Privacy Policy NPR77 – Our Commitment to Protecting Your Data

1. Personal Data We Collect

NPR77 collects members' personal data through several means: directly when you complete a registration form or contact customer support, automatically when you use our platform, and in certain cases from trusted third-party sources such as identity verification service providers.

1.1 Data You Provide Directly

When you register an NPR77 account, we ask for the following information, which is required to set up and manage your account:

• Full name as stated on your Malaysian identity card (MyKad)
• Active email address
• Malaysian phone number
• Date of birth (for minimum age verification of 21 years)
• The account password you create yourself

For the identity verification (KYC) process prior to your first withdrawal, we will additionally require:

• Copy of Malaysian identity card (MyKad) — front and back
• Proof of ownership of the payment method used (e.g. screenshot of Touch 'n Go wallet, GrabPay, Maybank2u account or other FPX account)

1.2 Automatically Collected Data

When you use the NPR77 platform, our systems automatically collect technical data required for security and platform operations. This includes your IP address, device information (phone model, operating system, browser type), login session data (login time, logout time, number of login attempts), as well as gaming activity and financial transaction records. This data is used to detect suspicious activity, resolve disputes, and ensure the integrity of all transactions.

2. How NPR77 Uses Your Personal Data

Every piece of data we collect serves a specific purpose. NPR77 does not process personal data for any purpose not stated in this document without first obtaining your separate consent.

2.1 Platform Operations & Account Management

Data is collected primarily to operate the NPR77 platform properly. This includes processing new account registrations, verifying member identities, handling deposits and withdrawals via Malaysian local payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as sending important notifications related to your account and transactions.

2.2 Security & Fraud Prevention

Automatically collected technical data is used to detect and prevent fraudulent activity, money laundering, and unauthorised account use. Our systems analyse login patterns, transaction patterns, and gameplay patterns to identify unusual activity. If our system detects suspicious activity on your account, we will contact you via your registered email or phone number for verification.

2.3 Legal Compliance & Reporting

NPR77 is obligated to comply with Malaysian legal requirements, including the Personal Data Protection Act 2010, anti-money laundering laws, and financial reporting obligations set by the relevant authorities. Financial transaction records are retained for 7 years from the date of the transaction to meet these statutory requirements.

2.4 Service Improvement

Anonymised, non-identifiable usage data is used to understand how members use the NPR77 platform and to improve the overall user experience. This includes analysing the most popular games among Malaysian members, peak usage times and areas requiring improvements in platform interface or performance.

3. Sharing Data with Third Parties

NPR77 understands that your trust depends on how we handle your data when third parties are involved. Our data-sharing policy is clear and consistent: we do not sell or share members' personal data for any third party's commercial purposes.

3.1 Trusted Service Providers

In operating the NPR77 platform, we work with third-party service providers who have signed strict data confidentiality agreements. These include:

• Payment gateway providers: to process transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX. They receive only the information necessary to complete each transaction.
• Identity verification service providers: to conduct KYC checks and age verification for legal compliance
• Game providers: usernames (not real names) are shared with game providers such as Pragmatic Play and Microgaming to ensure games function correctly
• Cloud service providers: servers storing NPR77 platform data are operated by cloud providers that comply with international security standards

3.2 Legally Required Disclosures

NPR77 will disclose members' personal data to the relevant authorities when required by Malaysian law, a valid court order, or an official request from a law enforcement agency. In such circumstances, NPR77 will endeavour to notify the affected member in advance, unless such notification is prohibited by law or court order.

4. The Security of Your Personal Data

NPR77 continuously invests in security infrastructure to ensure that all members' personal data remains protected. The technical and organisational security measures we implement are consistent with the standards of the financial and online services industry.

