Privacy Policy MVP77 – Your Personal Data Protection

Mvp77 is Malaysia's leading online gaming platform, operating under mvp77.onl. We understand that your trust is the most valuable asset entrusted to us, and protecting your privacy is the cornerstone of that trust.

This Privacy Policy applies to all MVP77 services, including the official website, iOS and Android mobile apps, and all our customer support channels. It covers every interaction you have with our platform — from your first visit as a guest, through to active use as a registered member.

We operate in compliance with Malaysia Personal Data Protection Act 2010 (PDPA), and we regard compliance with these laws not merely as a legal obligation, but as a reflection of our core values toward our users.

Mvp77 only collects data that is strictly necessary to provide quality services and fulfill our legal obligations. Below is a summary of the data categories we collect:

We not collect sensitive data such as health information, religious beliefs, political views, or biometric information — unless specifically required by applicable law and with your explicit consent.

Every piece of data we collect has a clear and legitimate purpose. mvp77 does not collect data for purposes unrelated to platform operations. The primary purposes for using your personal data are as follows:

• Account management: To create, verify, and maintain your member account on the mvp77 platform, including secure login processes and two-factor authentication.
• Transaction processing: To accurately and securely process deposits, withdrawals, and all financial transactions via supported banks and e-wallets.
• Legal compliance (KYC/AML): To fulfill legal obligations under Anti-Money Laundering (AML) regulations and Know Your Customer (KYC) procedures as required by the relevant authorities.
• Platform security: To detect, investigate, and prevent fraud, unauthorized access, system abuse, and suspicious activity that may compromise the security of the platform and its members.
• Service improvement: To analyze usage patterns for product development, user interface improvements, and overall platform performance optimization.
• Customer support: To handle inquiries, complaints, and support requests you submit via live chat, email, or other official support channels.
• Marketing communications: To send promotional information, exclusive offers, and platform updates — subject to the communication preferences you have set.

Mvp77 follows a strict and limited data-sharing policy. Your personal data will not be shared, sold, or transferred to any third party except in the following lawful and necessary situations:

• Payment service providers: Information required is shared with payment processors, partner banks, and e-wallet providers solely for transaction processing purposes. All our payment partners are bound by strict confidentiality agreements.
• Technology service providers: Third-party providers supporting platform technical operations — such as cloud services, cybersecurity systems, and performance analytics — receive only the minimum data necessary and are bound by data processing agreements.
• Legal obligations: mvp77 will disclose data to the relevant authorities when required by court order, regulatory body directives, or lawful law enforcement requests.
• Fraud prevention: In cases involving serious fraud or security threats, relevant information may be shared with authorities or industry platforms for detection and prevention purposes.

The security of your personal data is mvp77's highest priority. We continuously invest in cutting-edge security infrastructure to ensure your data remains protected against increasingly sophisticated cyber threats.

The technical and organizational security measures we implement include:

• 256-bit SSL/TLS Encryption for all communications between your web browser and mvp77 servers — no data is transmitted in plain text.
• At-rest data encryption for all databases storing sensitive member information, including KYC documents and financial data.
• Two-factor authentication (2FA) available to all member accounts as an added layer of protection against unauthorized access.
• 24/7 threat monitoring by our cybersecurity team using real-time intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Regular security audits by independent third parties to identify and address potential vulnerabilities before they can be exploited.
• Strict internal access controls — only mvp77 staff who require access to specific data to carry out their authorized duties.

Mvp77 uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better user experience. We use three main types of cookies:

• Essential cookies (required): Required for core platform operations, including login session verification, security, and basic account preferences. These cookies cannot be disabled as they are essential to platform functionality.
• Performance and analytics cookies: Helps us understand how users interact with the platform — most visited pages, time spent, errors encountered — for continuous improvement purposes. This data is collected in aggregate and does not identify individuals.
• User preference cookies: Saves your personal settings such as language, display preferences, and notification settings so you don't need to reconfigure them every time you log in.

You can manage your cookie settings through your web browser settings. Disabling certain cookies may affect some platform features, but will not block your basic access.

Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data held by MVP77:

To exercise any of the above rights, contact the mvp77 privacy team through the official in-platform support channels. All requests are handled with complete confidentiality.

Mvp77 does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active account data: Retained for as long as your account remains active on the MVP77 platform.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's accounting and AML legal requirements.
• KYC documents: Retained for 5 years after account closure or the date the last document was submitted, whichever is later.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Aggregated analytics data: Can be retained indefinitely as it contains no personally identifiable information.

Once the defined retention period expires, data will be permanently deleted or anonymized using approved procedures.

The mvp77 platform may include integrations with third-party services required for operations — such as payment processors, licensed game providers, and performance analytics tools. Each of these third-party services maintains its own privacy policy.

Mvp77 is not responsible for the privacy practices of independent third-party service providers, even if they are our operational partners. We encourage you to read the privacy policy of each third-party service you use alongside the mvp77 platform.

Mvp77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or improvements in industry data protection standards.

When significant changes occur, we will:

• Displaying a clear notice on the mvp77 platform homepage
• Sending a notification to your registered email at least 7 days before changes take effect
• Updating the "Last Updated" date at the top of this document

Your continued use of the mvp77 platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you disagree with the changes, please contact us to discuss available options.

If you have any questions, concerns, or requests regarding this Privacy Policy or MVP77's use of your personal data, our team is ready to assist.

You may also lodge a complaint relating to personal data protection with Malaysia Personal Data Protection Commissioner if you believe your rights under PDPA 2010 have been violated.