Official kramat77 Document

Kramat77 Privacy Policy – Our Commitment to Protecting Members' Personal Data in Malaysia

Kramat77 takes every member's privacy seriously. This page clearly explains how we collect, use, store, and protect your personal data in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010.

Updated: 1 January 2026
PDPA 2010 Compliant
SSL
256-bit Encryption
PDPA
Full Compliance
0
Sale of Data to Third Parties
24/7
Privacy Support

Our Privacy Commitment

Six Core Pillars of Personal Data Protection at Kramat77

Here's how Kramat77 protects your personal information every day, without compromise.

ENCRYPTION

Banking-Grade 256-bit SSL Encryption

All data transmitted between your device and Kramat77's servers is encrypted using 256-bit TLS/SSL protocols — the same level of protection used by Maybank, CIMB and other major Malaysian banks. No data is transmitted in plain text that could be intercepted.

COMPLIANCE

Fully Compliant with PDPA 2010

Kramat77 operates in accordance with Malaysia's Personal Data Protection Act 2010, which sets out seven data processing principles that all organisations in Malaysia must comply with. Our Privacy Policy is updated periodically to ensure ongoing compliance.

NO DATA SALES

Your Data Is Never Sold to Anyone

Kramat77 will never sell, rent, or trade members' personal data to any third party for marketing purposes. Your information is used solely for platform operations and legal compliance, as explicitly stated in this Privacy Policy.

YOUR RIGHTS

You Have Full Control Over Your Data

As a Kramat77 member, you have the right to access, correct, delete, and restrict the processing of your personal data. You may also request a copy of all data we hold about you at any time through our official support channels.

SECURE STORAGE

Secure Servers with Restricted Access

Kramat77 member data is stored on servers protected by multi-layered access controls. Only authorised personnel who require access to perform their duties may view member data — and every access is automatically logged and audited.

BREACH NOTIFICATION

Immediate Notification in the Event of an Incident

In the event of a security incident involving members' personal data, Kramat77 is committed to notifying affected members within the timeframe stipulated by the PDPA, and to taking immediate remedial action to minimise any harm.

📋 Summary: This Privacy Policy outlines Kramat77's commitment to protecting your personal data as a member of our platform. By using Kramat77, you agree to the collection and use of information as described in this document. Any enquiries may be directed to us at support@kramat77.best.

1

Personal Information We Collect

Kramat77 collects various types of personal information from members to enable us to deliver our services safely, efficiently, and in compliance with applicable Malaysian law. Below are the categories of information we collect and how they are obtained:

A. Information You Provide Directly:

  • Registration information: Full name, MyKad or passport number, date of birth, gender, Malaysian mobile number, and email address upon registering a Kramat77 account.
  • Financial information: Malaysian bank account numbers and e-wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals. Kramat77 does not directly store credit or debit card numbers.
  • Identity verification documents: A copy of your MyKad or passport submitted during the KYC (Know Your Customer) process for account verification and withdrawal processing.
  • Communications with us: Any messages, complaints, enquiries, or feedback you send to the Kramat77 support team via live chat, email, or other communication channels.

B. Automatically Collected Information:

  • Device and technical data: IP address, browser type, operating system, device type (Android/iOS phone or computer), screen resolution, and other technical information relevant to optimising your user experience.
  • Platform activity data: Login and logout records, deposit and withdrawal transaction history, gaming history (slots played, casino tables visited, sports bets placed), and session times and durations.
  • Location data: Approximate location information based on IP address for verification and fraud prevention purposes. Kramat77 does not access your device's GPS.
  • Cookie and tracker data: Session information, platform preferences, and analytics data collected via cookies and other tracking technologies — detailed in Section 7.
2

How We Use Your Information

Kramat77 uses collected personal data only for legitimate and necessary purposes. Below is a summary of those purposes and their legal basis:

Purpose of Use Data Type Basic
Kramat77 member account management Name, email, phone number Agreement
Processing deposits & withdrawals Financial, banking and e-wallet information Agreement
Identity verification (KYC/AML) MyKad, date of birth, photo Legal Obligation
Fraud prevention & security IP, device, activity history Legitimate Interest
Customer support & complaint resolution Communication records, transaction history Legitimate Interest
Kramat77 platform improvements Analytics data, usage patterns Legitimate Interest
Promotional & offer communications (with consent) Email, phone number Consent
Responsible gaming monitoring Game history, set limits Legal Obligation

Kramat77 will not use your data for any purpose beyond those stated above without obtaining your prior consent. If you have previously consented to receiving marketing communications but wish to withdraw that consent, you may do so at any time by contacting our team.

