Privacy Policy 168977 – Our Commitment to Protecting Members' Personal Data in Malaysia

168977 collects several categories of personal information from our members. We only collect information that is genuinely necessary to deliver a quality, secure service in compliance with legal requirements. The following are the data categories we collect:

Registration & Identity Information:

• Full name as shown on your official Malaysian identification document
• A valid and active Malaysian mobile number
• Date of birth (for age verification – members must be 21 years of age or older)
• Email address (if provided during registration)
• Account password (stored in a hashed, unreadable format)

Financial Transaction Information:

• Deposit and withdrawal history – amounts, dates, and payment methods used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX)
• Account name of the payment method (for owner identity verification)
• Note: Full bank account numbers or sensitive payment card details are not stored by 168977

Gaming Activity Information:

• Betting history – games played, wager amounts, outcomes, and winnings
• Gaming preferences and platform usage patterns
• Records of bonuses and promotions claimed

Technical Information:

• Device IP address at the time of login
• Device type, operating system, and web browser used
• Login and logout timestamps
• Cookie and session data as described in Section 5

168977 uses your personal information solely for legitimate purposes that are directly related to the operation of our platform. We do not use your data for any other purpose without your explicit consent. The table below summarises the primary purposes for which data is used:

Beyond the purposes outlined in the table above, 168977 may use your data for the following purposes with appropriate notice:

• Sending important account notifications (password changes, transaction confirmations, security alerts)
• Keeping you informed about relevant 168977 offers and promotions – you may unsubscribe at any time
• Resolving disputes or complaints raised by you or any related party
• Complying with court orders, legal summons, or valid requests from Malaysian authorities

The security of our members' personal data is 168977's highest priority. We continually invest in security infrastructure and industry best practices to ensure your data is protected at all times. The following are the key security measures we have in place:

Technical Security:

• 256-bit SSL: All data transmitted between your device and 168977's servers is encrypted using Transport Layer Security (TLS) with 256-bit encryption – unbreakable by current computing technology
• Data encryption at rest: Sensitive data stored in 168977's databases is further encrypted using AES-256 encryption – an additional layer of protection
• Firewall and intrusion detection systems: 168977's servers are protected by multi-layered firewalls and intrusion detection systems operating 24/7
• Rate limiting: Our system limits the number of login attempts to prevent brute-force attacks
• Two-factor authentication (2FA): Available to all 168977 members as an additional layer of protection for their accounts

Organisational Security:

• Role-based access control – 168977 staff can only access data relevant to their specific responsibilities
• All internal access to member data is logged and audited regularly
• 168977 staff undergo regular data security training
• Clear, tested security incident response procedures
• Regular security assessments by independent third parties

168977 does not sell, rent, or share members' personal data to any third party for marketing or commercial purposes. This is our absolute commitment to member privacy. However, there are limited situations in which 168977 may need to share certain information with other parties:

Payment Service Providers: To process your deposits and withdrawals, 168977 is required to share minimal transaction information with payment gateways such as TNG eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX. All these providers are bound by strict confidentiality agreements and adhere to industry-recognised security standards. 168977 does not share any more personal information than is necessary to process the relevant transaction.

Legal Requirements: 168977 may be required to disclose member information to Malaysian authorities when mandated by law, court order, or a valid official investigation. This includes investigations related to money laundering (AML), financial fraud, or criminal offences. In such cases, 168977 will disclose only the minimum information required and will notify the member concerned if permitted to do so by law.

Technical Service Providers: 168977 works with selected third-party technology service providers for platform operations, including server hosting and performance monitoring. All such providers are bound by strict data processing agreements and are only given access to data necessary for their specific technical functions.

168977 uses cookies and similar tracking technologies to enhance the user experience, maintain account security, and analyse platform performance. Cookies are small text files stored on your device when you visit the 168977 platform. The following are the categories of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies will affect the functionality of the 168977 platform – you may be unable to log in or use certain features. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation (Chrome, Safari, Firefox, or Edge).

168977 does not use supercookie technology, pixel tracking, or any other tracking technology beyond what is stated above. We do not track your activity outside of the 168977 platform.

