Privacy Policy

1. Introduction

sky77 ("the Operator", "we", "us", "our") operates the website located at sky77.casa (hereinafter "the Site"). This Privacy Policy ("the Policy") sets out the basis on which we collect, receive, use, store, transfer and otherwise process personal data relating to individuals ("Users", "you") who access or interact with the Site.

sky77 is committed to handling personal data responsibly and in compliance with applicable data protection principles. The Personal Data Protection Act 2010 of Malaysia (PDPA 2010) and other relevant legislation inform the standards applied in this Policy where they are applicable to the data subjects concerned.

This Policy should be read alongside the sky77 Terms & Conditions and the Responsible Gambling page. By registering an Account or using the Site, you confirm that you have read, understood and agreed to this Policy.

2. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies, or could reasonably identify, a living natural person, whether directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, erasure and destruction.
• "Data Subject" means the User to whom the personal data relates.
• "Controller" means sky77 in its capacity as the entity that determines the purposes and means of processing personal data.
• "Processor" means any third party that processes personal data on behalf of sky77 pursuant to a written agreement.
• "KYC" means Know Your Customer, the identity and address verification procedures required for account compliance and withdrawal eligibility.
• "Cookies" means small data files placed on a User's device by the Site for the purposes described in Clause 7 below.
• "Special Category Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, health data or data concerning a natural person's sexual orientation, processed only where strictly necessary and permitted by law.

3. Data We Collect

sky77 collects personal data through the following categories of interaction:

sky77 does not intentionally collect Special Category Data. If such data is submitted incidentally, for example within a support communication, it will be handled with appropriate additional safeguards and deleted as soon as it is no longer required.

4. Data Processing

Personal data collected by sky77 is used for the following purposes:

• Account management: creating, maintaining and securing User accounts, including password recovery and access control.
• Service delivery: enabling access to casino games, sports betting information, payment guides and related features on the Site.
• Payment processing: facilitating MYR deposits and withdrawals via supported Malaysian payment methods, verifying transaction ownership and maintaining financial records.
• Identity verification (KYC): meeting regulatory obligations by confirming User identity and age before enabling withdrawals or elevated account access.
• Fraud prevention and security: detecting suspicious login activity, identifying patterns indicative of fraud, multi-accounting or abuse, and protecting the integrity of the platform.
• Responsible gambling monitoring: identifying behavioural patterns that may suggest a User requires intervention, self-exclusion support or an account review.
• Communications: responding to support enquiries, delivering account notifications and, where consented to, sending promotional communications. Users may withdraw communication consent at any time.
• Legal compliance: retaining records as required by applicable law, responding to lawful requests from regulatory or law-enforcement authorities.
• Site improvement: analysing aggregated, anonymised usage data to improve content quality, navigation and overall User experience.

5. Legal Basis for Processing

sky77 processes personal data on one or more of the following lawful grounds, consistent with the principles of the Malaysian Personal Data Protection Act 2010 and broadly aligned with internationally recognised data protection standards:

• Contractual necessity: processing required to perform the agreement between sky77 and the User, including account management, payment processing and KYC verification.
• Legitimate interests: processing necessary for fraud prevention, site security, system maintenance and responsible gambling monitoring, where such interests are not overridden by the User's fundamental rights.
• Legal obligation: processing required to comply with applicable laws, anti-money-laundering requirements or lawful orders from competent authorities.
• Consent: where consent is the applicable basis, for example for certain marketing communications, Users may withdraw consent at any time without detriment to their continued use of the Site.

6. Sharing & Disclosure

sky77 does not sell, rent or trade personal data to third parties for commercial purposes. Personal data may be shared in the following limited circumstances:

• Service providers: payment processors, identity verification specialists, hosting providers and IT security vendors who process data solely on sky77's instructions under binding data-processing agreements.
• Regulatory and legal authorities: where disclosure is required by applicable law, court order or a request from a competent regulatory or law-enforcement body.
• Business transfers: in the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to a successor entity, subject to equivalent privacy protections.
• Responsible gambling partners: aggregated, non-identifying behavioural data may be shared with responsible gambling programme administrators for research or intervention purposes.

Any third-party processor engaged by sky77 is required to implement appropriate technical and organisational security measures and is prohibited from using personal data for any purpose beyond what sky77 has authorised in writing.