3

Legal Basis for Data Processing

Kramat77 processes your personal data on the basis of one or more recognised legal grounds under Malaysia's Personal Data Protection Act 2010:

  • Fulfilment of agreement: Processing necessary to fulfil the Terms & Conditions you agreed to upon registering your Kramat77 account — including account management, processing deposits and withdrawals, and delivering gaming services.
  • Legal obligations: Processing required to comply with Malaysian legal obligations, including the Anti-Money Laundering Act (AMLA), KYC requirements, and reporting obligations to relevant authorities.
  • Legitimate interest: Processing necessary for Kramat77's legitimate operational interests, including fraud prevention, platform security, service improvement, and customer support — provided these interests do not override your privacy rights.
  • Consent: For certain processing not covered by the bases above, such as marketing communications, Kramat77 will obtain your explicit consent. You have the right to withdraw this consent at any time.
4

Data Sharing with Third Parties

Kramat77 does not sell or trade member personal data to third parties. However, in the course of platform operations, we may share your data with a limited and carefully selected group of third-party categories as outlined below:

  • Malaysian payment providers: Payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) receive only the transaction information required to process your deposits and withdrawals. Each of these providers has their own privacy policy.
  • Game providers: Companies such as Pragmatic Play, Evolution Gaming, Playtech, and Microgaming receive only the minimum technical data required to run their games on the Kramat77 platform. This data does not include your full financial information.
  • Technical service providers: Companies that help us operate the platform on a technical basis — including server hosting, cybersecurity, analytics and IT support — act as data processors under our instruction and are bound by strict confidentiality agreements.
  • Legal authorities: Kramat77 will disclose personal data to Malaysian authorities (such as PDRM, BNM or SPRM) where required by law, court order, or in the course of a legitimate criminal investigation. Kramat77 does not disclose such information on a voluntary basis.
  • Merger or acquisition: In the event of a merger, acquisition or transfer of business assets, members' personal data may be transferred as part of those business assets, and members will be notified in advance.

✅ Our Guarantee: All third parties that receive Kramat77 member data are bound by data protection agreements requiring them to safeguard that information to a standard consistent with this Privacy Policy and Malaysia's PDPA requirements.

5

Our Data Security Measures

Kramat77 continuously invests in its security infrastructure to ensure your personal data remains protected from unauthorised access, loss, misuse or disclosure at all times. The following are the key layers of protection we have in place:

Data Encryption in Transit

All communications between your browser and Kramat77's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate. This ensures that no sensitive information can be intercepted by third parties while in transit.

Data Encryption at Rest

Sensitive data such as passwords and financial information is stored in encrypted form using strong hashing algorithms. Even in the event of unauthorised server access, this data cannot be read in its original form.

Multi-Level Access Control

Access to Kramat77 member data is strictly limited on a need-to-know basis. All staff access is automatically logged and regularly audited by our security team.

24/7 Security Monitoring

Kramat77's automated monitoring system detects and flags suspicious activity in real time — including unusual login attempts, irregular transaction patterns, and known cybersecurity threats.

Regular Security Audits

Kramat77 conducts regular internal and external security audits, including penetration testing, to identify and address vulnerabilities before they can be exploited.

Your Responsibilities: Data security is a shared responsibility. Please ensure your Kramat77 account password is strong and unique, is not shared with anyone, and is changed regularly. Kramat77 will never ask for your password via email, SMS, or live chat.

6

Personal Data Retention Period

Kramat77 does not retain your personal data for longer than necessary. Retention periods are determined based on the original purpose of collection and applicable legal requirements:

  • Active account data: For as long as your Kramat77 account remains active, all account management data will be retained to ensure you have full access to the platform.
  • Financial transaction records: Retained for a minimum of 7 years following each transaction, in compliance with Malaysian accounting and financial legal requirements as well as AML obligations.
  • Identity verification records (KYC): Retained for a minimum of 5 years after account closure, in accordance with Malaysia's Anti-Money Laundering Act requirements.
  • Support communication records: Retained for 2 years after case resolution for reference and service quality improvement purposes.
  • Analytics data and system logs: Retained for 12 months and subsequently anonymised or automatically deleted.
  • Marketing data: Retained until you withdraw consent or request deletion, or for up to 3 years of inactivity.

Once the mandatory retention period has ended, Kramat77 will securely delete or anonymise your personal data in accordance with data disposal procedures approved by our security team.

7

Cookies, Trackers & Similar Technologies

The Kramat77 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and gather analytics data that helps us understand how members use our platform. Below are the types of cookies used:

You can manage or disable certain cookies through your browser settings. However, disabling essential cookies may affect your ability to use certain features on Kramat77. For guidance on managing cookies in different browsers, please refer to your browser's help section.

8

Your Rights Under PDPA 2010

As a Kramat77 member based in Malaysia, you have the following rights under Malaysia's Personal Data Protection Act 2010 regarding the personal data we hold about you:

Right to Access

You have the right to request and receive a copy of all personal data we hold about you. We will process data access requests within 21 days.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Log in to your Kramat77 account to update basic information, or contact support for other corrections.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data. This is subject to legal retention obligations that may require us to retain certain data for a specified period.

