Official Policy

Privacy Policy dora77 – Your Data Protection

We take every piece of information you share with us seriously. Learn how dora77 collects, uses, and fully protects your personal data.

Updated: January 2026 256-bit SSL Protected
This Privacy Policy describes dora77's data collection and usage practices. By using our platform, you agree to the terms stated here. Should there be any material changes, we will notify you by email or via an in-platform notice.

01 Information We Collect

Dora77 only collects information that is genuinely necessary to provide a safe, seamless and high-quality service to our members in Malaysia. We do not collect excessive data that has no direct relevance to platform operations.

The categories of data we collect include:

  • Personal Identification Information: Full name, date of birth, identification card number (MyKad) or passport, nationality, and current residential address.
  • Contact Information: Active email address, Malaysian mobile number registered in your name.
  • Financial Information: Bank account number, bank name, deposit and withdrawal records, and digital wallet information (Touch 'n Go eWallet, GrabPay, Boost) used for transactions.
  • Technical Information: IP address, web browser type, device operating system, device ID, login activity logs and game session records.
  • KYC Documents: MyKad copy, passport, recent bank statement, or utility bill as proof of address for identity verification purposes.
  • Gaming Information: Wagering history, win and loss records, game preferences, and platform usage patterns.
All uploaded KYC documents are stored in a secured server environment and are only accessible by authorised verification staff.

02 How We Use Your Data

Every piece of data we collect has a clear and specific purpose. dora77 does not use your information for unrelated purposes without obtaining your prior consent.

Data Type Purpose of Use Status
Personal identification information Identity verification (KYC), fraud prevention, legal compliance Required
Contact information Sending account notices, promotions, and security updates Required
Financial information Processing deposits and withdrawals, transaction verification Required
Technical information Suspicious login detection, platform performance enhancement Automatic
Gaming information Personalised game recommendations, responsible gaming reports Automatic

Beyond the purposes listed above, dora77 also uses your data to develop and improve new platform features, conduct internal analysis to understand aggregate (not individual) usage patterns, and comply with any reporting requirements to relevant authorities.

03 Legal Basis for Data Processing

Dora77 processes your personal data based on several valid and recognised legal grounds, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You provide direct consent when registering a dora77 account and agreeing to our Terms and Conditions.
  • Contract Performance: Data processing is necessary to fulfil our obligations to you as a registered member, including processing financial transactions and providing platform access.
  • Legal Obligation: We are legally required to retain certain records for financial control, anti-money laundering (AML) prevention, and regulatory compliance purposes.
  • Legitimate Interest: In some cases, we process data for legitimate business interests such as fraud detection and platform security improvements, provided it does not override your fundamental rights.
dora77 operates in compliance with Malaysia's PDPA 2010. Any data processing beyond the scope stated here requires your additional explicit consent.

04 Data Sharing with Third Parties

Dora77 does not sell, rent or trade members' personal data to any third party for marketing purposes. However, there are limited situations where we may need to share your data with trusted parties:

  • Payment Processing Providers: DuitNow, TNG eWallet, GrabPay, Boost and FPX receive only the minimum transaction information necessary to securely process your deposits and withdrawals.
  • Licensed Game Providers: Third-party game providers receive session data necessary to ensure game integrity and accurate RTP calculations.
  • KYC & Identity Verification Services: Licensed third-party identity verification service providers help us process and verify your KYC documents securely and efficiently.
  • Relevant Authorities: Bank Negara Malaysia, the Ministry of Finance, or other law enforcement agencies may receive information when required by law or court order.
  • Technology Service Providers: Server hosts, cybersecurity services and infrastructure providers bound by strict confidentiality agreements with dora77.

All third parties who receive your data are bound by strict confidentiality and data protection agreements. They are only permitted to use your data for the purposes that have been agreed upon.

05 Data Storage & Security

Your data security is dora77's top priority. We continuously invest in the most advanced security infrastructure to ensure your information is always protected.

  • 256-bit SSL Encryption: Every data transaction between your device and dora77's servers is protected by impenetrable military-grade encryption.
  • Secure Servers: Data is stored at internationally certified data centres with strict physical access controls, redundant cooling systems and uninterruptible power supplies.
  • Internal Access Control: Only dora77 staff with a legitimate business need who have undergone rigorous background checks are permitted to access member data.
  • 24/7 Monitoring: Our cybersecurity team continuously monitors all platform activity to detect and respond to any threats in real time.
  • Regular Backups: Member data is automatically backed up to a separate location to ensure data availability even in the event of a serious technical disruption.

