Galaxy77 Privacy Policy

This Privacy Policy ("Policy") is issued by Galaxy77 ("Galaxy77", "the Platform", "we", "us", "our") and applies to all personal data collected and processed in connection with your use of the Galaxy77 website at https://galaxy77.cam and all associated services offered through the Platform.

Galaxy77 is an online casino and sports betting platform operated under an international gaming licence. As part of our operations, we are required to collect certain personal information from our Players in order to provide our services, verify identity, process payments, and comply with our regulatory obligations.

We are committed to protecting the privacy and security of your personal data. This Policy describes in clear terms what data we collect, why we collect it, how we use it, with whom we may share it, how long we retain it, and what rights you have over it.

By registering an account or using the Galaxy77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not access or use the Platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, account number, location data, or one or more factors specific to that person.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. Galaxy77 acts as the Data Controller for all Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller pursuant to a written agreement.
• "Player" / "User" / "you" means any individual who registers an account with or otherwise accesses the Galaxy77 Platform.
• "KYC Data" means identity verification documentation, including government-issued identification documents such as the Malaysian Identity Card (MyKad) or passport, submitted as part of the Know Your Customer verification process.
• "Cookies" means small text files placed on your device by the Galaxy77 Platform to facilitate functionality, analytics, and user experience improvements.

Galaxy77 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, Galaxy77 determines the purposes for which your Personal Data is processed and the means by which such processing is carried out.

Galaxy77 operates under an international online gaming licence. Our data processing activities are governed by the requirements of that licence as well as the applicable data protection standards that we implement as a matter of operational policy.

For any data protection enquiries, requests to exercise your rights under this Policy, or complaints regarding our data handling practices, please contact us using the details set out in Section 16 of this Policy.

Galaxy77 collects the following categories of Personal Data in connection with the provision of our services:

Galaxy77 collects Personal Data through the following means:

• Direct Provision: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to promotions and surveys.
• Automated Collection: Technical and Usage Data collected automatically through cookies, web beacons, and server logs when you access and interact with the Platform. This includes your IP address, device characteristics, and browsing behaviour within the Galaxy77 environment.
• Payment Processing Partners: Information returned by approved Malaysian payment processors (including FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, and GrabPay) in connection with transaction confirmation and fraud prevention. Galaxy77 does not receive or store your full banking credentials or e-wallet passwords.
• Identity Verification Providers: Where a third-party KYC verification service is engaged to assist with document authentication, relevant verification outcomes may be shared with Galaxy77 to support the account verification process.
• Gaming Platform Providers: Game usage and session data generated through the integrated gaming software providers that power the Galaxy77 casino and sports betting sections.

Galaxy77 processes your Personal Data for the following purposes, each supported by an identified lawful basis:

• Account Registration and Management: To create and administer your Galaxy77 account, authenticate your identity, and provide access to Platform services. Basis: performance of a contract with you.
• Identity Verification (KYC): To verify your age (21+ requirement), identity, and the source of your payment methods in accordance with our licensing obligations and anti-money laundering requirements. Basis: legal obligation and legitimate interests.
• Payment Processing: To facilitate deposits and withdrawals in MYR via approved Malaysian payment channels including FPX, DuitNow, and e-wallets. Basis: performance of a contract with you.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, underage gambling, and other Prohibited Conduct as defined in our Terms and Conditions. Basis: legitimate interests and legal obligation.
• Customer Support: To respond to your queries, complaints, and support requests, including withdrawal issues, account access problems, and responsible gambling enquiries. Basis: performance of a contract with you.
• Responsible Gambling: To implement and monitor deposit limits, self-exclusion requests, session controls, and other player protection measures. Basis: legal obligation and legitimate interests in player welfare.
• Platform Improvement: To analyse usage patterns, improve Platform functionality, test new features, and enhance the overall user experience for Malaysian players. Basis: legitimate interests.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus updates, and Galaxy77 news relevant to your account. Basis: consent. You may withdraw consent at any time.
• Legal and Regulatory Compliance: To comply with our obligations under our international gaming licence, including recordkeeping, reporting, and cooperation with licensing authority requests. Basis: legal obligation.

Galaxy77 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers: Approved Malaysian payment processors (FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay) and cryptocurrency network processors (BTC, ETH, USDT, BNB) to facilitate deposits and withdrawals. These providers act as Data Processors under written agreements with Galaxy77 and are prohibited from using your data for their own independent purposes.
• Identity Verification (KYC) Providers: Third-party KYC and document verification services engaged to assist with the identity verification process. These providers are bound by confidentiality obligations and data minimisation principles.
• Gaming Software Providers: Integrated casino and sports betting software providers that power the games and markets available on the Galaxy77 Platform. Game session and wagering data is shared with these providers to the extent necessary to deliver the gaming service.
• Fraud Prevention and Security Services: Technology partners engaged to assist with fraud detection, IP geolocation, device fingerprinting, and risk scoring. Data shared is limited to what is necessary for the specific security function.
• Legal and Regulatory Authorities: Where Galaxy77 is required by its licensing authority, applicable law, or a binding legal process to disclose Player data, we will comply with such requirements. We will endeavour to notify you of such disclosure where legally permissible.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations and require access to certain data in the course of providing their services to Galaxy77.

In all cases where Personal Data is shared with third parties, Galaxy77 takes reasonable steps to ensure that the recipient has in place appropriate technical and organisational measures to protect the data.

As an internationally licensed online gaming platform serving Malaysian players, Galaxy77's data processing operations may involve the transfer of Personal Data to servers, service providers, or affiliates located outside of Malaysia.

Where such transfers occur, Galaxy77 takes reasonable steps to ensure that your Personal Data receives an adequate level of protection consistent with this Privacy Policy. This may include the use of standard contractual clauses with data recipients, the selection of service providers that operate under recognised data protection frameworks, and the implementation of supplementary technical safeguards where appropriate.

By using the Galaxy77 Platform, you acknowledge and consent to the transfer of your Personal Data to locations outside of Malaysia for the purposes described in this Policy.

Galaxy77 retains your Personal Data for as long as is necessary to fulfil the purposes set out in this Policy, including the fulfilment of any legal, regulatory, accounting, or reporting obligations. The following general retention principles apply:

• Active Account Data: Personal Data associated with an active Galaxy77 account is retained for the duration of the account relationship plus a period of five (5) years following account closure, as required by anti-money laundering record-keeping standards under our licensing obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the relevant transaction, consistent with standard financial recordkeeping requirements.
• Marketing Communications Data: Retained until you withdraw consent or for a maximum of two (2) years from your last interaction with Galaxy77 marketing communications, whichever is earlier.
• Technical and Usage Data: Retained in identifiable form for up to twenty-four (24) months, after which it may be retained in anonymised and aggregated form indefinitely for analytical and statistical purposes.
• Support Communications: Retained for a minimum of three (3) years from the date of the relevant communication.

Upon expiry of the relevant retention period, Personal Data is securely deleted or anonymised in accordance with Galaxy77's data disposal procedures.

Galaxy77 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and cookies that remember your login state. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as language settings, display preferences, and regional settings relevant to Malaysian users.
• Analytics Cookies: Used to collect aggregate information about how Players use the Platform — including which pages are visited most frequently, how long sessions last, and what features are used. This helps us improve the Platform experience for Malaysian players. Analytics data is processed in aggregated, anonymised form where possible.
• Performance Cookies: Used to monitor Platform performance, identify technical errors, and ensure service stability — particularly important for live betting on EPL, Liga Super Malaysia, and UFC markets where real-time reliability is critical.

You may manage cookie preferences through your browser's settings. Please note that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. For detailed instructions on managing cookies in common browsers, refer to your browser's help documentation.

Galaxy77 implements a range of technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser or device and the Galaxy77 Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive Personal Data stored in Galaxy77's systems, including KYC documents and financial records, is encrypted at rest using industry-standard algorithms.
• Password Security: Account passwords are stored in hashed and salted form. Galaxy77 does not store plaintext passwords and cannot retrieve your password — only reset it.
• Access Controls: Access to Personal Data held by Galaxy77 is restricted on a strict need-to-know basis. Staff access to Player data is logged and monitored.
• Infrastructure Security: Galaxy77's hosting infrastructure is protected by firewalls, intrusion detection systems, and regular security patching procedures.
• Incident Response: Galaxy77 maintains a documented data breach response procedure. In the event of a security incident that materially affects your Personal Data, we will notify affected Players in accordance with our obligations under applicable standards.

While we take all reasonable precautions to safeguard your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your devices are adequately protected.

Galaxy77 respects your rights in relation to your Personal Data. The following rights are available to you and may be exercised by contacting us using the details in Section 16:

To exercise any of the above rights, please submit a request to Galaxy77 customer support using the contact details in Section 16. We will acknowledge your request promptly and respond substantively within 30 days. In cases of complexity or volume, this period may be extended by up to a further 30 days, of which you will be notified.

The Galaxy77 Platform is strictly for individuals aged 21 years and above. Galaxy77 does not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from an individual under the minimum age requirement, we will take immediate steps to:

• Suspend or close the relevant account;
• Return any real-money balance held in the account to the payment method from which it originated, where technically possible;
• Permanently delete all Personal Data associated with the account as soon as legally permissible.

If you believe that an individual under the age of 21 has registered an account with Galaxy77, please contact us immediately using the details in Section 16 so that we can take appropriate action. For further information on Galaxy77's approach to underage gambling prevention, please visit our Responsible Gambling page.

The Galaxy77 Platform may contain references to or integrations with third-party services, including payment processors, gaming software providers, and customer support tools. These third parties operate under their own privacy policies and are independently responsible for their data handling practices.

Galaxy77 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of Galaxy77, including your chosen Malaysian payment provider (such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, DuitNow, or GrabPay).

Galaxy77 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material, we will provide reasonable advance notice to registered Players via their registered email address or through a prominent notice on the Platform.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Galaxy77 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how Galaxy77 is protecting your personal data. If you have concerns about any changes to this Policy, you may contact us using the details in Section 16 or request account closure in accordance with the Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by Galaxy77, please contact our team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Galaxy77 Platform. Fastest responses during 8:00 PM – 2:00 AM MYT.

When submitting a data rights request, please include your full name as registered on your Galaxy77 account and a clear description of your request. Requests are acknowledged within 48 hours and substantively responded to within 30 days.

Galaxy77 customer support is available to Players across all regions of Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and Sabah and Sarawak.