Privacy Policy

This Privacy Policy ("Policy") describes how Limau77 ("the Platform", "we", "us", "our") collects, uses, discloses, stores, and protects personal information relating to individuals ("you", "your", "Player", "User") who access and use the Limau77 website at https://limau77.cam and all associated gaming services, applications, and promotional communications (collectively, "the Services").

Limau77 operates as an internationally licensed online gaming platform serving players across Malaysia, including users based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We are deeply aware that our players entrust us with sensitive personal and financial information, and we treat that trust as a fundamental obligation rather than an administrative formality.

By registering an account, accessing our Services, or otherwise interacting with the Limau77 platform, you acknowledge that you have read and understood this Policy in full and consent to the processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or in combination with other data.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, and erasure.
• "Data Controller" means Limau77 in its capacity as the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third-party entity that processes personal data on behalf of Limau77 in accordance with documented instructions.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification and due diligence process applied to all registered player accounts.
• "Cookies" means small text files placed on your device by the Platform that store browsing and session information for functional, analytical, and marketing purposes.

Limau77 collects personal data through multiple channels: directly from you when you register or interact with our Services, automatically through your use of the platform, and in limited cases from third-party verification providers. The categories of data we collect are set out in the table below.

We do not intentionally collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by law or with your explicit consent. Where KYC document photographs incidentally contain such information, they are used solely for identity verification purposes and handled with heightened care.

Limau77 processes your personal data for the following clearly defined purposes only. We do not use your data for any purpose incompatible with those originally disclosed at the point of collection:

• Account Creation and Management: To register your player account, verify your identity, maintain your account profile, and enable you to access our Services.
• Contract Performance: To process deposits and withdrawals via your chosen payment methods (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency), settle gaming transactions, and administer bonuses and promotions in accordance with applicable terms.
• KYC and Regulatory Compliance: To conduct identity verification, age checks (21+ minimum), anti-money laundering (AML) screening, and fraud detection as required by our international licensing obligations.
• Responsible Gambling: To monitor gaming activity for signs of problem gambling behaviour, enforce self-exclusion requests and deposit limits, and provide access to responsible gambling tools and resources.
• Customer Support: To respond to your enquiries, complaints, and requests through live chat, email, and other supported communication channels.
• Platform Security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, multi-accounting, and other security incidents.
• Platform Improvement: To analyse aggregated usage data, improve game performance, optimise the user interface, and develop new features based on player behaviour patterns.
• Marketing Communications: Where you have provided consent, to send you personalised promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw consent at any time via your account preferences or by contacting support.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms and Conditions.

Limau77 processes your personal data under the following lawful bases, applied on a purpose-by-purpose basis:

• Contract Performance: Processing necessary to deliver the gaming services you have contracted with us by registering an account — account management, payment processing, game delivery, and dispute resolution.
• Legal Obligation: Processing required for compliance with KYC, AML, and licensing regulatory requirements applicable to Limau77's operating jurisdiction.
• Legitimate Interests: Processing necessary for Limau77's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Limau77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We disclose your personal data only in the following limited circumstances:

• Payment Processors: Your financial data is shared with authorised payment service providers (including e-wallet operators, FPX-connected banks, and cryptocurrency processors) to the extent necessary to process your deposits and withdrawals.
• KYC and AML Service Providers: Identity verification and anti-money laundering screening services that process your identity documents and personal details under contractual data processing agreements.
• Gaming Software Providers: Aggregate or pseudonymised gaming activity data may be shared with our licensed game content providers for RNG certification and game performance monitoring purposes.
• Customer Support Platforms: Contact data and support correspondence are processed by our customer support software providers under strict data processor agreements.
• Legal and Regulatory Authorities: We will disclose personal data where required to do so by a legally binding order from a competent regulatory or law enforcement authority, or where we have a good-faith belief that disclosure is necessary to protect the rights, safety, or property of Limau77, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the Limau77 business, your personal data may be transferred as part of that transaction, subject to standard confidentiality protections and prompt notification to affected players.

The Limau77 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. Cookies are categorised as follows:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without significantly impairing your ability to use the Services.
• Functional Cookies: Store your preferences such as language settings, last-visited game category, and responsible gambling tool configurations to personalise your experience across sessions.
• Analytical Cookies: Collect pseudonymised data on how players interact with the platform — pages visited, session duration, feature usage — to help us understand performance and prioritise improvements.
• Marketing Cookies: Used, with your consent, to deliver personalised promotional content based on your gaming history and stated preferences. You may withdraw consent for marketing cookies at any time via your browser or account settings.

You can manage cookie preferences at the browser level. Note that disabling functional or necessary cookies may affect your ability to log in or use certain platform features.

Limau77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or to protect our legitimate interests in relation to potential disputes. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account being active on the platform, plus a post-closure period.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the transaction date in accordance with standard anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last relevant transaction, as required by our licensing obligations.
• Customer Support Records: Retained for three (3) years from the date of last interaction unless associated with an ongoing dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identified or identifiable individual.

Limau77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive personal data fields at rest within our databases;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication requirements for all administrative system access;
• Regular independent security audits and penetration testing of our platform infrastructure;
• Comprehensive employee training on data protection obligations and incident response procedures;
• Documented and tested incident response and data breach notification procedures.

Subject to applicable law and our legal obligations (including AML and KYC record-keeping requirements), you hold the following rights over your personal data held by Limau77:

To exercise any of the above rights, please contact our Data Protection team by emailing support@limau77.cam or via the live chat function on the platform. We will acknowledge your request within 72 hours and complete it within 30 calendar days, extendable by a further 60 days for complex requests with advance notice to you.

Limau77 strictly prohibits access to its platform and Services by individuals under the age of 21. We do not knowingly collect personal data from any person below 21 years of age.

All accounts are subject to mandatory KYC age verification. Where we discover or have reasonable cause to believe that an account belongs to an underage individual, the account will be suspended immediately, all gaming activity will be voided, any deposited funds will be returned to the originating payment method, and no winnings will be paid.

If you are a parent or guardian and believe your child may have accessed or registered on the Limau77 platform, please contact us immediately at support@limau77.cam so that we can investigate and take appropriate protective action.

As an internationally operating gaming platform, Limau77 may transfer personal data to, and process it in, countries other than Malaysia, including the jurisdiction in which Limau77 is incorporated and licensed. Such transfers may include transfers to our KYC verification providers, payment processors, and cloud infrastructure providers operating in various jurisdictions.

Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Malaysia, Limau77 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent mechanisms binding recipient organisations to appropriate data protection standards;
• Contractual obligations on data processors to implement technical and organisational measures equivalent to those described in this Policy;
• Transfer impact assessments where required by applicable law or best practice standards.

Limau77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this page indicates when the current version was published.

Where changes are material — meaning they significantly alter your rights or our processing activities in a way that may affect you — we will notify you by email to the address registered on your account and by a prominent notice on the platform prior to the change taking effect.

We encourage you to review this Policy periodically. Your continued use of the Limau77 platform following publication of an updated Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Limau77, please contact our support team through any of the following channels:

• Email (Data Requests): support@limau77.cam — please include "Data Request" or "Privacy Query" in your subject line for prioritised routing
• Live Chat: Available 24 hours a day, 7 days a week via the Limau77 website — select "Data & Privacy" from the support menu
• Response Commitment: All privacy-related requests are acknowledged within 72 hours and fully resolved within 30 calendar days

For matters related to responsible gambling, self-exclusion requests, or support resources, please visit our Responsible Gambling page. For the full terms governing your use of the platform, please review our Terms & Conditions.