MALAYSIA PDPA The Galaxy77 Privacy Policy is fully compliant with the Malaysia Personal Data Protection Act 2010 Encryption SSL 256-bit protecting all Galaxy77 player data and transactions Your personal data NOT SOLD to any third party by Galaxy77 Galaxy77 Privacy Policy updated – effective 1 January 2026 Galaxy77 does not track your activity for third-party advertising purposes Have a privacy question? Contact Galaxy77 support 24/7 MALAYSIA PDPA The Galaxy77 Privacy Policy is fully compliant with the Malaysia Personal Data Protection Act 2010 Encryption SSL 256-bit protecting all Galaxy77 player data and transactions Your personal data NOT SOLD to any third party by Galaxy77 Galaxy77 Privacy Policy updated – effective 1 January 2026 Galaxy77 does not track your activity for third-party advertising purposes Have a privacy question? Contact Galaxy77 support 24/7
OFFICIAL DOCUMENT

Privacy Policy Galaxy77 – Personal Data Protection for Malaysian Players

Galaxy77 is fully committed to protecting the privacy of Malaysian players. This policy clearly explains how we collect, use, store and safeguard your personal information – in accordance with the Malaysia Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026 Bahasa Malaysia PDPA Compliant

Galaxy77's Privacy Commitment to Malaysian Players

Six core principles that shape how Galaxy77 protects your personal data

PDPA
Full Malaysia PDPA Compliance
Galaxy77 is fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010 – the country's primary personal data protection legislation. This means every aspect of data collection, processing, and storage at Galaxy77 is carried out in accordance with the legal requirements set by the Malaysian Government.
ENCRYPTION
Bank-Grade 256-bit SSL Encryption
All data transmitted between your device and the Galaxy77 platform is protected with 256-bit SSL encryption — the same security standard used by major Malaysian banks such as Maybank and CIMB. This ensures your personal information, account details, and transaction records cannot be intercepted or read by unauthorised parties.
NOT SOLD
Your Data Is Never Sold to Anyone
Galaxy77 does not sell, rent, or trade players' personal information to any third party for advertising or commercial purposes. Your information is used solely for the operational purposes of the Galaxy77 platform itself — including account management, transaction processing, and the provision of customer support services.
DATA CONTROL
You Have Full Control
As a Galaxy77 player, you have the legal right to access your personal data, request corrections to inaccurate information, and under certain circumstances, request the deletion of your data. Galaxy77 provides a straightforward process for submitting these requests through our customer support team, available 24/7.
LIMITED PURPOSE
Data Used Only for Stated Purposes
Galaxy77 collects and uses your personal data solely for the purposes clearly stated in this Privacy Policy. We do not use your data for any other purpose without first obtaining your renewed consent. This "purpose limitation" principle is the foundation of our approach to player privacy in Malaysia.
TRANSPARENCY
Transparent About Our Data Practices
Galaxy77 believes you deserve to know exactly what happens to your data. That is why this Privacy Policy is written in plain, straightforward language — not confusing technical or legal jargon. If anything is still unclear, the Galaxy77 support team is available at any time to explain further.

Summary of Data We Collect & How It Is Used

An overview of the types of personal data Galaxy77 collects and how they are used

Data Type Sample Information Purpose of Collection Shared?
Identity DataFull name, MyKad number, date of birthKYC verification, fraud preventionNot sold – used for KYC only
Contact DataPhone number, email addressAccount communications, security notificationsNot shared
Financial DataE-wallet information (TNG, GrabPay, DuitNow), bank statementsProcessing RM deposits & withdrawalsLicensed payment processors only
Usage DataLogin activity, betting records, game historyAccount management, fraud detectionNot shared
Technical DataIP address, device type, web browserSecurity, unusual login detectionNot shared
Cookie DataSession cookies, preference cookiesUser experience, login sessionsFirst-party cookies only
Communication DataLive Chat transcripts, support emailsService quality, complaint resolutionNot shared

Galaxy77 only collects data that is necessary to operate our services. We do not collect data beyond what is stated above.

