77 handles your personal data, we will notify you via an in-platform notice or an email to your registered address. It is your responsibility to ensure that the contact information on your goat77 account is accurate and up to date.

Goat77 collects personal data necessary to provide platform services to you. We do not collect data beyond what is required for legitimate operational purposes. The following are the categories of data we collect:

Goat77 never collects full MyKad numbers or biometric information unless specifically required for the KYC identity verification process for accounts that need a higher verification tier. In such cases, submitted documents are stored in a protected environment and deleted once the verification process is complete.

Personal data collected by goat77 is used solely for legitimate purposes necessary to operate the platform. We do not use your data for any purpose unrelated to goat77's services. The purposes for which data is used are as follows:

• Account Management — to create, verify, and manage your goat77 account, including the required KYC process.
• Financial Transaction Processing — to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as your winnings withdrawals.
• Gaming Services Provision — to allow you to access and play all goat77 games including slots, live casino, e-sports, cricket, jackpots, and lottery.
• Security & Fraud Prevention — to detect and prevent fraudulent activity, money laundering, and multiple account usage that violates goat77's terms.
• Customer Support — to enable the goat77 support team to assist you with any enquiries, technical issues, or account-related complaints.
• Responsible Gaming — to monitor gameplay patterns and identify members who may need support related to addiction or problem gambling.
• Account-Related Communications — to send important notices related to your account, such as deposit confirmations, security alerts, and service terms updates.
• Legal Compliance — to fulfil legal obligations under Malaysia's PDPA and other applicable legislation.

Goat77 employs comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures implemented by goat77 include:

• 256-bit SSL Encryption for all data in transit between your device and goat77's servers — ensuring that information transmitted cannot be read by unauthorised parties even if intercepted.
• Data encryption at rest for all sensitive data stored in the goat77 database — including financial information and identity verification documents.
• Tiered access control where only goat77 staff with a legitimate business need are permitted to access members' personal data, and all such access is logged and continuously monitored.
• Two-factor authentication (2FA) for all internal access to goat77 systems that store members' personal data.
• Regular security audits by independent parties to identify and address any security vulnerabilities before they can be exploited.
• 24/7 threat monitoring system that automatically detects and responds to suspicious activity related to goat77 member data.
• Incident response plan in detail, to ensure that any potential data breach is handled swiftly and that affected members are notified in accordance with Malaysia's PDPA legal requirements.

Goat77 personal data is stored on servers housed in certified, physically secured data centre facilities. All goat77 staff with access to member personal data undergo strict background checks and are bound by legally enforceable confidentiality agreements.

Goat77 does not sell, rent, or share member personal data with third parties for marketing or commercial purposes without your written consent. However, there are limited circumstances where goat77 needs to share data with certain parties to enable platform services to function:

• Payment Providers — goat77 shares only the minimum necessary information with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX online banking providers (Maybank2u, CIMB Clicks) solely for the purpose of processing your deposit and withdrawal transactions. These providers are bound by strict confidentiality terms and their own privacy policies.
• Game Providers — slots and casino providers such as Pragmatic Play, PG Soft, Spadegaming, and others receive only the minimum technical data necessary for games to function within the goat77 platform. No personal identification data is shared beyond what is technically required.
• Malaysian Authorities — goat77 will disclose member personal data to Malaysian authorities (such as the police, financial regulatory bodies, or courts) when required by applicable Malaysian law, including under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• Third-Party Technical Services — goat77 may engage trusted technical service providers, such as reputable cloud computing services, to store and process data. All such providers are bound by data processing agreements that require them to protect your data to a standard equal to or exceeding goat77's own security standards.

Goat77 uses cookies and similar web tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyse usage patterns for continuous improvement. The types of cookies used by goat77 are:

• Essential Cookies — required for the core functionality of the goat77 platform, including login authentication and session management. Without these cookies, the goat77 platform will not function properly. These cookies cannot be disabled.
• Preference Cookies — to save your settings and preferences within the goat77 platform, such as display language and favourite game selections, so you do not need to reconfigure them every time you log in.
• Analytics Cookies — helps goat77 understand how users interact with the platform — which pages are visited most frequently, which buttons are clicked most often, and where users encounter difficulties. This information is used to improve the design and functionality of the goat77 platform.
• Security Cookies — to help detect suspicious account activity and protect your goat77 account from unauthorised access.

