Puma77 Privacy Policy – How We Protect Your Personal Data in Malaysia

Your privacy is more than a policy to us — it is a responsibility we take seriously every day. Find out exactly what we collect, why we collect it, and how it is fully protected.

  1. Home
  2. Privacy Policy

Puma77 Data Protection Commitment

Six core principles that ensure your personal data is always safe with us

256-bit SSL Encryption at All Times

All data transmitted between your device and Puma77's servers is encrypted with 256-bit SSL — the same level of security used by Malaysia's leading banks to protect online transactions.

No Sale of Data to Third Parties

Puma77 has never and will never sell, rent, or share your personal data with any third party for marketing or commercial purposes without your explicit consent.

Restricted & Controlled Data Access

Only Puma77 staff who require access to specific data for authorised operational purposes are permitted to view your information. All access is logged and continuously monitored.

Full Control in Your Hands

You have the right to view, correct, download, or request deletion of your personal data at any time. Requests are processed within 14 business days, no questions asked.

Policy in Plain Bahasa Malaysia

We've written this privacy policy in plain, easy-to-understand English — not dense legal jargon that leaves you more confused than informed. You have every right to know exactly what happens with your data.

Immediate Notification in the Event of a Breach

In the event of any security incident involving your data, Puma77 is committed to notifying you within 72 hours — well ahead of the minimum industry requirement.

Contents
Last updated: 1 January 2026
A Plain-Language Summary of This Privacy Policy

This Privacy Policy describes how Puma77 collect, use, and protect your personal data. We only collect data necessary for platform operations, we do not sell your data to anyone, and you may request access to or deletion of your data at any time. This policy applies to all users of the puma77.xyz platform in Malaysia.

This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy Puma77. By using our platform, you agree to the collection and use of data as described in this document.

1. Introduction – Puma77's Commitment to Your Privacy

Puma77 takes member privacy extremely seriously. In today's digital age, personal data is a valuable asset — and we understand that your trust in us depends greatly on how we handle the personal information you provide when registering and using our platform.

This Privacy Policy is written to address the questions most frequently asked by our Malaysian members: What data is collected? What is it used for? Who can access it? Can I delete my information? We believe you deserve clear answers to all of these questions — not in difficult legal language, but in plain, straightforward English.

As a platform operating exclusively for Malaysian players, Puma77 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. This means protecting your data is not merely a best practice on our part — it is a legal obligation we take fully and seriously.

Puma77 is the data controller for all personal information collected through the puma77.xyz platform. If you have any questions about how we handle your data, please contact us at support@puma77.xyz at any time.

2. Personal Data We Collect

Puma77 only collects data that is genuinely necessary to provide platform services to you. We do not collect excessive or irrelevant information beyond what is needed to operate the platform. The data we collect falls into three main categories:

A. Data You Provide Directly:

  • Full name (as shown on official identification document)
  • Active email address
  • Malaysian phone number
  • Date of birth (for age verification)
  • Payment method details you have registered (account name, account number — not the full card number)
  • Copy of identification document (MyKad or passport) if requested for identity verification
  • Communication history with our support team

B. Automatically Collected Data:

  • Your device's IP address when using the platform
  • Device type and web browser used
  • Operating system (iOS, Android, Windows)
  • Usage log data — pages visited, access times, in-platform actions
  • General geolocation data (state, city) — not precise GPS location
  • Cookie data and similar web tracking technologies

C. Transaction & Gaming Data:

  • Deposit and withdrawal history (amounts, dates, payment methods)
  • Betting and gaming history (game type, bet amounts, outcomes)
  • Credit balance and bonus history
  • Gaming activity data for responsible gambling purposes
Sensitive Financial Information

Puma77 does not store your full credit/debit card number. For transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX — processing is handled by licensed payment providers and we only receive transaction status confirmation, not your full sensitive financial information.

