At Pedas77, protecting your personal data is not a compliance exercise — it is a core part of how we operate. This Policy explains exactly what we collect, why we collect it, how it is used, and what rights you have over your own information.
Six core principles that guide every data decision we make at Pedas77.
All personal data and financial records are stored using industry-standard AES-256 encryption. Data at rest and in transit is fully protected against unauthorised access.
Pedas77 does not sell, rent, or trade your personal data to third parties for commercial purposes — full stop. Your information is used to operate the Platform, never to profit from your profile.
You have the right to access, correct, port, and request deletion of your personal data at any time. We process all data rights requests within 30 days of verified submission.
We collect only the data that is strictly necessary for account management, KYC compliance, payment processing, and service delivery. We do not collect data speculatively.
Any third-party service provider that handles Pedas77 player data — payment processors, KYC vendors, analytics providers — is bound by a formal data processing agreement with equivalent security standards.
This Privacy Policy is reviewed and updated at minimum annually, or immediately following any material change in data practices. Version history is maintained for transparency.
This Privacy Policy ("Policy") describes how Pedas77 ("we", "us", "our", "the Platform", "Pedas77"), operating the online gaming platform accessible at https://pedas77.cam, collects, uses, stores, and protects the personal data of users ("you", "your", "Player") who access or use our services.
Pedas77 is committed to responsible data stewardship. We recognise that players using our Platform — particularly those based across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — place a significant degree of trust in us when they share their personal information. That trust is not taken lightly.
This Policy applies to all personal data processed in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), financial transactions, customer support interactions, and general Platform usage. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please do not create an account or use the Platform.
For the purposes of this Policy, the following terms carry the meanings set out below:
The categories of personal data Pedas77 collects from players are set out in the table below. We collect only what is necessary for the purposes described in this Policy.
| Category | Examples | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad / passport number | Registration & KYC |
| Contact Data | Email address, mobile phone number, residential address | Registration & KYC |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), transaction history, deposit and withdrawal records | Payment processing |
| KYC Documents | Photographs of identity documents, selfie verification images, proof of address documents | KYC verification |
| Account Data | Username, encrypted password, account balance, bonus history, preferences, responsible gambling settings | Account management |
| Transactional Data | Betting history, game logs, session records, win/loss records, wagering data | Platform use |
| Technical Data | IP address, device type, browser type, operating system, session duration, referring URLs | Platform use & analytics |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Customer support |
| Marketing Preferences | Communication opt-in/opt-out records, promotion redemption history | Marketing & CRM |
Pedas77 does not knowingly collect Special Category Data. If any such data is inadvertently received — for example, if a player voluntarily discloses health information in a responsible gambling context — it will be handled with the highest level of protection and used only for the player's direct benefit.
Pedas77 collects personal data through the following channels and mechanisms:
Pedas77 processes your personal data for the following specific, legitimate purposes:
Each processing activity carried out by Pedas77 rests on one of the following recognised legal bases:
Pedas77 does not sell personal data. We share personal data only in the limited circumstances described below and only to the extent strictly necessary for the stated purpose:
Certain third-party service providers process personal data on our behalf under formal data processing agreements. These include payment processors (handling MYR transactions via DuitNow, FPX, e-wallet providers), identity verification service providers, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection and analytics services. All such processors are contractually bound to process data solely as directed by Pedas77 and to maintain security standards equivalent to or exceeding those described in this Policy.
Pedas77 will disclose personal data to regulatory bodies, law enforcement agencies, courts, or other public authorities where required to do so by applicable law, court order, or our international licensing conditions. We will, where legally permissible, notify affected players of such disclosures.
In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of Pedas77's assets, your personal data may be transferred to the acquiring entity as part of that transaction, provided that the acquiring entity agrees to process it under equivalent data protection standards. Players will be notified of any such change in data controller.
Where Pedas77 participates in cross-platform self-exclusion programmes, limited player identification data (sufficient to apply exclusion measures) may be shared with participating platforms in that network. This sharing is performed only with your knowledge or at your request.
Pedas77 will never disclose your personal data to third-party advertisers, data brokers, or commercial profiling companies. Any third party requesting data without a valid legal basis or processor agreement will be refused.
