myvape77 Privacy Policy

1. Introduction & Scope

1.1 This Privacy Policy applies to all personal data collected and processed by myvape77 in connection with the myvape77 platform accessible at myvape77.win, including the website, all games, the sportsbook, account management functions, customer support interactions, and associated communications.

1.2 By accessing the myvape77 platform, registering an account, or otherwise providing personal data to myvape77, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

1.3 This Policy should be read alongside the myvape77 Terms & Conditions. In the event of any conflict between this Policy and the Terms, the Terms shall prevail to the extent of the inconsistency.

1.4 myvape77 is committed to handling personal data with integrity. We do not operate as a data broker, and our data practices are driven by operational necessity and legal obligation — not by commercial data monetisation.

2. Data Controller

2.1 For the purposes of this Privacy Policy, the data controller is the operator of the myvape77 platform — the entity holding the international gaming licence under which myvape77.win operates.

2.2 For all privacy-related enquiries, data subject access requests, or complaints, the designated point of contact is the myvape77 data protection contact, reachable at: [email protected] (plain text — not a clickable link).

3. Data We Collect

myvape77 collects personal data across several categories, depending on the nature of your interaction with the platform:

3.1 Registration & Identity Data

When you create a myvape77 account, we collect:

• Full legal name;
• Date of birth (for age verification purposes — myvape77 is strictly 21+ only);
• Email address;
• Residential address;
• Username chosen by the Player.

3.2 Identity Verification (KYC) Data

Before withdrawal access is granted, myvape77 requires completion of KYC verification. During this process, we may collect:

• Government-issued identification documents (e.g. Malaysian MyKad, passport);
• Proof of residential address (e.g. utility statement, bank statement);
• Proof of payment method ownership (e.g. screenshot of eWallet account or bank account in your name).

3.3 Financial Transaction Data

We collect records of all deposits and withdrawals processed through your myvape77 account, including transaction amounts, timestamps, payment method identifiers (masked), and transaction outcomes. Full payment instrument details (such as full card numbers) are not stored by myvape77 — these are handled by the relevant payment processor.

3.4 Gaming Activity Data

myvape77 maintains records of your gameplay activity, including game sessions, wager amounts, game outcomes, and balance changes. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

3.5 Technical & Device Data

When you access myvape77, our systems automatically collect certain technical data, including:

• IP address;
• Browser type and version;
• Operating system;
• Device type (desktop, mobile, tablet);
• Session timestamps and duration;
• Pages accessed and navigation patterns within the platform.

3.6 Communications Data

Where you contact myvape77 support — whether by email or through any support channel — we retain records of those communications, including the content of messages, for the purposes of resolving your query and maintaining a service record.

4. How We Use Your Data

myvape77 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your myvape77 account, processing login authentication, and managing your MYR wallet balance.
• Identity and age verification: Confirming that you meet the 21+ age requirement and that the identity information provided is accurate and genuine.
• Payment processing: Facilitating deposits from your chosen Malaysian payment method (Touch n Go eWallet, Boost, Maybank, CIMB, or Public Bank) and processing withdrawal requests to your verified payment method.
• Regulatory compliance: Meeting the ongoing compliance obligations of our international gaming licence, including anti-money laundering (AML) obligations, responsible gaming monitoring, and record-keeping requirements.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent activity, and prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming monitoring: Identifying patterns of play that may indicate problem gambling behaviour, enabling us to apply responsible gaming tools and, where appropriate, flag accounts for responsible gaming review.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the myvape77 platform experience. This analysis does not identify individual players.
• Communications: Responding to support queries, sending transactional notifications (deposit confirmations, withdrawal updates, security alerts), and where you have opted in, sending promotional communications.

5. Legal Basis for Processing

myvape77 processes personal data on the following lawful bases:

• Contractual necessity: Processing required to fulfil the myvape77 account agreement with you, including account creation, payment processing, and game access.
• Legal obligation: Processing required to comply with our international gaming licence conditions, anti-money laundering obligations, and other applicable regulatory requirements.
• Legitimate interests: Processing conducted for security, fraud prevention, and responsible gaming monitoring — purposes where our interests (and those of other players) in maintaining platform integrity are proportionate to the privacy intrusion involved.
• Consent: Processing based on your freely given consent, specifically for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Retention

6.1 myvape77 retains personal data for as long as necessary to fulfil the purposes described in Section 4, subject to the minimum retention periods required by our licensing and regulatory obligations.

6.2 Applicable retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the relevant gaming session.
• Support communications: Retained for a minimum of two (2) years from the date of the communication, or longer if related to an ongoing dispute or compliance matter.
• Technical / session data: Retained for up to twelve (12) months for security and analytics purposes.

