Official Documents

Privacy Policy Goat77 – Our Commitment to Protecting the Data & Privacy of Malaysian Players

Goat77 treats every member's privacy as a non-negotiable responsibility. This document clearly explains how we collect, use, store, and protect your personal information when you use the Goat77 casino and Sports Betting platform.

Updated: 1 January 2026
256-bit
SSL Data Encryption
0
Sale of Data to Third Parties
24 hours
Data Request Response Time
PCI-DSS
Payment Security Standards

Goat77's Six Data Protection Principles

These are the principles that guide how goat77 handles every piece of information you entrust to us.

End-to-End Encryption at All Times

All data transmitted between your device and goat77's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banks such as Maybank and CIMB. Your information never travels unprotected across the internet.

Minimum Data Collection

Goat77 only collects data that is strictly necessary to deliver our services. We do not gather irrelevant information, and every category of data we collect has a clear purpose — stated transparently in this policy.

No Sale of Data to Third Parties

Goat77 has never and will never sell, rent, or permit the use of members' personal data by any third party for marketing or commercial purposes without the member's explicit written consent.

PCI-DSS Payment Security

Your payment information — whether via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX — is processed through a PCI-DSS compliant payment gateway. Goat77 does not store your account numbers or e-wallet details directly on our servers.

Full Control in Your Hands

Every Goat77 member has the right to access, correct, download, or request deletion of their personal data at any time. We provide straightforward and responsive channels for all personal data requests.

Opt-In Marketing Communications

Goat77 will not send promotional emails, SMS messages, or marketing notifications without your consent given at registration. You may withdraw this consent at any time through the communication preferences settings in your goat77 account panel.

Goat77's Commitment: We understand that your trust in Goat77 begins with how we handle your personal information. This Privacy Policy is written in clear, straightforward language — not confusing legal jargon — because we believe every player deserves to know exactly how their data is managed.

1Definitions & Scope of This Privacy Policy

This Privacy Policy applies to all users who access or register an account on the goat77 platform, accessible via goat77.xyz, the goat77 mobile app (where available), and all services operating under the goat77 brand. It covers all your interactions with the platform — from initial registration, your first deposit, casino gaming activity (slots, baccarat, blackjack, roulette, live casino), Sports Betting (Malaysian Super League football, EPL, BWF badminton, e-sports), use of bonuses and promotions, through to communications with our customer support team.

In this document, "personal data" refers to any information that can be used to identify you, directly or indirectly — including your name, phone number, email address, residential address, payment information, IP address, device information, and platform usage data.

By registering or continuing to use the goat77 platform after reading this policy, you agree to goat77 collecting and processing your personal data in the manner described here. If you do not agree with any part of this policy, please stop using the platform and contact us to request account deletion.

2Personal Data We Collect

Goat77 collects various categories of data depending on how you interact with our platform. Below is a comprehensive overview of the data we collect and its sources:

Data Category Specific Examples Source
Personal Identification Data Full name, date of birth, MyKad/passport number Registration form, KYC process
Contact Data Phone number, email address, residential address Registration, profile updates
Financial Data Deposit history, withdrawal history, e-wallet name In-platform transactions
Technical Data IP address, device type, web browser, operating system Collected automatically during use
Gaming Activity Data Betting history, games played, time spent playing In-platform activity
Communications Data Live chat records, support emails, feedback Customer support interactions
Cookie Data Language preference, login sessions, display preferences Your web browser cookies
Important Note: goat77 never requests credit or debit card numbers directly. All financial transactions are processed through third-party payment gateways that comply with PCI-DSS standards. Your e-wallet details (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) are used solely to process the transactions you initiate and are not stored in our systems.

3How Goat77 Uses Your Personal Data

Every use of your personal data by Goat77 has a clear legal basis and defined purpose. We use your data for the following purposes:

  • Account management: Creating, verifying, and maintaining your goat77 account, including the KYC (Know Your Customer) process required by industry standards.
  • Transaction processing: Processing all deposits and withdrawals you request through our supported payment methods — Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX via Maybank2u, CIMB Clicks, and other Malaysian banks.
  • Service provision: Enabling you to access and play all casino games and Sports Betting markets on Goat77.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and violations of our terms of service.
  • Regulatory compliance: Fulfilling legal and regulatory requirements applicable to the operation of an online gambling platform.
  • Product improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the user experience, refine the interface, and develop new features relevant to players in Malaysia.
  • Account-related communications: Sending important notifications about your account, changes to our terms of service, security updates, and other information relevant to your use of the platform.
  • Customer support: Handling complaints, support requests, and enquiries submitted to the Goat77 support team.

Goat77 does not use your personal data to make automated decisions that materially affect you without human involvement. If you have any questions about how your specific data is used, please contact our team by email at support@goat77.xyz.