You can manage your cookie settings through your web browser. Most browsers allow you to delete existing cookies, block cookies from specific websites, or receive a warning before new cookies are saved. Please note that disabling essential cookies may affect the functionality of the goat77 platform and prevent you from logging in or playing certain games.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject hold certain rights regarding the personal data goat77 holds about you. goat77 respects and supports the exercise of these rights:

To submit any request relating to your data rights at goat77, please contact our team by email at support@goat77.click, stating the type of request, your goat77 account number, and sufficient identifying information for us to verify your identity before processing the request.

Goat77 is an online entertainment platform designed exclusively for adults aged 21 years and above. goat77 is firmly opposed to the use of the platform by individuals below the stipulated minimum age and takes active measures to prevent this from occurring.

Goat77 does not knowingly collect or process personal data from individuals under the age of 21. The goat77 registration process requires age verification via an active Malaysian phone number, and we reserve the right to request identity document verification at any time to confirm a member's age eligibility.

If goat77 discovers that personal data belonging to an individual under the age of 21 has been collected inadvertently, we will take immediate action to delete that data and terminate the account in question without any refund. If you suspect that someone underage you know is using the goat77 platform, please contact us immediately at support@goat77.click so that prompt action can be taken.

In the course of operating the goat77 platform, your personal data may be transferred to and stored on servers located outside Malaysia — particularly in connection with cloud computing infrastructure and the systems of international game providers such as Pragmatic Play, PG Soft, and Spadegaming, which operate from various locations around the world.

Any cross-border transfer of personal data by goat77 is carried out in compliance with Malaysia's PDPA requirements, including ensuring that the recipient country or territory provides an adequate level of data protection, or that appropriate safeguards (such as a comprehensive data transfer agreement) have been put in place between goat77 and the receiving party.

Goat77 does not transfer Malaysian member personal data to any party in a country that does not provide privacy protection equivalent to or exceeding Malaysia's PDPA standards. If you have any questions about cross-border data transfers relating to your goat77 account, please contact us at support@goat77.click.

Goat77 retains members' personal data only for as long as necessary for the purposes related to its collection, or for as long as required under applicable Malaysian law. The following are the data retention guidelines applied by goat77:

• Active Account Data — personal data for active goat77 accounts is retained for the duration your account remains active, plus any additional period required for audit purposes, legal compliance, and resolution of any outstanding claims.
• Financial & Transaction Records — all financial transaction records at goat77, including deposits, withdrawals, and betting history, are retained for a minimum of 7 years from the transaction date, in line with Malaysian accounting and anti-money laundering legal requirements.
• KYC Verification Documents — identity documents submitted for the goat77 KYC process are retained for the duration of the active account plus 5 years after account termination, in line with Malaysia's AMLATFPUAA requirements.
• Communication Records — communication logs with the goat77 customer support team are retained for 3 years for reference and dispute resolution purposes.
• Cookie Data — session cookies expire automatically when you close your browser. Persistent cookies have varying expiry periods ranging from 30 days to 1 year, depending on the cookie type.

Once the stipulated retention period has elapsed and there are no legal obligations or operational requirements preventing deletion, goat77 will securely delete or anonymise your personal data from our systems using irreversible deletion methods.

Goat77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, technological developments, relevant Malaysian legal changes, or improvements to the goat77 platform.

When material changes are made to this Privacy Policy — particularly changes that affect how we collect or use your personal data — goat77 will notify you via a prominent notice within the goat77 platform or by email to your registered address at least 14 days before the changes take effect, unless the changes must be implemented immediately for security or legal compliance reasons.

The "Updated" date at the top of this page will always reflect the latest version of goat77's Privacy Policy. We encourage you to check this page periodically. Continued use of the goat77 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding goat77's Privacy Policy or how we handle your personal data, please reach us through the following channels:

• Privacy Email — support@goat77.click — dedicated to privacy and data protection enquiries. Please include "Privacy Enquiry" in your email subject line to help us respond more promptly.
• goat77 Live Chat — available 24 hours a day, 7 days a week within the platform, with an initial response time of under 15 minutes. Ideal for straightforward privacy-related enquiries.

Goat77 is committed to handling all privacy-related enquiries and complaints with seriousness, professionalism, and within a reasonable timeframe. We will acknowledge receipt of your enquiry within 3 business days and provide a full response within 21 business days, in line with Malaysia's PDPA requirements.

If you are not satisfied with goat77's response to your privacy enquiry or complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia (JPDP) under the Personal Data Protection Act 2010 for an independent investigation.