Palamis77 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

1Introduction & Scope of the Privacy Policy

This Privacy Policy is published by palamis77 and applies to all users who access or use our platform — whether via the website, mobile app, or any other digital interface provided by palamis77.

When you register an account, make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or other methods, play slots, baccarat, blackjack, or place bets on badminton, cricket, and football matches at palamis77, you are entrusting us to handle your personal data with care and responsibility.

Palamis77 takes this responsibility seriously. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection regulations. This policy clearly sets out what data we collect, why we need it, how we use it, and the rights you hold as the owner of that data.

2Personal Data We Collect

Palamis77 collects several categories of personal data depending on how you interact with our platform. Below is a full breakdown of the data we may collect:

A. Data You Provide Directly

B. Automatically Collected Data

• Technical Data: IP address, web browser type, operating system, screen resolution, and device information used to access palamis77.
• Usage Data: Pages visited, session duration, click actions, login and logout records, and navigation patterns within the platform.
• Gaming Activity Data: Betting records, game history, wins and losses — required for game integrity and customer support purposes.
• Transaction Data: Complete deposit and withdrawal history in MYR, including payment methods used (TNG, DuitNow, Maybank2u, CIMB Clicks, and others).

3How palamis77 Uses Your Data

Palamis77 uses collected personal data solely for lawful purposes relevant to the operation of our platform. Below is a full list of the data processing purposes:

• Account management: Creating, verifying and maintaining your account at palamis77, including the KYC process required under applicable regulations.
• Transaction processing: Verify and process all deposits and withdrawals in MYR via your chosen payment method — TNG, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), and CIMB Clicks.
• Gaming service provision: Enables access to all games on palamis77, including slots, baccarat, blackjack, poker, Live Casino, and Sports Betting.
• Customer support: Resolve your queries, complaints, and technical issues faster using your account history as context.
• Security and fraud prevention: Detecting suspicious activity, preventing money laundering, and protecting the integrity of the palamis77 platform.
• Legal compliance: Meet the reporting and compliance requirements set by the relevant regulatory authorities.
• Product enhancement: Analyse usage patterns (in aggregate and anonymised form) to improve the user experience on the palamis77 platform.
• Marketing communications: Sending promotional offers, bonus information and the latest updates from palamis77 — only to players who have opted in to receive them.

Palamis77 will not use your data for any purpose other than those stated above without first obtaining your consent.

4Data Sharing & Disclosure to Third Parties

Palamis77 does not sell, rent, or trade players' personal data to any third party for commercial purposes. However, in certain limited situations, palamis77 may need to share your information with the following parties:

• Payment service provider: Entities such as Touch 'n Go gateway providers, GrabPay, DuitNow, and FPX banks receive only the minimum transaction data required to process payments in MYR.
• Gaming software providers: Third-party gaming software providers that supply slots, Live Casino tables and sports games may receive the minimum technical data required for game operations.
• Technical support service provider: Companies that assist palamis77 in operating technical infrastructure, cybersecurity, and customer support are bound by strict confidentiality agreements.
• Legal authorities: palamis77 will disclose data to authorities only when required by Malaysian law, a court order or a valid official investigation.
• Corporate restructuring: In the event that palamis77 undergoes a merger, acquisition, or asset transfer, user data may be transferred as part of that process, subject to prior notification to users.

All third parties that receive data from palamis77 are required to handle it in accordance with security and confidentiality standards equal to or higher than our own.

5Data Security Measures at palamis77

Palamis77 continuously invests in enterprise-grade security infrastructure to protect Malaysian players' personal data against unauthorised access, breaches, loss, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data communications between your browser and palamis77's servers are fully encrypted — no data travels in plaintext that can be read.
• Secure password storage: Passwords are never stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt) with a unique random salt for each account.
• 24/7 Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any suspicious activity in real time.
• Internal access controls: Only palamis77 staff with a legitimate business need are permitted to access player data, and all such access is logged and audited.
• Regular penetration testing: palamis77 conducts regular security testing by independent third parties to identify and address any system vulnerabilities.
• Certified data centres: Your data is stored in data centres holding internationally recognised physical and digital security certifications.

6Cookies & Tracking Technologies

Palamis77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the palamis77 platform.

7International Data Transfers

As part of palamis77's global platform operations, some data may be processed or stored on servers located outside Malaysia. This may occur when we engage gaming software providers or cloud infrastructure services based in other countries.

In all cases of international data transfer, palamis77 ensures that:

• The recipient country or entity provides a level of data protection equivalent to Malaysia's PDPA.
• Legally binding data processing agreements have been executed with all parties that receive data.
• Technical measures such as data encryption in transit are applied to all international transfers.

If you have any concerns about international data transfers relating to your palamis77 account, please contact us at support@palamis77.ws for further information.

8Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data processed by palamis77:

9Data Retention Period

Palamis77 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law. The following are our general data retention guidelines:

• Active account data: Retained for as long as your account remains active with palamis77, and for the required period following account closure to meet legal obligations.
• Financial transaction records (MYR): Retained for a minimum of seven (7) years from the date of transaction in accordance with Malaysian financial and tax legal requirements.
• KYC and identity verification data: Retained for a minimum of five (5) years following the end of the business relationship, in accordance with anti-money laundering (AML) requirements.
• Customer support communication logs: Retained for two (2) years for reference and dispute resolution purposes.
• Marketing data (with consent): Retained until you withdraw your marketing consent or close your account.

Once the designated retention period expires, data will be securely deleted or anonymised in accordance with established procedures.

10Child Protection

Palamis77 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

Should palamis77 discover that a minor's personal data has been inadvertently collected, we will take immediate action to delete that information from our systems and close the relevant account without delay.

If you are a parent or guardian and discover that your underage child has registered an account at palamis77, please contact us immediately at support@palamis77.ws and we will resolve the matter promptly and discreetly.

11Amendments to the Privacy Policy

Palamis77 reserves the right to modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or updates to the services we offer.

When material changes are made to this Privacy Policy, palamis77 will notify players via:

• A prominent notice on the palamis77 platform homepage for a minimum of 30 days
• Notification email to your registered email address
• In-app notification via the palamis77 mobile app (where applicable)

The "Updated" date at the top of this document always reflects the latest version of our Privacy Policy. Continued use of the palamis77 platform following notification of any amendments constitutes acceptance of the updated terms.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how palamis77 handles your personal data, or if you wish to submit any privacy rights request, please contact our Data Protection Officer:

• Privacy Email: support@palamis77.ws (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 on the palamis77 platform in Bahasa Melayu
• WhatsApp: Support number in your account after logging in

Our team is committed to responding to all privacy-related enquiries within 14 business days from the date of receipt. If the matter cannot be resolved to your satisfaction, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.