Official Policy

Privacy Policy GCR77 – Malaysia User Data Protection

At GCR77, your privacy is not merely a legal obligation — it is our genuine commitment to every player. This document details how we collect, use, store, and protect your personal information.

Last Updated: 1 January 2026

GCR77's Six Privacy Pillars for Malaysian Players

Every privacy practice we follow is built upon six core principles that safeguard the security and privacy of your personal information.

Military-Grade Data Encryption

All your personal data and financial transactions are protected by 256-bit SSL encryption and AES-256 encryption for stored data. These encryption standards are equivalent to those used by world-class financial institutions and banks.

No Sale of Data to Third Parties

GCR77 has never and will never sell, rent, or trade your personal data to any third party for marketing or any other purpose without your explicit consent. Your data belongs entirely to you.

A Secure and Efficient KYC Process

The gcr77 Know Your Customer (KYC) procedure is designed to protect your identity. Documents you submit are stored in an encrypted environment and accessed only by trained, specifically authorised verification staff.

Full Control in Your Hands

You have the full right to access, amend, download, or request deletion of your personal data at any time. Such requests are processed by the GCR77 privacy team within 30 business days of receipt.

International Standards Compliance

GCR77's Privacy Policy complies with established international data protection standards. We conduct regular internal privacy audits and work with independent privacy experts to ensure best practices are consistently maintained.

Immediate Notification in the Event of an Incident

In the unlikely event of an unauthorized access attempt or data breach, GCR77 is committed to notifying affected users within 72 hours and taking immediate remedial action without delay.


This Privacy Policy explains how GCR77 ("we", "Platform") collects, uses, and protects your personal information ("User"). By registering for or using the GCR77 platform, you fully agree to the terms of this Privacy Policy.

1

Introduction and Scope of the gcr77 Privacy Policy

GCR77 is an online casino platform operating under a valid and recognized international gambling license. We understand that user trust in our platform depends not only on the quality of the games offered, but also on how we handle each member's personal information with full integrity and professionalism.

This Privacy Policy applies to all personal information collected through the gcr77.vu website, the GCR77 mobile app, and all our official communication channels including live chat, support email, and relevant social media channels. This document is written in Bahasa Malaysia for the convenience of our local players; however, this policy applies equally to all users regardless of their preferred language.

We encourage you to read this Privacy Policy carefully and to contact the gcr77 support team should any section be unclear or require further explanation. Your data security is our top priority, and we are always ready to address any privacy-related enquiries.

2

Types of Personal Data We Collect

GCR77 collects your personal information in several ways: directly when you register or complete a form, automatically as you use our platform, and occasionally from trusted third-party sources such as identity verification providers. The following are the categories of data we collect:

Data Category Example Information Primary Purpose
Identity Data Full name, identification card number, date of birth KYC verification and legal compliance
Contact Data Email address, phone number, residential address Account communications and customer support
Financial Data Bank account number, bank name, transaction history Deposit and withdrawal processing
Technical Data IP address, device type, web browser, OS Account security and fraud detection
Game Data Wagering history, wins, play time Responsible gaming and service improvement
Cookie Data Website preferences, login sessions, analytics data User experience and performance analytics

We only collect data that is strictly necessary for the stated purposes and do not gather excessive or irrelevant information in connection with the operation of the gcr77 platform.

3

How GCR77 Uses Your Personal Data

The personal data we collect is used transparently and responsibly for legitimate and necessary purposes to effectively operate the GCR77 platform. We do not use your data for undisclosed purposes without first obtaining your consent.

  • Account Management: Creating, verifying, and managing your user account, including the KYC process required by law.
  • Transaction Processing: Processing all deposits, withdrawals, and financial transactions securely and accurately.
  • Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account.
  • Customer Support: Providing technical support and effectively addressing your enquiries or complaints.
  • Responsible Gaming: Monitoring playing habits to identify signs of problem gambling and offer appropriate assistance.
  • Platform Enhancement: Analysing usage patterns to improve the user experience and develop new features.
  • Marketing Communications: Sending promotional information and exclusive offers — only if you have consented to receive them.
4

Data Sharing with Third Parties

GCR77 does not sell or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share certain information with carefully selected third parties to ensure the platform operates smoothly and securely.

