Privacy Policy

1.Introduction

This Privacy Policy ("Policy") is issued by GUS77 ("GUS77", "we", "us", "our"), the operator of the online casino and sports betting platform located at https://gus77.lat. This Policy describes how we collect, use, disclose, store, and protect personal data provided to us by users ("you", "your", "the Player") of the GUS77 platform and website.

GUS77 operates under international online gambling licensing and is committed to handling personal data responsibly, transparently, and in accordance with the standards established under our licensing framework. Our platform is designed to serve players in Malaysia and all communications, including this Policy, are provided in English.

By registering an account, accessing the GUS77 platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, email address, IP address, financial data, and any other information capable of identifying you directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, GUS77.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required under our licensing framework.
• "Cookies" means small data files placed on your device by a website to store session and preference information.
• "Platform" means the GUS77 website and all associated services accessible at https://gus77.lat.

3.Data Controller

GUS77 acts as the Data Controller in respect of all personal data collected and processed through the platform. As Data Controller, we determine the purposes for which your personal data is used and are responsible for ensuring it is handled in accordance with this Policy.

For all data protection enquiries, requests, or complaints, you may contact our Data Protection point of contact by emailing [email protected] with the subject line "Data Privacy Request".

4.Data We Collect

GUS77 collects personal data across the following categories, depending on how you interact with the platform:

4.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify age eligibility — 21+ requirement)
• Email address
• Chosen username
• Government-issued identification document (e.g., MyKad, passport) — collected during KYC
• Proof of residential address

4.2 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., last four digits of a bank account or e-wallet account reference) — we do not store full card or bank credentials
• Transaction history and account balance records
• Payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong)

4.3 Technical & Usage Data

• IP address and approximate geographic location (country/city level)
• Device type, operating system, and browser information
• Session timestamps, pages visited, and features used
• Betting and gaming activity logs

4.4 Communication Data

• Records of live chat conversations and email correspondence with our support team
• Feedback, complaints, and dispute records
• Marketing preference settings (opt-in or opt-out status)

5.How We Collect Personal Data

We collect personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or update your account profile.
• Automatically — through your use of the platform, via server logs, cookies, and session tracking technology that records technical and usage data.
• From third-party service providers — such as identity verification providers, payment processors, and fraud detection services, who may share data with us as part of their contracted services on our behalf.
• From publicly available sources — where required for fraud prevention, anti-money laundering, or sanctions screening purposes.

6.Legal Bases for Processing

GUS77 processes your personal data on the following legal bases:

7.How We Use Your Personal Data

GUS77 uses your personal data for the following purposes:

• To create, verify, and manage your account on the GUS77 platform.
• To verify your identity and confirm that you meet the eligibility criteria, including the minimum age requirement of 21 years.
• To process your deposits and withdrawals in MYR through your chosen payment method (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong).
• To detect and prevent fraudulent activity, money laundering, and abuse of platform systems.
• To operate our responsible gambling programme, including enforcing deposit limits, self-exclusions, and age restrictions.
• To provide customer support via live chat and email.
• To communicate with you regarding your account, transactions, policy changes, and, where you have opted in, promotional offers.
• To analyse platform usage and improve the performance, design, and content of GUS77's services.
• To comply with legal and regulatory obligations under our licensing framework and applicable law.

8.Data Sharing & Disclosure

GUS77 does not sell your personal data. We may share your personal data with the following categories of third parties only to the extent necessary for the stated purposes:

8.1 Service Providers and Data Processors

We engage trusted third-party service providers who act as Data Processors on our behalf, including identity verification providers, payment processors (including those facilitating local Malaysian payment methods), fraud detection and AML screening services, cloud infrastructure providers, and customer support platform operators. All such providers are bound by contractual obligations to process data only in accordance with our instructions and to maintain appropriate security standards.

8.2 Regulatory and Law Enforcement Authorities

We may disclose personal data to our licensing authority, financial intelligence units, law enforcement agencies, or other governmental bodies where required by applicable law, regulatory obligation, or a valid legal order. We will notify affected users where we are legally permitted to do so.

8.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of GUS77's business, personal data held by GUS77 may be transferred to the acquiring entity. You will be notified of any such transfer that materially affects your data rights.

