Full Malaysia PDPA Compliance

Privacy Policy Terbang77 – Our Commitment to Protecting Your Personal Data

Terbang77 takes seriously our responsibility to protect the personal data of every registered member in Malaysia. This document clearly explains what information we collect, how it is used, who it is shared with, and your rights as the owner of that data.

Last Updated
1 January 2026
Compliance
Malaysia PDPA
Encryption
SSL 256-bit
Data Collected Data Usage Sharing Security Cookies Your Rights Retention Amendments Contact Us

Terbang77's Six Privacy Commitments

The core principles that underpin how Terbang77 handles the personal data of all Malaysian members

Full Malaysia PDPA Compliance
Terbang77 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) across all aspects of data collection, processing, and storage. This means you hold strong legal rights over your personal data, and we are obligated to uphold those rights without compromise.
256-bit SSL Encryption
All data transmitted between your device and Terbang77's servers is protected by 256-bit SSL encryption – the same security standard used by Malaysia's leading banking institutions. This ensures that your login credentials, transaction data via Touch 'n Go, GrabPay, or DuitNow, and personal details cannot be intercepted by third parties.
Data Not Sold to Third Parties
Terbang77 has never sold, rented, or traded members' personal data to any third party for marketing or any other purpose unrelated to our services, and we never will. Your data belongs to you — it is not a business commodity. This is an absolute commitment that has remained unchanged since Terbang77 first began operations.
Strict Internal Access Controls
Only Terbang77 staff with a specific, job-related need are permitted to access members' personal data. Every access is logged and monitored. Our staff undergo regular data protection training and are bound by strict confidentiality agreements. Internal breaches are met with serious disciplinary action, including dismissal and legal proceedings.
Explicit Consent Before Collection
Terbang77 only collects data that you voluntarily provide during registration and use of the platform, or data that is legitimately required to process financial transactions via methods such as FPX and Malaysian eWallets. We do not employ hidden or misleading data collection techniques under any circumstances.
Breach Notification Within 72 Hours
In the event of any security incident involving members' personal data, Terbang77 is committed to notifying affected users and the relevant authorities within 72 hours of the incident being identified — exceeding the minimum standard set by most data protection frameworks.
Notice: This Privacy Policy takes effect on 1 January 2026 and applies to all registered Terbang77 members in Malaysia. By registering or continuing to use the Terbang77 platform, you agree to the data handling practices described in this document. If you do not agree, please discontinue use and contact our support team to close your account.
1

Information We Collect

Terbang77 collects two main categories of information from members – information you provide directly and information collected automatically as you use our platform. We only collect data that is genuinely necessary to deliver a safe, fair, and quality service to you.

Information You Provide Directly:

  • Full name as it appears on your Malaysian identity card or passport
  • National identity card number (MyKad) or passport number for identity verification purposes
  • Date of birth to verify the minimum age requirement of 18 years
  • Active email address for account communications and notifications
  • Malaysian mobile number for two-factor authentication and communications
  • Payment method details — eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or banking information for FPX (Maybank2u, CIMB Clicks) required for deposits and withdrawals in MYR
  • A copy of your identity document for the KYC (Know Your Customer) process prior to your first withdrawal

Automatically Collected Information:

  • IP address and general location information (state/city) for security and verification purposes
  • Device type, operating system, and web browser used to access the platform
  • Game session records including date, time, game type, bet amount, and outcome
  • Financial transaction records including deposits, withdrawals, and bonus history
  • Platform usage patterns for service improvement and fraud detection purposes
  • Cookie data and similar tracking technologies (described in Section 5)
Data Minimisation Principle: Terbang77 follows the principle of data minimisation — we collect only what is strictly necessary. You are not required to provide optional information such as your home address or IC number unless it is needed for identity verification during a withdrawal or when required by the relevant authorities.
2

How We Use Your Data

Personal data collected by Terbang77 is used solely for the purposes stated below. We do not use your data for any other purpose without first obtaining your renewed consent.

Purpose of Use Data Type Legal Basis
Account Management & Verification Name, email, phone number, date of birth Contract
Financial Transaction Processing EWallet / FPX payment information Contract
Identity Verification (KYC) IC/Passport, supporting documents Legal Obligations
Security & Fraud Prevention IP address, device, activity patterns Legitimate Interest
Customer Support All enquiry-related data Contract
Promotional Communications Email address, phone number Consent
Platform Improvements Anonymised usage data Legitimate Interest
AML Legal Compliance Financial transaction records Legal Obligations

For promotional communications such as emails about badminton bonuses, slots offers, Thomas Cup promotions, or weekly cashback — you may opt out at any time by clicking the "unsubscribe" link in any email or by contacting our support team. Opting out of promotional communications will not affect any other aspect of your Terbang77 account.

3

Sharing Data with Third Parties

Terbang77 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we need to share certain data with the following parties within strictly limited and controlled parameters.

  • Payment Processors: Required transaction information is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and the FPX banking gateway to process deposits and withdrawals in MYR. All these payment processors are licensed companies operating in Malaysia and are subject to Bank Negara Malaysia regulations.
  • Game Provider: Minimum technical data (anonymised session IDs) is shared with game software providers such as Pragmatic Play and PG Soft for game processing purposes only. These providers do not receive your personally identifiable information.
  • Identity Verification Service: For KYC purposes, copies of identity documents may be processed through licensed third-party verification services that comply with strict data protection standards.
  • Legal Authority: Terbang77 will disclose personal data to the relevant authorities (police, courts, the Malaysian Anti-Corruption Commission, and others) when required by Malaysian law or pursuant to a valid official request.
  • Technical Service Providers: Technical infrastructure providers (server hosting, CDN) may have technical access to stored data, but they are bound by strict confidentiality agreements and are not permitted to use that data for their own purposes.
International Data Transfers: Some of Terbang77's technical and game software providers operate outside Malaysia. In such cases, data transfers are carried out with appropriate contractual safeguards to ensure that data protection standards equivalent to Malaysia's PDPA are maintained at all times.
4

Data Security & Encryption

Terbang77 invests seriously in security infrastructure to ensure that members' personal data is consistently protected against both external and internal threats. The following technical and organisational security measures are in place on an ongoing basis.

  • 256-bit SSL/TLS encryption for all communications between the user's browser and Terbang77's servers
  • Data stored in our databases is further protected with AES-256 encryption as an additional layer of security
  • Member passwords are never stored in plain text — they are processed through a one-way cryptographic hashing function
  • Two-factor authentication (2FA) is available and strongly encouraged for all Terbang77 accounts
  • 24/7 security monitoring by Terbang77's information security team
  • Regular penetration testing by independent cybersecurity firms
  • Role-based access control (RBAC) – each staff member can only access the data required for their specific role
  • Full audit logs for all access to and changes made to personal data

While Terbang77 employs the best available security measures, no security system can guarantee 100% protection against all threats. You also play a role in keeping your account secure — use a strong and unique password, enable 2FA, and never share your login credentials with anyone. Contact Terbang77 support immediately if you suspect any suspicious activity on your account.

5

Cookies & Tracking Technologies

The Terbang77 platform uses cookies and similar tracking technologies to ensure proper platform functionality, enhance the user experience, and analyse usage patterns on an aggregate basis. The following are the types of cookies we use.

You can manage your optional cookie preferences through your web browser settings. Please note that disabling optional cookies may affect certain convenience features of the platform. Disabling mandatory cookies will prevent you from using the platform in full.

6

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA), you have specific rights regarding the personal data we hold about you. Terbang77 is committed to respecting and facilitating the exercise of all these rights.

Right of Access
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 business days. The first request is free of charge; subsequent requests within the same 12-month period may be subject to a reasonable administrative fee.
Right to Rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update most information directly through your Terbang77 account profile settings, or contact our support team for corrections that require verification.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed for its original purpose. Please note that financial transaction records may need to be retained for a specified period to fulfil legal obligations related to anti-money laundering.
Right to Object
You have the right to object to the processing of your personal data for specific purposes, particularly for marketing communications. Objections to promotional communications relating to slots promotions, badminton bonuses, or Live Casino offers will be acted upon immediately upon receipt of your request.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format (CSV or JSON) for transfer to another service provider. This includes your game records, transaction history, and profile information you have provided to Terbang77.
Right to Restrict Processing
In certain situations – such as when you dispute the accuracy of your data or the validity of an objection – you may request that the processing of your data be temporarily restricted until the matter is resolved. Terbang77 will process such requests within 14 business days.
How to Submit a Data Rights Request: To submit any request relating to the data rights above, please email support@terbang77.best with the subject line "PDPA Data Rights Request" along with your account details for identity verification. Terbang77 will acknowledge receipt within 3 business days and fulfil the request within the timeframe prescribed by law.
7

Data Retention & Deletion

Terbang77 retains your personal data only for as long as necessary to fulfil the original purpose for which it was collected, or to meet our legal obligations. Our retention policy is as follows.

  • Active Account Data: For the duration of your active account and for 7 years after account closure, for legal compliance purposes and to resolve any disputes that may arise.
  • Financial Transaction Records: Minimum 7 years from the date of transaction, in line with the requirements of Malaysia's Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).
  • KYC Documents (IC/Passport): Retained for the duration of the active account and for 5 years after account closure. Documents are securely deleted after this period using standards-compliant data destruction methods.
  • Security Logs: Technical and security log data is retained for 2 years for the purpose of investigating any security incidents that may arise.
  • Support Communication Data: Customer support conversation records are retained for 3 years for reference and service improvement purposes.
  • Anonymised Analytics Data: Anonymised usage data that cannot be attributed to any specific individual may be retained for longer periods for platform improvement purposes.

Once the retention period ends, data is securely deleted using methods that ensure it cannot be recovered. For physical storage media reaching end of life, secure physical destruction methods are applied prior to disposal.

8

Privacy Policy Amendments

Terbang77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. We are committed to notifying you of any material changes in a clear and timely manner.

  • Material amendments will be communicated via an in-platform notice and email to all members at least 14 days before taking effect
  • Minor amendments (language clarifications, spelling corrections) may take effect without a separate notice, but the "Updated" date will be revised accordingly
  • Previous versions of the Privacy Policy are available upon request via the support email
  • Continued use of the Terbang77 platform after an amendment notice takes effect will be considered acceptance of those changes

We encourage you to review this page periodically to stay informed about how we handle your personal data. Any queries regarding amendments may be directed to our support team.

9

Contact Us

If you have any questions, concerns, or complaints about how Terbang77 handles your personal data, we encourage you to contact us directly first before escalating to the relevant authorities.

Terbang77 Data Protection Officer:
Email: support@terbang77.best
Email subject: "Privacy Policy Enquiry" or "PDPA Data Rights Request"
Response time: 3–5 business days for general enquiries, 21 business days for formal data rights requests.

If you are not satisfied with our response after raising a concern directly with Terbang77, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) or the relevant authority. Terbang77 will always cooperate fully with any official investigation by the competent authorities.

Quick Navigation
1. Data Collected 2. Use of Data 3. Data Sharing 4. Security 5. Cookies 6. Your Rights 7. Data Retention 8. Amendments 9. Contact Us
PDPA Compliance
This policy is in full compliance with Malaysia's Personal Data Protection Act 2010.

Understanding the Terbang77 Privacy Policy – What You Need to Know as a Malaysian Member

We live in an age where our personal data is scattered across countless platforms — social media, banking apps, e-commerce sites, and more. In this context, it is entirely reasonable to ask any platform you use some honest questions: what do they store about me? Who can see my information? What happens to my data if I close my account? These are not signs of paranoia — they reflect healthy digital awareness, and Terbang77 values every member who takes these matters seriously.

When you register a Terbang77 account and provide your phone number along with your Touch 'n Go or GrabPay eWallet details, that data is stored in a database protected with AES-256 encryption — the same level of security used by financial institutions to safeguard their customers' sensitive information. Your phone number is used for two-factor authentication and account communications, not to be sold to marketing companies or passed to any third party unrelated to our services. This is not merely a promise — it is a legal commitment under Malaysia's PDPA, which Terbang77 is bound by as a registered data controller.

One of the most common concerns raised by new Terbang77 members is the request for identity card information during the KYC (identity verification) process prior to the first withdrawal. This is a standard procedure required under Malaysia's Anti-Money Laundering and Anti-Terrorism Financing Act (AMLA) — not an arbitrary decision by Terbang77. Your IC copy is stored in a separate system from the main database, with strictly limited access restricted to our compliance team only, and will be securely deleted in accordance with our data retention schedule once it is no longer required. Terbang77 never uses your IC image for any purpose other than the required identity verification.

Your game and betting records — whether you placed a wager on a Lee Zii Jia BWF badminton match or played Pragmatic Play slots in the middle of the night — are retained for several legitimate purposes. First, they are necessary for handling any disputes or complaints you may raise regarding game outcomes or winnings calculations. Second, they support our responsible gambling monitoring system in identifying patterns that may indicate a loss of control, allowing us to offer proactive assistance. Third, financial records are a legal obligation under Malaysia's AMLA that cannot be avoided. This data is not used to build a psychographic profile of you, nor is it sold to any external party.

Terbang77 understands that giving users genuine control over their own data is not just a matter of policy wording — it has to mean something in practice. Your rights to access, correct, delete, and port your data are not merely legal terms included to satisfy compliance requirements. They are real rights you can exercise, and the Terbang77 team is trained to handle such requests efficiently and respectfully. If you email support@terbang77.best with a request for a copy of your data, you will receive a response within the stipulated timeframe — no unnecessary questions asked, no deliberate bureaucratic barriers.

On a technical level, Terbang77 uses cookies for several important purposes – maintaining your login session so you do not need to sign in every time, remembering your preferred odds display settings for badminton or football, and enabling our security systems to detect suspicious access attempts. We do not use third-party cookies for targeted advertising or to track your activity outside of the Terbang77 platform. The analytics cookies we use generate anonymised aggregate data – we know how many users visited the badminton betting page on Thomas Cup day, not who those users specifically are.

Trust is Terbang77's most valuable asset – worth more than any short-term business gain that could come from misusing data. Over 500,000 registered members have entrusted us with their personal information since 2019, and we do not take that responsibility lightly. This Privacy Policy is not merely a document written to satisfy legal requirements – it is a reflection of Terbang77's genuine commitment to every member in Malaysia that your privacy is our priority, not an afterthought.

FAQ – Terbang77 Privacy Policy

Clear answers to the most frequently asked questions about our privacy and data security practices

No — Terbang77 has never sold, rented, or exchanged members' personal data with any third party for marketing or any other purpose unrelated to our services, and we never will. Your data is shared only with parties necessary to deliver those services — payment processors such as Touch 'n Go and GrabPay to handle your MYR transactions, game providers for technical session purposes, and authorities when required under Malaysian law. All such sharing is clearly stated in our Privacy Policy and does not involve any external marketing purposes.

Identity verification (KYC) is a legal requirement under Malaysia's Anti-Money Laundering Act (AMLA), which obliges financial platforms including online betting platforms to verify user identity before processing financial transactions above certain thresholds. This is not Terbang77's choice – it is a legal obligation. Your IC copy is stored securely in a separate system, protected with encryption, accessible only to our compliance team, and will be deleted in accordance with our data retention schedule. No other Terbang77 staff has access to your IC image.

When you close your Terbang77 account, active account data (profile, settings) will be deactivated and will no longer be accessible. However, financial transaction records must be retained for a minimum of 7 years after account closure under Malaysia's AMLA legal obligations. KYC data (identity documents) is retained for 5 years after closure. Once the retention period expires, all data is securely deleted using methods that ensure it cannot be recovered. You may request the immediate deletion of data not subject to legal obligations by emailing support@terbang77.best.

To stop receiving promotional emails from Terbang77 – including notifications about badminton bonuses, slots offers, EPL football promotions, or Live Casino cashback – you have several options. The quickest way is to click the "Unsubscribe" link at the bottom of any of our promotional emails. You can also update your communication preferences via your account profile settings, or reach out to our support team through live chat or email. Opting out of promotional communications will not affect important transactional emails such as deposit confirmations, withdrawal notifications, or account security alerts, which will continue to be sent.

In the event of a security incident involving members' personal data, Terbang77 has a comprehensive Incident Response Plan in place. The first step is to detect and contain the incident as quickly as possible. Within 72 hours of confirming the incident, we will notify the relevant authorities and send notifications to all potentially affected users with details of what occurred, what data may have been exposed, and the steps they should take to protect themselves. Terbang77 will provide full support to affected users, including assisting with password changes and monitoring for suspicious account activity.

Protected Payment Methods

All financial transactions on Terbang77 — whether deposits or withdrawals — are protected by multiple layers of security. Your eWallet and online banking payment details are not retained in Terbang77's systems once a transaction has been processed.

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow Maybank2u CIMB Clicks FPX

Your eWallet account details (the mobile number linked to Touch 'n Go or GrabPay) are used solely to process transactions you initiate. This information is never stored in plain text and is not shared with any marketing providers.

Terbang77's Privacy Commitment

This Privacy Policy should be read together with Terms & Conditions and Responsible Gambling Policy Terbang77 for a full overview of your rights and responsibilities. Any data privacy enquiries can be directed to support@terbang77.best. We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA).

🔒

Your Data Is Safe. Your Platform Is Trusted.

Terbang77 protects your privacy with 256-bit SSL, full PDPA compliance, and an absolute commitment to never selling your data. Register with confidence and start enjoying slots, Live Casino, and badminton and football betting today.

256-bit SSL Secured
Full PDPA Compliance
Data Not Sold
24/7 Support
Bahasa Melayu