Privacy Policy 1377 – How We Protect Your Personal Data

This Privacy Policy applies to all users who access or use the 1377, including those browsing the website without an account, those who have registered and actively use the platform, and those who communicate with our team through any channel.

1377 operates as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we bear full responsibility for ensuring that users' personal data is handled in accordance with the standards set out under Malaysian law.

1377 only collect data that is strictly necessary to provide our services. The table below outlines the categories of data collected:

1377 never requests information unrelated to the operation of the platform, such as users' medical information, religious beliefs, or sexual orientation.

1377 collect personal data through the following methods:

• Account Registration: When you complete the registration form on our platform, information such as your name, phone number, email address, and date of birth is collected directly from you.
• Identity Verification (KYC): To meet legal requirements and prevent fraud, we may request a copy of your MyKad or passport. Such documents are stored securely and accessible only to our qualified compliance team.
• Financial Transactions: Every time you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, FPX (Maybank2u or CIMB Clicks), Boost or ShopeePay, transaction data including the amount and timestamp is recorded automatically.
• Platform Activity: Betting records, games played, session duration, and in-platform actions are automatically collected to ensure the platform functions correctly and for security purposes.
• Cookies and Similar Technologies: Our platform uses cookies and other tracking technologies to enhance the user experience. Further details are set out in Section 9.
• Communication with Us: When you contact our support team via live chat, WhatsApp, or email, the content of those communications is retained for training purposes, service improvement, and the resolution of any future disputes.

1377 uses collected personal data solely for the following purposes, which are lawful under Malaysia's PDPA:

• Platform Operations: Allows you to log in, place bets, deposit and withdraw funds, access your transaction history, and use all platform features without interruption.
• Identity Verification: Ensures that only eligible users (aged 18 and above and located in Malaysia) access the platform, and that each individual maintains only one account.
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraud, money laundering and any suspicious activity involving the platform or user accounts.
• Payment Processing: Processes deposits via Malaysian e-wallets and online banking, and handles withdrawal of winnings to your Malaysian bank account.
• Service Communications: Sending important notifications related to your account, transaction confirmations, security updates, and promotional alerts where you have opted in to receive them.
• Platform Improvements: Analysing usage patterns in aggregate (not individual data) to improve our platform's interface, performance and features.
• Legal Compliance: To comply with the reporting and disclosure requirements set out under Malaysian law, including PDPA 2010 and Anti-Money Laundering regulations (AMLA).

1377 does not sell, rent or disclose users' personal data to third parties for marketing purposes. However, in the following limited circumstances, data disclosure may be necessary:

• Payment Service Providers: Required transaction information is shared with payment gateway providers such as DuitNow, FPX and other Malaysian e-wallet providers solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements.
• Legal Compliance: Where required by Malaysian law, a court order or a legitimate request from a government authority, 1377 may be required to disclose user data. We will notify users of any such disclosure where permitted by law.
• Fraud Prevention: In cases involving fraud or serious criminal activity, relevant data may be shared with Malaysian law enforcement authorities or recognised fraud prevention agencies.
• Technology Providers: Technical service providers such as server hosts, email services, and analytics tools may have limited access to technical data necessary for delivering their services. All such providers are bound by data processing agreements that comply with the PDPA.

All third parties that receive data from 1377 required to handle such data in accordance with data protection standards equivalent to or higher than our own.

1377 implements multiple layers of technical and organisational security measures to protect users' personal data from unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and the 1377 is secured with TLS 1.3 protocol using 256-bit encryption keys — the highest security standard commercially available today.
• Data Encryption at Rest (AES-256): Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 to ensure it remains unreadable even in the event of a server breach.
• Two-Factor Authentication (2FA): An additional layer of security via SMS code or an authenticator app is available for all accounts and is strongly encouraged to be enabled.
• 24/7 Security Monitoring: Automated monitoring systems and a human security team keep watch over our platform around the clock to detect any suspicious activity or intrusion attempts.
• Internal Access Controls: Only staff 1377 with a legitimate operational need are permitted to access user data. All access is logged and audited on a regular basis.
• Regular Security Audits: Penetration testing and independent security audits are conducted on a regular basis by qualified third-party cybersecurity firms.

1377 retains users' personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required under Malaysian law. In general:

• Active Account Data: Retained for the duration that your account remains active with 1377 and updated whenever you make changes.
• Financial & Transaction Data: Retained for seven (7) years following the transaction date, as required under Malaysian tax and financial laws, including AMLA requirements.
• Identity Verification (KYC) Data: Retained for five (5) years after account closure or last use for verification purposes, in accordance with applicable legal requirements.
• Support Communication Logs: Retained for two (2) years for training, dispute resolution, and service improvement purposes.
• Technical & Log Data: Server logs and technical data are retained for ninety (90) days unless a longer period is required for an ongoing security investigation.
• After Account Closure: When you close your account, personal data that is no longer required for legal or operational purposes will be deleted or anonymised within thirty (30) days after the mandatory retention period ends.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

Platform 1377 uses cookies and similar tracking technologies to deliver a better user experience. The following are the types of cookies we use:

• Essential Cookies (Required): Required for the platform's core functionality – including maintaining your login session, remembering your betting cart contents and ensuring platform security. These cookies cannot be disabled without affecting core platform functionality.
• Performance Cookies: Collects information on how users interact with the platform — including the most frequently visited pages, time spent on specific pages, and any error messages encountered. This data is used in aggregate form to improve platform performance.
• Functional Cookies: Saves user preferences such as language (Bahasa Melayu), favourite sports (football, badminton, e-sports), and display settings for a more personalised experience.
• Analytics Cookies: Helps us understand overall platform usage patterns to make better-informed improvement decisions. This data is not linked to any individual user's identity.

You can manage your cookie preferences through your web browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the platform. 1377.

1377 is an online betting platform exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected, we will take the following steps immediately:

• Closing the associated account.
• Delete all personal data collected from that individual.
• Returning any funds remaining in the account through an appropriate method.

If you become aware or suspect that a minor has registered for or is using the platform 1377, please contact us immediately at support@1377.best so that prompt action can be taken.

1377 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When amendments are made:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest amendment.
• For material amendments — those that significantly change how we handle your data — we will provide clear notice to users via in-platform notifications or email at least 14 days before the changes take effect.
• For minor amendments such as spelling corrections or language clarifications that do not alter the original meaning, no notice will be sent but the date will be updated.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the 1377 following any amendment taking effect constitutes your acceptance of the amended Policy.

If you have any questions, concerns, or complaints regarding how 1377 handling your personal data, or if you wish to exercise any of the rights set out in Section 8, please contact our Data Protection Officer at:

• Email: support@1377.best (please state "Privacy Policy" or "Data Request" in the subject line)
• Live Chat: Available 24/7 within the platform — select the "Privacy & Data" topic
• WhatsApp: Number available on the platform after login

We are committed to resolving any privacy concerns you may have in a fair and transparent manner. If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in accordance with its prescribed procedures.