9.Cookies & Tracking Technologies

GUS77 uses cookies and similar tracking technologies on our website and platform. Cookies are small text files stored on your device that help us deliver and improve our services.

9.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the GUS77 platform. GUS77 does not use cookies for third-party advertising tracking or behavioural profiling for marketing purposes.

10.Data Retention

GUS77 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any mandatory retention obligations under applicable law:

• Account and identity data: Retained for a minimum of five (5) years following account closure or the last transaction, as required under anti-money laundering and licensing obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years for accounting and audit compliance.
• Support correspondence: Retained for three (3) years from the date of the last communication, or longer where related to an unresolved dispute.
• Marketing preference data: Retained until you withdraw consent or request deletion, subject to the above minimums where overlap applies.
• Technical logs: Retained for twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

11.Data Security

GUS77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls limiting staff access to personal data to those with a direct operational need.
• Two-factor authentication requirements for administrative platform access.
• Automated intrusion detection and anomaly monitoring systems operating continuously.
• Regular internal and third-party security assessments and penetration testing.

Notwithstanding these measures, no system of data transmission or storage is completely secure. GUS77 cannot guarantee absolute security and recommends that you take appropriate precautions to protect your own login credentials.

12.International Data Transfers

GUS77 operates under international licensing and utilises cloud infrastructure and service providers that may be located outside Malaysia. Your personal data may therefore be transferred to, stored in, and processed in countries other than Malaysia.

Where such international transfers occur, GUS77 ensures that appropriate safeguards are in place to protect your data, including contractual protections with our service providers that require them to maintain data protection standards consistent with this Policy and our licensing obligations.

By using the GUS77 platform, you acknowledge and consent to your personal data being transferred internationally in the manner described above.

13.Your Data Rights

Subject to verification of your identity and any applicable legal limitations, you have the following rights in respect of your personal data held by GUS77:

13.1 Right of Access

You may request a copy of the personal data GUS77 holds about you, together with information about how it is being processed.

13.2 Right to Rectification

You may request correction of any inaccurate or incomplete personal data held in your GUS77 account.

13.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to GUS77's legal and regulatory retention obligations. Where mandatory retention periods apply, we will suppress active use of your data pending eventual deletion.

13.4 Right to Restrict Processing

You may request that GUS77 restricts its processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to processing on the basis of legitimate interests.

13.5 Right to Object to Marketing

You may withdraw your consent to receive marketing communications from GUS77 at any time by contacting our support team or adjusting your account notification preferences. Withdrawal of marketing consent does not affect our ability to send service-critical communications regarding your account.

13.6 How to Exercise Your Rights

To exercise any of the rights described above, please submit your request in writing to [email protected] with the subject line "Data Privacy Request". We will respond within thirty (30) calendar days of receiving a verified request. Complex requests may require up to an additional sixty (60) days, with prior notification.

14.Children's Privacy

GUS77 is strictly an adult platform. The minimum age requirement to register and use the GUS77 platform is 21 years of age. We do not knowingly collect personal data from any person under the age of 21.

If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account, delete all associated personal data, and take appropriate action in accordance with our licensing obligations.

15.Third-Party Links & Integrations

The GUS77 platform integrates with third-party payment providers to facilitate deposits and withdrawals in Malaysian Ringgit, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong. When you initiate a transaction through these payment methods, you are interacting directly with those providers' systems and are subject to their respective privacy policies.

GUS77 does not control, and is not responsible for, the privacy practices of any third-party payment providers, software providers, or external services. We recommend reviewing the privacy policies of any third-party service you use in connection with GUS77.

16.Amendments to This Policy

GUS77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or operational requirements. When material changes are made, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this document will be updated each time the Policy is revised. Your continued use of the GUS77 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

17.Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or GUS77's data handling practices, please contact us through the following channels:

• Email: [email protected] — subject line "Data Privacy Request" or "Privacy Complaint"
• Live Chat: Available 24 hours a day, 7 days a week via the GUS77 platform.
• Response commitment: We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days.

GUS77 is committed to resolving privacy-related concerns promptly and transparently. Where a complaint relates to a potential data breach or unauthorised disclosure of personal data, our response will be prioritised accordingly.