spy77 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy sets out how we collect, use, store, and safeguard your information when you use spy77's online casino and sports betting services.
All data transmitted between your device and spy77 is protected by industry-standard SSL encryption. Your personal details are never exposed in transit.
spy77 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to deliver our services.
You retain the right to access, correct, and request deletion of your personal data at any time by contacting our support team.
Identity documents submitted for KYC verification are stored with encryption and are strictly accessible only by authorised compliance personnel.
We disclose all cookies used on the Platform, including their purpose and retention periods. You can manage cookie preferences through your browser settings.
We only retain your data for as long as is legally required or operationally necessary. Retention periods are clearly set out in Section 8 of this Policy.
This Privacy Policy ("Policy") is published by spy77 ("the Company", "we", "us", or "our") and governs the collection, use, disclosure, storage, and protection of personal data obtained from users ("you", "your", or "the Player") who access and use the spy77 online casino and sports betting platform at spy77.lat (the "Platform").
spy77 is committed to safeguarding your privacy and handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the Platform, including data provided during registration, identity verification (KYC), payment processing, and general use of our services.
By registering an account with spy77 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must immediately cease using the Platform.
spy77 processes the personal data of players across Malaysia, including those in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other regions. All payment-related data processed through Malaysian payment channels — including Touch 'n Go eWallet, DuitNow, Maybank2u, CIMB Clicks, and FPX — is handled in accordance with the data handling practices described in this Policy.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information that identifies or can identify you as an individual, whether directly or in combination with other data. Examples include your full name, NRIC number, email address, mobile number, and IP address. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, transfer, and deletion. |
| "Data Controller" | spy77, which determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party engaged by spy77 to process personal data on our behalf, such as payment processors or KYC verification providers. |
| "KYC Data" | Identity and address verification documents submitted by a Player as part of the Know Your Customer process, including national identity cards (MyKad), passports, driver's licences, and utility bills. |
| "Cookies" | Small data files placed on your device by the Platform to enable functionality, remember preferences, and collect analytical data about Platform usage. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
spy77 collects the following categories of personal data from players and users of the Platform:
Any additional information you voluntarily provide to our support team, in correspondence, or through optional profile fields on the Platform.
spy77 collects personal data through the following channels and methods:
Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotional offer.
Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, and browsing behaviour within the Platform.
In limited circumstances, spy77 may receive personal data about you from third-party sources, including:
spy77 processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Creation & Management | To register your account, authenticate your identity at login, and manage your account profile and preferences on the spy77 Platform. |
| KYC Verification | To verify that you are at least 21 years of age and to confirm your identity and residential address in compliance with applicable regulations. |
| Payment Processing | To facilitate deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency, and to maintain accurate transaction records. |
| Customer Support | To respond to your enquiries, resolve account issues, investigate complaints, and maintain records of support interactions. |
| Fraud Prevention & AML | To detect and prevent fraud, money laundering, match-fixing, and other prohibited activities on the Platform. |
| Regulatory Compliance | To comply with applicable legal obligations, including retention of financial records, reporting obligations, and responses to lawful requests from authorities. |
| Platform Improvement | To analyse usage patterns, improve the Platform's features and performance, and enhance the overall player experience. |
| Marketing Communications | To send you promotional offers, bonus notifications, and other marketing communications where you have provided consent. You may withdraw consent at any time. |
spy77 processes your personal data on one or more of the following legal grounds:
Processing is necessary to perform the contract between you and spy77 — specifically, to create and manage your account, process your transactions, and provide the gaming services you have requested.
Processing is necessary to comply with applicable legal requirements, including anti-money laundering (AML) regulations, age verification requirements, financial record-keeping obligations, and responses to lawful requests from regulatory or law enforcement authorities.
Processing is necessary for spy77's legitimate interests, including fraud detection and prevention, platform security, abuse detection, and internal analytics, provided that these interests do not override your fundamental rights and freedoms.
