csk77 Privacy Policy

This Privacy Policy ("Policy") describes how csk77 ("csk77", "we", "us", "our") — the operator of the online gaming platform at csk77.app — collects, processes, stores, and protects the personal data of individuals who register for or use the Platform ("you", "your", "User").

This Policy is incorporated into and should be read alongside csk77's Terms & Conditions. By creating a csk77 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

csk77 is committed to handling personal data responsibly and in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and the applicable data protection requirements of our international gaming authority licence. We do not treat privacy as a compliance formality — it is a genuine part of how we operate.

When you register for or use a csk77 account, we collect personal data that you provide to us directly, including:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for mandatory age verification — csk77 is strictly 21+);
• Malaysian mobile number and email address;
• Residential address;
• Identity verification documents (e.g., MyKad, passport) submitted during KYC;
• Payment method details used for deposits and withdrawals, including e-wallet identifiers (Touch 'n Go, Boost) and bank account information (Maybank, CIMB, Public Bank);
• Communications submitted via live chat, email, or support tickets.

When you access the Platform, csk77 automatically collects certain technical and behavioural data, including:

• IP address and approximate geolocation;
• Device type, operating system, browser type and version;
• Login timestamps and session duration;
• Pages visited, games played, bets placed, and in-session navigation patterns;
• Referral source (how you arrived at csk77.app);
• Cookie and similar tracking technology data as described in Section 6.

In certain circumstances, csk77 may receive personal data about you from third parties, including identity verification service providers, fraud detection agencies, payment processors, and licensing authority compliance checks. This data is used exclusively for the purposes described in this Policy.

csk77 uses personal data collected from Users for the following purposes:

• Account administration: creating and managing your csk77 account, authenticating your identity at login, processing deposits and withdrawals, and maintaining your transaction history;
• Legal compliance: fulfilling age verification obligations, anti-money laundering (AML) due diligence, Know Your Customer (KYC) requirements, and reporting obligations to relevant regulatory authorities;
• Service delivery: enabling access to all Platform features including live casino, slots, sportsbook, poker, and e-sports betting;
• Fraud prevention and security: detecting and investigating unauthorised access, suspicious betting patterns, collusion, bonus abuse, or other conduct prohibited under the Terms & Conditions;
• Responsible gaming: monitoring gaming behaviour to identify potential indicators of problem gambling and, where appropriate, offering or applying responsible gaming tools;
• Customer support: responding to your queries, resolving disputes, and maintaining records of communications;
• Platform improvement: analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, and game catalogue;
• Marketing communications: where you have provided explicit consent, sending you promotional offers, bonus notifications, and platform updates relevant to your csk77 account. You may withdraw consent at any time.

csk77 processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between you and csk77 (i.e., to operate your account, process transactions, and deliver the Platform's services);
• Legal obligation: processing required to comply with applicable laws, including the Malaysian PDPA, AML regulations, licensing authority requirements, and tax reporting obligations;
• Legitimate interests: processing for fraud prevention, security monitoring, responsible gaming compliance, and the improvement of Platform services, where these interests are not overridden by your fundamental rights;
• Consent: processing for marketing communications and non-essential analytics cookies, where you have provided explicit consent and retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

csk77 does not sell, rent, or trade personal data. We may share your personal data with carefully selected third parties only in the following circumstances:

csk77 engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include: identity verification and KYC providers, payment processors and e-wallet operators (including Touch 'n Go eWallet, Boost, and banking partners), fraud detection technology providers, and cloud hosting infrastructure providers. All such providers are contractually prohibited from using your data for their own independent purposes.

csk77 may disclose personal data to regulatory authorities, law enforcement agencies, licensing bodies, or courts of competent jurisdiction where required or permitted by applicable law, including disclosures related to AML investigations, licensing compliance audits, or court orders.

In the event of a merger, acquisition, or sale of all or part of csk77's business assets, personal data held by csk77 may be transferred to the acquiring entity. Users will be notified of any such transfer and the applicable privacy terms of the successor entity.

csk77 uses strictly necessary cookies that are essential to the operation of the Platform. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing the functionality of your csk77 account. They do not track your activity for marketing purposes.

With your consent, csk77 may use analytics cookies to collect aggregated, anonymised data about how Users interact with the Platform — pages visited, features used, session durations, and technical error rates. This data is used solely to improve Platform performance and user experience. You may withdraw consent at any time by adjusting your browser cookie settings.

csk77 does not permit third-party advertising networks to place tracking cookies on the Platform. No csk77 User data is shared with advertising technology platforms for the purpose of targeting advertisements on third-party websites or applications.

csk77 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, and contractual obligations. Specific retention principles applied by csk77 include:

• Active account data is retained for the lifetime of your csk77 account plus any applicable post-closure retention period required by AML regulations (typically five years from the date of account closure);
• Transaction records, including deposit and withdrawal history, are retained for a minimum of five years in accordance with AML and licensing requirements;
• Identity verification documents submitted during KYC are retained for the period required by our licensing authority, typically five years post-verification;
• Customer support correspondence is retained for three years from the date of last interaction;
• Anonymous analytics data from which individual identification is not possible may be retained indefinitely for Platform improvement purposes.

When personal data is no longer required and no legal obligation to retain it exists, csk77 will securely delete or anonymise it.

csk77 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.3 encryption for all data transmitted between your device and csk77 infrastructure;
• Bcrypt hashing with per-user salts for all stored passwords — your password is never stored or accessible in plain text;
• Two-factor authentication (2FA) available to all csk77 account holders;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• 24/7 automated monitoring for anomalous login patterns, suspicious transactions, and potential data breach indicators;
• Regular security audits and penetration testing of Platform infrastructure.

While csk77 applies rigorous security measures, no system is entirely immune to risk. In the event of a data breach that poses a significant risk to Users, csk77 will notify affected individuals and relevant authorities in accordance with applicable data protection law and within the timeframe required by our licensing authority.

Subject to applicable Malaysian data protection law and our licensing authority's requirements, you have the following rights in relation to your personal data held by csk77:

• Right of access: you may request a copy of the personal data csk77 holds about you;
• Right of correction: you may request correction of inaccurate or incomplete personal data;
• Right to withdraw consent: where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to restrict processing: in certain circumstances, you may request that csk77 restrict the processing of your personal data;
• Right to erasure: you may request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to object: you may object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, please contact csk77 via live chat on the Platform or at [email protected]. We will respond to all verified requests within thirty (30) calendar days. We may require identity verification before processing any data subject request to protect against unauthorised access to another person's data.

The csk77 Platform is strictly intended for adults aged 21 and above. csk77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the csk77 registration process and is further enforced through KYC procedures.

If csk77 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, the data will be deleted promptly to the extent not required to be retained by law, and any deposits or winnings associated with the account will be dealt with in accordance with csk77's Terms & Conditions.

The csk77 Platform does not contain links to external third-party websites within its main interface. However, where game studios or payment processors provide embedded interfaces within the Platform, those parties operate under their own privacy policies. csk77 is not responsible for the privacy practices of embedded third-party service providers beyond the contractual data processing obligations described in Section 5.1.

csk77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Users via email notification to the registered address on file and/or a prominent notice on the Platform no less than seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the csk77 Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree with any changes, you should close your account before the effective date.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by csk77, please contact our data protection team through the following channels: