Privacy Policy — knn77

This Privacy Policy ("Policy") is issued by knn77 ("Company", "we", "our", or "us"), the operator of the online casino and sports betting platform accessible at knn77.cam ("Platform"). This Policy describes how we collect, use, store, disclose, and otherwise process personal data relating to individuals who visit, register with, or otherwise interact with the Platform ("you" or "Member").

knn77 serves players across Malaysia, including members located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other communities. We recognise that privacy is a genuine concern for our members and we are committed to handling personal information responsibly, with appropriate technical and organisational safeguards in place.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of your agreement with knn77. By creating an account or using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the following terms carry the meanings set out below:

• Personal Data means any information that relates to an identified or identifiable natural person. This includes, but is not limited to, name, date of birth, identity document number, contact details, financial information, and device identifiers.
• Processing means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, use, disclosure, or deletion.
• Data Controller means the entity that determines the purposes and means of processing Personal Data — in this context, knn77.
• Data Processor means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• Cookies means small text files or similar tracking technologies placed on your device by the Platform, used to maintain session state, analyse behaviour, and improve user experience.
• KYC means Know Your Customer — the identity and document verification process applied to members to confirm eligibility, prevent fraud, and meet applicable compliance requirements.
• Sensitive Data means categories of Personal Data that attract a higher degree of protection, including identification document details and financial account information.

The categories of Personal Data we collect depend on how you interact with the Platform. The principal categories are set out in the table below:

We do not knowingly collect Personal Data from individuals under 21 years of age. If we discover that data has been submitted by a person below the minimum age, we will take prompt steps to delete that information and close the associated account.

Directly from You

The majority of Personal Data we hold is provided directly by you. This occurs when you complete the account registration form, submit identity documents for KYC verification, communicate with the support team, update your account profile, or participate in promotions that require personal details.

Automatically via the Platform

When you access the Platform, our systems automatically collect certain Technical Data and Usage Data. This includes your IP address, device identifiers, browser information, referring URL, and behavioural data such as pages viewed and buttons clicked. This data is collected through server logs, session management systems, and Cookies as described in Section 8.

From Third-Party Service Providers

We may receive Personal Data from third-party partners involved in identity verification, payment processing, fraud prevention, and regulatory compliance. For example, payment processors handling Malaysian payment methods — including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and RHB — may provide transaction confirmation and verification data to support account management and comply with anti-money laundering obligations.

From Publicly Available Sources

In connection with fraud prevention and compliance procedures, we may collect information from publicly available databases, sanction lists, and adverse media sources to verify the identity and background of members.

knn77 processes Personal Data on the following legal bases, which may apply individually or in combination depending on the specific processing activity:

• Contractual Necessity: Processing is required to fulfil our obligations under the Terms & Conditions, including account creation, transaction processing, bonus administration, and support delivery.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and reporting duties.
• Legitimate Interests: Processing is carried out for our legitimate business interests, including fraud prevention, Platform security, product improvement, and responsible gambling monitoring, provided these interests are not overridden by your fundamental rights.
• Consent: Where required, processing is carried out with your explicit consent. This applies primarily to optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Personal Data collected through the Platform is used for the following purposes:

• Account Management: Creating, maintaining, and administering your account, including processing deposits and withdrawals in MYR and managing account verification status.
• Identity and Age Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with applicable KYC obligations.
• Transaction Processing: Facilitating deposits and withdrawals through supported Malaysian payment channels and maintaining accurate records of all financial activity on your account.
• Customer Support: Responding to support enquiries, resolving complaints, and providing account assistance via live chat and email.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, identity theft, and other prohibited conduct on the Platform.
• Responsible Gambling Monitoring: Identifying patterns of behaviour that may indicate problem gambling and facilitating access to self-exclusion, deposit limit, and cooling-off tools where appropriate.
• Legal and Regulatory Compliance: Meeting obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records required by compliance frameworks.
• Platform Improvement: Analysing usage patterns, game preferences, and navigation behaviour to improve Platform performance, usability, and content relevance.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant updates to members who have provided consent or where a legitimate interest applies, in accordance with your communication preferences.

knn77 does not sell, rent, or trade your Personal Data to unrelated third parties for their own commercial purposes. We may share your data only in the following circumstances:

Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the Platform. These include payment processors supporting Malaysian banking channels, identity verification providers, fraud detection services, cloud infrastructure providers, customer support software vendors, and analytics platforms. All such providers are contractually bound to process Personal Data solely for the purposes we specify and to maintain appropriate security measures.

Regulatory and Legal Disclosure

We may disclose Personal Data to regulatory bodies, law enforcement agencies, financial intelligence units, or courts where required by applicable law, pursuant to a lawful order, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or other unlawful activity.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's assets, Personal Data held about members may be transferred to the relevant successor entity. Affected members will be notified of any such transfer and any material change in data processing arrangements via their registered email address.

With Your Consent

We may share your Personal Data with third parties in any other circumstances where you have given explicit prior consent. You may withdraw such consent at any time by contacting support, though this will not affect processing already carried out.

The Platform uses cookies and similar technologies to support core functionality, measure performance, and improve the member experience. The principal categories of cookies in use are described below:

Strictly necessary cookies are placed without requiring consent as they are essential for Platform functionality and security. For analytics and functional cookies, your consent will be requested upon first visiting the Platform. You may update your cookie preferences at any time through your browser settings.

knn77 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The principal retention periods are set out below:

• Active Account Data: Retained for the duration of your account membership and for a minimum period of five (5) years following account closure, to comply with applicable anti-money laundering and record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with applicable compliance requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to support audit, dispute resolution, and regulatory reporting obligations.
• Support and Communications Records: Retained for a minimum of three (3) years from the date of the last communication to support complaint handling and dispute resolution.
• Marketing Data: Retained until you withdraw consent or opt out of communications, after which contact details will be suppressed rather than permanently deleted to prevent accidental re-contacting.
• Technical and Usage Data: Retained in aggregated or anonymised form after twelve (12) months, with individually identifiable data deleted or anonymised unless required for active security or compliance purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data set.

knn77 implements a layered approach to data security, combining technical controls, organisational measures, and procedural safeguards designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Key security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields — including identity document data and payment instrument identifiers — at rest.
• Role-based access controls limiting staff access to Personal Data to what is strictly necessary for job functions.
• Regular security assessments, penetration testing, and vulnerability monitoring of Platform infrastructure.
• Incident response procedures, including member notification protocols in the event of a data breach that poses a material risk to affected individuals.

No data transmission over the internet or electronic storage system can be guaranteed as completely secure. Although we apply rigorous security standards, we cannot warrant absolute security and recommend that members exercise caution when using public or shared networks to access the Platform.

In the course of operating the Platform, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. This may occur where our infrastructure providers, service processors, or group entities are located in other countries.

Where such transfers occur, knn77 takes steps to ensure that adequate safeguards are in place to protect Personal Data at a standard comparable to applicable data protection requirements. These safeguards may include contractual arrangements with receiving parties, including standard data protection clauses, and where appropriate, assessments of the legal framework in the destination jurisdiction.

By using the Platform and providing Personal Data, you acknowledge that your information may be transferred internationally in accordance with the safeguards described above.

Subject to applicable law and the limitations described below, you hold the following rights in relation to the Personal Data knn77 holds about you:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. You may update certain information directly through your account profile.
• Right to Erasure: In certain circumstances, you may request deletion of your Personal Data. This right does not apply where retention is required by law or for legitimate compliance purposes, such as the mandatory retention of transaction records.
• Right to Restrict Processing: You may request that we limit processing of your Personal Data in certain circumstances, for example while the accuracy of data is under dispute.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of certain Personal Data.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing for that purpose without delay.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

To exercise any of the above rights, please contact knn77 support via live chat on the Platform or via the email address set out in Section 16. We will respond to verified requests within a reasonable period, ordinarily within thirty (30) days. We may need to verify your identity before processing a rights request.

The Platform is strictly intended for adults aged 21 years and above. knn77 does not knowingly collect, process, or store Personal Data relating to individuals below this age threshold. Registration by persons under 21 is prohibited under our Terms & Conditions and applicable operating standards.

We conduct age verification checks as part of the KYC process to help identify and prevent access by underage individuals. Where we discover or are informed that a member is under 21, we will immediately suspend the account, delete associated Personal Data to the extent permitted by law, and void any related transactions.

If you have reason to believe that a person under the age of 21 has registered or interacted with the Platform, please contact knn77 support immediately so that appropriate action can be taken.

The Platform may reference or contain links to third-party services, particularly in the context of payment processing or responsible gambling support resources. knn77 is not responsible for the privacy practices or content of any external websites or services that are not operated by us.

We recommend reviewing the privacy policies of any third-party services you access in connection with your use of the Platform. knn77's privacy obligations extend only to data processed within the Platform environment under our direct control or through contracted Data Processors.

knn77 reserves the right to update or amend this Policy at any time to reflect changes in legal requirements, Platform functionality, data processing practices, or business operations. Where material changes are made, we will notify active members via their registered email address or through a prominent notice on the Platform, with a minimum of seven (7) days' advance notice before the changes take effect.

The date shown at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy. If you do not agree with the updated terms, you must cease using the Platform and may request account closure and data deletion as described in Section 12.

We encourage members to review this Policy periodically so that they remain informed about how knn77 handles their Personal Data.

If you have any questions about this Policy, wish to exercise a data right, or wish to raise a concern regarding how your Personal Data has been handled, please contact the knn77 privacy and support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the Platform.
• Email: [email protected] (plain text only — please copy and paste this address into your email client; it is not a clickable link).

When submitting a privacy-related request, please include your registered username, a clear description of your request or concern, and any relevant account or transaction reference details. This helps us identify your account accurately and respond within the applicable timeframe.

We aim to acknowledge all data rights and privacy enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days of receipt, except where the complexity of the request requires additional time, in which case we will inform you of the expected timeline.