Privacy Policy

This Privacy Policy (hereinafter "Policy") is published by Neo77, the operator of the online gaming and sports betting platform accessible at https://neo77.click (the "Platform"). This Policy sets out the manner in which Neo77 collects, processes, stores, uses, and protects the personal data of individuals who access or use the Platform (hereinafter "Users", "Players", "you", or "your").

Neo77 is committed to maintaining the highest standards of data privacy and information security. This Policy is consistent with applicable data protection legislation and internationally recognised privacy principles, including those relating to lawful processing, data minimisation, purpose limitation, storage limitation, integrity, and confidentiality.

By registering an account on, accessing, or otherwise using the Neo77 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier, or data specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Subject" means the individual to whom the personal data relates — in this context, a registered or prospective Player on the Neo77 Platform.
• "Data Controller" means Neo77, the entity that determines the purposes and means of processing personal data.
• "Third Party" means any natural or legal person, public authority, agency, or body other than the Data Subject, Data Controller, or persons authorised by the Data Controller to process data.
• "Consent" means any freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the processing of their personal data.
• "KYC" means Know Your Customer — the identity and age verification process applied to all registered Players.

Neo77 collects personal data across the following categories, depending on your interactions with the Platform:

Neo77 does not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for regulatory compliance purposes, in which case you will be separately notified and your explicit consent obtained.

Neo77 collects personal data through the following channels:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotional activities.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This data is collected to maintain platform functionality and security.
• Payment Providers: When you make a deposit or withdrawal via payment methods such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Public Bank, Hong Leong Connect, or cryptocurrency networks, Neo77 receives transaction confirmation data from those providers.
• Identity Verification Services: Where Neo77 engages third-party KYC or fraud prevention service providers to verify identity documents, such providers may supply Neo77 with verification outcomes and associated data.
• Third-Party Game Providers: Casino game and sportsbook providers integrated into the Neo77 Platform may share gameplay performance data necessary for game result verification, dispute resolution, and regulatory compliance.

Neo77 processes your personal data for the following defined purposes:

Neo77 will not process your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or unless required to do so by law.

Neo77 processes personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to enter into and perform the contract with you — including account registration, deposit and withdrawal processing, and game access.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and responses to lawful government requests.
• Legitimate Interests: Processing conducted for Neo77's legitimate business interests, including fraud prevention, platform security, and improving our services — where such interests are not overridden by your fundamental rights.
• Consent: Where you have given specific, informed consent to a particular processing activity, such as receiving marketing communications. You may withdraw your consent at any time by contacting us at [email protected].

Neo77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Service Providers: Malaysian and international payment processors (including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and bank transfer networks) require transactional data to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to validate the identity documents submitted by Players. These providers operate under strict confidentiality obligations.
• Game Technology Providers: Casino game studios and sportsbook data providers whose products are integrated into the Neo77 Platform receive gameplay session data necessary for game result computation and dispute resolution.
• Fraud Prevention & Security Partners: Service providers engaged to detect and prevent financial fraud, account takeover, bot activity, and other prohibited conduct on the Platform.
• Legal and Regulatory Authorities: Neo77 will disclose personal data to competent courts, government agencies, or law enforcement authorities where required to do so by law, court order, or in connection with legal proceedings.
• Professional Advisers: Lawyers, auditors, and consultants engaged by Neo77 may access personal data as necessary in the course of providing professional services, subject to confidentiality obligations.

Some of the third-party service providers engaged by Neo77 — including certain game technology providers and cloud infrastructure partners — may process your personal data in jurisdictions outside Malaysia. Where such transfers occur, Neo77 takes all reasonable steps to ensure that adequate safeguards are in place to protect your personal data, including:

• Transferring data only to recipients in jurisdictions recognised as providing an adequate level of data protection, or
• Entering into contractual arrangements with recipients that impose data protection obligations equivalent to those applicable in the originating jurisdiction, or
• Applying other appropriate technical and organisational safeguards as required under applicable data protection law.

If you would like further information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

Neo77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to satisfy applicable legal, regulatory, accounting, or reporting obligations. The specific retention periods applied to different categories of data are as follows:

• Account and Identity Data: Retained for the duration of the Player's account and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC verification process or account closure, whichever is later.
• Technical and Log Data: Retained for a period of up to twelve (12) months from the date of collection, unless longer retention is required for security investigation or legal purposes.
• Marketing Consent Records: Retained until consent is withdrawn by the Player, and for a period of two (2) years thereafter as evidence of the original consent.

Upon the expiry of the applicable retention period, personal data will be securely deleted, anonymised, or otherwise rendered irrecoverable in accordance with Neo77's data destruction procedures.

Neo77 uses cookies and similar tracking technologies to operate the Platform efficiently, maintain session state for logged-in Users, and analyse aggregate usage patterns for platform improvement purposes. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential to the core functionality of the Platform. These cookies enable session management, login authentication, and security features. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and whether you have previously accepted this Cookie Notice. These improve your user experience but are not essential to Platform operation.
• Analytics Cookies: Used to collect anonymised data about how Players interact with the Platform, including pages visited, time spent on pages, and navigation paths. This data is used in aggregate form to improve the Platform and is not linked to individual identities.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts. These cookies are strictly necessary for the integrity of the Platform.

Neo77 does not deploy third-party advertising tracking cookies or cross-site profiling technologies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform.

As a data subject, you hold the following rights in respect of your personal data processed by Neo77. To exercise any of these rights, please submit a written request to [email protected]. Neo77 will respond to all valid requests within thirty (30) days of receipt.

The Neo77 Platform is strictly intended for individuals aged 21 years and above. Neo77 does not knowingly collect, process, or retain personal data relating to any individual under the age of 21. Age verification is conducted as part of the mandatory KYC process applicable to all registered Players.

If Neo77 becomes aware that personal data has been collected from an individual who is below the minimum age requirement, all such data will be permanently deleted immediately upon discovery, and the relevant account will be closed. Any funds associated with an underage account will be handled in accordance with applicable law.

If you are a parent or guardian and have reason to believe that a person under the age of 21 has registered an account or provided personal data on the Neo77 Platform, please contact us immediately at [email protected].

Neo77 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Encryption: All personal data at rest is encrypted using AES-256 standard encryption. All data in transit between your device and our servers is protected using TLS 1.2 or higher.
• Access Controls: Access to personal data within Neo77's systems is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. 2FA is mandatory for all Neo77 staff accessing systems containing personal data.
• Regular Security Testing: Neo77 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses.
• Incident Response: Neo77 maintains a data breach response procedure. In the event of a breach that is likely to result in a high risk to Player rights and freedoms, affected Players and relevant authorities will be notified in accordance with applicable legal requirements.
• Vendor Due Diligence: All third-party service providers with access to personal data are subject to security due diligence assessments and contractual data protection obligations prior to engagement.

Neo77 reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes will take effect immediately upon publication of the revised Policy on the Platform. The "Last Updated" date displayed at the top of this page will be revised accordingly.

For material changes that significantly affect your rights or how your data is processed, Neo77 will endeavour to provide advance notice through a prominent notice on the Platform or via email to your registered address. Your continued use of the Platform following publication of an amended Policy constitutes your acceptance of the revised terms.

We recommend that you review this Policy periodically to stay informed about how Neo77 is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by Neo77, please contact our Data Protection team using the details below. All privacy-related requests will be handled with priority.

If you are not satisfied with Neo77's response to a privacy request or complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.