Nego77 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy explains how Nego77 ("we", "our platform") collects, uses, stores, and protects your personal data when you use the nego77.my website and all related services, including Malaysia Super League and EPL Sports Betting, Live Casino, table games, and the VIP Rewards programme.

By registering a Nego77 account or using any of our services, you consent to our collection and processing of your personal data in accordance with this Privacy Policy. If you do not agree with any part of this policy, please stop using the Nego77 platform and contact us to close your account.

This Privacy Policy applies to all registered Nego77 members in Malaysia, including those accessing the platform via smartphone, laptop, or any other device. This Policy forms part of the overall agreement between you and Nego77, together with the Terms & Conditions us.

Nego77 collects the following categories of personal data from members in the context of operating our betting and casino platform:

Nego77 does not collect credit or debit card details directly. All payments via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX are processed through their respective third-party payment service providers, and your full card details never pass through Nego77's servers.

Nego77 collects your personal data through several key channels in the context of your use of our platform:

• Account Registration — Information you provide in the Nego77 registration form, including your name, email, Malaysian phone number, and date of birth.
• Identity Verification — Documents you submit for KYC (Know Your Customer) purposes, such as a copy of your Malaysian IC or passport when requested prior to withdrawal processing.
• Financial transactions — Information associated with deposits and withdrawals via the Malaysian payment methods you use, including the account holder's name for verification purposes.
• Platform Usage — Data generated automatically as you use Nego77, including bets placed on football, badminton, MLBB e-sports, and live casino, as well as your game history.
• Support communications — Information you provide when contacting the Nego77 support team via live chat or email.
• Cookies and Tracking Technologies — Technical data collected automatically when you browse the Nego77 website, as described in Section 7.

Nego77 uses the personal data collected solely for the following purposes, which are directly related to delivering our services to members in Malaysia:

• Identity and age verification — Verifying that every registrant is a real individual aged 18 or above, in line with Malaysian legal requirements and Nego77's Terms & Conditions.
• Account Management — Creates, maintains, and secures your Nego77 account, including processing logins, updating settings, and recovering your account when needed.
• Financial Transaction Processing — Processes deposits via DuitNow, Touch 'n Go, GrabPay, FPX, and other methods, and handles withdrawals of winnings to your registered account.
• Provision of betting and casino services — Allows you to bet on Malaysia Super League, EPL, BWF badminton, IPL cricket, MLBB esports, and play live casino games on the Nego77 platform.
• Fraud Prevention and Security — Identifies and prevents fraudulent activity, money laundering, multi-account abuse, and other security threats to the Nego77 platform and its members.
• VIP Rewards Program — Calculating and crediting weekly cashback, daily sports rebates, and other VIP benefits based on your betting activity at Nego77.
• Service communications — Sends you important notifications about your account, transactions, policy changes, and security-related information.
• Customer support — Resolving enquiries, complaints, and technical issues you report to the Nego77 support team.
• Platform Improvement — Analysing platform usage patterns in aggregate (without identifying individuals) to help us improve the user experience, introduce new features, and optimise Nego77's performance.

Nego77 does not sell or disclose members' personal data to third parties for marketing purposes. However, in the normal course of operating our platform, personal data may be shared with this limited set of third-party categories, and only to the extent necessary:

• Payment service providers — DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX banks (Maybank, CIMB, Public Bank) receive the information required to process your financial transactions. This information is limited strictly to what is necessary to complete each transaction.
• Casino game providers — Nego77's Live Casino game providers receive the session data required to deliver the game to you. Your full name and identity information are not shared with game providers.
• Technology service providers — Companies that assist Nego77 in operating the platform's technical infrastructure — including server hosting services and cybersecurity tools — may have limited access to data within the scope of their work, and are bound by strict confidentiality agreements.
• Legal authorities — Nego77 will disclose personal data to Malaysian legal authorities, enforcement agencies, or courts when required by law, warrant, or a valid court order. This includes investigations related to money laundering or financial fraud.