Contents
This policy applies to all Galaxy77 players in Malaysia. Contact us if you have any privacy enquiries.
FAQs

Introduction – Galaxy77's Privacy Commitment to Malaysian Players

This Privacy Policy ("Policy") describes how Galaxy77 ("we", "platform") collects, uses, stores, and protects your personal information ("personal data") when you use the galaxy77.asia platform. By registering an account or using any part of the Galaxy77 platform, you agree to the data practices set out in this Policy. This Policy applies to all players accessing the Galaxy77 platform from Malaysia and complies with the requirements of the Personal Data Protection Act (PDPA) 2010.

1
Personal Data We Collect
Types of information Galaxy77 requires to provide its services

Galaxy77 collects your personal data in several ways — directly when you register or interact with the platform, and automatically as you use our services. Below are the categories of data we collect:

Data you provide directly:

  • Registration data: Full name as shown on your Malaysian identity card (MyKad), Malaysian phone number, email address and the password you create when registering your Galaxy77 account.
  • Identity verification (KYC) data: A copy of your MyKad or passport, a selfie for liveness verification, and in some cases a recent utility bill or bank statement as proof of address. This data is required to comply with anti-money laundering legal requirements.
  • Financial data: E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or bank account details (Maybank2u, CIMB Clicks) that you register for the purpose of deposits and withdrawals in MYR.
  • Communication data: Messages, enquiries and complaints you send to the Galaxy77 support team via Live Chat, email or WhatsApp.

Automatically collected data:

  • Technical data: IP address, device type and version, operating system, browser type and version, screen resolution and other relevant technical data.
  • Usage data: Login and logout activity, a record of all bets and transactions, gaming history, preferences, and account settings.
  • Cookie data: Information collected through cookies and similar tracking technologies – detailed in Section 6.
Galaxy77 Note: We do not collect sensitive data categories such as your health information, religious beliefs, political views, or sexual orientation. The financial data we collect is limited strictly to what is needed to process transactions in RM.
2
How Galaxy77 Uses Your Personal Data
Specific purposes for which collected personal data is used

Galaxy77 uses your personal data only for legitimate, clearly stated purposes. Below are the key purposes for which your data is used:

  • Account management: Creating and maintaining your Galaxy77 account, processing registrations, verifying identity, and managing account settings.
  • Transaction processing: Process deposits and withdrawals in Malaysian Ringgit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. Galaxy77 requires your financial data to ensure funds are sent to the correct account.
  • Provision of gaming services: Giving you access to over 1,000 slots, Live Casino, table games, and the Galaxy77 Sports Betting platform – including Malaysia Super League football, EPL, BWF badminton, and Mobile Legends MPL Malaysia esports.
  • Security and fraud prevention: Detecting and preventing fraud, money laundering, bonus abuse, multiple account registrations, and other suspicious activity on the Galaxy77 platform.
  • Essential communications: Sending account-related notifications such as transaction confirmations, security alerts, policy updates, and information on bonuses you are eligible for.
  • Customer support: Processing and responding to enquiries, complaints and support requests you submit to the Galaxy77 support team.
  • Legal compliance: Fulfilling Galaxy77's legal obligations, including Malaysia's PDPA requirements, age restriction (18 and above), KYC requirements and reporting to the relevant authorities where required by law.
  • Platform improvements: Analysing usage data in aggregate (not individually) to understand how Malaysian players use Galaxy77 and to improve the platform experience.
Galaxy77 does not use your personal data to make automated decisions that have a legal or significant impact on you without human involvement in the process.
3
Personal Data Sharing & Disclosure
Who may have access to your data and under what circumstances

Galaxy77 does not sell, rent or trade your personal data to any third party for commercial purposes. However, there are limited situations where Galaxy77 may need to share your data:

  • Licensed payment processors: To process deposits and withdrawals in RM, Galaxy77 needs to share minimal transaction information with licensed and regulated payment service providers, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow operators, and banks that support FPX. Only the information necessary to complete a transaction is shared.
  • Technical service providers: Galaxy77 engages third-party technical service providers for functions such as cloud computing, platform analytics, and cybersecurity services. These providers are bound by strict confidentiality agreements and may only use your data for the purpose of delivering services to Galaxy77 – not for their own purposes.
  • Legal Requirements: Galaxy77 may be required under Malaysian law to disclose your personal data to government authorities or law enforcement agencies upon receipt of a legally valid request, such as a court order or a request from Bank Negara Malaysia in connection with a money laundering investigation.
  • Business transfers: In the event that Galaxy77 undergoes a merger, acquisition, or asset sale, your personal data may be transferred as part of the business assets. In such circumstances, we will notify you and ensure the terms of this Privacy Policy continue to be observed.
Galaxy77's Guarantee: In all data-sharing situations described above, Galaxy77 will ensure that the receiving party upholds data protection standards equivalent to, or higher than, those we ourselves comply with.
4
Personal Data Security at Galaxy77
The technical and organisational measures we use to protect your data

