Personal Data Protection

Privacy Policy borneo77
Your Privacy, Our Priority

At borneo77, protecting your personal data is not merely a legal obligation — it is part of our core values. This document transparently explains how we collect, use, store, and safeguard your information at all times.

Updated: January 2026  |  Version 2.4  |  Malaysia PDPA Compliance
256-bit
SSL Encryption
0
Data Sold to Third Parties
24/7
Security Monitoring
PDPA
Legal Compliance

Borneo77 operates with full commitment to user privacy protection in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. This Privacy Policy applies to all users who access or use the borneo77 platform via the website borneo77.onl or our official mobile app. By using our platform, you acknowledge that you have read and fully understood this policy.

01 Information We Collect

Borneo77 collects various types of personal information to enable us to provide a safe, fair, and high-quality service to every user. This data collection is carried out transparently and covers only information that is genuinely necessary.

Information you provide directly:

  • Full name, date of birth, email address, and phone number upon account registration.
  • Identity verification documents such as MyKad or passport for the KYC process.
  • Payment method information including bank account or digital wallet details for deposits and withdrawals.
  • Full address details for verification and compliance purposes.
  • Any communications you send to our support team via live chat or email.

Information collected automatically:

Data Type Example Purpose
Device Data Device type, OS, device ID Security & verification
Network Data IP address, ISP, approximate location Fraud detection
Activity Data Games played, bets, wins Compliance monitoring
Session Data Login time, session duration, clicks Platform upgrade
Cookie Data Session cookies, preference cookies User experience

borneo77 never collects irrelevant or excessive data. Every type of data collected has a clear and legitimate purpose within the context of platform operations.

02 How We Use Your Data

Borneo77 uses your personal information responsibly and only for defined purposes. The following are the primary ways we process your data:

  • Account Management: To create, verify, and manage your account so you can access all platform features without restriction.
  • Transaction Processing: To process deposits, withdrawals, and all financial transactions accurately and promptly through your preferred payment method.
  • KYC Verification: To verify your identity in compliance with anti-money laundering (AML) and financial compliance requirements.
  • Fraud Prevention: To detect and prevent fraudulent activity, money laundering, or any form of platform abuse.
  • Customer Support: To provide accurate and effective assistance when you contact our support team.
  • Service Communications: To send important notifications regarding your account, transactions, or policy changes that you need to be aware of.
  • Platform Upgrade: To analyze aggregated usage patterns in order to improve the user experience and platform features.
  • Responsible Gaming: To monitor gaming patterns and identify users who may need support related to problem gambling.

borneo77 never sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

03 Legal Basis for Data Processing

All personal data processing carried out by borneo77 is based on at least one valid legal basis under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You provide explicit consent during account registration by agreeing to this Privacy Policy. This consent may be withdrawn at any time.
  • Contract Performance: Processing is necessary to fulfil the agreement between you and borneo77, including processing transactions and managing accounts.
  • Legal Obligation: borneo77 is required to process certain data to comply with applicable legal obligations, including AML and KYC requirements.
  • Legitimate Interests: borneo77 has a legitimate interest in processing data for platform security, fraud prevention, and service improvement purposes.

borneo77 is committed to ensuring that every instance of data processing is lawful, fair, and transparent, in line with data protection principles recognized in Malaysia and internationally.

04 Data Sharing with Third Parties

Borneo77 understands that your privacy is invaluable. We only share your personal information in limited and necessary situations, and always ensure that recipients adhere to equivalent data protection standards.

Third parties that may receive your data include:

  • Payment Service Providers: DuitNow, FPX, e-wallet providers, and payment processors that help us securely process your deposit and withdrawal transactions.
  • KYC Service Providers: Third-party identity verification companies that help us meet legal compliance requirements.
  • Game Providers: Game development companies that need to receive minimal session data to ensure games function correctly.
  • Statutory Authority: Government agencies or law enforcement bodies when required by law or a valid court order.
  • IT Infrastructure Services: Hosting and cloud infrastructure providers that support our platform's technical operations.

All third parties receiving borneo77 user data are bound by strict confidentiality agreements and are required to use that data solely for the agreed purposes.

borneo77 has never shared your data with advertising companies, data brokers, or third parties for marketing purposes without your explicit consent.

05 Data Security

Borneo77 invests seriously in data security infrastructure to ensure your personal information is always protected against cyber threats, unauthorized access, and data breaches. Our approach to security is comprehensive and multi-layered.

  • Data Encryption in Transit: All communications between your device and borneo77 servers are protected with TLS 1.3 protocol and 256-bit SSL encryption, ensuring your data cannot be intercepted while in transit.
  • Data Encryption at Rest: Sensitive data such as payment information and identity documents are stored encrypted using AES-256 standards.
  • Strict Access Controls: Only authorised personnel have access to user data, and every access is logged and monitored.
  • 24/7 Monitoring: Our real-time security monitoring system operates around the clock to detect and respond to any threats immediately.
  • Periodic Security Audits: borneo77 conducts regular security audits and penetration testing by independent third parties to identify and address vulnerabilities.
  • Incident Response Plan: We have a comprehensive security incident response procedure in place to minimise the impact in the event of a data breach.