In all data-sharing situations described above, Nego77 ensures that the receiving parties are bound by confidentiality and data protection obligations that are equivalent to, or stricter than, the standards we ourselves adhere to. Nego77 does not transfer members' personal data outside of Malaysia except in the circumstances stated above and with adequate safeguards in place.

Nego77 implements multiple layers of technical and organisational security controls to protect members' personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption — All communications between your device and Nego77's servers are encrypted using 256-bit TLS/SSL, ensuring your data remains unreadable even if intercepted by a third party during transmission.
• Hashed password storage — Nego77 account passwords are never stored in plain text. They are stored using a one-way cryptographic hashing algorithm that cannot be reversed to recover the original password, even by Nego77 staff.
• Two-factor authentication (2FA) — Members can enable two-factor authentication for an additional layer of protection on their Nego77 account. Once activated, logging in from a new device will require a verification code sent to your registered phone number.
• Suspicious activity monitoring — Nego77's automated systems continuously monitor account activity to detect unusual patterns that may indicate unauthorised access or attempted fraud.
• Internal access controls — Only Nego77 staff with a legitimate business need are permitted to access members' personal data, and all such access is logged and monitored on a regular basis.
• Secure Servers — Nego77 member data is stored on servers protected by firewalls, intrusion detection systems, and strict physical security controls.

The Nego77 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you browse the Nego77 website.

Nego77 uses the following types of cookies:

• Essential Cookies — Required for core platform functions such as maintaining your login session, remembering your language preference, and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies — Remembers your preferences and settings, such as your preferred odds display, favourite sports, and display settings. This allows Nego77 to provide a more personalised experience.
• Analytical Cookies — Aggregated information is collected on how members use the Nego77 platform — most frequently visited pages, time spent, and navigation patterns — to help us improve the platform. This data does not identify individuals personally.
• Security Cookies — Used to detect and prevent fraudulent activity, identify bots, and protect the platform against cyber attacks.

You can manage cookie settings through your web browser. However, disabling essential cookies may cause certain Nego77 platform features to not function correctly. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

As a Nego77 member and data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have the following rights regarding the personal data we hold about you:

Nego77 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. Our general data retention policy is as follows:

• Active Account Data — Retained for as long as your Nego77 account remains active and you continue using our platform.
• Financial transaction records — Retained for 7 years from the date of the transaction or account closure (whichever is later), in line with Malaysia's financial and tax legal requirements.
• Identity verification documents — Retained for 5 years after account closure for compliance with Malaysia's anti-money laundering laws.
• Customer support records — Retained for 2 years after the issue is resolved, for reference should a related dispute arise later.
• Technical Log Data — Retained for 12 months for security and incident investigation purposes.
• Cookie data — Calculated separately by cookie type; session cookies expire when you close your browser, while persistent cookies expire after a set period (typically 30 days to 1 year).

Once the retention period expires, your personal data will be securely deleted from all Nego77 systems using methods that ensure the data cannot be recovered. If you request early deletion, we will comply to the extent permitted by our legal obligations.

Nego77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technologies, new Malaysian legal requirements, or other reasonable grounds.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered Nego77 members at least 14 days before the changes take effect.
• Displaying a clear notice on Nego77's main platform page regarding upcoming changes.

Your continued use of the Nego77 platform after an amendment's effective date will be treated as your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you must stop using the platform and close your account before the amendment takes effect.

If you have any questions, concerns, or complaints about how Nego77 handles your personal data, or if you wish to exercise any of the data rights outlined in section 8, please contact us through the following channels:

• Privacy Email: support@nego77.my (please include "Privacy Enquiry" in the email subject line)
• 24/7 Live Chat: Via the chat icon on the Nego77 platform — available around the clock, including public holidays and festive seasons.

Our team will acknowledge your enquiry within 24 hours and provide a full response within 14 working days for data rights requests. For general privacy enquiries, responses are typically provided within 2 working days.