Privacy Policy

lv77 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at lv77.casa. We are committed to safeguarding the privacy of all players and visitors who interact with our Platform. This Privacy Policy ("Policy") describes in detail how lv77 collects, uses, stores, discloses, and protects your personal data when you access or use any part of our services.

By registering an account, depositing funds, or using any feature of the lv77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of our broader Terms and Conditions and should be read in conjunction with them.

lv77 takes its obligations under applicable personal data protection laws seriously and has implemented technical, organisational, and procedural measures to ensure that your data is handled responsibly, securely, and in full compliance with our legal obligations.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a living individual — including name, email address, phone number, NRIC or passport number, IP address, device identifiers, and payment method details.
• "Processing" means any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" means lv77, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by lv77 to process personal data on lv77's behalf and under lv77's instructions.
• "Player" means any individual who has registered an account on the lv77 Platform or who accesses the Platform as a visitor.
• "KYC" means Know Your Customer — the identity and age verification process required before a Player may complete their first withdrawal.
• "Cookies" means small data files stored on a Player's device by the Platform for session management, preference storage, and analytics purposes.

lv77 collects only the personal data that is necessary to provide our services, comply with legal obligations, and maintain a secure platform for all players. The categories of data we collect are described below.

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Mobile phone number
• Chosen username
• Residential address (city and country; full address may be requested during KYC)

• Malaysian NRIC (front and back) or valid passport
• Proof of address (utility bill, bank statement issued within 90 days)
• Selfie photograph for identity confirmation where required

• Payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, FPX)
• Transaction records including deposit amounts, withdrawal requests, and dates
• Cryptocurrency wallet addresses where USDT TRC20 is used
• Note: lv77 does not store full payment card numbers or e-wallet PINs. Payment processing is handled by our payment partners.

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser information
• Session activity logs, game history, and betting records
• Pages visited, time spent on Platform, and navigation patterns

• Live chat transcripts and support ticket contents
• Email correspondence with lv77 support or compliance teams
• Feedback, complaints, or dispute records

lv77 collects personal data through the following means:

• Direct provision: Information you submit during account registration, KYC verification, payment processing, or when contacting our support team.
• Automated collection: Technical data collected automatically through cookies, server logs, and similar tracking technologies when you browse or use the Platform.
• Payment providers: Limited transactional data shared by our payment partners (Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX) to confirm successful deposits and withdrawals.
• Identity verification services: Data confirmed or supplemented by KYC processing partners used to verify the authenticity of identity documents submitted by Players.
• Fraud detection systems: Device fingerprinting and behavioural analysis data collected by our security and fraud prevention tools.

lv77 processes your personal data exclusively for the purposes described in this section. We do not use your data for any purpose beyond what is necessary to provide our services or meet our legal obligations.

lv77 processes your personal data under one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to at the time of registration — including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements, anti-money laundering obligations, and law enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics, where such interests do not override your fundamental rights.
• Consent: Where required by law, we will seek your explicit consent before processing certain categories of data, such as marketing communications. You may withdraw consent at any time without affecting prior processing.

lv77 does not sell, trade, or rent your personal data to any unaffiliated third party for commercial or marketing purposes. We may share your data only in the following strictly controlled circumstances:

Data is shared with our payment processing partners — including the operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX — solely to the extent necessary to facilitate deposits and withdrawals requested by you. These partners operate under their own privacy policies and are subject to applicable Malaysian financial regulations.

KYC document data is processed by our identity verification service partners solely for the purpose of verifying your identity and age. These partners are contractually bound to process your data only for this specific purpose.

Limited technical data (such as IP addresses and device identifiers) may be shared with fraud detection and cybersecurity service providers to protect the integrity of the Platform and prevent unauthorised access or financial fraud.

lv77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law or valid legal process. Such disclosures will be made only to the extent required and with appropriate safeguards where permitted.

lv77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with our legal obligations, whichever is longer. Our standard data retention periods are as follows:

• Account data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure to comply with anti-money laundering and financial record-keeping requirements.
• KYC / identity documents: Retained for a minimum of five (5) years following account closure or the last transaction, as required by applicable compliance regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications data: Support chat transcripts and email records retained for two (2) years from the date of the interaction, unless a longer period is required for dispute resolution.
• Technical and usage data: Session logs retained for up to twelve (12) months; anonymised aggregate analytics data may be retained indefinitely.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

lv77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the lv77 Platform.
• Encrypted storage of sensitive data fields, including KYC documents and financial records, at rest.
• Access controls restricting access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security audits and penetration testing to identify and remediate vulnerabilities.
• Multi-factor authentication requirements for privileged system access by lv77 staff.
• Incident response procedures in the event of a data breach, including notification to affected players where required by law.

Despite these measures, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and for reporting any suspected unauthorised account activity to lv77 support immediately.

lv77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and analyse usage patterns. The following categories of cookies are used:

lv77 does not use cookies to build advertising profiles or share behavioural data with third-party ad networks. You may manage cookie preferences through your web browser settings. Disabling strictly necessary cookies may impair Platform functionality, including login and payment processes.

Subject to applicable law and any overriding legal obligations, you have the following rights with respect to the personal data that lv77 holds about you:

• Right of Access: You may request a copy of the personal data lv77 holds on you, along with information on how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by lv77 be corrected or updated.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to lv77's legal obligations to retain data for compliance, anti-money laundering, and regulatory purposes.
• Right to Restriction: You may request that lv77 restrict the processing of your personal data under certain conditions, for example while a correction request is being resolved.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data for legitimate interests purposes, including responsible gambling monitoring, subject to lv77's overriding compliance obligations.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

The lv77 Platform may reference third-party service providers in the context of payment processing or responsible gambling support. lv77 is not responsible for the privacy practices of third-party organisations that operate independently. Players who interact with third-party services — such as their bank's internet banking portal (Maybank2u, CIMB Clicks), e-wallet applications (Touch 'n Go, Boost, GrabPay), or DuitNow and FPX systems — should review the respective privacy policies of those providers.

lv77 does not control the data practices of third-party payment providers and accepts no liability for how those organisations handle data you submit directly to them.

The lv77 Platform is strictly intended for individuals aged 21 years and above. lv77 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under this age threshold, we will take immediate steps to delete such data and permanently close the associated account.

If you believe that a person under the age of 21 has registered an account on lv77, please notify us immediately via live chat or email so we can investigate and take appropriate action. All accounts are subject to KYC age verification before withdrawal privileges are granted.

lv77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Any updates will be published on this page with a revised "Last Updated" date at the top of the document.

We encourage all Players to review this Privacy Policy periodically. Where material changes are made to the way we process your personal data, we will endeavour to notify you via your registered email address or through a Platform notification prior to the changes taking effect. Continued use of the Platform following publication of any amendments constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data lv77 holds about you, please reach out to us through the following channel:

• Live Chat: Available 24/7 directly on the lv77 Platform — the fastest way to reach our support team for data requests and privacy inquiries.
• Email: [email protected] (plain text — not a clickable link)

All data access, correction, deletion, and portability requests will be acknowledged promptly and processed within a reasonable period in accordance with applicable law. For complex requests, we may need to verify your identity before proceeding.

lv77 is committed to resolving all privacy-related concerns fairly and transparently. We treat all Player data with the same level of care and respect that we expect in return from the players who trust lv77 with their information.