Galaxy77 continuously invests in security infrastructure to protect the personal data of all Malaysian players. Key security measures we employ include:

  • 256-bit SSL Encryption: All communications between your device and the Galaxy77 platform are encrypted using Transport Layer Security (TLS) 1.3 with a 256-bit SSL certificate – the same security standard used by Malaysia's leading financial institutions.
  • Data encryption at rest: Sensitive data stored in Galaxy77's databases — including passwords and financial information — is encrypted using current-generation encryption algorithms. Your password is never stored in plain text.
  • Internal access controls: Only Galaxy77 staff with a legitimate business need are granted access to player personal data, and all such access is logged and continuously monitored.
  • 24/7 security monitoring: The Galaxy77 security team monitors the platform around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
  • Regular security testing: Galaxy77 conducts regular penetration testing and security audits by independent security firms to identify and address any vulnerabilities.
  • Two-factor authentication (2FA): Galaxy77 offers 2FA as an additional layer of protection for your account. We encourage all Malaysian players to enable this feature.
Data Breach Notification: In the event of a data security breach affecting your personal information, Galaxy77 is committed to notifying you within the timeframe required under Malaysia's PDPA and will take immediate steps to contain the damage.

While Galaxy77 takes all reasonable steps to protect your data, please be aware that no system is 100% secure. You also play an important role in keeping your data safe — use a strong password, never share your login credentials, and always log out of your Galaxy77 account when using a shared device.

5
Your Rights as a Data Subject under Malaysia's PDPA
Your legal rights regarding your personal data at Galaxy77

As a Galaxy77 player based in Malaysia, you have the following rights under the Personal Data Protection Act (PDPA) 2010:

Right of Access
You have the right to request a copy of the personal data Galaxy77 holds about you. We will provide this information in a readable format within 21 days of receiving your request.
Right to Correction
If you find that your personal data held by Galaxy77 is inaccurate, incomplete, or outdated, you have the right to request a correction. Contact Galaxy77 support with the correct information and we will update your records accordingly.
Right to Object
You have the right to object to the processing of your personal data for certain purposes, such as marketing communications. You may opt out of receiving promotional emails from Galaxy77 at any time through your account settings or by contacting our support team.
Right to Erasure (Limited)
Under certain circumstances, you may request the deletion of your personal data. However, Galaxy77 may need to retain specific data for periods prescribed by Malaysian law for legal compliance and fraud prevention purposes.
Right to Data Portability
You may request your personal data in a machine-readable electronic format to facilitate transfer to another service provider, subject to technical feasibility.
Right to Withdraw Consent
Where Galaxy77's processing of your data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.
How to Submit a Privacy Request: To submit any request relating to your privacy rights, contact the Galaxy77 support team by email at support@galaxy77.asia with the subject line "Data Privacy Request", or via 24/7 Live Chat. We will process your request within 21 business days from the date it is received.
6
Cookies & Tracking Technologies at Galaxy77
How cookies are used to enhance your platform experience

Galaxy77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser or device when you visit the Galaxy77 platform.

Types of Cookies Used by Galaxy77

You can manage cookie settings through your web browser. However, disabling essential cookies will affect the functionality of the Galaxy77 platform and you may be unable to log in or use the platform fully. Galaxy77 does not use third-party cookies for advertising purposes or to sell your data to advertising networks.

7
Data Retention & Deletion
How Long Galaxy77 Retains Your Personal Data

Galaxy77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law. The following are our data retention guidelines:

  • Active account data: For as long as your Galaxy77 account remains active, we will retain all data necessary to operate and maintain your account.
  • Financial transaction records: All deposit, withdrawal, and betting records in MYR are retained for a minimum of 7 years from the transaction date, in compliance with Malaysian financial laws on anti-money laundering.
  • Identity verification documents (KYC): MyKad copies and other KYC documents are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later – in accordance with Malaysian legal requirements.
  • Support communication records: Live Chat conversation records and support emails are retained for 2 years for service quality and dispute resolution purposes.
  • Technical data and logs: Access logs and technical data are retained for 90 days for security and technical debugging purposes.

