Privacy Policy

SGA77 ("we", "us", "our") operates the online entertainment platform accessible at sga77.click. We act as the data controller in respect of the personal information you provide to us when you register an account, make a deposit, place a wager, or otherwise interact with the SGA77 platform.

This Privacy Policy ("Policy") has been prepared to help you understand precisely what personal data we collect from registered players and site visitors, the purposes for which that data is processed, how we keep it secure, and the rights you are entitled to exercise in relation to your own information. It applies to all users of the SGA77 platform, including players located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.

By registering an account or continuing to use the SGA77 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform.

This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the SGA77 platform more broadly.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means SGA77, the entity that determines the purposes and means of processing Personal Data collected via the platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of SGA77 pursuant to a written agreement and under SGA77's instruction.
• "Player" / "User" means any natural person who has registered an account on the SGA77 platform or who accesses the platform without registration.
• "KYC" means Know Your Customer — the identity and age verification process conducted by SGA77 prior to processing any withdrawal request.
• "Cookies" means small text files placed on a device by a website server to store preference and session information.
• "Platform" means the SGA77 website, all associated sub-pages, and the mobile-optimised interface accessible at sga77.click.

SGA77 collects personal data through several channels and across multiple categories. The table below summarises the primary categories of data collected and their typical sources:

We do not collect any special categories of sensitive personal data (such as health, racial or ethnic origin, religious beliefs, or biometric data) beyond what is strictly required for age verification purposes during the KYC process.

SGA77 processes personal data only where a lawful basis exists for doing so. The applicable legal bases are as follows:

• Contractual Necessity: Processing is necessary to perform our obligations under the agreement formed when you register an account and accept our Terms & Conditions — including operating your account, processing deposits and withdrawals, and providing gaming services;
• Legal Obligation: Certain processing activities are required to comply with applicable laws, including anti-money laundering regulations, age verification obligations, and financial record-keeping requirements;
• Legitimate Interests: SGA77 processes certain data on the basis of legitimate business interests, including fraud prevention, platform security monitoring, and responsible gambling compliance — provided those interests do not override your fundamental rights;
• Consent: Where processing is based on consent (for example, opt-in marketing communications), you may withdraw that consent at any time by contacting our support team or adjusting your account notification preferences.

SGA77 uses the personal data we collect for the following specific purposes:

• Account Management: Creating, maintaining, and administering your player account, including processing login credentials, account settings, and contact preferences;
• Payment Processing: Processing deposits via Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and other supported methods, and processing withdrawal requests in MYR to your registered payment method;
• Identity & Age Verification (KYC): Verifying that you are who you claim to be, that you are aged 21 or above, and that you are not on any self-exclusion or sanctions lists;
• Gaming Services: Delivering the live casino, sports betting, and slot game services available on the platform, including maintaining bet history and game session records;
• Responsible Gambling Compliance: Monitoring your gaming activity to identify patterns consistent with problem gambling and administering the deposit limits, session reminders, and self-exclusion tools you have requested;
• Customer Support: Responding to your queries, complaints, and support requests submitted via live chat or email in English, Bahasa Melayu, or Mandarin Chinese;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities on the platform;
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws, including retaining transaction records and cooperating with lawful requests from relevant authorities;
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how the platform is used and to improve user experience, performance, and feature offerings;
• Marketing Communications (with consent): Sending you promotional offers, bonus notifications, and news about SGA77 where you have opted in to receive such communications.

SGA77 does not sell, rent, or trade your personal data with third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment Service Providers: Your financial data is shared with the payment gateways and e-wallet operators necessary to process your deposits and withdrawals, including but not limited to the providers facilitating DuitNow, FPX, Touch n Go eWallet, Boost, GrabPay, and card processing. These providers receive only the data strictly necessary to execute your transaction;
• Identity Verification Partners: KYC document data may be processed by authorised third-party identity verification services engaged by SGA77. Such processors are contractually bound to handle your data solely for verification purposes;
• Game Technology Providers: Technical session identifiers may be shared with our licensed game studio partners to facilitate gameplay. These providers do not receive your name, contact details, or financial information;
• Legal and Regulatory Authorities: SGA77 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or in response to a lawful request;
• Anti-Money Laundering Compliance: Where required by applicable anti-money laundering regulations, transaction data may be reported to relevant financial intelligence units;
• Business Succession: In the event of a merger, acquisition, or sale of all or substantially all of SGA77's business assets, personal data held by SGA77 may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third-party Data Processors engaged by SGA77 are subject to written data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only on SGA77's documented instructions.

SGA77 uses cookies and similar tracking technologies to operate and improve the platform, maintain your session while you are logged in, remember your preferences, and analyse how different areas of the platform are used. The categories of cookies deployed are described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to log in, maintain your session securely, and navigate between game sections without being repeatedly prompted to sign in. These cookies cannot be disabled without affecting platform functionality;
• Functional Cookies: These cookies remember choices you make — such as your preferred language, currency display, or responsible gambling settings — so you do not have to reconfigure them on every visit;
• Performance and Analytics Cookies: These cookies collect anonymised, aggregated information about how players interact with the platform, including which pages are visited most frequently and where navigation issues occur. This data is used solely to improve platform performance;
• Security Cookies: Used to detect fraud signals, identify suspicious login behaviour, and protect player accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the SGA77 platform. SGA77 does not use third-party advertising cookies or behavioural targeting pixels.

SGA77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The principal retention periods applied by SGA77 are as follows:

• Account and Identity Data: Retained for the duration of your active account relationship with SGA77 and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, as required by applicable financial regulatory standards;
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later;
• Gaming Activity Logs: Retained for a minimum of three (3) years for responsible gambling monitoring and dispute resolution purposes;
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last communication;
• Technical and Cookie Data: Anonymised after session conclusion; aggregated analytics data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using industry-standard deletion methods.

SGA77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Transport Encryption: All data transmitted between your device and the SGA77 platform is encrypted using 256-bit SSL/TLS protocols. Connections are enforced via HTTPS at all times;
• Data Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within SGA77's internal systems is restricted on a strict need-to-know basis. All staff access is subject to role-based permissions, multi-factor authentication, and comprehensive audit logging;
• Fraud Monitoring: Automated systems monitor account activity in real time for patterns consistent with account takeover attempts, fraudulent transactions, and prohibited conduct;
• Penetration Testing: SGA77's platform infrastructure undergoes periodic security assessments to identify and remediate potential vulnerabilities.

As a player and data subject, you hold a number of rights in relation to the personal data that SGA77 holds about you. These rights are described below. To exercise any of these rights, please contact our support team via live chat or at [email protected].