While we take all reasonable measures, no security system is entirely perfect. Users are encouraged to practise good digital security hygiene on their own end as well.

06 Data Retention Period

Borneo77 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by applicable law. Once the data is no longer needed, it will be securely deleted or anonymized.

Data Category Retention Period Reason
Active account information For as long as the account is active Service operations
Financial transaction records 7 years after the transaction PDPA & AML legal requirements
KYC Documents 5 years after account closure Anti-money laundering compliance
Support communication logs 3 years Service records & dispute resolution
Session & activity log data 12 months Security & fraud detection
Marketing data (with consent) Until consent is withdrawn Consented marketing

Once the designated retention period expires, data is securely deleted using methods that ensure it cannot be recovered. Data that must be retained longer for legal requirements is isolated and access to it is strictly restricted.

07 Your Rights as a User

Under Malaysia's PDPA and borneo77's commitment to user privacy, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your data in situations permitted by law.

Right to Restriction

You may request that we restrict the processing of your data under certain circumstances.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes.

Data Portability Rights

You may request your data in a machine-readable format for transfer.

To exercise any of the above rights, please contact the borneo77 support team via live chat or email. We will process your request within 14 calendar days. Note: certain rights may be subject to restrictions for legal or legitimate interest reasons.

08 Cookies & Tracking Technologies

Borneo77 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how users interact with our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies (Required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
  • Preference Cookies: Storing your settings and preferences such as language, time zone, and display preferences to deliver a more personalised experience.
  • Analytics Cookies: Collecting aggregated information about how users interact with the platform to help us understand usage patterns and make improvements.
  • Security Cookies: Helping us identify and prevent fraudulent activity, cyberattacks, and unauthorised access.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and user experience of the borneo77 platform.

borneo77 does not use third-party cookies for advertising purposes. All cookies used are solely for platform operational and security needs.

09 Cross-Border Data Transfers

In the context of borneo77 platform operations, your personal data may be processed or stored on servers located outside Malaysia. This is because we use cloud infrastructure and international service providers that support our platform operations globally.

Borneo77 ensures that every cross-border data transfer is carried out with protections equal to or exceeding those required by Malaysia's PDPA. The measures we take include:

  • Ensuring that data recipients in other countries are subject to comparable data protection laws.
  • Implementing standard contractual data transfer clauses that bind recipients to strict data protection standards.
  • Applying encryption to all data transferred across international borders.
  • Conducting data protection impact assessments (DPIA) for large-scale data transfers.

Although your data may be processed outside Malaysia, the protection standards applied by borneo77 remain consistent and undiminished regardless of where the data is processed.

10 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise any of your privacy rights, borneo77's Data Protection Officer (DPO) team is here to help. We are committed to providing transparent and timely responses.

You can reach us through the following channels:

  • Live Chat: Available 24 hours a day, 7 days a week in Malay and English through the borneo77 platform.
  • Email: [email protected] — for privacy inquiries, please include "Privacy Inquiry" in your email subject line.
  • Response Time: We aim to respond to all privacy-related enquiries within 3 business days, and formal user rights requests within 14 calendar days.

If you believe that borneo77's processing of your personal data does not comply with Malaysia's PDPA, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

borneo77 takes every privacy-related inquiry and complaint seriously. Each case will be thoroughly investigated and you will be informed of the action taken within the stipulated timeframe.

Why Your Privacy Is Safe with borneo77

Six core commitments in protecting every user's personal data

Banking-Grade Encryption

Every bit of data you send and receive through borneo77 is protected by 256-bit SSL encryption — the same technology used by leading financial institutions worldwide to secure online transactions.

Malaysia PDPA Compliance

Borneo77 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We actively ensure that all our data handling practices remain aligned with the latest legal requirements in force in Malaysia.

No Data Sales

Borneo77 has never and will never sell, rent, or trade your personal data to any third party for commercial purposes. Your data belongs to you — we only use it to deliver the services you request.

Real-Time Security Monitoring

Borneo77's security team monitors platform activity around the clock using sophisticated real-time threat detection systems. Any suspicious activity is identified and addressed immediately, well before it can compromise your data.

Periodic Independent Audits

Borneo77 undergoes security and data privacy audits conducted by experienced independent audit firms on a periodic basis. The results are used to ensure our security standards remain relevant and aligned with the latest threats.

Full Control in Your Hands

Borneo77 gives you real control over your personal data. You can access, correct, or request deletion of your data at any time through our support team — with no complicated or drawn-out procedures.

Your Data Is Safe — Starting Today

Join the borneo77 community and enjoy an online entertainment platform that is not only fun, but also places your privacy and data security first — always.

Bahasa Melayu