Where processing is based on consent — such as for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
spy77 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients in the circumstances described below:
We engage trusted third-party service providers to assist in delivering our services. These include:
All Data Processors engaged by spy77 are bound by contractual data processing agreements that require them to process personal data only on our instructions and in accordance with applicable data protection requirements.
spy77 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law or in response to a lawful order. We will notify you of any such disclosure to the extent permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, personal data may be transferred to the relevant third party as part of that transaction. We will provide notice of any such transfer and of any material changes to this Privacy Policy that may result.
spy77 does not engage in the sale of personal data to third-party advertisers, data brokers, or commercial intelligence companies. Any sharing of data is strictly limited to the operational purposes described above and is governed by contractual safeguards.
spy77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Retained for the duration of the active account, plus a minimum of five (5) years following account closure. |
| KYC Identity Documents | Retained for a minimum of five (5) years from the date of submission, in compliance with AML regulatory requirements. |
| Financial Transaction Records | Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations. |
| Customer Support Records | Retained for three (3) years from the date of the most recent interaction, unless a longer period is required for a dispute or legal proceeding. |
| Usage and Technical Logs | Retained for up to twelve (12) months, after which they are anonymised or deleted. |
| Marketing Consent Records | Retained until consent is withdrawn by the Player, plus a period of two (2) years as a record of the consent obtained. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual.
spy77 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
Security Reminder: While spy77 employs robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and must notify us immediately at [email protected] if you suspect unauthorised access to your account.
spy77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and collect analytical data about how the Platform is used. The following categories of cookies are deployed:
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No personal browsing data is collected through these cookies.
These cookies enable enhanced functionality, such as remembering your language preferences, display settings, and login session. Disabling these cookies may affect the performance of certain Platform features.
We use analytical cookies to understand how players interact with the Platform — including which games are played most frequently, how long sessions last, and which pages are most visited. This data is used in aggregated, anonymised form to improve the Platform experience.
You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling certain cookies may impair your ability to use some features of the Platform.
As a player whose personal data is processed by spy77, you are entitled to the following rights with respect to your personal data:
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of the personal data you have provided to us.
Where processing is based on your consent (e.g., for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of the above rights, please contact our support team via live chat or at [email protected]. We will respond to all verifiable requests within a reasonable timeframe, and in any event within thirty (30) days.
To protect your data from unauthorised access, we may need to verify your identity before processing any rights request. We may ask you to confirm account details or provide a copy of your NRIC/Passport before fulfilling a data access or deletion request.
spy77 strictly enforces a minimum age requirement of 21 years for all players. The Platform is not intended for, nor does it knowingly collect personal data from, individuals under the age of 21.
All accounts are subject to age verification as part of the KYC process. Any account found to belong to a person under the age of 21 will be immediately closed, and any associated personal data will be deleted in accordance with applicable law, save where retention is required for legal or regulatory purposes.
If you believe that a person under the age of 21 has registered an account or submitted personal data to spy77, please contact us immediately at [email protected] so that we may take appropriate action.
spy77 may transfer personal data to servers or service providers located outside of Malaysia in order to operate the Platform and deliver our services. Where such transfers occur, we implement appropriate contractual safeguards to ensure that your personal data receives an equivalent level of protection to that required under applicable Malaysian data protection principles.
We require all third-party service providers to whom data is transferred to maintain adequate security measures and to process personal data only in accordance with our instructions and this Privacy Policy.
spy77 reserves the right to update or amend this Privacy Policy at any time. Any material changes will be published on this page with an updated "Last Updated" date. Where changes are significant, we may also notify you via email or through a prominent notice on the Platform.
Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to any updated version of this Policy, you must cease using the Platform and may request account closure by contacting our support team.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the spy77 Data Protection team through any of the following channels:
Available 24 hours a day, 7 days a week, directly on the spy77 Platform. Our English-speaking support agents can escalate privacy-related enquiries to the compliance team.
Send your enquiry to: [email protected]. Please include "Privacy Request" in the subject line to ensure prompt routing to the relevant team.
We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 days of receiving a verifiable request.
All privacy requests are handled in English. spy77's support team is available to players across Malaysia including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru.
spy77 handles your personal data with the same care we put into every other part of the platform. Secure, transparent, and built for Malaysian players from day one.
For players aged 21 and above only. Please gamble responsibly. Visit our Responsible Gambling page for self-help tools and support resources.