6.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identified individual.

7. Data Sharing

7.1 myvape77 does not sell, rent, or trade personal data to third parties. Personal data is shared only in the following circumstances and only to the minimum extent necessary:

• Payment processors: We share transaction data with our payment processing partners (including the operators of Touch n Go eWallet, Boost, and our banking partners) solely to facilitate deposits and withdrawals.
• KYC / identity verification providers: Where third-party identity verification services are used to assist with KYC processing, we share relevant identity documents under appropriate data processing agreements.
• Game software providers: Game session data may be shared with the providers of the games you play, to the extent required for game functionality, RTP auditing, and dispute resolution.
• Regulatory and law enforcement authorities: myvape77 will disclose personal data to regulatory bodies, licensing authorities, or law enforcement agencies where required by law, by our licensing obligations, or in response to a valid legal request.
• Professional advisers: We may share data with legal advisers, auditors, or other professional service providers in connection with legitimate business operations, under obligations of confidentiality.

7.2 All third parties with whom myvape77 shares personal data are required to maintain the confidentiality and security of the data and to process it only for the purposes specified by myvape77.

8. Cookies & Tracking Technologies

8.1 myvape77 uses cookies and similar tracking technologies on the myvape77.win platform. The categories of cookies used are:

• Strictly necessary cookies: Essential for platform operation, including maintaining your login session, security tokens, and user preference settings. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and previously viewed sections to improve your experience on return visits.
• Analytics cookies: Used in an aggregated and anonymised form to understand how players use the platform — which sections are most visited, where navigation difficulties occur, and similar usage patterns. Individual players are not identified through analytics processing.

8.2 myvape77 does not use advertising or cross-site tracking cookies. Cookies placed on myvape77.win do not feed advertising networks or support third-party retargeting campaigns.

8.3 You may manage cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will impair your ability to use the myvape77 platform, including login functionality.

9. Data Security

9.1 myvape77 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all data transmissions between player devices and myvape77 servers;
• Encrypted storage of sensitive personal data at rest;
• Access controls limiting internal data access to personnel with a legitimate operational need;
• Two-factor authentication available for all player accounts;
• Login anomaly detection and alerting for unusual account access patterns;
• Regular security review and penetration testing of platform infrastructure.

9.2 Notwithstanding these measures, no data transmission over the internet or electronic storage system is guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, myvape77 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

9.3 You are responsible for maintaining the security of your own account credentials. myvape77 strongly recommends enabling two-factor authentication on your myvape77 account and using a unique, strong password not reused across other platforms.

10. International Data Transfers

10.1 myvape77's operations involve data processing by service providers located in various jurisdictions. Where personal data is transferred outside of the country in which it was collected, myvape77 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements incorporating standard data protection clauses.

10.2 Malaysian players should note that Malaysia's Personal Data Protection Act 2010 (PDPA) governs the processing of personal data in Malaysia. myvape77 acknowledges the existence of this regulatory framework and applies data protection practices consistent with the principles of data security, transparency, and limited purpose as described in this Policy.

11. Your Rights

As a myvape77 player, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of Access: You may request a copy of the personal data myvape77 holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data in certain circumstances — noting that regulatory retention obligations (see Section 6) may limit or delay our ability to fulfil erasure requests.
• Right to Restrict Processing: You may request that we restrict processing of your data in specified circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of myvape77's legitimate interests, subject to myvape77 demonstrating compelling grounds for continuing that processing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, submit a written request to: [email protected]. myvape77 will respond to valid data subject requests within thirty (30) days of receipt, or within a longer period where permitted by law, with notice of the extension provided to you.

12. Children's Privacy

12.1 The myvape77 platform is strictly restricted to persons aged 21 and above. myvape77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, the associated account will be immediately closed and the data deleted (subject to any regulatory retention requirements triggered by the detection of the violation).

12.2 Parents and guardians are encouraged to implement appropriate parental controls on shared devices to prevent underage access to online gaming platforms, including myvape77.

13. Changes to This Privacy Policy

13.1 myvape77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, operational structure, or applicable legal requirements. Material amendments will be communicated to registered players via email to their registered address, with at least seven (7) days' notice prior to the amended Policy taking effect.

13.2 The current version of this Privacy Policy, including its effective date, is always available at myvape77.win/privacy-policy. Continued use of the myvape77 platform following the effective date of a revised Policy constitutes acceptance of the amendments.

14. Contact Us

For all privacy-related enquiries, data subject access requests, complaints, or questions about this Privacy Policy, please contact the myvape77 data protection contact: