GCR77 Privacy Policy – Protecting Your Personal Data

GCR77 ("we", "Platform") is committed to protecting the privacy of all users on our platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using the gcr77.bar website, the GCR77 mobile app, and all related services.

By registering an account with GCR77 or using any of our services, you consent to GCR77 collecting and using your information as described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the GCR77 platform.

This Privacy Policy should be read together with Terms and Conditions gcr77, which also oversees the overall use of our platform.

Gcr77 collects various categories of personal data based on the type of interaction you have with the platform. Below is a summary of the data types collected:

For players undergoing full KYC verification, additional supporting documents such as a copy of your identification card, bank statement, or proof of address may be required. These documents are processed and stored with full encryption.

Gcr77 collects your personal data through several different methods, depending on how you interact with our platform:

• Directly from You: Information you provide when registering an account, completing the KYC process, making deposits or withdrawals, contacting the support team, or filling in any form within the gcr77 platform.
• Automatically: Technical data such as IP addresses, device information, and usage data is collected automatically when you access the GCR77 platform via technologies such as cookies, web pixels, and server logs.
• From Third Parties: In some cases, GCR77 may receive information from payment service providers, identity verification agencies, or KYC service providers to help us verify your identity and prevent fraud.
• During Platform Use: Your game history, wagering transactions, and interactions with gcr77 platform features are automatically recorded as part of normal platform operations.

Gcr77 uses collected personal data solely for legitimate purposes necessary to deliver our services effectively. Below are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and managing your gcr77 account, including processing registrations and maintaining accurate account records.
• Financial Transaction Processing: Processing deposits and fund withdrawals securely, verifying account holder identity, and preventing financial fraud.
• Legal Compliance (KYC/AML): Complying with anti-money laundering (AML) regulations and Know Your Customer (KYC) verification requirements mandated by regulatory authorities.
• Support Service Provision: Enabling gcr77's support team to assist you with inquiries, complaints, and technical issues more effectively.
• Platform Security: Detecting and preventing fraud, unauthorized access, multi-account usage, and other illicit activities on the gcr77 platform.
• Product Improvement: Analyzing usage patterns (in aggregate and anonymized form) to understand player needs and improve gcr77 platform features.
• Service Communications: Sending important notifications related to your account, changes to terms, service interruptions, and security updates.

Gcr77 does not sell, lease, or trade your personal data to any party for commercial purposes. However, in operating the platform, we may need to share your data with a limited and selected set of third-party categories in certain circumstances:

• Payment Service Provider: To process deposits and withdrawals, transaction information must be shared with approved payment service providers. All such providers comply with strict PCI DSS data security standards.
• KYC Service Provider: To verify player identity, gcr77 uses third-party services specialising in document verification and background checks. These providers are bound by strict confidentiality agreements.
• Game Service Provider: Game software providers working with gcr77 may receive game-related information necessary to operate the games properly.
• Legal Authorities: GCR77 will disclose personal data to the relevant authorities when required by law, court order, or legitimate regulatory requirement.

All third parties receiving data from gcr77 are required to use it only for the stated purposes, maintain appropriate security standards, and not disclose it further without gcr77's authorisation.

Gcr77 takes a multi-layered approach to protecting every user's personal data. We continuously invest in security infrastructure to ensure your data remains protected against unauthorized access, loss, or alteration.

• 256-bit SSL Encryption: All communications between your device and gcr77's servers are protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks.
• Stored Data Encryption: Sensitive data stored in GCR77's databases — including financial information and KYC documents — is encrypted using modern encryption algorithms.
• Layered Access Control: Access to player data within GCR77's internal systems is restricted to staff who genuinely require it to perform their duties, with strict permission controls in place.
• Secure 24/7 Monitoring: gcr77's security systems are monitored around the clock by a dedicated cybersecurity team ready to respond to any threats or suspicious activity.
• Regular Security Testing: gcr77 conducts regular penetration testing and security audits by independent third-party experts to identify and address any vulnerabilities.

The gcr77 platform uses cookies and similar tracking technologies to enhance the user experience, secure the login process, and understand how players interact with our platform.

Types of cookies used by gcr77:

• Essential Cookies: Required for the platform to function properly — including keeping your login session active and remembering your security preferences. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as preferred language, display settings, and other information that makes using the gcr77 platform more convenient.
• Analytics Cookies: Helping gcr77 understand how players use the platform by collecting aggregated and anonymized usage data. This information is used to improve the platform.

You can manage your cookie settings through your web browser settings at any time. However, disabling certain cookies may affect the functionality of some parts of the GCR77 platform.

GCR77 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: For as long as your account is active or as long as necessary to provide services to you.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction occurs, in line with anti-money laundering (AML) legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship with you ends, or longer if required by applicable regulations.
• Customer Support Records: Retained for 3 years after the last interaction, for reference and quality control purposes.
• Technical Log Data: Typically retained for 90 days for security and technical troubleshooting purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with gcr77's standard procedures.

As a gcr77 platform user, you have certain rights regarding the personal data we store and process. gcr77 is committed to respecting and facilitating the exercise of these rights:

In conducting global operations, GCR77 may need to transfer your personal data to countries outside Malaysia — for example, to cloud service provider servers or to game software providers headquartered in other countries.

GCR77 ensures that any cross-border data transfers are carried out with adequate safeguards, including ensuring that recipients of data in other countries comply with data protection standards equivalent to or exceeding those in Malaysia. This is implemented through legally binding data transfer agreements and/or recognised standard contractual clauses.

GCR77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or platform improvements. The "last updated" date at the top of this page will reflect the date of the most recent amendment.

For material amendments — meaning changes that may significantly affect your rights — GCR77 will notify you via an in-platform notification or by email to your registered address at least 14 days before the amendment takes effect. Continued use of the GCR77 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding how gcr77 handles your personal data, or if you wish to exercise any of the rights outlined in Section 9 above, please contact us:

• Privacy Email: [email protected] — mark the email subject as "Data Privacy Enquiry" for faster handling.
• Live Chat: Available 24/7 via the chat icon at the corner of the gcr77 platform — for general privacy-related enquiries.

GCR77 will endeavour to respond to all privacy-related enquiries within 14 business days. For more complex requests such as data access or deletion requests, processing may take up to 30 business days.