Once the relevant retention period has ended and there is no legal requirement to continue storing the data, Galaxy77 will securely delete or anonymise your data using industry-recognised methods.

Inactive Accounts: If your Galaxy77 account has been inactive (no logins or transactions) for 3 consecutive years, we may reach out to confirm whether you wish to keep or close the account. Galaxy77 reserves the right to close inactive accounts and manage the associated data in accordance with legal requirements.
8
Changes to the Galaxy77 Privacy Policy
How we notify you of changes to the privacy policy

Galaxy77 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. When material changes are made to this Privacy Policy, Galaxy77 will:

  • Displaying a prominent notice on the Galaxy77 platform before changes take effect.
  • Sending notification to your registered email address at least 14 days before any material changes take effect.
  • Updating the "Last Updated" date at the top of this Privacy Policy.

Continued use of the Galaxy77 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the Galaxy77 platform and contact us to close your account.

9
Contact Galaxy77 About Privacy
How to contact us for data privacy enquiries or complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Galaxy77 handles your personal data, please reach out to us through the following channels:

  • Email: support@galaxy77.asia – include the subject line "Data Privacy Inquiry" for faster processing
  • Live Chat: Available 24/7 on the Galaxy77 platform – average response time under 2 minutes
  • WhatsApp: Contact the Galaxy77 support team via WhatsApp as listed on the platform

Galaxy77 is committed to handling privacy enquiries and complaints seriously and within a reasonable timeframe. We will acknowledge receipt of your request within 24 hours and provide a substantive response within 14 business days.

If you are not satisfied with Galaxy77's response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory body.

Understanding the Galaxy77 Privacy Policy – A Complete Guide for Malaysian Players

Data privacy is an increasingly important issue in Malaysia, especially in the digital age where our personal information crosses digital borders every day. For online casino players in Malaysia, understanding how the platform you use handles your personal data is essential – not just for the security of your information, but also for peace of mind while you enjoy your favourite games at Galaxy77.

Galaxy77 was built from the ground up with privacy as a priority, not an afterthought. This means that whenever we make decisions about new platform features, how we store transaction records in MYR, or how we provide 24/7 customer support in Bahasa Malaysia — player data protection is factored into every one of those decisions. This approach, known as "Privacy by Design", is the most effective way to ensure privacy is genuinely upheld, rather than just a box ticked on a compliance checklist.

The Personal Data Protection Act (PDPA) 2010 is the primary legislation governing personal data protection in Malaysia. Galaxy77 fully complies with all seven principles of the PDPA – including the General Principle (data is only processed for authorised purposes), the Notice and Choice Principle (you are informed about how your data is used), the Disclosure Principle (data is not disclosed without consent), the Security Principle (appropriate security measures are in place), the Integrity Principle (data must be accurate and up to date), the Access Principle (you may access your own data), and the Law Principle (processing must be in accordance with the law). This is not merely a statement on paper – Galaxy77 undergoes regular PDPA compliance audits to ensure our practices consistently meet or exceed legal requirements.

One thing that sets Galaxy77 apart from many other platforms is our commitment to never selling player data to advertisers or data brokers. Many digital platforms out there generate additional revenue by selling or renting user information to third parties for targeted advertising. Galaxy77 firmly rejects this practice. Our business model is built on delivering the best gaming experience to Malaysian players – not monetising their personal information. Your data belongs to you, and Galaxy77 treats it with the respect it deserves.

On the technical security front, Galaxy77 uses the same 256-bit SSL encryption as Maybank and CIMB to protect online banking transactions. This means that when you deposit MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow, or when you withdraw your winnings, all transmitted information is fully encrypted and unreadable to anyone who might attempt to intercept it. Your Galaxy77 account password is never stored in plain text – it is processed through a one-way cryptographic hash function that cannot be reversed.

