Important Note: This Privacy Policy applies to all airasia77 platform users, including website visitors, registered members, and anyone who interacts with our platform in any capacity. By using the airasia77 platform, you consent to the collection and use of personal data as described in this document.
1. Personal Data We Collect
Airasia77 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and how it is collected:
Data You Provide Directly:
- Registration information: Full name, date of birth, Malaysian identity card number (MyKad), email address, Malaysian mobile number, and the password chosen when registering your airasia77 account.
- Identity verification (KYC) information: A copy of your identity document (MyKad or passport), a selfie for facial verification, and in some cases, proof of address such as a recent Malaysian utility bill or bank statement.
- Communication information: The content of messages you send to the airasia77 support team via live chat, email, or other support channels, including conversation history for quality control purposes.
- Feedback and surveys: Feedback and suggestions you provide through airasia77 customer satisfaction surveys or through direct communication with our team.
Automatically Collected Data:
- Technical data: IP address, web browser type and version, device operating system, screen resolution, and unique device identifier.
- Usage data: Pages visited within the airasia77 platform, time spent in each section, navigation sequences, buttons clicked, and features used.
- Gaming data: Full gameplay history including games played, bet amounts, results, and session timestamps across all airasia77 activities, including slots, live casino, Sports Betting, and e-sports.
- Transaction data: A complete history of deposits and withdrawals including the payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX), amount, date and time, and transaction reference number.
Data Minimisation Principle: airasia77 adheres to a data minimisation principle — we only collect data that is strictly necessary for the stated purposes. We do not collect more data than is needed to deliver platform services, process transactions, and meet legal requirements.
2. How We Use Your Personal Data
Airasia77 uses the personal data we collect solely for the following purposes. Each use is grounded in a valid legal basis under the Malaysia Personal Data Protection Act (PDPA) 2010:
| Purpose of Use |
Legal Basis |
Data Involved |
| Account management & identity verification |
Performance of a contract |
Name, email, IC number, phone number |
| Deposit & withdrawal processing |
Performance of a contract |
Financial & payment data |
| Customer support & complaint resolution |
Legitimate interest |
Communication & account history |
| Fraud prevention & AML |
Legal obligation |
Transaction data & usage patterns |
| Platform improvement & analytics |
Legitimate interest |
Anonymised usage data |
| Marketing communications (with consent) |
Consent |
Email & phone number |
| Audit & regulatory compliance |
Legal obligation |
Transaction & account records |
It is important to understand that airasia77 does not use your personal data to make automated decisions that materially affect your rights without human review. This includes decisions relating to account limits, account closures, or withdrawal rejections — all such decisions involve a manual review by the relevant airasia77 team.
3. Data Sharing & Disclosure
Airasia77 takes a very cautious approach to sharing personal data. We do not sell your data. We do not share your data for third-party advertising purposes. Data sharing only occurs in the following limited situations:
- Payment service providers: To process deposits and withdrawals, the minimum required information is shared with the relevant Malaysian payment service providers, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks that support FPX such as Maybank and CIMB. This sharing is limited to what is strictly necessary to complete the transaction.
- Gaming software providers: Required technical information is shared with third-party game providers that supply slots, live casino, and e-sports content on the airasia77 platform. All such providers are bound by strict data protection agreements.
- Relevant authorities: airasia77 will disclose personal data when required to do so by law, court order, or a lawful request from Malaysian authorities. This includes investigations related to anti-money laundering (AML) and fraud.
- Business transfer: In the event of a company merger, acquisition, or asset sale, user data may be transferred to the successor entity. You will be notified in advance if this occurs and will have the option to delete your account before the transfer is finalised.
In all lawful data-sharing situations, airasia77 ensures that recipients are bound by confidentiality and data protection obligations at least equivalent to the standards we apply ourselves.
4. airasia77 Data Security Measures
The security of your personal data is airasia77's top technical and operational priority. The following are the security measures we have put in place:
- End-to-end encryption: All communications between your browser and the airasia77 servers are protected by TLS 1.3 (256-bit SSL), ensuring that no one — including your internet service provider — can read your data in transit.
- Encrypted data storage: Sensitive personal data such as identity card numbers, banking details, and passwords are stored in encrypted form within the airasia77 database. Your password is never stored in readable format — only a cryptographic hash is retained.
- Internal access controls: A least privilege principle is applied — each airasia77 staff member can only access the data required for their specific role. All access to sensitive data is automatically logged and reviewed on a regular basis.
- Two-factor authentication (2FA): airasia77 offers and encourages the use of two-factor authentication for all member accounts. With 2FA enabled, even if your password is compromised, your account remains secure as a second verification via your device is required.
- Regular security audits: airasia77's systems undergo regular penetration testing and security audits conducted by accredited independent cybersecurity firms. Any vulnerabilities identified are remediated promptly in accordance with established incident response protocols.
- DDoS and cyberattack protection: airasia77 uses a multi-layered security infrastructure including firewalls, intrusion detection systems (IDS), and DDoS protection to keep the platform secure and available to legitimate users at all times.
Shared Responsibility: While airasia77 does everything reasonably possible to protect your data on our end, account security also depends on your own actions. Use a strong and unique password, never share your login credentials, enable 2FA, and log out from public devices after each session.