3. Purposes for Using Your Personal Data

Puma77 uses collected personal data solely for lawful purposes that are directly related to the operation of the platform. We do not use your data for any other purpose without your consent. The primary purposes are as follows:

  • Account Management — creating and maintaining your account, verifying your identity at login, processing withdrawal requests, and updating your profile information.
  • Transaction Processing — processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX and others, as well as processing withdrawal of winnings to designated payment methods.
  • Platform Operations — ensuring games run correctly, resolving technical disputes, and maintaining betting and gaming records for reference and audit purposes.
  • Security & Fraud Prevention — to detect and prevent fraudulent activity, money laundering, account misuse, and other security threats.
  • Legal Compliance — to fulfil obligations under Malaysia's Personal Data Protection Act 2010, anti-money laundering (AML) requirements, and directives from relevant regulatory authorities.
  • Responsible Gaming — monitoring gameplay patterns to identify signs of problem gambling and reaching out to members who may need support.
  • Customer Support — responding to enquiries, resolving complaints, and providing technical assistance via live chat, email, and WhatsApp.
  • Service Communications — sending important notifications regarding your account, amendments to terms, or security-related information. This is distinct from marketing communications, which require separate consent.

If Puma77 wish to use your data for purposes not listed above — such as market research or more detailed marketing communications — we will request your explicit consent beforehand and give you the option to decline.

4. Sharing Data with Third Parties

Puma77 does not sell your personal data to anyone. This is an absolute policy with no exceptions. However, in the normal course of platform operations, there are limited situations where data must be shared with specific third parties — and we are fully transparent about who they are and why:

  • Payment Provider — Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, FPX and payment gateway providers required to process your financial transactions. Data shared is limited to the minimum necessary for verification and processing only.
  • Game Provider — Evolution Gaming, Pragmatic Play, PG Soft, Playtech, NetEnt, and other providers may receive the game session data necessary to operate games within the Puma77 platform. This does not include full personally identifiable information.
  • Identity Verification Services — KYC (Know Your Customer) providers who assist us in verifying member identities to comply with anti-fraud legal requirements. This only applies when verification is required.
  • Legal Authorities — information will be disclosed to the police, courts, or regulatory bodies where there is a valid court order or a legal compliance obligation that requires such disclosure.
  • Technical Infrastructure Services — cloud and hosting service providers that store platform data. All such providers are bound by strict data protection agreements with Puma77.

All third parties that receive data from Puma77 are bound by data protection agreements that prohibit them from using your information for any purpose beyond what has been authorised. We select partners whose data security standards are comparable to or higher than our own.

5. Puma77 Data Security Measures

Data security is our number one priority Puma77. We continually invest in the latest security technologies and processes to ensure your personal data is protected at all times. The security measures we have in place include:

  • Encryption in Transit: All data transmitted between your web browser and Puma77's servers is encrypted using TLS 1.3 with 256-bit SSL key length. This means that even if someone were to "intercept" your data traffic, they would be unable to read any of the information.
  • Storage Encryption: Sensitive data stored in Puma77's databases — including personal identification information and payment details — is encrypted at rest using AES-256 standards.
  • Strict Access Controls: A role-based access control (RBAC) system ensures that only staff who require access for specific tasks are able to view the relevant data. All access is automatically logged.
  • Two-Factor Authentication (2FA): Puma77's internal systems enforce mandatory 2FA for all staff accessing systems that contain member data.
  • Regular Security Scanning: The Puma77 platform undergoes regular independent penetration testing and security audits to identify and address any vulnerabilities.
  • Continuous Monitoring: A 24/7 security monitoring system that detects suspicious or unusual activity on the platform in real time.
  • Incident Response Plan: Puma77 has clear procedures in place to respond to any security breaches, including protocols for notifying affected members within 72 hours.

Please note, however, that no digital security system can be guaranteed to be 100% secure against all threats. Puma77 takes all reasonable and practical steps, and we also encourage you to play your part in keeping your account secure — by using a strong and unique password, not sharing your login credentials, and ensuring your devices are kept up to date.

6. Cookies & Tracking Technologies

Platform Puma77 uses cookies and similar web tracking technologies to ensure a good user experience and for platform analytics purposes. Below is an explanation of the types of cookies we use:

  • Essential Cookies: Required for core platform functionality — including maintaining your login session, saving language preferences, and enabling security features. These cookies cannot be disabled without affecting your ability to use the platform.
  • Performance Cookies: Collects anonymised data on how you use the platform — which pages you visit most often, how much time you spend, and where you click. This data helps us improve the overall user experience.
  • Functional Cookies: Stores your personal preferences and settings — such as favourite games, last bet size, and preferred display options — to deliver a more personalised experience.
  • Session Cookies: Automatically deleted when you close your web browser. Used to maintain your session status while you are active on the platform.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect some functionality on the Puma77 platform. For more information on how to manage cookies in your browser, please refer to your browser's help settings.

7. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 and the Puma77 itself, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@puma77.xyz:

Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide a full report within 14 business days of receiving your request.

Right to Rectification

If any data we hold about you is inaccurate or outdated, you have the right to request an immediate correction. We will update the information within 7 business days.

Right to Erasure

You may request deletion of your personal data upon account closure — subject to specific legal retention requirements that obligate us to retain transaction records.

Right to Object

You may object to the use of your data for specific purposes, such as marketing communications. Objections will be actioned within 5 business days and you are not required to provide a reason.

Data Portability Rights

You have the right to receive your personal data in a machine-readable format (CSV or JSON) for transfer to another platform should you choose to do so.

Right to Restrict Processing

In certain situations — such as when there is a dispute over the accuracy of your data — you can request that we restrict processing of your data while the matter is being resolved.

To exercise any of the rights listed above, submit a request to support@puma77.xyz with the subject line "Privacy Rights Request", including your full name and account number. We will verify your identity before processing the request to ensure the security of your data.

Summary — How Puma77 Handles Each Type of Data

A comprehensive overview of what we collect, why we collect it, and whether it is shared

Data Type Collected? Primary Purpose Shared with Third Parties?
Name & Identification Information Identity verification, account management KYC providers only, where required
Email Address Account communications, important notifications Not shared
Phone Number OTP verification, WhatsApp support Not shared
Payment Information (TnG, DuitNow, etc.) Processing deposits & withdrawals Licensed payment providers only
Transaction History Financial records, legal compliance Regulatory authorities where required by law
Gaming & Betting History Platform operations, responsible gaming Not shared
IP Address & Device Data Security, fraud detection Not shared
Cookie Data User experience, platform analytics Not shared
Customer Support Records Complaint resolution, service improvement Not shared

8. Data Retention & Deletion

Puma77 does not retain your personal data for longer than necessary. Retention periods vary according to the type of data and applicable legal requirements:

  • Active Account Data: Retained for as long as your account remains active and open. Data is continuously updated based on your activity.
  • Financial Transaction Records: Retained for 7 years after the transaction date, in accordance with Malaysia's financial compliance and anti-money laundering legal requirements.
  • Gaming & Betting Records: Retained for 3 years for dispute resolution and audit purposes.
  • Customer Support Records: Retained for 2 years from the date the issue is resolved, for reference and quality control purposes.
  • Technical Log Data: Retained for 90 days then automatically deleted unless required for an ongoing security investigation.
  • Closed Account Data: After an account is closed, personal data not subject to the legal retention requirements above will be deleted within 30 days.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. For data stored in backup systems, deletion may take slightly longer depending on the system's backup cycle.

9. Protection of Children's Data

Platform Puma77 is intended for users aged 18 years and above. We strictly prohibit the use of our platform by minors and do not knowingly collect personal data from children.

If we confirm, or have reasonable grounds to believe, that a member is under 18 years of age, the account will be suspended immediately while verification is carried out. If verification confirms the member is indeed underage, the account will be closed and all collected data will be deleted within 14 days.

Parents or guardians who believe that a child under their care has registered an account with Puma77 should contact us immediately at support@puma77.xyz so that prompt action can be taken.

10. Amendments to the Privacy Policy

Puma77 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. When significant changes are made to this policy, we will:

  • Sending email notifications to all registered members at least 14 days before changes take effect — earlier than most other platforms.
  • Displaying a clear notice within the platform upon login for 30 days following the implementation of any amendment.
  • Updating the "Last Updated" date at the top of this document.
  • Maintaining previous versions of this policy, which members may request for historical reference.

Your continued use of the Puma77 platform after any amendment takes effect will be considered your acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account before they come into effect — and we will process your remaining balance withdrawal as normal.

