Sand77 is committed to protecting your personal information. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold as a player on our platform.
Privacy at a Glance
All personal data held by Sand77 is stored on encrypted servers using 256-bit SSL protocols. Access is restricted to authorised personnel only, and storage systems undergo regular security reviews.
Sand77 does not sell, rent, or trade your personal information to third parties for their marketing purposes. Data sharing is limited strictly to what is necessary for platform operations and regulatory compliance.
As a Sand77 player, you have the right to access, correct, restrict, or request deletion of your personal data at any time. Submit a request through our support team and we will respond within 30 days.
We collect only the personal data we genuinely need to operate the platform, verify your identity, process payments, and comply with our licensing obligations. No unnecessary data is gathered.
Sand77's data practices are aligned with our international gaming licence requirements. KYC and anti-money laundering data processing is conducted under legitimate legal obligations, not discretionary preference.
In the unlikely event of a data breach affecting your personal information, Sand77 will notify affected players promptly and take immediate remedial action to contain and investigate the incident.
This Privacy Policy ("Policy") is issued by Sand77 ("Sand77", "we", "us", "our"), the operator of the online gaming platform accessible at https://sand77.casa ("Platform"). This Policy describes how Sand77 collects, processes, stores, discloses, and protects personal data provided by or collected from users ("Player", "User", "you") in connection with your registration, account management, and use of the Platform's services.
Sand77 operates under an international online gaming licence and is committed to processing personal data in a lawful, fair, and transparent manner consistent with applicable data protection principles. By creating an account on the Sand77 Platform and providing your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.
This Policy should be read alongside Sand77's Terms and Conditions and Responsible Gambling Policy, which together form the full regulatory framework governing your use of the Platform.
Malaysian Players: Sand77 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. While Sand77 is not regulated by a Malaysian domestic authority, we process your personal data in accordance with internationally recognised data protection standards applicable under our licensing regime.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Sand77 collects personal data from you in the following ways: directly when you provide it during registration, account management, or support interactions; automatically through your use of the Platform; and from third-party verification or payment service providers as necessary for Platform operations.
| Category | Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad / passport number | Registration form, KYC submission |
| Contact Data | Email address, mobile phone number, residential address | Registration form, account profile |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow, FPX), transaction history, deposit and withdrawal amounts in MYR | Payment processing, transaction logs |
| Account Data | Username, encrypted password, account status, login history, session timestamps | Automatic collection via Platform |
| Gaming Activity Data | Game history, bet amounts, win/loss records, bonus usage, sports markets accessed | Automatic collection via Platform |
| Technical Data | IP address, device type, operating system, browser type, referring URL, geolocation (approximate) | Automatic collection via cookies and server logs |
| Communication Data | Live Chat transcripts, email correspondence, WhatsApp support messages, complaint records | Customer support interactions |
| KYC Documentation | Copies of government-issued photo ID, proof of address documents, payment method verification | KYC verification process |
Sand77 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information unless specifically required by legal obligation.
Sand77 processes your personal data for the following specific and legitimate purposes:
Sand77 processes your personal data on the following legal bases:
Sand77 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data may, however, be shared with the following categories of recipients under strict contractual or legal conditions:
Where personal data is shared with third-party processors, Sand77 requires those parties to process your data only on documented instructions, maintain appropriate security measures, and not use your data for their own independent purposes.
No Data Sales: Sand77 categorically does not sell personal data to data brokers, advertising networks, or any third party for commercial marketing profiling purposes. If you receive unsolicited marketing communications purportedly from Sand77 through a channel you have not subscribed to, please notify us immediately at [email protected].
