Data Protection & Privacy
Your privacy matters to ngaso77. This Policy explains what personal data we collect, why we collect it, how it is used and protected, and what rights you hold over your information.
ngaso77 (referred to herein as "ngaso77", "we", "us", or "our") is committed to protecting and respecting the privacy of every person who accesses or uses the ngaso77 platform at https://ngaso77.cam (the "Platform"). This Privacy Policy (the "Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by ngaso77.
This Policy applies to all users of the ngaso77 Platform, including registered Members, prospective members who visit the Platform without registering, and any individuals who contact ngaso77 through its customer support channels. It covers all personal data collected through the Platform, our live chat system, email correspondence, and any associated services.
By accessing the Platform, registering an account, or otherwise engaging with our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not accept the terms of this Policy, you must not use the ngaso77 Platform.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together govern your use of the ngaso77 platform.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — i.e., information that can be used, alone or in combination with other data, to directly or indirectly identify you. |
| "Processing" | Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is ngaso77. |
| "Data Processor" | A third party that processes personal data on behalf of ngaso77 under contractual obligation and in accordance with ngaso77's instructions. |
| "Member" | A registered user of the ngaso77 Platform who has completed account registration. |
| "KYC" | Know Your Customer — the identity verification and anti-money laundering compliance process applied to Members. |
| "Sensitive Data" | A category of personal data warranting heightened protection, including identification document numbers, financial account details, and biometric data where applicable. |
ngaso77 acts as the Data Controller in respect of all personal data collected through the Platform and associated channels. As Data Controller, ngaso77 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with applicable data protection legislation.
ngaso77 processes personal data primarily in connection with the provision of online gaming and sports betting services to Malaysian users, including Members accessing the platform from Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and across Malaysia.
Data Protection Contact: For all data protection inquiries, requests to exercise your rights, or concerns regarding the processing of your personal data, please contact our Data Protection team at [email protected]. Please include "Data Privacy Request" in your subject line to ensure prompt handling.
ngaso77 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of personal data we collect and the primary context in which they are gathered:
| Category | Examples of Data Collected |
|---|---|
| Identity Data | Full legal name, date of birth, Malaysian NRIC (MyKad) number, passport number, gender, nationality. |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru), postcode. |
| Account Data | Username, encrypted password hash, account registration date, account status, security question responses, two-factor authentication settings. |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (e.g., partial Maybank2u account reference, Touch 'n Go eWallet registered number, DuitNow ID), transaction timestamps, and MYR amounts. |
| KYC Documentation | Scanned or photographed copies of government-issued identity documents, proof of address documents, and selfie-with-ID images submitted during the identity verification process. |
| Transactional Data | Betting history, game session records, wager amounts, game outcomes, sports markets accessed, and bonus claims history. |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, session duration, access timestamps, and referral URL. |
| Communications Data | Records of live chat conversations, email correspondence with support, and any content submitted through contact forms or feedback channels. |
| Behavioural Data | Platform navigation patterns, feature usage frequency, page visit sequences, and session activity logs used for platform optimisation and responsible gambling monitoring. |
Minimum Collection Principle: ngaso77 applies a data minimisation principle — we collect only the personal data that is strictly necessary for the identified purpose. We do not collect data speculatively or for undefined future purposes.
ngaso77 collects personal data through the following channels and mechanisms:
ngaso77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
ngaso77 uses the personal data we collect for the following purposes:
ngaso77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the following circumstances and with the following categories of recipients:
ngaso77 engages third-party service providers who process personal data on our behalf as Data Processors. These include:
All Data Processors are engaged under binding data processing agreements that require them to process personal data only on ngaso77's documented instructions and to implement appropriate technical and organisational security measures.
ngaso77 will disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful governmental request. ngaso77 will comply with such requirements while taking reasonable steps to notify affected Members where disclosure is not prohibited by law.
In the event of a merger, acquisition, restructuring, or sale of all or part of ngaso77's business, personal data held by ngaso77 may form part of the transferred assets. Any acquiring entity would be bound by the terms of this Privacy Policy or be required to provide equivalent privacy protections before any personal data is transferred.
Game studios whose titles are available on the ngaso77 Platform may receive aggregated, anonymised play data for the purpose of game performance analytics. Individual Member identity data is not shared with game studios.
ngaso77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | For the duration of the Member's active account, plus a minimum of 5 years following account closure to meet regulatory record-keeping requirements. |
| KYC Documentation | Minimum 5 years from the date of verification, in compliance with applicable AML legislation. |
| Financial Transaction Records | Minimum 7 years from the date of the transaction, or longer where required by applicable law or ongoing investigation. |
| Customer Support Communications | 3 years from the date of the interaction, or longer where the communication relates to an unresolved dispute. |
| Technical & Log Data | Up to 12 months, unless retained longer due to an active security investigation. |
| Marketing Preferences | Until you withdraw consent or request erasure, subject to applicable minimum retention obligations. |
Upon expiry of the applicable retention period, personal data is either securely deleted, anonymised, or archived in accordance with ngaso77's data lifecycle management procedures.
