Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by monte77 ("we", "us", "our", "the Operator", "the Platform") and applies to all personal data processed in connection with the operation of the monte77 online gaming platform accessible at monte77.cam.

Monte77 is an English-language online casino and sports betting platform serving Malaysian players aged 21 and above. As part of operating this platform, we necessarily collect and process certain personal data relating to our registered players, website visitors, and individuals who interact with our customer support services.

We are committed to processing your personal data lawfully, fairly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of our platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the monte77 platform. By using monte77, you acknowledge that you have read and understood this Privacy Policy.

2 Definitions

"Personal Data"

Any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, location data, online identifiers, email address, financial information, or any combination of information that could identify a specific individual.

"Processing"

Any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, restriction, erasure, or destruction.

"Data Controller"

The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, monte77 acts as Data Controller in respect of personal data collected from players and visitors to monte77.cam.

"Data Processor"

A third party that processes Personal Data on behalf of the Data Controller pursuant to a written agreement and solely on the instructions of the Controller.

"Consent"

Freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data, either by a clear affirmative action or by a statement.

"KYC Data"

Identity and age verification documentation collected as part of the Know Your Customer (KYC) process, including government-issued identity documents (such as Malaysian MyKad), proof of address, and payment method verification.

3 Data Controller

Monte77 operates as the Data Controller for personal data collected and processed through the monte77.cam platform. As Data Controller, we determine the purposes for which your personal data is processed and the means by which that processing is carried out.

For any queries relating to data processing, including requests to exercise your rights under this Policy, please contact our Data Protection team using the contact details provided in Section 16 of this Policy.

4 Data We Collect

The categories of personal data that monte77 collects and processes in connection with your use of the platform are set out below:

4.1 Account Registration Data

• Full legal name;
• Date of birth (to verify age eligibility — minimum 21 years);
• Email address (primary account identifier and communication channel);
• Mobile phone number;
• Username and hashed password (passwords are never stored in plain text);
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).

4.2 Identity Verification (KYC) Data

• Government-issued photo identification (Malaysian MyKad, passport, or equivalent);
• Proof of residential address (utility bills, bank statements, or government correspondence);
• Payment method verification documents where required;
• Selfie or biometric verification data (where applicable, subject to specific KYC verification requirements).

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect);
• Transaction amounts in MYR and timestamps;
• Cryptocurrency wallet addresses (where applicable for BTC, ETH, USDT, or LTC deposits);
• Bonus credit and wagering history.

4.4 Gaming Activity Data

• Game session history, including games played, bet amounts, win/loss records, and session duration;
• Sports betting selections, odds accepted, and settlement outcomes;
• Bonus activity and VIP tier progression data.

4.5 Technical & Device Data

• IP address and approximate geolocation (city-level);
• Device type, operating system, and browser information;
• Cookies and session identifiers (see Section 10 for full cookie policy details);
• Platform access timestamps and login history.

4.6 Communications Data

• Content of live chat conversations with our support team;
• Email correspondence history;
• Responses to player surveys or feedback requests (where voluntarily provided).

5 How We Collect Data

Monte77 collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support;
• Automated technical collection: Technical and device data collected automatically when you access and use the platform, including via cookies, log files, and session tracking technologies;
• Third-party sources: Identity verification data obtained from KYC verification service providers; fraud detection signals from payment processors; and, where applicable, publicly available data used to verify identity or detect fraud;
• Payment processors: Transaction confirmation and processing data from payment service providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners;
• Referrals: Basic referral information where you are introduced to monte77 by an existing player through our referral programme.

6 Purpose & Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

7 Data Sharing & Disclosure

Monte77 does not sell, rent, or trade your personal data. We share personal data only in the following defined circumstances:

7.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers who process data on our behalf under written data processing agreements. These include:

• KYC and identity verification providers;
• Payment processing partners (including local Malaysian payment gateways for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and banking partners);
• Fraud detection and cybersecurity service providers;
• Customer support software providers;
• Cloud infrastructure and hosting providers;
• Email and communications service providers.

All such providers are contractually obligated to process data only as instructed by monte77 and to maintain appropriate security standards.

7.2 Legal & Regulatory Requirements

We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or regulatory requirement. We will, where legally permissible, notify affected players of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of monte77's assets, personal data held by the Platform may form part of the transferred assets. Affected players would be notified of any such transfer and any resulting changes to data processing arrangements.

7.4 Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified information (which cannot reasonably be used to identify any individual) with business partners, researchers, or for public reporting purposes. This does not constitute disclosure of personal data.