As an international online gaming platform operating under international licensing, Pedas77 may transfer and store personal data on servers located outside of Malaysia. Where such transfers occur, Pedas77 ensures that equivalent data protection safeguards are in place, including:
Malaysian players whose data is transferred internationally retain the same rights under this Policy regardless of where their data is stored or processed. For queries about specific transfer mechanisms applicable to your data, contact us at [email protected].
Pedas77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing conditions. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account plus 5 years post-closure | Licensing obligation / AML compliance |
| KYC Documents | 5 years from account closure or last transaction | International licensing requirement |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping / legal obligation |
| Betting & Gaming Logs | 3 years from session date | Dispute resolution / licensing |
| Customer Support Records | 3 years from last interaction | Legitimate interest / dispute resolution |
| Technical / Log Data | 13 months from collection | Security monitoring / fraud prevention |
| Marketing Preferences | Until withdrawal of consent, plus 1 year | Consent record-keeping |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.
The Pedas77 Platform uses cookies and similar tracking technologies to enhance the user experience, maintain secure sessions, and collect analytical data. The categories of cookies we deploy are as follows:
Non-essential cookies (functional and analytical) are deployed with your consent, which you may grant or withdraw by adjusting your browser settings or using the cookie preference controls available on the Platform. Withdrawal of consent for non-essential cookies will not affect your ability to use core Platform features.
Pedas77 does not deploy third-party advertising cookies or cross-site tracking cookies. No behavioural advertising profiling is conducted using data from your Platform usage.
You have a range of rights with respect to the personal data Pedas77 holds about you. These rights are summarised below. To exercise any of these rights, contact us at [email protected] with a description of your request and sufficient information to verify your identity. We will respond within thirty (30) calendar days of receiving a complete, verified request.
We process all data rights requests free of charge. We may ask for proof of identity before actioning a request to protect against fraudulent data access. We will always let you know if we are unable to fulfil a request, and explain why.
Pedas77 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following controls:
Notwithstanding these measures, no online service can guarantee absolute security. In the event of a data breach that is likely to adversely affect your rights, Pedas77 will notify affected players promptly and will take immediate steps to contain, investigate, and remediate the breach.
The Pedas77 Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21 under any circumstances.
Age verification is a mandatory step in the Pedas77 account registration and KYC process. Where we discover or have reasonable grounds to believe that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation during registration or otherwise — we will immediately suspend the relevant account, initiate deletion of the associated personal data, and return any deposited funds to source where technically feasible.
If you are a parent or guardian and believe that a minor under your care has registered an account on Pedas77 without consent, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.
Pedas77 may send you promotional communications — including bonus offers, Liga Super Malaysia match promotions, EPL special events, UFC fight-night offers, and Platform updates — where you have provided explicit opt-in consent at the time of registration or subsequently through your Account Settings.
Marketing communications may be delivered via email, SMS, or in-Platform notification, depending on your stated communication preferences. We do not send unsolicited WhatsApp messages or third-party push notifications without prior consent.
You may withdraw your consent to marketing communications at any time through any of the following methods:
Opt-out requests are processed within five (5) business days. Please note that opting out of marketing communications does not affect transactional notifications — such as deposit confirmations, withdrawal updates, and KYC request notices — which will continue to be sent as they are necessary for account management.
Pedas77 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published at https://pedas77.cam/privacy-policy with the effective date of the most recent revision clearly indicated.
Where amendments are material — meaning they substantially alter the manner in which we process your personal data or meaningfully affect your rights — Pedas77 will notify registered players via email using the address on file. It remains your responsibility to keep your registered email address current.
Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you should cease using the Platform and contact us to request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Pedas77, please contact our Data Protection team through the following channels:
We are committed to resolving all privacy enquiries promptly and transparently. Where a data rights request cannot be fulfilled in full, we will explain the reason in writing.
We built Pedas77 for Malaysian players — and that means treating your data with the same level of respect you'd expect from any trusted local brand. Questions about your data? Our team is ready around the clock.
For players aged 21 and above only. Please gamble responsibly.