Privacy Policy

Puma77 ("Company", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the Puma77 online gaming platform at puma77.click ("Platform", "Site"). This Privacy Policy ("Policy") describes in full how we collect, use, store, share, and protect personal data in connection with the provision of our services.

This Policy applies to all users of the Platform ("you", "Player", "User"), including registered account holders and visitors who browse the Site without registering. It is to be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated herein by reference.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, either directly or in combination with other information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — Puma77, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third party that processes personal data on behalf of Puma77 under a written data processing agreement.
• "KYC Data" — identity verification documents and information collected as part of the Know Your Customer compliance process, including government-issued identification, proof of address, and associated biometric data.
• "Technical Data" — automatically collected information including IP address, browser type, device identifiers, session duration, referral URL, and interaction logs.
• "Cookie" — a small text file placed on your device by the Platform for the purposes of session management, analytics, and personalisation.

Puma77 collects personal data through several channels: directly from you at registration and during account use, automatically through your interaction with the Platform, and in limited cases from regulated third-party verification partners. The categories of data we collect include:

3.1 Account Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are 21 years of age or older).
• Residential address, including postcode and country.
• Email address and chosen username.
• Mobile phone number (where provided for two-factor authentication).
• Password (stored in hashed, non-reversible form — never in plain text).

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued identification (Malaysian MyKad, Driver's Licence, or Passport).
• Proof of residential address documents (utility bills, bank statements, or official government correspondence dated within three months).
• Selfie photographs taken in conjunction with identity documents as required by our compliance process.
• Proof of payment method ownership where required to complete withdrawal processing.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references.
• Payment method identifiers (e.g., DuitNow account reference, Touch 'n Go eWallet ID, Maybank2u account suffix, FPX reference numbers). Full payment credentials are processed exclusively by our licensed payment partners — Puma77 does not store full bank account numbers, card numbers, or e-wallet PIN codes.
• Currency denomination and exchange rate records where cryptocurrency transactions are involved.

3.4 Gaming Activity Data

• Game session logs including game titles played, bet amounts, outcomes, and timestamps.
• Sports betting selections, odds accepted, and settlement records.
• Bonus redemption history, wagering progress, and promotional participation records.
• Responsible gambling tool settings including deposit limits, session alerts, and self-exclusion status.

3.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP lookup.
• Device type, operating system, browser type and version, and screen resolution.
• Pages visited, time spent on each page, click paths, and session duration.
• Referral source (e.g., search engine, affiliate link) where applicable.

3.6 Communications Data

• Records of live chat interactions and email correspondence with our support team.
• Support ticket content, resolution notes, and associated timestamps.
• Marketing preference settings and consent records.

Puma77 processes personal data only where a valid legal basis exists. The legal grounds upon which we rely are as follows:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, transaction processing, and game provision.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, licensing conditions, and requests from lawful authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional analytics features, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Puma77 uses the personal data we collect for the following specific purposes:

1. Account Management: Creating, maintaining, and securing your player account, including password management and two-factor authentication.
2. Identity Verification: Conducting KYC checks to confirm your age (21+) and identity in compliance with regulatory requirements before processing withdrawals.
3. Payment Processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method (DuitNow, Maybank2u, Touch 'n Go eWallet, CIMB Clicks, FPX, etc.) and cryptocurrency channels (BTC, ETH, USDT, BNB).
4. Game Provision: Delivering live casino games, Sic Bo tables, slots, and sports betting markets; recording game sessions and results for audit and dispute resolution purposes.
5. Regulatory Compliance: Meeting our obligations under applicable gaming licensing conditions, AML legislation, and financial crime prevention requirements.
6. Fraud & Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct.
7. Customer Support: Responding to queries, resolving disputes, and providing technical assistance via live chat and email.
8. Responsible Gambling: Monitoring gaming patterns to identify signs of problem gambling and enforcing player-set responsible gambling tools such as deposit limits and self-exclusion.
9. Platform Improvement: Analysing aggregate usage data to improve game selection, payment flows, and overall platform performance.
10. Marketing Communications: Sending promotional offers, bonus notifications, and service updates where you have provided consent, with an unsubscribe option in every communication.

Puma77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only with parties that are bound by appropriate data protection obligations:

• Payment Service Providers: Licensed financial institutions and e-wallet operators (including the providers of DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, and GrabPay) receive only the transaction data required to process your deposit or withdrawal.
• Identity Verification Partners: Regulated KYC and AML compliance service providers who assist in verifying identity documents and screening against sanctions lists. These partners operate under strict data processing agreements.
• Game Content Providers: Third-party game studios that provide certified RNG and live dealer games may receive anonymised session identifiers. No personal identification data is shared with game studios without your explicit consent.
• Regulatory and Licensing Authorities: Where required by our gaming licence or applicable law, we may disclose account and transaction data to our licensing authority or other competent regulatory bodies.
• Law Enforcement: Where legally compelled by a valid court order, subpoena, or formal request from a law enforcement authority, we will disclose the minimum data necessary to comply with the request.
• Fraud Prevention Networks: Aggregated, anonymised data may be shared with industry-wide fraud prevention services to protect the wider online gaming community.

Puma77 uses cookies and similar tracking technologies to operate core platform functionality, analyse usage patterns, and deliver a personalised experience. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for logging in, maintaining your session, and processing transactions. These cannot be disabled without impairing core platform functionality.
• Analytics Cookies: Collect anonymised data about how visitors interact with the Platform, including pages visited and session duration. Used to improve platform performance.
• Functionality Cookies: Remember your preferences such as language, display settings, and responsible gambling tool configurations.
• Marketing Cookies: Used to measure the effectiveness of promotional campaigns. Only activated where you have provided marketing consent.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For full details on cookie usage and management, please refer to our cookie settings panel accessible from the footer of the Site.

Puma77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with Puma77, plus a minimum of five (5) years following account closure to satisfy AML and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, consistent with standard AML record-keeping requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of seven (7) years in accordance with financial record-keeping standards.
• Gaming Session Logs: Retained for a minimum of three (3) years for audit and dispute resolution purposes.
• Support Communications: Live chat and email records are retained for two (2) years from the date of the interaction.
• Marketing Consent Records: Retained for the duration of the consent period and for one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

Puma77 implements a layered, defence-in-depth approach to data security. Our technical and organisational measures include, but are not limited to:

• 256-bit TLS/SSL encryption for all data transmitted between your browser and our servers.
• Encrypted storage for all sensitive personal data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Multi-factor authentication enforced for all internal system access by Puma77 staff.
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure.
• Automated real-time monitoring and alerting for anomalous access patterns or potential data breaches.
• Formal incident response and breach notification procedures aligned with applicable regulatory requirements.

Subject to applicable law and certain regulatory limitations (such as AML record-keeping obligations that may restrict deletion requests), you have the following rights in relation to your personal data held by Puma77:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) calendar days of receiving a valid request. Identity verification may be required before we can act on your request to protect your data from unauthorised access.

The Puma77 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from persons under the age of 21. If we become aware that a minor has provided personal data and created an account, we will immediately suspend the account, cancel any outstanding balance, and delete all associated personal data as soon as technically practicable.

If you are a parent or guardian and believe that your child has accessed or registered on the Puma77 Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

The Puma77 Platform serves players primarily in Malaysia, including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions nationwide. In the course of operating the Platform, certain personal data may be processed by service providers whose servers are located outside Malaysia, including in jurisdictions where data protection laws may differ from those applicable locally.

Where personal data is transferred to jurisdictions outside Malaysia, Puma77 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating appropriate contractual clauses to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection legislation.
• Transfers made only to service providers that maintain certifications or compliance programmes recognised under applicable data protection frameworks.
• Minimisation of the data transferred — only the data strictly required to deliver the relevant service is transferred internationally.

Puma77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will provide notice via a prominent on-site banner or by email to your registered email address no less than seven (7) days before the changes take effect, where practicable.

The "Last Revised" date at the top of this Policy will be updated each time a change is made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way we handle your personal data, or to exercise any of your data rights, please contact the Puma77 Data Privacy team using the details below:

This Privacy Policy was last reviewed and approved on 1 January 2026. Please revisit this page regularly to stay informed of any updates to how Puma77 handles your personal data.