  • Payment Providers: Transaction information that must be shared with payment gateways and banks to process your deposits and withdrawals.
  • KYC Service Providers: Identity verification documents submitted to licensed and trusted verification services.
  • Game Providers: Minimum technical data required by game software providers to ensure games function correctly.
  • Regulatory Authorities: Information required by law, courts, or regulatory bodies with valid jurisdiction.

All third parties working with gcr77 are required to sign a strict data protection agreement and are only permitted to use your data for the stated purposes. We make no compromises on this.

5

Gcr77 Data Security Measures

GCR77 continuously invests in cutting-edge cybersecurity infrastructure to ensure your personal and financial data is always protected at the highest possible level. We employ a layered approach to data security encompassing technical, procedural, and organizational safeguards.

  • 256-bit SSL encryption for all communications between your device and gcr77 servers.
  • AES-256 encryption for all data stored in our databases.
  • Intrusion detection systems (IDS) and intrusion prevention systems (IPS) are active 24/7.
  • Two-factor authentication (2FA) is available and encouraged for all user accounts.
  • Regular security audits conducted by independent, registered, and trusted third parties.
  • Mandatory cybersecurity training for all gcr77 staff with access to user data.
  • Role-based access control (RBAC) ensures that staff can only access data required for their specific responsibilities.

While we take all reasonable precautions, no system can be guaranteed 100% secure. We therefore encourage you to take personal protective measures as well, such as using a strong password and never sharing your login credentials with anyone.

6

Cookies and Tracking Technologies

The gcr77 website uses cookies and similar tracking technologies to enhance your browsing experience, maintain the security of your login sessions, and analyse usage patterns for platform improvement purposes. We use several types of cookies:

  • Essential Cookies: Required for basic website functions such as login verification and session security. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, time zone, and interface layout for a more convenient experience.
  • Analytics Cookies: Collecting anonymous data on how users interact with our platform to help us understand and improve website performance.
  • Marketing Cookies: Used to display relevant advertisements to you based on your interests and activity — only activated with your consent.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the GCR77 platform.

7

Your Rights as a GCR77 User

As a gcr77 user, you have certain rights regarding your personal data that we fully respect. These rights may be exercised at any time by contacting our privacy team:

Right of Access

You have the right to request a copy of all personal data we hold about you.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your data, subject to applicable legal requirements.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request a restriction on the processing of your data in certain specified situations.

8

Data Retention and Deletion Period

GCR77 retains your personal data only for as long as it is needed for the stated purposes or as required by applicable law. Retention periods vary according to the type of data and relevant legal requirements.

  • Active Account Data: Retained for the duration that your account remains active and in use.
  • Financial Transaction Data: Retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering requirements.
  • KYC Data: Retained for 5 years after account closure in accordance with legal requirements.
  • Communication Logs: Retained for 2 years for dispute resolution and quality control purposes.
  • Analytics Cookie Data: Automatically deleted after 13 months.

Once the designated retention period has expired, your data will be securely deleted using standardised data erasure methods to ensure it cannot be recovered.

9

Changes to This Privacy Policy

GCR77 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or feedback from our users. Any changes made will be published on this page along with the latest update date.

For changes deemed material or significant, GCR77 will notify all registered users via their registered email address or through a prominent notice on the platform's homepage before the changes take effect. Continued use of the GCR77 platform after changes come into force constitutes your acceptance of the updated Privacy Policy.

10

Contact the GCR77 Privacy Team

If you have any questions, concerns, or wish to exercise your privacy rights, the gcr77 Data Protection Officer (DPO) team is here to help. We are committed to responding to all privacy-related enquiries within 48 working hours.

For data privacy inquiries, please contact our team via live chat on the gcr77 platform or email us at [email protected] (not clickable — copy and paste only). You may also reach us through the FAQ us for general inquiries.

For more information about our responsibilities to users, please also review our Terms and Conditions and Responsible Gaming GCR77.


Your Privacy Is Protected. Now It's Time to Play!

Register a GCR77 account today and enjoy a safe, fair, and entertaining online casino experience with guaranteed data protection for every player in Malaysia.

Bahasa Melayu