7. Cookies & Tracking Technologies

sky77 uses cookies and similar tracking technologies to enable essential site functionality, analyse usage patterns and deliver a personalised browsing experience. The following categories of cookies may be placed on a User's device:

• Strictly necessary cookies: required for the Site to function correctly, including session management and security features. These cannot be disabled without materially impairing Site functionality.
• Analytical cookies: used to collect aggregated, anonymised data about how Users navigate the Site, which pages receive the most visits and where technical errors may occur.
• Functional cookies: used to remember User preferences such as language settings, previously viewed pages and session state.
• Marketing cookies: used, where consented to, to deliver relevant promotional content. Users may withdraw consent through their browser cookie settings at any time.

Users may configure their browser to refuse some or all cookies. Please note that disabling strictly necessary cookies may prevent access to certain Site features. Instructions for managing cookies are typically found within the browser's settings or preferences menu.

8. Data Retention

sky77 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or for such longer period as may be required by law. The following general retention periods apply:

• Account data: retained for the duration of the active Account relationship and for a period of up to five years following Account closure, unless a longer period is required by applicable law.
• Financial and transaction records: retained for a minimum of seven years to satisfy anti-money-laundering and financial record-keeping obligations.
• KYC documents: retained for the period required by the relevant regulatory framework governing identity verification for gaming and financial services.
• Support communications: retained for up to three years from the date of the last communication, or longer where the subject matter relates to an unresolved dispute.
• Technical and log data: typically retained for up to 12 months for security monitoring and diagnostic purposes.

When personal data is no longer required, it is securely deleted or anonymised in accordance with sky77's internal data disposal procedures.

9. Security Measures

sky77 implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures in place include:

• HTTPS encryption for all data transmitted between Users and the Site.
• Access controls limiting internal access to personal data to personnel with a legitimate operational need.
• Secure storage practices for KYC documents and financial records, including restricted access and audit logging.
• Regular review of security practices in response to identified vulnerabilities or changes in applicable standards.

Users are responsible for maintaining the security of their own Account credentials. sky77 will never request a User's password through any communication channel. Passwords, one-time verification codes and full payment card details must never be shared with any individual or organisation, including sky77 support staff.

In the event of a personal data breach that is likely to result in a high risk to User rights and freedoms, sky77 will take steps to notify affected Users without undue delay, in accordance with applicable legal requirements.

10. User Rights

Subject to applicable law, Users whose personal data is processed by sky77 hold the following rights. These rights may be exercised by contacting sky77 using the details provided in Clause 14:

sky77 will respond to all verified rights requests within a reasonable period, typically 30 calendar days of receipt. Where a request cannot be fulfilled in full, sky77 will explain the reason in writing.

11. Minors

The sky77 website is intended solely for adults aged 21 years and above. sky77 does not knowingly collect, store or process personal data of individuals below the age of 21. If sky77 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated Account will be suspended.

If you believe that a person under the age of 21 has provided personal data to sky77 without appropriate consent, please contact us immediately using the details set out in Clause 14 so that appropriate action may be taken.

12. Third-Party Links

The Site may from time to time contain references to, or informational mentions of, third-party services such as Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong Bank.

sky77 is not responsible for the privacy practices, data handling policies or content of any third-party services. Users who interact with third-party payment platforms, banking applications or other external services do so under the terms and privacy policies of those respective parties. We encourage Users to review the privacy documentation of any third-party service they engage with.

13. Policy Amendments

sky77 reserves the right to modify or update this Privacy Policy at any time. Where amendments are material, we will make reasonable efforts to notify registered Users, including by on-site notification or email. The revised Policy will be published on this page with an updated effective date.

Continued use of the Site following the publication of a revised Privacy Policy constitutes the User's acceptance of the updated terms. If you do not agree with any amendment, you should discontinue use of the Site and may request account closure by contacting sky77 support.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or need to report a potential data security concern, please contact the sky77 privacy team using the following details. All communications must be submitted in English to ensure timely and accurate processing.

• Privacy Enquiries Email: [email protected]
• Subject Line: Please use "Privacy Policy Enquiry" or "Data Subject Request" to help us direct your message correctly.
• Response Period: sky77 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Identity Verification: To protect User data, sky77 may request reasonable verification of your identity before processing a data subject request.

For responsible gambling-related matters, including self-exclusion requests or account restriction enquiries, please visit the Responsible Gambling page for dedicated guidance and support information.