11. How to Contact Puma77 Regarding Privacy

If you have any questions, concerns, or requests relating to your personal data and this Privacy Policy, you may reach our data privacy team Puma77 through the following channels. All enquiries are answered in English by our knowledgeable team:

  • Email: support@puma77.xyz — for formal written requests including data access, correction, or deletion requests. Use the subject line "Data Privacy Enquiry" to expedite the process.
  • Live Chat 24/7: For general questions about the Privacy Policy or how to manage your account's privacy settings.
  • WhatsApp: For casual, quick enquiries in Bahasa Malaysia — our team is ready to respond any time.
Our Committed Response Times

General privacy enquiries: responded to within 24 hours. Data access or deletion requests: processed within 14 business days. Complaints regarding privacy violations: acknowledged within 4 hours and an investigation is initiated immediately.

Data Types Puma77 Collects & How They Are Used

A quick visual guide to understanding how data flows within our platform

Identity Data
  • Full name
  • Date of birth
  • MyKad / passport number

Used for: identity verification, KYC compliance

Contact Data
  • Email address
  • Phone number

Used for: account communications, security OTP, customer support

Financial Data
  • TnG / DuitNow account name
  • Deposit & withdrawal history
  • Credit balance

Used for: payment processing, financial records

Gaming Data
  • Sports betting history
  • Slot & Live Casino game records
  • E-sports activity data

Used for: platform operations, responsible gambling

FAQ – Puma77 Privacy Policy

Answers to the most frequently asked privacy questions from our members in Malaysia

No. Puma77 does not sell, rent, or share your personal data with any third-party advertising or marketing companies for commercial purposes. This is an absolute policy with no exceptions. If you receive marketing communications from Puma77 directly, it is based on the preferences you set during registration — and you can unsubscribe at any time by contacting our support team.

Puma77 does not store your full credit or debit card number. All financial transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX are processed directly through licensed payment gateways that comply with PCI-DSS security standards. Puma77 receives only a verification token and transaction status — not your sensitive card or bank account information. This means that even in a hypothetical breach scenario, your most sensitive financial data would not be at risk.

To request data deletion, send an email to support@puma77.xyz with the subject line "Data Deletion Request" along with your full name and account number. We will first verify your identity, then process your request within 14 business days. Please note that certain data — specifically financial transaction records — must be retained for 7 years in accordance with Malaysian legal requirements relating to finance and anti-money laundering. Data not subject to these requirements will be fully deleted as requested.

If your account has been inactive for 12 consecutive months, Puma77 will send an email notification as a reminder. If there is no response or activity after 24 months, the account may be classified as inactive and any remaining balance (if applicable) will be handled in accordance with our inactive account procedures. Data from inactive accounts is retained in line with the standard retention periods outlined in Section 8 of this document. You may reactivate an inactive account at any time by contacting our support team.

Yes. Puma77 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). This includes adhering to PDPA principles such as the general principle (collection for lawful purposes), the notice and choice principle (informing you of data collection), the disclosure principle (not disclosing data beyond its original purpose), the security principle (implementing appropriate safeguards), the retention principle (ensuring data is accurate and current), the data integrity principle (keeping data accurate and up to date), the access principle (allowing you to access and correct your data), and the data transfer principle (ensuring equivalent protections when data is transferred).

You can manage cookies through your web browser settings, but please note that essential cookies are required for the platform to function properly. Disabling all cookies may result in issues such as being unable to stay logged in, impaired security features, or incorrect platform display. Non-essential analytics and performance cookies can be turned off without affecting core functionality — we encourage you to review your browser's cookie settings for detailed options.

Puma77 – Malaysia's Fully Trusted Platform

Security and privacy are not add-on features — they are the foundation of every decision we make

Licensed & Regulated
SSL 256-bit
Malaysia PDPA
No Data Sales
Full Control in Your Hands
24/7 BM Support

Your Data Is Safe. Ready to Play at Puma77?

Over 280,000 Malaysian members have trusted Puma77 to safeguard their data while enjoying slots, Live Casino, Sports Betting, badminton, e-sports and more. Deposit via Touch 'n Go, DuitNow, or any local payment method of your choice.

By registering, you agree to the Terms & Conditions and this Privacy Policy. Minimum age 18 years. Please refer to Responsible Gaming us.

Bahasa Melayu