168977 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law. The following is a general guide to our data retention periods:

• Active account data: Retained for the duration your account is active with 168977, plus any required period following account closure
• Financial transaction records: Retained for a minimum of 7 years after a transaction is made, as required by Malaysian financial law and anti-money laundering (AML) regulations
• Customer support communication records: Retained for 3 years from the date of last communication
• Technical logs (IP address, access logs): Retained for 12 months for security and fraud investigation purposes
• Live dealer video recordings: Retained for 90 days for dispute resolution purposes
• Closed account data: The minimum information required for legal records is retained for 7 years following account closure, then securely deleted

Once the retention period expires or data is no longer required, 168977 will delete or anonymise it using secure, irreversible methods. Anonymised data is no longer considered personal data under Malaysia's PDPA.

Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data held by 168977. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact 168977 via email at support@168977.biz or via live chat on the platform by stating your request clearly. We may need to verify your identity before processing the request to ensure the security of your data.

Data protection is a shared responsibility between 168977 and our members. While we do everything we can on the technical side, your own actions play an equally important role in keeping your 168977 account secure. Here are the best practices we recommend to all members:

• Use a strong and unique password – use a mix of uppercase and lowercase letters, numbers, and symbols. Do not reuse the same password from other platforms
• Enable two-factor authentication (2FA) – an additional layer of protection that ensures only you can log in, even if someone else knows your password
• Do not share your login credentials – not to family members, friends, or anyone claiming to be a representative of 168977
• Be cautious of suspicious emails and messages – 168977 will never request your password via email, SMS, or WhatsApp. Disregard any such messages
• Use a secure network – avoid logging in to your 168977 account over unsecured public WiFi at cafes, shopping malls, or airports
• Log out after every session – especially if you are using a device shared with others

If you suspect your account has been compromised or notice any suspicious activity, contact the 168977 support team immediately via live chat or WhatsApp to initiate a temporary account freeze. Reporting early helps us address incidents more effectively and protect your credit balance.

168977 is an entertainment platform for individuals aged 21 years of age and above only. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Registration by underage individuals is strictly prohibited under the 168977 Terms and Conditions.

If 168977 discovers or has reason to believe that personal data belonging to an individual under the age of 21 has been collected unintentionally, we will take immediate steps to:

• Immediately deactivating and closing the account in question
• Permanently removing all associated personal data from our systems
• Returning any remaining credit balance to the payment method used for deposit, where applicable

If you are a parent or guardian who believes your child or dependent has registered with 168977, please contact us immediately at support@168977.biz and we will handle the matter with the highest priority and complete confidentiality.

168977 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, Malaysian legal requirements, or other legitimate operational reasons. We will notify members of any material amendments through:

• In-platform notifications on 168977 displayed when you log in
• Email to the address registered with your account (where applicable)
• Update the "Last Updated" date at the top of this page

We encourage all members to review this Privacy Policy page periodically, especially when you receive a change notification from us. Your continued use of the 168977 platform after any amendments take effect will be considered your acceptance of the updated policy.

If you do not agree with any amendments to this Privacy Policy, you have the right to close your account and stop using the 168977 platform. Any credit balance remaining in your account will be refunded in accordance with the standard procedure set out in our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 168977 manages your personal data, we are here to help. Our team understands that privacy is a serious matter, and we are committed to addressing every enquiry thoroughly and within a reasonable timeframe.

You may reach the 168977 privacy team through the following channels:

• Email: support@168977.biz – include "Privacy Enquiry" in your email subject line for faster processing
• Live Chat: Available on the 168977 platform from 8 AM to 12 midnight daily, in Bahasa Melayu
• WhatsApp: The official 168977 WhatsApp number listed in the support section of the platform

For formal requests regarding your data protection rights under Malaysia's PDPA (access, correction, or deletion of data), please submit a written request via email stating your full name, registered phone number, and details of your request. We will verify your identity before processing any request involving your personal data.

168977 aims to respond to all privacy-related enquiries within 3 working days and to resolve formal requests within the timeframe stipulated by Malaysia's PDPA 2010.