Sand77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, and resolve any disputes or enforce our agreements. Specific retention periods are as follows:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Licensing compliance, dispute resolution |
| KYC Documentation | Duration of account + 5 years after closure | Anti-money laundering legal obligation |
| Financial Transaction Records | 7 years from transaction date | Regulatory and audit requirements |
| Gaming Activity Logs | Duration of account + 3 years after closure | Responsible gambling monitoring, disputes |
| Customer Support Records | 3 years from last interaction | Complaint management, service improvement |
| Technical & Device Data | 13 months from collection | Fraud prevention, analytics |
| Marketing Consent Records | Until consent withdrawn + 2 years | Demonstrating lawful processing basis |
Following expiry of the applicable retention period, personal data will be securely deleted, anonymised, or archived in accordance with Sand77's data lifecycle management procedures.
Sand77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
You are responsible for keeping your Sand77 login credentials confidential. Sand77 will never ask for your password via email, Live Chat, or any other communication channel. Report suspected account compromise immediately to our support team.
The Sand77 Platform uses cookies and similar tracking technologies to ensure correct functionality, maintain your session, and gather aggregated analytics about Platform usage. The following categories of cookies are employed:
You may configure your browser settings to block or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use the Platform. For detailed cookie management instructions specific to your browser, refer to your browser's official help documentation.
Sand77 does not use third-party advertising or retargeting cookies. No cookie data collected on the Platform is used to profile you for external advertising campaigns.
Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by Sand77. To exercise any of these rights, please contact our support team via Live Chat or at [email protected].
Request a copy of the personal data Sand77 holds about you and information about how it is being processed.
Request correction of any inaccurate or incomplete personal data held on your account without undue delay.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
Request that Sand77 restricts processing of your personal data in certain circumstances, such as during a dispute about data accuracy.
Request your personal data in a structured, machine-readable format where processing is based on consent or contract and conducted by automated means.
Object to processing of your data carried out on the basis of legitimate interests, including for direct marketing and promotional communications.
Sand77 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days with prior notification. There is no fee for making a data rights request unless the request is manifestly unfounded or excessive.
Where Sand77 is unable to comply with a request — for example, because retention is required by a legal obligation — we will clearly explain the reason for refusal in writing.
The Sand77 Platform is strictly intended for individuals aged 21 years and above. Sand77 does not knowingly collect, process, or retain personal data from persons under the age of 21.
Age verification is conducted as part of the mandatory KYC process. Where Sand77 discovers or has reasonable grounds to believe that an account holder is under 21 years of age, the account will be immediately suspended, gaming activity ceased, and personal data processed solely for the purpose of closing the account, returning any deposited real money funds, and maintaining records required by law.
Parental Notice: If you believe a minor has registered on the Sand77 Platform or is accessing it, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of notification.
Sand77 may transfer your personal data to countries outside of Malaysia in connection with the operation of the Platform, including to jurisdictions where our servers, technology partners, and licensing authorities are located. Such transfers may include countries in Southeast Asia, Eastern Europe, and other regions where Sand77's infrastructure or service providers operate.
When transferring personal data internationally, Sand77 ensures that appropriate safeguards are in place to protect your data at a standard equivalent to the protections described in this Policy. Such safeguards include contractual data processing agreements with receiving parties, technical security measures equivalent to those applied within our own systems, and limitations on the use of transferred data to specified operational purposes only.
By using the Sand77 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia for the purposes described in this Policy.
Sand77 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes to applicable laws, the introduction of new services on the Platform, or guidance from regulatory bodies.
Where material changes are made to this Policy, Sand77 will provide reasonable advance notice to active players through one or more of the following channels: a prominent notice on the Platform homepage, an in-account notification, or an email to the address registered on your account.
The "Last Updated" date displayed at the top of this page reflects the most recent revision. Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any revised terms, you must cease using the Platform and request account closure.
We encourage you to review this Privacy Policy periodically to stay informed about how Sand77 handles your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or Sand77's data processing practices, you may contact our Data Support team through the following channels:
For data rights requests, please provide your full registered name, account username, and a clear description of the right you wish to exercise. Sand77 will acknowledge receipt of your request within 3 business days and provide a substantive response within 30 calendar days.
Sand77's support email is [email protected]. This is a plain text reference only — please type it manually into your email client. Sand77 will never send you unsolicited requests for your password, payment credentials, or sensitive personal information via email.