5. Cookies & Tracking Technologies
Airasia77 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:
Mandatory
Session & Authentication Cookies
Required to maintain your logged-in status throughout an active session on airasia77. Without this cookie, you would need to log in again each time you navigate to a different page. Cannot be disabled.
Security
CSRF Token Cookie
Protects your airasia77 account against cross-site request forgery (CSRF) attacks. This is a critical security layer that cannot be disabled, as it safeguards your transactions.
Functional
User Preference Cookies
Stores your preferences such as interface language, display settings, and game preferences so you do not have to reconfigure them each time you visit the airasia77 platform. Can be disabled but may affect your user experience.
Analytics
Platform Analytics Cookies
Collects information on how you use airasia77 — pages visited, time spent, and navigation patterns. This data is used in non-identifiable form to improve the platform's design and functionality. Can be disabled.
You can manage your cookie settings through your web browser. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling certain cookies may affect the functionality of some parts of the airasia77 platform.
6. Financial & Payment Data
Airasia77 applies enhanced protection to financial data given its sensitive nature. Here is how we handle payment-related information:
- Malaysian payment methods: airasia77 only accepts recognised Malaysian payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u and CIMB Clicks. All transactions are processed in Malaysian Ringgit (RM).
- Processing via secure gateway: airasia77 does not store your full bank account or e-wallet details. Sensitive payment information is processed directly by certified payment gateways and never passes through or is stored on airasia77 servers.
- Transaction records: A complete history of all deposits and withdrawals is retained by airasia77 for customer support, dispute resolution, and AML compliance purposes. These records are secured to the highest standard and are accessible only to authorised personnel.
- Large transaction verification: For withdrawals exceeding certain limits, airasia77 may require additional identity verification. This is a protective measure to ensure funds are only released to the legitimate account holder and to meet AML compliance requirements.
Airasia77 fully complies with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA). We reserve the right to report any suspicious transactions to the relevant authorities in accordance with our legal obligations.
7. Your Rights Under Malaysia's PDPA
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data airasia77 holds about you:
Right of Access
You have the right to request a copy of all personal data that airasia77 holds about you. Such requests will be processed within 14 business days from the date a complete request is received.
Right to Rectification
If you become aware that the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Some corrections can be made directly through your airasia77 account profile settings.
Right to Erasure
Under certain circumstances, you have the right to request the deletion of your personal data. This right is not absolute — we may need to retain certain data to comply with legal obligations, such as AML record-keeping requirements for a prescribed period.
Right to Object to Processing
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on airasia77's legitimate interests in certain circumstances.
Right to Data Portability
You have the right to receive the personal data you have provided to airasia77 in a machine-readable and portable format, where this is technically feasible.
To exercise any of the rights above, contact the airasia77 support team by email at support@airasia77.com, stating the right you wish to exercise and the information needed to verify your identity. All requests will be acknowledged within 3 business days.
8. Data Retention Period
Airasia77 does not retain your personal data indefinitely. We have a clear data retention policy based on operational and legal requirements:
- Active account data: Retained for as long as your account is active and for the required period following account closure in accordance with applicable legal obligations.
- Financial transaction records: Retained for a minimum of seven years in accordance with Malaysia's AML and tax legal requirements. This covers all deposit and withdrawal history.
- Support communication records: Communication history with the airasia77 support team is retained for two years for reference and dispute resolution purposes.
- Platform analytics data: Anonymised usage data used for analytics is retained for no longer than three years.
- Marketing data: Your marketing communication preferences and responses are retained for as long as your consent remains in place. Once withdrawn, this data is deleted within 30 days.
Once the retention period expires, personal data will be securely deleted or anonymised so that it can no longer be linked to any specific individual.
9. Child & Minor Protection
Airasia77 does not permit individuals under the age of 18 to register or use the platform in any capacity. We take active steps to prevent access by minors:
- The registration process requires verification of date of birth and Malaysian identity card number.
- Airasia77 conducts periodic age verification checks and reserves the right to request supporting documents at any time.
- If we have reason to believe that a user is under 18 years of age, the account will be suspended immediately until satisfactory age verification is provided.
- Parents or guardians concerned about the possibility of minors accessing the airasia77 platform are encouraged to use parental control software on shared devices.
Airasia77 does not knowingly collect personal data from children. If you believe we have collected data from an individual under the age of 18, please contact us immediately at support@airasia77.com so we can take the appropriate action.
10. Changes to This Privacy Policy
Airasia77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Here is how we handle such changes:
- The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.
- For significant changes that affect how we use your personal data, we will provide reasonable notice via email to your registered address, or through a prominent notice on the airasia77 platform homepage, at least 14 days before the changes take effect.
- For minor changes that do not materially affect your privacy rights, we may not provide a separate notice.
- Continued use of the airasia77 platform after a change takes effect will be considered your acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
11. Contact Us About Privacy
If you have any questions, concerns, or complaints regarding how airasia77 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:
- Email: support@airasia77.com — include "Privacy Enquiry" in your email subject line. Responded to within 4 business hours.
- Live chat: Available 24/7 within the airasia77 platform. The fastest way to address urgent privacy queries — typically answered within 2 minutes.
For more formal complaints relating to data protection, you may also contact the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for PDPA 2010 in Malaysia.
This Privacy Policy is the Malay-language version and serves as the primary reference document for Malaysian users. It applies in conjunction with airasia77 Terms & Conditions and should be read together with that document.