borneo77 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by borneo77 in connection with your use of the borneo77 platform accessible at borneo77.co. It applies to all Members, visitors, and any other individuals whose personal data borneo77 processes in the course of its operations.

By registering a borneo77 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not create an account or use the Platform.

borneo77 operates this platform for Malaysian users and the broader Southeast Asian market. We handle data with regard to internationally recognised data protection principles, including those reflected in Malaysian personal data protection legislation.

2.1 Registration Data. When you create a borneo77 account, we collect the information you provide during registration, which may include your full legal name, date of birth, email address, mobile telephone number, and residential address. This information is required to create and administer your account.

2.2 Identity Verification Data. As part of the KYC process, borneo77 may collect copies of government-issued identity documents (such as a MyKad, passport, or driving licence), proof of address documents, and proof of payment method. This data is used solely for the purpose of verifying your identity in compliance with applicable anti-money laundering and age verification requirements.

2.3 Financial Data. We collect information about deposits and withdrawals made through your borneo77 account, including payment method type, transaction amounts, and timestamps. We do not store full payment card numbers. E-wallet identifiers (such as your Touch 'n Go eWallet or Boost account reference) are retained only as required for transaction records.

2.4 Gameplay and Usage Data. borneo77 collects data about your activity on the platform, including games played, bets placed, amounts wagered, session duration, and feature usage. This data is used for account management, responsible gaming monitoring, fraud detection, and platform improvement.

2.5 Technical Data. We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, and referral URL. This data is used to ensure the security and stability of the Platform and to diagnose technical issues.

2.6 Communication Data. Records of communications between you and the borneo77 support team — including live chat transcripts and email correspondence — are retained for quality assurance, dispute resolution, and training purposes.

borneo77 uses the personal data it collects for the following purposes:

• To create, maintain, and administer your borneo77 account
• To verify your identity and age in compliance with our legal and regulatory obligations
• To process deposits, withdrawals, and any other financial transactions on your account
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To enforce our Terms and Conditions and take appropriate action in cases of breach
• To provide customer support and respond to your queries and complaints
• To monitor gameplay patterns for responsible gaming purposes, including identifying signs of problem gambling behaviour
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts)
• To send you promotional and marketing communications, where you have provided consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time
• To improve the Platform, including through analysis of usage patterns and Member feedback
• To comply with applicable law, including responding to lawful requests from regulatory authorities and law enforcement agencies

4.1 Contractual Necessity. The majority of personal data processing carried out by borneo77 is necessary for the performance of the contract between you and borneo77 — specifically, to operate your account and provide the services you have requested.

4.2 Legal Obligation. Certain processing activities are required by law, including identity verification under anti-money laundering regulations, age verification, and transaction record retention.

4.3 Legitimate Interests. borneo77 processes some data on the basis of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics. Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and interests.

4.4 Consent. Where we rely on your consent to process personal data — for example, for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 Service Providers. borneo77 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include identity verification providers, payment processors, game software suppliers, cloud infrastructure providers, and customer support technology vendors. Such providers are contractually obligated to process data only in accordance with borneo77's instructions and to maintain appropriate security standards.

5.2 Regulatory and Legal Disclosure. borneo77 may disclose personal data to relevant gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where required by law or where disclosure is necessary to protect the rights, property, or safety of borneo77, its Members, or the public.

5.3 No Sale of Data. borneo77 does not sell, rent, or trade personal data to third-party advertising networks, data brokers, or marketing companies.

5.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of borneo77 or substantially all of its assets, your personal data may be transferred as part of that transaction. borneo77 will provide notice of any such transfer and the applicable privacy terms.

6.1 Use of Cookies. borneo77 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device that allow us to recognise you between sessions, maintain your login state, remember your preferences, and analyse usage patterns.

6.2 Types of Cookies. The Platform uses the following categories of cookies:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable personalisation features such as language preferences and display settings.
• Analytics Cookies: Used to collect aggregated usage data to understand how Members interact with the Platform and to identify areas for improvement.

6.3 Cookie Control. You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from logging in or using certain features of borneo77.

borneo77 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, and alteration. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for data at rest, access controls restricting data access to authorised personnel, regular security assessments and penetration testing, and incident response procedures.

While borneo77 takes data security seriously, no system is entirely immune to risk. Members are responsible for maintaining the security of their borneo77 login credentials and should notify support immediately upon becoming aware of any suspected unauthorised access to their account.

borneo77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements.

Member account data is retained for the duration of the account's existence and for a period thereafter as required by applicable law. Transaction records are retained for a minimum period consistent with anti-money laundering regulations, which typically require retention for a period of five years from the end of the account relationship.

KYC documentation is retained for the period required by the applicable regulatory framework governing the jurisdiction under which borneo77 is licensed. Upon expiry of applicable retention periods, personal data is securely deleted or anonymised.

Subject to applicable law and certain limitations, borneo77 Members have the following rights with respect to their personal data:

• Right of Access: You may request a copy of the personal data borneo77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to borneo77's legal retention obligations and any outstanding contractual matters.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your data in a machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the borneo77 support team via live chat or email. borneo77 will respond to data rights requests within a reasonable timeframe. Identity verification may be required before requests are processed.

The borneo77 platform is strictly restricted to individuals aged 21 and above. borneo77 does not knowingly collect personal data from individuals under 21 years of age. If borneo77 becomes aware that personal data has been collected from a minor, the relevant account will be closed and the data deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has accessed borneo77 using your device or credentials, please contact our support team immediately so that we can take appropriate action.

As an online platform serving Members across Malaysia and the broader region, borneo77 may process and store personal data on servers and infrastructure located in jurisdictions outside Malaysia. Where such transfers occur, borneo77 ensures that appropriate safeguards are in place to protect the data, including contractual obligations on data processors that are consistent with applicable data protection standards.

borneo77 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to Members via email to the address registered on their account and/or via a prominent notice on the Platform prior to the changes taking effect. The date of the most recent revision is indicated at the top of this Policy.

Your continued use of the borneo77 Platform following notification of amendments constitutes your acknowledgement of the updated Policy.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by borneo77, please contact us: