Privacy Policy

Privacy Policy cmd77 – We Protect Your Data

At cmd77, protecting your personal information is not merely a legal obligation — it is our commitment to every member. Find out how we collect, use, and protect your data transparently and responsibly.

Last updated: 1 January 2026

SSL 256
Bit Encryption
PDPA
2010 Compliance
24/7
Security Monitoring
0
Sale of Data to Third Parties

Cmd77's Six Pillars of Data Protection

Every action we take in managing member personal data is guided by six core principles of transparency and accountability.

High-Level Encryption

All data transmitted between your device and cmd77 servers is protected by 256-bit SSL encryption. Sensitive information such as banking details and passwords is never stored in plain text.

No Data Sales

Cmd77 has never and will never sell, rent, or trade member personal information to any third party for marketing purposes. Your data belongs to you, not us.

Full Member Control

You have full rights to access, correct, transfer, and delete your personal data. Data-related requests can be submitted at any time through our support team .

PDPA 2010 Compliance

All our data management operations comply with Malaysia's Personal Data Protection Act 2010. We continuously monitor legislative changes to ensure ongoing and comprehensive compliance.

Continuous Monitoring

Cmd77's security system operates 24 hours a day, 7 days a week. Any unauthorized access attempts are automatically detected and immediate action is taken to protect member data.

Full Transparency

We clearly inform you of what data is collected, why it is collected, and how long it is retained. There is no hidden data collection or undisclosed purpose beyond what is stated in this policy.

1 Information We Collect

When you register and use the cmd77 platform, we collect several categories of information to ensure the services we provide run smoothly, securely, and in line with your needs as a member. This data collection is carried out transparently and solely for the purposes stated in this policy.

Information you provide directly:

  • Full name as shown on a valid identification document (national ID or passport).
  • Date of birth for age verification purposes to ensure legal compliance.
  • Active email address used for account communications and important notifications.
  • A valid Malaysian mobile number for two-factor authentication and security communications.
  • Banking or digital wallet details (bank name, account number) to process deposit and withdrawal transactions.
  • Current residential address for KYC verification purposes as required by law.
  • Identity document copies and proof of address during the KYC process.

Information collected automatically:

  • IP address and approximate location data for security and fraud detection purposes.
  • Device type, operating system, and web browser version in use.
  • Platform activity logs including games played, session duration, and transaction history.
  • Cookie data and session identifiers to maintain your login status and preferences.

Note: We do not store your full credit or debit card number. All payment details are processed through registered payment gateways that comply with PCI-DSS standards.

2 How We Use Your Data

Every piece of data we collect has a clear purpose. cmd77 uses your personal information solely for purposes related to delivering our services and complying with applicable laws.

Purpose of Use Types of Data Involved Legal Basis
Member account management Name, email, phone number Contract performance
KYC Verification Identity documents, address Legal Obligations
Transaction processing Banking details, deposit history Contract performance
Fraud prevention IP, activity logs, transaction patterns Legitimate Interests
Customer Support Communication history, account records Contract performance
Marketing Communications Email, phone number Your consent
Platform improvements Anonymised usage data Legitimate Interests

You may withdraw consent to receive marketing communications at any time by contacting our support team. Withdrawal of consent will not affect any processing carried out prior to that point.

3 Data Processing Basis

Cmd77 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). We rely on one or more of the following bases depending on the purpose of processing:

  • Contract performance — Processing required to provide platform services to you as a registered member, including account management and financial transactions.
  • Legal Obligations — Processing required by Malaysian law, including KYC requirements, anti-money laundering (AML) obligations, and reporting to relevant authorities.
  • Legitimate Interests — Processing for platform security, fraud prevention, and service improvement purposes that does not unreasonably prejudice your rights.
  • Your consent — Processing for marketing and promotional communications, which you may withdraw at any time.

In all situations, we only process data that is strictly necessary for the stated purposes — a principle known as "data minimisation" in good data protection practice.

4 Sharing Information With Third Parties

Cmd77 does not sell or trade member personal data to any party. However, in certain limited situations, we may share information with trusted third parties for operational and legal compliance purposes:

  • Payment service providers — Payment gateways and financial institutions that process your deposit and withdrawal transactions, subject to strict confidentiality agreements.
  • Identity verification service providers — Third-party KYC companies that assist us in verifying member identities in accordance with legal requirements.
  • Game providers — Game software providers operating games on our platform may receive the minimum technical data required for game functionality.
  • Regulatory authorities — Information required by law to be shared with Malaysian government authorities or law enforcement agencies.
  • Cloud and hosting services — IT infrastructure providers supporting platform operations, with equivalent data protection standards.

All third parties with whom we share data are bound by data processing agreements that require them to handle your information to the same high standards of security and confidentiality that we uphold ourselves.

Reminder: cmd77 will not transfer your personal data across international borders unless there is a clear legal requirement or with your explicit prior consent.

5 Data Storage & Security Measures

Cmd77 retains your personal data for as long as necessary to fulfill the purpose of collection or as required by Malaysian law. Generally, active account records are kept for the duration of your active membership, while financial and KYC records are retained for a minimum of 7 years after account closure to comply with financial regulatory requirements.

To protect your data, cmd77 implements multiple layers of technical and organizational security:

  • 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
  • At-rest encryption for all sensitive information stored in our database.
  • Role-based access control (RBAC) ensuring that only authorised staff can access member data.
  • Comprehensive audit logs record every access to personal data for monitoring and accountability purposes.
  • Penetration testing conducted periodically by independent security experts.
  • A tested security incident response plan to ensure swift action in the event of a data breach.

In the event of a security incident involving your personal data, cmd77 will notify you within 72 hours of becoming aware of it, in line with data protection best practices.

6 Cookies & Tracking Technologies

Cmd77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

  • Essential Cookies — Required for core platform functions such as Login session management and security. These cookies cannot be disabled.
  • Preference Cookies — Stores your preference settings such as language and time zone for a more personalized experience.
  • Analytics Cookies — Helps us understand how members use the platform for service improvement purposes. This data is analyzed in aggregate and anonymized form.
  • Security Cookies — Detects suspicious usage patterns and helps our security systems identify potential threats or fraudulent activity.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect platform functionality and your gaming experience. More information on managing cookies in major browsers can be found in your browser's help section.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. cmd77 fully respects and facilitates the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request an immediate correction through your account settings or by contacting customer support.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes. The objection will take effect immediately upon receipt.

Right to Data Portability

You may request your personal data in a machine-readable format for transfer to another service provider if needed.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your data while a dispute is resolved or a review is carried out.

To exercise any of the above rights, contact our data protection team via live chat or support email. All requests will be verified before processing to ensure the security of your account.

8 Child Data Protection

The cmd77 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

If we discover that we have collected personal data from someone under the age of 18 without proper verification, we will immediately take the following steps:

  • Suspending the account immediately while conducting an investigation.
  • Deleting all personal data associated with the individual from our systems.
  • Returning any remaining account balance to the original payment method used.
  • Reporting the incident to the relevant authorities where required.

Parental Responsibility: We encourage parents and guardians to monitor their children's online activities. If you suspect that a child has registered on our platform, please contact us immediately.

9 Changes to This Privacy Policy

Cmd77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

When we make significant changes to this policy, we will notify you via:

  • An in-platform notification when you first log in to your account after the changes take effect.
  • Notification emails are sent to the address registered in your account.
  • Update of the "Last Updated" date displayed at the top of this page.

We encourage you to review this Privacy Policy page periodically. Continued use of the cmd77 platform after any changes are published will be deemed acceptance of the updated policy.

10 Contact Our Data Protection Officer

Cmd77 has appointed a Data Protection Officer responsible for ensuring our compliance with applicable data protection laws. If you have any questions, concerns, or complaints regarding how we handle your personal data, we encourage you to reach out to us.

You may contact our data protection team through the following channels:

  • Live Chat — The fastest channel for urgent enquiries, available 24 hours a day, 7 days a week via the chat icon in the corner of the platform.
  • Support Email — Send your enquiry to [email protected] for a response within 1–2 business days.
  • FAQ Page — Visit the FAQ us for answers to the most frequently asked questions about privacy and security.

We are committed to handling every privacy enquiry or complaint seriously and within a reasonable timeframe. Your satisfaction and trust are our priority.

cmd77's Commitment: We will never contact you to request your password, PIN, or account security details through any channel. Please be vigilant against fraudulent attempts impersonating cmd77.

Cmd77 Privacy FAQ

Answers to the questions most frequently asked by our members regarding data protection and privacy.

Absolutely not. cmd77 has never and will never sell, rent, or trade member personal data to any third party for marketing purposes. Your data is used solely for platform operations and legal compliance as stated in this Privacy Policy.

Active account data is retained for the duration of your membership. After account closure, financial and KYC records are kept for a minimum of 7 years in accordance with Malaysian financial law requirements. Other data not required by law will be deleted within 90 days of account closure.

You may submit a data access request via live chat or our support email at [email protected]. Requests will first be verified for account security, then processed within 21 working days. Data will be sent in a secure format to your registered email address.

Yes. cmd77 uses 256-bit SSL encryption for all financial transactions. Full credit or debit card numbers are never stored in our systems — all payments are processed through registered payment gateways that comply with international PCI-DSS security standards. Your banking information is used solely to process your deposits and withdrawals.

You may request the deletion of your personal data; however, this is subject to legal retention obligations. Financial and KYC records must be retained for the period prescribed by Malaysian law. Data not subject to these obligations will be deleted within 30 days of the request being confirmed.

In the event of a security incident involving your personal data, cmd77 will notify you within 72 hours of becoming aware of it. We will explain what happened, what data was affected, and the steps we are taking to address the situation. We will also report the incident to the relevant authorities as required by law.

Trusted Platform, Your Data Protected

Join millions of members enjoying the best online entertainment experience with the peace of mind that their personal data is always safe and fully protected by cmd77.

256-bit SSL Encryption PDPA 2010 Compliance No Data Sales 24/7 Support
Bahasa Melayu