Official Privacy Policy

Sumo77 Privacy Policy – Malaysian Member Personal Data Protection

Your privacy is our priority. Find out exactly how sumo77 collects, uses, stores, and protects your personal information using industry-grade encryption and best-in-class data protection practices.

Updated: January 2026
256-bit SSL Data Encryption
100% Data Not Sold
24/7 Security Monitoring
PDPA Full Compliance

High-Grade Encryption

All data transmitted between your device and sumo77's servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions.

Full Data Control

You have the full right to access, amend, or request deletion of your personal data at any time. Sumo77 respects the privacy rights of every member.

No Sharing Without Consent

Your personal information will not be sold or shared with third parties for marketing purposes without your explicit consent.

Secure Data Storage

Your data is stored on servers protected by multi-layered firewalls, strict access controls, and regular security audits by independent experts.

Transparent and Controlled Cookies

Sumo77 uses cookies solely to improve the user experience. You can manage your cookie preferences through your browser settings at any time.

Legal Compliance

The Sumo77 privacy policy complies with Malaysia's Personal Data Protection Act (PDPA) and relevant international data protection standards.

Introduction

Sumo77 takes our responsibility for the privacy and personal data protection of every member seriously. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use our online casino platform at sumo77.win.

By registering or continuing to use the Sumo77 platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact the support team to close your account.

This policy applies to all Sumo77 users and members, including those accessing the platform via the website, mobile app, or other digital channels operated by Sumo77. We update this policy from time to time to reflect changes in our practices or legal requirements, and you will be notified of any significant changes via email or in-platform notifications.

sumo77 operates in compliance with the Malaysian Personal Data Protection Act (PDPA) and is fully committed to safeguarding the privacy of every member.

1. Information We Collect

In operating a safe and responsible online gambling platform, Sumo77 collects various categories of personal information. This collection is carried out transparently and only for legitimate, necessary purposes.

A Information You Provide Directly

  • Registration Information: Full name, date of birth, gender, phone number, email address, and account password.
  • Identity Information (KYC): Identity card number (MyKad), copy of identification document, verification selfie, and proof of address.
  • Financial Information: Bank account number, account holder name, bank name, and e-wallet details (Touch 'n Go eWallet, GrabPay, Boost).
  • Communication: Any messages, complaints, or feedback you submit to our customer support team.

B Automatically Collected Information

  • Device Data: IP address, device type and model, operating system, browser version, and unique device identifiers.
  • Usage Data: Pages visited, games played, session duration, access dates and times, and in-platform actions.
  • Transaction Data: Records of all deposits, withdrawals, wagering, wins, and losses occurring on the platform.
  • Cookies and Similar Technologies: Session data, language preferences, and cache information to enhance the user experience.

2. Purpose of Data Use

Sumo77 only uses your personal data for legitimate, necessary purposes directly related to the operation of our platform. We never use your data for unrelated purposes without your consent.

Purpose of Use Data Type Legal Basis
Account Management and Verification Identity, KYC Contractual Requirement
Financial Transaction Processing Bank Details, Transactions Contractual Requirement
Fraud Prevention and Anti-Money Laundering IP, device, activity Legal Obligation
Customer Support Communication, Account Legitimate Interest
Platform and UX Improvement Usage data, cookies Legitimate Interest
Marketing and Promotions (with consent) Email, phone number Consent
Legal and Regulatory Compliance All categories Legal Obligation

You may withdraw consent for marketing communications at any time by contacting our support team or using the unsubscribe option in promotional emails.

3. Data Sharing with Third Parties

Sumo77 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your information with trusted parties to ensure the platform operates smoothly and securely.

1 Service Providers

We work with third-party service providers that help us operate the platform, including payment service providers, KYC verification platforms, cloud services, and analytics providers. All such providers are bound by strict data confidentiality agreements and may only process your data in accordance with Sumo77's instructions.

2 Legal Requirement

Sumo77 may disclose your personal data to government authorities, law enforcement bodies, or judicial authorities when required by Malaysian law or a valid court order. This includes investigations related to money laundering, fraud, or other financial crimes.

3 Business Transfer

Should sumo77 be involved in any merger, acquisition, or asset transfer, your personal data may be transferred as part of those business assets. You will be notified in advance should any such change affect how your data is processed.

sumo77 never sells or transfers your personal data to third parties for advertising or marketing purposes without your explicit and express consent.

4. Data Security and Protection

We continuously invest in the latest security infrastructure to ensure your personal data is always protected against unauthorized access, loss, damage, or disclosure.

  • 256-bit SSL/TLS Encryption: All communications between your device and sumo77's servers are encrypted using HTTPS protocol with a valid, up-to-date SSL certificate.
  • Layered Access Control: Only authorized personnel may access member personal data, and every access is recorded in a secure audit log.
  • Firewall and IDS: Our servers are protected by multi-layered firewalls and an intrusion detection system (IDS) that monitors threats in real time.
  • Regular Audits: Penetration testing and security audits are conducted regularly by independent cybersecurity experts to identify and address vulnerabilities.
  • Two-Factor Authentication (2FA): We support two-factor authentication to add an extra layer of security to your account.
  • Secure Data Backup: Data is automatically backed up to secure, offsite locations to ensure service continuity.

While we take all reasonable precautions, no method of data transmission or storage over the internet can be guaranteed 100% secure. You are also responsible for keeping your login credentials safe.

5. Data Retention Period

Sumo77 only retains your personal data for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations. Our general data retention principles are as follows:

Data Category Retention Period
Active Account Information Throughout active account + 7 years
Financial Transaction Records Minimum 7 years (PDPA & AML)
KYC Documents 5 years after account closure
Access and Security Logs 2 years
Customer Support Communication 3 years
Non-essential cookie data Up to 13 months

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised in accordance with our standard procedures.

6. Your Privacy Rights

As a data subject, you hold certain rights regarding your personal data stored by sumo77. We fully respect and facilitate the exercise of these rights in accordance with Malaysia's PDPA provisions.

Right to Access Request a copy of the personal data we hold about you.
Right to Rectification Correct inaccurate or incomplete data.
Right to Erasure Request deletion of your data under certain circumstances.
Right to Object Object to the processing of your data for specific purposes.
Right to Portability Receive your data in a structured, machine-readable format.
Right to Restriction Request a restriction on data processing under certain circumstances.

To exercise any of the above rights, please contact our customer support team via live chat or email at [email protected]. We will process your request within 14 business days. For more complex cases, this period may be extended to up to 30 business days, with prior notification to you.

7. Cookie Policy

Sumo77 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and enable certain features to function correctly. Cookies are small text files stored on your device by your browser.

1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and basic preference settings. These cookies cannot be disabled.
  • Performance Cookies: Helps us understand how users interact with the platform through anonymised usage data for analytics and improvement purposes.
  • Functional Cookies: Saves your preferences such as language, display theme, and other personal settings to provide a more personalised experience.
  • Marketing Cookies: Used to display relevant promotions. You may opt out of this category through your browser settings.

8. Child Protection

The sumo77 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. Should we discover that data from anyone under 18 has been collected inadvertently, we will promptly delete that data and close the account in question.

If you are a parent or guardian and suspect that your child has registered on our platform, please contact our customer support team immediately. We will take prompt action to resolve the matter.

9. Privacy Policy Amendments

Sumo77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or platform enhancements. Each version of this policy will carry a clear effective date.

For significant changes, we will notify you at least 7 days before the changes take effect via:

  • Email notification sent to the address registered on your account.
  • In-platform notification the next time you log in.
  • Announcements on the official sumo77 website.

Continued use of the platform after the effective date of any changes constitutes acceptance of the revised terms. You are advised to review this policy periodically.

10. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. Our data privacy team is ready to assist you.

  • Live Chat: Available 24 hours a day, 7 days a week via the sumo77 platform.
  • Email: [email protected] — we aim to respond within 24–48 business hours.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority in your jurisdiction.

Join the sumo77 Community

Play Safely and Confidently at Sumo77

Your personal data is fully protected. Enjoy the best Slots, Casino, and Live Casino experience with the peace of mind that your privacy is always our top priority.

Bahasa Melayu