The identity verification (KYC) process at Galaxy77, though it may occasionally feel time-consuming, is one of the most important ways we protect you. By ensuring that only you – the legitimate account owner – can withdraw funds from your Galaxy77 account, KYC safeguards your money from anyone who may gain unauthorised access to your account. The KYC documents you submit are stored on encrypted servers, accessible only to Galaxy77 staff who have undergone appropriate data protection training, and will not be shared with any third party without your consent unless required by Malaysian law.

Malaysian players who access Galaxy77 via smartphone – the majority of our players – should know that the Galaxy77 mobile platform applies additional security measures to protect your gaming sessions. These include automatic session expiry after a period of inactivity, detection of logins from unfamiliar locations or devices, and the option to receive notifications whenever a new login to your Galaxy77 account occurs. These features are designed to keep you informed of your account activity at all times and to enable you to act quickly if anything looks out of place.

Finally, we want to make clear that Galaxy77's Privacy Policy is not merely a formality – it is a genuine commitment between Galaxy77 and every Malaysian player who entrusts us with their personal information. We take that trust seriously and will never treat it lightly. If you have any questions about how we handle your data, or if you wish to submit a request relating to your privacy rights, please do not hesitate to reach out to our Galaxy77 support team, available to assist you 24 hours a day, 7 days a week in Bahasa Malaysia.

FAQ – Galaxy77 Privacy Policy

Answers to the most frequently asked questions about data privacy at Galaxy77

No. Galaxy77 strictly does not sell, rent, or share players' personal data with any third party for advertising or marketing purposes. Your data is used solely for the operational purposes of the Galaxy77 platform itself – including account management, processing MYR transactions, and providing customer support. The only third parties that may have limited access to your data are licensed payment processors (such as Touch 'n Go, GrabPay, and DuitNow operators), and this is strictly for the purpose of processing your financial transactions – not for advertising.

You may request a copy of the personal data Galaxy77 holds about you by emailing support@galaxy77.asia with the subject line "Personal Data Access Request". Please include your full name, registered phone number and Galaxy77 account number to expedite the identity verification process. Galaxy77 will verify your identity and process the request within 21 business days from the date a complete request is received. Data will be sent in a secure electronic format to your registered email address.

When you close your Galaxy77 account, your personal data is not immediately deleted in full. Galaxy77 is required under Malaysian law to retain certain records for specified periods – for example, financial transaction records in MYR must be kept for a minimum of 7 years for anti-money laundering compliance purposes. Data that is no longer required by law will be securely deleted or anonymised once the retention period has ended. You may contact Galaxy77 support for more information on the specific data that will be retained and the applicable retention periods.

Yes. The Galaxy77 platform is protected by the same 256-bit SSL encryption used by major Malaysian banks such as Maybank and CIMB to secure their online banking transactions. When you deposit funds via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks), all transmitted data is fully encrypted. Your bank account or e-wallet details are stored in encrypted format within Galaxy77's secured database. Galaxy77's security systems are monitored 24/7 and undergo regular security testing by independent security experts.

Yes, you have the right to opt out of receiving marketing communications from Galaxy77 at any time. There are two easy ways to do so: first, click the "Unsubscribe" link found at the bottom of any Galaxy77 promotional email; or second, log in to your Galaxy77 account and update your communication preferences under "Account Settings". If you encounter any issues, contact Galaxy77 support via Live Chat and we will process your request promptly. Please note that opting out of promotional emails does not mean you will stop receiving important account-related communications such as transaction confirmations or security alerts – these are necessary for the security of your account.
JOIN GALAXY77 TODAY
Your Data Is Safe at Galaxy77 — Register & Start Playing!
Galaxy77 protects your privacy with 256-bit SSL encryption, is fully compliant with Malaysia's PDPA, and never sells your data. Register in under 2 minutes and claim your Welcome Bonus of up to RM 1,000 + 100 Free Spins. Minimum deposit RM 30 via Touch 'n Go, GrabPay, or DuitNow.
PDPA Malaysia Compliant 256-bit SSL Encryption Data Not Sold MYR Transactions
Welcome Bonus
200%
Up to RM 1,000
+ 100 Free Spins
Responsible Gaming

Gambling at Galaxy77 is intended for entertainment purposes only. Always play within your financial means and set appropriate time limits for your sessions. If you feel that gambling is starting to have a negative impact on your daily life, seek help immediately at the Responsible Gaming us. Betting is for individuals aged 18 and above only.

Bahasa Melayu