Privacy Policy

1. Introduction

This Privacy Policy ("Policy") issued by Mitra77 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at mitra77.cam. This Policy governs the collection, processing, storage, and use of personal data relating to all individuals who access or use our platform, including registered players, prospective players, and visitors to our website.

Mitra77 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including those reflected in applicable privacy and data protection frameworks. We process personal data only for clearly defined, legitimate purposes and retain it only for as long as is reasonably necessary.

By registering an account or using any feature of the Mitra77 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue your use of the platform and may request the closure of your account.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings defined below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, contact details, device identifiers, and financial account information.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means Mitra77, the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third-party service provider engaged by Mitra77 to process Personal Data on its behalf, in accordance with this Policy and applicable contractual safeguards.
• "Player / "User" means any natural person who has registered an account or is accessing the Mitra77 platform.
• "Platform" means the Mitra77 website and all associated services and products accessible via mitra77.cam.
• "KYC Data" means identity verification documents and information collected in the course of the Know Your Customer compliance process, including government-issued identification, proof of address, and biometric photographs.
• "Cookie" means a small data file stored on a user's device by the Platform for the purposes of session management, preference storage, and analytics.

3. Data We Collect

Mitra77 collects the following categories of Personal Data from Players and platform visitors, depending on the nature of the interaction:

3.1 Account & Identity Data

• Full legal name, date of birth, and gender
• Email address, mobile phone number
• Residential address (including city, state, and postcode within Malaysia)
• Username and encrypted password hash

3.2 Know Your Customer (KYC) Data

• Government-issued photo identification (Malaysian MyKad, Driver's Licence, or Passport)
• Proof of residential address (utility bill, bank statement, or government document dated within three months)
• Selfie photograph submitted for identity confirmation
• Payment method verification documentation where required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method details (Maybank2u account reference, CIMB Clicks account, Touch'n Go eWallet ID, Boost, GrabPay, DuitNow, FPX, or cryptocurrency wallet address)
• Account balance history and betting transaction records

3.4 Technical & Device Data

• IP address, browser type and version, operating system
• Device identifiers, screen resolution, time zone
• Platform access logs (login timestamps, session duration, pages visited)

3.5 Behavioural & Gaming Data

• Betting activity, game selections, wagering amounts, and outcomes
• Bonus usage and promotional engagement history
• Responsible gambling tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)

3.6 Communications Data

• Customer support interaction transcripts (live chat logs, email correspondence)
• Feedback, complaints, and dispute records

4. How We Collect Your Data

Mitra77 collects Personal Data through the following channels and methods:

• Direct submission: Information you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, customer support interactions, or form submissions on the Platform.
• Automated collection: Technical and behavioural data gathered automatically as you use the Platform, including through cookies, server logs, and similar tracking technologies.
• Third-party payment processors: Transaction confirmation data received from Malaysian payment processors including FPX, DuitNow, and integrated e-wallet providers (Touch 'n Go, Boost, GrabPay) when you initiate a deposit or withdrawal.
• Identity verification services: Where Mitra77 engages a third-party KYC or anti-money laundering screening service to validate the accuracy of identity documents submitted by Players.
• Fraud prevention and security systems: Data received from device fingerprinting, fraud detection systems, and risk assessment tools used to protect the integrity of the Platform.

5. Legal Basis for Processing

Mitra77 processes your Personal Data on the following legal grounds:

• Contractual necessity: Processing required to register your account, execute transactions, process deposits and withdrawals, and fulfil our obligations under the Terms and Conditions you have accepted.
• Legal and regulatory obligations: Processing required to comply with international online gaming licensing requirements, anti-money laundering obligations, KYC compliance, and fraud prevention duties.
• Legitimate interests: Processing conducted to protect the security and integrity of the Platform, improve user experience, prevent fraud, and operate our business responsibly — where these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent for specific processing activities — such as sending you promotional communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

Mitra77 uses your Personal Data solely for the purposes described below. We do not use your data for purposes incompatible with those for which it was originally collected without your prior knowledge.

• Creating, managing, and maintaining your Mitra77 Account.
• Processing deposits and withdrawals via your selected Malaysian payment method (Maybank2u, CIMB Clicks, Public Bank Online, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency).
• Verifying your identity and age in compliance with KYC and responsible gambling requirements, including confirming that you are aged 21 or above.
• Detecting, preventing, and investigating fraudulent activity, money laundering, identity theft, and other criminal or prohibited conduct.
• Providing customer support in English, Bahasa Melayu, and Chinese, and maintaining records of support interactions for quality and dispute resolution purposes.
• Administering bonus and promotional campaigns, subject to the applicable promotion-specific terms.
• Sending transactional notifications relating to your Account, including deposit confirmations, withdrawal approvals, and security alerts. These communications are not optional as they are integral to Account management.
• Sending promotional and marketing communications where you have provided consent or where permitted under applicable rules. You may opt out at any time.
• Conducting platform analytics and improving the user experience based on aggregated, anonymised behavioural data.
• Complying with requests from competent legal or regulatory authorities where required by applicable law.

7. Data Sharing & Disclosure

Mitra77 does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We may share your data only in the following circumstances and only to the extent necessary:

• Service providers and Data Processors: We engage trusted third-party service providers to support Platform operations — including payment processing partners, KYC and identity verification providers, cloud hosting services, fraud detection systems, and customer support software. All such parties are contractually bound to process Personal Data only on Mitra77's instructions and in accordance with this Policy.
• Regulatory and legal compliance: We may disclose Personal Data to relevant regulatory bodies, law enforcement agencies, or competent courts where we are legally obligated to do so, or where disclosure is necessary to protect the rights or safety of Mitra77, our players, or the public.
• Anti-money laundering screening: Transaction and identity data may be processed through internationally recognised AML screening databases as required under our licensing obligations.
• Business transfers: In the event of a merger, acquisition, or asset transfer involving Mitra77, your Personal Data may be transferred to the successor entity, subject to the same protections as outlined in this Policy. We will notify affected Players of any such transfer.
• With your consent: We may share your data with third parties in any other circumstance where you have provided explicit prior consent.

8. International Data Transfers

Mitra77 operates internationally, and the processing of your Personal Data may involve its transfer to, and storage in, countries outside of Malaysia. These countries may have data protection laws that differ from those applicable in Malaysia.

Where such transfers occur, Mitra77 takes steps to ensure that appropriate safeguards are in place to protect your Personal Data, including the use of standard contractual provisions, data processing agreements with service providers, and the selection of processors operating in jurisdictions with adequate data protection frameworks.

By using the Mitra77 platform, you acknowledge and consent to the international transfer of your Personal Data in accordance with the safeguards described in this section.

9. Data Retention

Mitra77 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.

As a general guide, our retention approach is as follows:

• Active Account data: Retained for the duration of the Account and for a minimum of five (5) years following permanent Account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction.
• Customer support communications: Retained for three (3) years from the date of the final communication in each support interaction.
• Cookie and analytics data: Session cookies are deleted upon browser close. Persistent cookies are retained for a maximum of twelve (12) months unless removed earlier by the user.

Upon expiry of the relevant retention period, Personal Data will be securely deleted, anonymised, or pseudonymised in a manner that prevents re-identification.

10. Cookies & Tracking Technologies

The Mitra77 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain session security, and gather analytics data to improve the Platform's performance.

10.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly — including session management, secure login state maintenance, and fraud prevention. These cannot be disabled without impairing core Platform functionality.
• Preference cookies: Store your settings and preferences such as language selection (English, Bahasa Melayu, or Chinese), display options, and responsible gambling tool configurations.
• Analytics cookies: Collect aggregated and anonymised data about how users interact with the Platform, allowing us to identify and address usability issues and improve the overall experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and session hijacking attempts.

10.2 Managing Your Cookie Preferences

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality, including the ability to maintain a logged-in session or apply account preferences. Most modern browsers provide options to block or delete cookies — please refer to your browser's help documentation for specific instructions.

11. Your Data Rights

As a user of the Mitra77 platform, you hold the following rights with respect to your Personal Data. Requests may be submitted to our Data Protection contact address provided in Section 16of this Policy.

We will respond to all valid data rights requests within 30 calendar days. Where a request is complex or numerous, this period may be extended by up to two further months with prior notification. Identity verification may be required before a request is fulfilled to protect against unauthorised access.

12. Security Measures

Mitra77 implements a comprehensive set of technical, organisational, and procedural security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS encryption — all data transmitted between your device and the Mitra77 Platform is encrypted using the same standard applied by Maybank2u and major Malaysian financial institutions.
• Encrypted data storage — sensitive Personal Data, including KYC documents and payment details, is stored in encrypted form on access-controlled servers.
• Access control and privilege management — internal access to Personal Data is strictly limited to authorised personnel with a defined operational need. Access is logged and periodically reviewed.
• Two-factor authentication (2FA) — available for all Player accounts to provide an additional layer of login security.
• Fraud detection and monitoring — real-time transaction monitoring and device fingerprinting systems identify and flag anomalous behaviour for investigation.
• Regular security audits — the Platform undergoes periodic security reviews and penetration testing to identify and remediate vulnerabilities before they can be exploited.

13. Third-Party Links

The Mitra77 Platform does not contain links to third-party websites or external services. In the event that any reference to an external resource appears on the Platform for informational purposes, Mitra77 is not responsible for the privacy practices or content of such third parties.

We encourage all Players to exercise caution and to review the privacy policies of any external service or platform they independently choose to access, particularly in relation to the use of personal data and cookies.

14. Children & Minors

The Mitra77 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Account registration requires confirmation of minimum age, and mandatory KYC verification is conducted to validate all age representations.

If Mitra77 becomes aware that Personal Data has been collected from a person under the age of 21, we will immediately close the relevant Account, delete the associated Personal Data, and — where applicable — return any deposited funds following verification.

If you have reason to believe that a minor has registered an account or provided Personal Data to the Platform, please notify us immediately at the contact address provided in Section 16.

15. Amendments to This Policy

Mitra77 reserves the right to update this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our data processing activities, or Platform features. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — such as a new category of data being collected, a new purpose for processing, or a change in how we share data — we will make reasonable efforts to notify registered Players via in-platform notification or email prior to the changes taking effect.

Your continued use of the Mitra77 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any amended provisions, you should discontinue use of the Platform and may contact us to request closure of your Account.

16. Contact Us

For any queries, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data, please contact the Mitra77 Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for prioritised handling
• Live Chat: Available directly on the Platform — our trilingual support team responds in English, Bahasa Melayu, and Chinese
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days