Data retention periods depend on the type of information and applicable legal requirements. Generally, active account data is retained for as long as the account remains active, while transaction records are kept for a minimum of seven (7) years in accordance with Malaysian financial regulatory requirements.

dora77 undergoes regular independent security audits by accredited cybersecurity firms to ensure our data protection standards remain at the highest level.

06 Your Rights Regarding Personal Data

As a dora77 member and Malaysian resident, you have specific rights regarding your personal data protected under PDPA 2010. dora77 fully respects and facilitates the exercise of these rights:

Right of Access

You have the right to request and receive a copy of all personal data we hold about you at any time.

Right to Rectification

You have the right to correct any inaccurate or outdated personal information in your account.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

Right to Object

You may object to the processing of your data for specific purposes such as direct marketing or profile analysis.

Right to Portability

You have the right to receive your data in a machine-readable format for transfer to another service provider.

Right to Restriction

You may request a restriction on the processing of your data while a dispute is being resolved or an investigation is ongoing.

To exercise any of the rights above, please contact our support team via live chat on the dora77 platform. We will process your request within 14 business days.

07 Cookies & Tracking Technologies

Dora77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you on subsequent visits.

  • Essential Cookies: Required for core platform functions such as secure login, session management and transaction security. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymised information about how you use our platform to help us identify areas that need improvement.
  • Functional Cookies: Saves your preferences such as language, display theme, and other personal settings so you don't have to reconfigure them every time you log in.
  • Analytics Cookies: Helps us understand aggregate platform usage patterns for service improvement and new feature development.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the dora77 platform.

08 Links to Third-Party Sites

The dora77 platform may contain references to game providers and payment services we use. This Privacy Policy applies solely to the dora77 platform and does not cover the privacy practices of any third party.

Dora77 is not responsible for the privacy practices, content or policies of any third party. We recommend reading the privacy policy of each service provider you use separately to understand how they manage your data.

dora77 will never ask for your bank account password or digital wallet PIN through any channel. Be cautious of any party claiming to represent dora77 and requesting such information.

09 Changes to This Privacy Policy

Dora77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or new technologies we adopt.

  • Any material changes will be communicated to you via your registered email or a prominent notice within the platform at least 14 days before the changes take effect.
  • Minor updates such as spelling corrections or terminology clarifications may be made without prior notice, but the update date at the top of this page will be revised accordingly.
  • Continued use of the dora77 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.
  • You are advised to review this page from time to time to stay informed about how we protect your information.

10 Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you.

  • Live Chat: The fastest method — our support team is available online 24/7 within the dora77 app.
  • Email: [email protected] — we aim to respond within 24 hours on business days.
  • Written Request: Submit a written request via the ticket system in your dora77 account for a more formal record.

For issues relating to your data rights or complaints unresolved after contacting us, you are also entitled to refer your complaint to the Department of Personal Data Protection Malaysia (JPDP), the official regulatory body under PDPA 2010.

Why Your Data Welcome to dora77

We don't just meet legal requirements — we go above and beyond to ensure every piece of data you entrust to us is protected with the utmost care.

Military-Grade Encryption

256-bit SSL encrypts every byte of data travelling between your device and dora77's servers — the same technology used by the world's leading banks.

Secure & Fast KYC

Our identity verification process uses a licensed KYC platform that stores your documents in an isolated environment with strictly limited access.

No Data Sales

Your personal data has never been and will never be sold, rented or traded to any party for marketing or other commercial purposes.

Full PDPA 2010 Compliance

Dora77 operates in compliance with Malaysia's Personal Data Protection Act 2010, ensuring your rights as a user are fully protected under the law.

24/7 Security Monitoring

Our cybersecurity team monitors dora77's infrastructure around the clock, responding swiftly to any threats before they can affect your data.

Personal Data Rights Support

Our support team is ready to help you exercise your personal data rights — access, correction, deletion, and more — within 14 working days.

Your Data is Protected. Time to Start Playing

With the highest level of data protection and a transparent privacy policy, you can enjoy your gaming experience at dora77 with full confidence and peace of mind.

Bahasa Melayu