8 Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal and regulatory retention requirements. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

9 Your Data Rights

Subject to applicable law and certain exemptions, you hold the following rights in relation to your personal data held by monte77:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this in a clear, readable format within 30 days;
• Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete data without undue delay;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent (where consent is the legal basis); (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been processed unlawfully. Note that certain retention obligations may prevent immediate full erasure;
• Right to Restrict Processing: You may request a temporary restriction on processing in certain circumstances, including while accuracy is being contested or while an objection is pending;
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format, or request direct transfer to another controller where technically feasible;
• Right to Object: You may object at any time to processing based on legitimate interests or direct marketing. Objections to direct marketing will be acted upon immediately;
• Rights in Relation to Automated Decision-Making: Where decisions affecting you are made solely by automated means (including profiling), you have the right to request human review of such decisions;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing based on consent.

To exercise any of these rights, contact our Data Protection team via the details in Section 16. We will acknowledge your request within 72 hours and resolve it within 30 calendar days (extendable by a further 60 days in complex cases, with prior notice to you).

10 Cookies & Tracking Technologies

Monte77 uses cookies and similar tracking technologies to operate the platform, enhance your experience, analyse usage patterns, and support our security and fraud prevention systems. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management, authentication, and security functions. These cannot be disabled without impairing core platform functionality;
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your language preferences, preferred game categories, and previously viewed content;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform — pages visited, features used, and error encounters — to help us improve the service. We use privacy-respecting analytics tools for this purpose;
• Security Cookies: Support our fraud detection systems by helping identify unusual access patterns that may indicate account compromise or prohibited activity.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. A full cookie preference centre is available within the platform settings once you are logged into your account.

11 International Data Transfers

The operation of monte77 may involve the transfer of personal data to countries outside of Malaysia. Where such transfers occur, we implement appropriate safeguards to ensure that your personal data receives a level of protection consistent with the principles set out in this Policy.

Safeguards for international transfers may include:

• Transfers to countries that provide an adequate level of data protection as determined by applicable authorities;
• Standard contractual clauses approved by relevant data protection authorities;
• Binding corporate rules where transfers occur within a group of companies;
• Other legally recognised transfer mechanisms as appropriate.

For further information about the specific safeguards applied to international data transfers, please contact our Data Protection team using the details in Section 16.

12 Children & Minors

Monte77 is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual below the age of 21, we will take immediate steps to:

• Suspend or close the relevant account;
• Investigate the circumstances of registration;
• Delete or anonymise all personal data associated with the underage account as quickly as legally and technically practicable;
• Refund any deposits made, less any processing costs, to the originating payment method.

Parents or guardians who believe their child may have accessed or registered on monte77 are encouraged to contact us immediately using the details in Section 16. We will treat all such reports as a priority.

13 Security Measures

Monte77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key measures include:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data — including KYC documents and payment information — is encrypted at rest using industry-standard encryption;
• Access controls: Personal data is accessible only to employees and service providers who require it to perform their specific roles, subject to role-based access control policies;
• Two-factor authentication: Available for all player accounts to provide an additional layer of access security;
• Password security: Passwords are stored using a one-way cryptographic hash function — we never store passwords in plain text and our staff cannot view your password;
• Regular security audits: We conduct periodic security assessments of our platform, systems, and third-party service providers;
• Incident response: We maintain a documented data breach response procedure. In the event of a data breach that presents risk to individuals, affected parties and relevant authorities will be notified as required by applicable law.

While we take all reasonable steps to protect your data, no system is entirely immune to security risks. You can help protect your account by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials.

14 Third-Party Links

The monte77 platform does not include outbound links to third-party websites as a matter of platform design policy. In the event that any third-party content, payment gateway interface, or game provider interface is accessible from within the platform, please note that such third parties operate their own independent privacy policies.

Monte77 is not responsible for the privacy practices or data handling of third-party payment processors, game software providers, or any other external services that may be accessed during your use of our platform. We encourage you to review the privacy policies of any third-party service providers whose interfaces you interact with.

15 Changes to This Policy

Monte77 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform operations.

Where changes are material — meaning they affect how we use your data in a significant way — we will provide advance notice via email to your registered address or via a prominent notice on the Platform prior to the changes taking effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of our practices), we may update this Policy without prior notice.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed of how we protect your information.

Your continued use of the monte77 platform following notification of any changes to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and close your account in accordance with the process described in our Terms and Conditions.

16 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by monte77, please contact our Data Protection team:

When submitting a data rights request, please include your full name, registered email address, and a description of the specific right you wish to exercise or the specific concern you wish to raise. We may need to verify your identity before processing the request.

If you are not satisfied with our response to a data rights request or a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.