ngaso77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather analytics data to improve the user experience. The following categories of cookies are used:
| Cookie Type | Purpose | Duration | Status |
|---|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security CSRF protection, and load balancing. Essential for the Platform to function. | Session / up to 24h | |
| Functional | Remembers your language preferences, game display settings, and responsible gambling limits between sessions. | Up to 30 days | |
| Analytics | Collects aggregated, anonymised data on how Members use the Platform — page views, session duration, feature usage — to guide product improvements. | Up to 12 months | |
| Security | Fraud detection signals, device fingerprinting for account protection, and suspicious activity pattern matching. | Up to 90 days | |
| Preferences | Stores your last visited game category, preferred deposit method, and notification settings so you do not need to reconfigure them each visit. | Up to 90 days |
You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. For instructions on managing cookies in your browser, refer to your browser's help documentation. Note that third-party cookies set by payment partners (e.g., Touch 'n Go eWallet, GrabPay) are governed by their respective privacy policies.
ngaso77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
While ngaso77 takes data security seriously and applies robust protections, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, ngaso77 will notify affected Members in accordance with applicable legal requirements.
Security Tip: Never share your ngaso77 account password or 2FA codes with anyone — including individuals claiming to be ngaso77 support staff. ngaso77 will never ask for your password. If you suspect your account has been compromised, contact our 24/7 live chat immediately.
As a data subject whose personal data is processed by ngaso77, you hold the following rights in respect of your personal information. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request".
ngaso77 will respond to all rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by up to a further 60 days, with notification provided. ngaso77 reserves the right to verify the identity of the person making a rights request before complying.
Please note that certain rights may be limited where ngaso77 is required to retain data to comply with legal obligations — for example, the right to erasure cannot be applied to AML transaction records that are required to be retained under applicable law for a minimum period of 5 to 7 years.
ngaso77 strictly prohibits access to its Services by persons under the age of 21 years. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the account registration and KYC process, and ngaso77 reserves the right to request supporting documentation at any time to confirm a Member's date of birth.
If ngaso77 becomes aware that personal data has been collected from an individual who is under 21 years of age, that person's account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any funds deposited will be returned to the payment source where legally permissible and not subject to forfeiture proceedings.
Parents and guardians who have reason to believe that a minor has registered an account or submitted personal data to ngaso77 should contact our support team immediately at [email protected].
The ngaso77 Platform may interface with certain third-party payment systems — including Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, and FPX — to facilitate deposit and withdrawal transactions. When you interact with these payment systems, your data may be processed by those third-party providers under their own privacy policies and terms of service.
ngaso77 game content is provided by third-party game studios. While individual Member identity data is not shared with game studios, aggregated, anonymised play data may be provided to studios for performance analytics. Each studio operates under its own data governance framework.
ngaso77 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of ngaso77, including your chosen payment provider's privacy documentation.
ngaso77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. All revisions will be published on this page with an updated "Last Reviewed" date.
Where a revision constitutes a material change to how we collect, use, or share your personal data, ngaso77 will endeavour to provide advance notice through the Platform's notification system or via the registered email address on your Account — with a minimum of 14 days' prior notice before the amended Policy takes effect.
Your continued use of the ngaso77 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We recommend that you periodically review this Policy to remain informed of how your personal data is handled. If you do not agree with any revision, you may exercise your right to close your account by contacting our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ngaso77, please contact us through the following channels. We are committed to addressing all privacy-related inquiries promptly and transparently.
Available 24/7 on the Platform. Use subject "Data Privacy" for priority routing to our Data Protection team.
Use subject "Data Privacy Request" for all data rights submissions. Response within 30 calendar days.
Privacy at a Glance
These are the concrete data protection measures behind the policy language — the real actions that protect every Malaysian player's personal information on ngaso77.
Every byte of data transmitted between your device and ngaso77 — including your login credentials, MYR transaction details, and KYC documents — is encrypted in transit using industry-standard 256-bit SSL/TLS protocols.
ngaso77 operates on a strict no-sale policy for personal data. Your name, contact details, financial records, and gameplay history are never sold, rented, or traded to third-party advertisers or data brokers.
We collect only what we genuinely need. Each data field collected from Malaysian players is tied to a specific, documented purpose. There is no speculative data harvesting or undefined future-use collection.
Personal data is not kept indefinitely. ngaso77 operates clear data retention schedules — transactional data for regulatory periods, log data for up to 12 months — after which data is securely deleted or anonymised.
Access, rectification, erasure, portability, objection — these are not theoretical entitlements. Submit a rights request to our Data Protection team and receive a substantive response within 30 calendar days.
Every third-party provider that handles your data on ngaso77's behalf — from KYC vendors to payment processors — operates under a binding data processing agreement with defined security and confidentiality obligations.
Play with Confidence
Privacy and security are the foundation of every interaction on ngaso77. From your first deposit to your latest withdrawal, your personal data is handled with the care and diligence it deserves. Ready to experience Malaysia's most trusted online casino platform?
Questions about your data? Contact us at [email protected] · 21+ only. Play responsibly. · Responsible Gambling