Right to Restrict Processing

You have the right to request that we restrict how we process your data in certain circumstances — for example, while you are contesting the accuracy of your data or while an objection to processing is pending a decision.

Right to Object

You have the right to object to the processing of your personal data based on legitimate interests, including direct marketing. Once your objection is received, we will cease processing your data for that purpose.

Data Portability Rights

You have the right to receive the personal data you have provided to Kramat77 in a structured, machine-readable format, and to transfer it to another data controller if you choose.

To exercise any of the rights above, please contact the Kramat77 support team by email at support@kramat77.best or via 24/7 live chat. We will verify your identity before processing any personal data request, and will respond within the timeframe required by PDPA.

9

Children's Privacy

Kramat77 is a platform designed for and available exclusively to individuals aged 18 and above. We do not knowingly collect, store or process personal data from children or minors under the age of 18.

Should we discover that personal data belonging to someone under the age of 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe your child or a minor has registered on Kramat77, please contact us immediately at support@kramat77.best for immediate action.

Parents & Guardians: We encourage parents and guardians to use the parental control tools available on their children's devices to block access to gambling websites. This is an additional protective measure that can be taken independently of Kramat77's own controls.

10

How to Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Kramat77 handles your personal data, please contact us through the following channels:

  • Email: support@kramat77.best — for privacy enquiries, please include "PRIVACY" in your email subject line for priority processing.
  • 24/7 Live Chat: Available on all pages of the Kramat77 platform. Please indicate that your enquiry relates to data privacy so it can be routed to the right team.
  • Response time: We are committed to responding to all privacy enquiries within 3 business days, and data rights requests within 21 days as stipulated by the PDPA.

If you believe that Kramat77 has not handled your personal data in accordance with Malaysia's PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia. However, we encourage you to contact us first so we have the opportunity to address your concerns directly.

📋 Policy Update: This Privacy Policy may be updated from time to time to reflect changes in legislation, industry practices, or Kramat77's platform operations. Members will be notified of any material changes via their registered email or a prominent notice on our website. The date of the last update is 1 January 2026.

FAQ

Kramat77 Privacy Policy – Frequently Asked Questions

Absolutely not. Kramat77 does not sell, rent or trade members' personal data to any advertising companies or third-party data vendors for marketing purposes. Your data is shared only with parties directly involved in the operation of the platform — such as Malaysian local payment providers (Touch 'n Go, DuitNow, GrabPay) and approved game providers — and only to the extent necessary to deliver those services to you.

You may submit a Subject Access Request by contacting the Kramat77 support team by email at support@kramat77.best. Please use "DATA ACCESS REQUEST" as your email subject and include your Kramat77 account number to help speed up processing. We will first verify your identity as a security measure, then process your request within 21 days as required under Malaysia's PDPA 2010. Your data will be provided in a readable format.

When your Kramat77 account is closed, we retain your personal data only for as long as required by Malaysian law. Financial transaction records are kept for 7 years and identity verification records for 5 years, in accordance with the Anti-Money Laundering Act. Once these mandatory retention periods expire, your data will be securely deleted. Data not subject to legal retention obligations — such as platform preferences and marketing data — will be deleted within a shorter timeframe.

Kramat77 does not store your full bank account number or the login credentials of your e-wallet accounts (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow). When you make a deposit or withdrawal, the transaction is processed directly through the respective provider's secure payment gateway — Kramat77 only receives confirmation of whether the transaction was successful or failed. Bank account numbers stored by Kramat77 for withdrawal purposes are held in encrypted form and displayed to you in masked format — for example, Maybank ****1234.

Yes, you can withdraw your consent to receive marketing communications from Kramat77 at any time. There are two ways to do this: first, click the "Unsubscribe" link found at the bottom of any promotional email we send; second, contact our support team via live chat or email at support@kramat77.best and let us know you wish to opt out of marketing communications. Your request will be processed within 5 business days. Please note that opting out of marketing emails does not affect essential operational emails such as transaction confirmations or account security notices.
Kramat77's Commitment to Protecting Your Data

Kramat77 takes our responsibility as a personal data controller for Malaysian members seriously. We are fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010 and continue to invest in security to protect your information. For more details, please read our Terms & Conditions us. For information on responsible gaming, visit our Responsible Gaming us.

Your Data is Safe with Kramat77 – Register with Confidence

Your privacy is fully protected. Register with Kramat77 for free today, enjoy over 500 games and Sports Betting with deposits from as low as RM 20 via Touch 'n Go, DuitNow, or GrabPay — all with bank-grade security.

SSL 256-bit • PDPA Compliant • No data sales • 24/7 Bahasa Malaysia support

Bahasa Melayu