4.1 Technical Security Measures

• 256-bit SSL Encryption: All communications between your device and NPR77's servers are encrypted using the latest TLS 1.3 protocol.
• Data-at-rest encryption: Sensitive data including passwords and identification information is stored in encrypted form using AES-256 standards
• Two-factor authentication (2FA): Members are encouraged and able to enable 2FA from their account security settings for an additional layer of protection
• 24/7 security monitoring: Our intrusion detection system monitors for suspicious activity continuously, around the clock
• Regular penetration testing: NPR77 conducts regular security audits by independent experts to identify and patch vulnerabilities before they can be exploited.

4.2 Organisational Security Measures

Beyond technology, NPR77 enforces strict internal controls including mandatory security training for all staff, role-based access control policies (not all staff can access all data), tested incident response procedures and regular auditing of data access records to detect any unauthorised access.

4.3 Data Breach Reporting

In the event of a data breach involving NPR77 members' personal data, we will notify affected members within 72 hours of confirming the incident, as required under the Personal Data Protection Act 2010. Notification will be sent via registered email and will detail the type of data affected, the actions we have taken and steps you can take to protect yourself.

5. Your Rights Regarding Personal Data

As an NPR77 member and data subject under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold. NPR77 is committed to making it straightforward for you to exercise these rights without unnecessary procedures.

5.1 Right to Data Access

You have the right to request a copy of all personal data that NPR77 holds about you. To make this request, contact NPR77 customer support via live chat or email at support@npr77.best. NPR77 will fulfil access requests within 14 business days of receiving a complete and valid request.

5.2 Right to Data Correction

If you find that any personal data NPR77 holds about you is inaccurate or out of date, you may request a correction. For basic information such as your email address and phone number, you can update these directly from your NPR77 account profile page. For corrections to more sensitive information such as your name or date of birth, please contact customer support with appropriate supporting documents.

5.3 Right to Data Deletion

When you close your NPR77 account, you may request the deletion of your personal data. NPR77 will delete data that is no longer required. However, certain data may need to be retained for a period prescribed by Malaysian law — for example, financial transaction records must be kept for 7 years under anti-money laundering legislation.

6. Cookies & Tracking Technologies

The NPR77 platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. Cookies are small text files stored on your device when you visit the NPR77 platform.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function — this includes login session cookies and security cookies. These cookies cannot be disabled as the platform will not work properly without them.
• Preference Cookies: Saves your preferences — such as language, display settings, and other configurations — so you don't have to reset them every time you log in.
• Analytics Cookies: Helps us understand how members use the platform for improvement purposes. Data from analytics cookies is anonymised and cannot be traced back to any specific individual.

6.2 Managing Cookies

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the NPR77 platform and you may be unable to log in or access certain features.

7. Marketing Communications & Notifications

NPR77 sends members two types of communications: transactional notifications related to your account and transactions (mandatory, non-unsubscribable) and marketing communications about promotions, new bonuses and platform updates (optional, unsubscribable at any time).

When registering an NPR77 account, you will be asked whether you wish to receive marketing communications. You can change this preference at any time from your account settings page or by contacting NPR77 support. Unsubscribe requests will be processed within 5 business days, after which you will no longer receive marketing emails.

Please note that unsubscribing from marketing communications will not affect the delivery of important account notifications such as deposit confirmations, successful withdrawal alerts, security warnings, and KYC verification notices — as these are essential updates you need to manage your NPR77 account safely.

8. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding NPR77's Privacy Policy or how we handle your personal data, please reach out to our team through the following channels:

• Email Privacy: support@npr77.best — please use the subject line "Data Privacy Enquiry" for faster handling
• Live Chat: Available 24 hours a day, 7 days a week via the NPR77 platform

NPR77 is committed to responding to all privacy-related enquiries within 3 business days. For formal complaints that our team is unable to resolve, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

This Privacy Policy will be updated from time to time to reflect changes in NPR77's operations or legal requirements. When significant changes occur, we will notify all active members via email at least 14 days before the changes take effect. The latest version of the NPR77 Privacy Policy is always available on this page with a clearly indicated update date.