4Sharing Data with Third Parties

Goat77 does not sell or rent your personal data to any third party. However, in the course of operating the platform, we need to share certain data with a limited set of third-party categories, as described below:

  • Payment service providers: Digital wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and the FPX gateway need to receive basic transaction information in order to process your deposits and withdrawals. They are subject to their own privacy policies and strict data protection obligations.
  • Game software providers: Casino and live casino game providers may receive basic session data for technical maintenance and game fairness audit purposes.
  • Cloud service providers: Goat77's platform infrastructure runs on certified cloud service providers that store data to industry-standard security specifications. These providers have no right to access or use your data for their own purposes.
  • Legal authorities: Goat77 will share the necessary data with law enforcement agencies or regulatory bodies when required to do so by a valid court order or binding legal obligation.
  • Group company: goat77 may share data with affiliated entities within the same corporate group for operational, compliance, and service improvement purposes. All affiliated entities are held to the same data protection standards.
Goat77's Guarantee: Every data-sharing agreement with third parties includes strict data protection clauses. Third parties may only use your data for the specific purposes set out in the agreement and are not permitted to use it for any other purpose without the consent of both Goat77 and you.

5Data Security Measures at Goat77

Goat77 continuously invests in security infrastructure and procedures to ensure your personal data is always protected. Among the technical and organisational measures we have implemented:

  • 256-bit SSL Encryption: All data transmitted between your browser and Goat77's servers is encrypted using the latest TLS protocol with 256-bit key length.
  • Data encryption at rest: Sensitive data stored in our databases — including identity information and payment details — is encrypted at rest using strong encryption algorithms.
  • Internal access controls: Only Goat77 staff with a legitimate business need are permitted to access member personal data. All access is logged and regularly audited.
  • Two-factor authentication (2FA): Goat77 encourages all members to enable 2FA on their accounts for a significantly stronger layer of protection.
  • 24/7 security monitoring: Our systems are continuously monitored to detect and respond to any intrusion attempts or suspicious activity.
  • Independent security audits: goat77 conducts regular independent third-party security audits to identify and address any vulnerabilities before they can be exploited.
  • Staff training: All Goat77 staff who handle personal data undergo regular data protection training.

While Goat77 takes all reasonable steps to protect your data, no digital security system is foolproof. If you suspect your account has been compromised or accessed without authorisation, please contact our support team immediately via live chat or email at support@goat77.xyz.

6Data Retention Period

Goat77 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. In general, retention periods are as follows:

  • Active account data: Retained for the duration of the active account plus 5 years following account closure for compliance and audit purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with financial reporting legal requirements.
  • KYC records: Retained for 5 years after the business relationship ends, in accordance with anti-money laundering standards.
  • Customer support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
  • Cookie data: Session cookies expire automatically when you close your browser. Persistent cookies are stored for up to 12 months or until you delete them.

Once the applicable retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to you. If you wish to request early deletion of your data (the right to be forgotten), please refer to Section 10 below.

7Cookies & Tracking Technologies

Goat77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our website. The following are the types of cookies we use:

  • Strictly necessary cookies: Required for core platform functions such as login, game sessions, and security. Cannot be disabled.
  • Performance cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve the user experience. This information is aggregated and does not identify you individually.
  • Functional cookies: Remembering your preferences — such as language, display format, and personal settings — to deliver a more personalised experience.
  • Security cookies: Used to detect and prevent fraudulent activity, suspicious login attempts, and cyberattacks.

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect your ability to log in or use certain features of the goat77 platform.

8Payment Data Protection

The security of your financial information is Goat77's highest priority. We understand that entrusting us with your deposits is a responsibility we do not take lightly. Here is how we specifically protect your payment data:

Goat77 supports the following Malaysian digital payment methods: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX via internet banking (Maybank2u, CIMB Clicks, Public Bank, and other major Malaysian banks). These methods were chosen not only for their convenience, but because each one carries its own security layer that is recognised and regulated by Bank Negara Malaysia.

When you make a deposit via any of the methods above, you will be redirected to the secure page of the respective payment provider. Goat77 never sees or stores your bank account login credentials, e-wallet PIN, OTP, or transaction password. All such sensitive information remains solely within the payment provider's system.

Security Notice: Goat77 will never ask for your bank account password, e-wallet PIN, or OTP via live chat, email, or phone. If anyone claims to represent Goat77 and requests this information, it is a scam. Please report it to us immediately.

9Marketing Communications & Your Preferences

Goat77 may send you marketing communications about promotions, bonuses, special offers, and new platform features – but only if you have given your consent to do so during registration or at a later stage through your account settings.

Types of marketing communications we may send include:

  • Notifications on new bonuses and promotions (email or in-app notifications).
  • Updates on new features and games added to the platform.
  • Information on Goat77 tournaments and special events.
  • Periodic newsletters on sports and casino games of interest.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send, updating your communication preferences under your Goat77 account settings, or contacting our support team via live chat or email at support@goat77.xyz.

Please note that opting out of marketing communications does not mean you will stop receiving important account-related messages — such as withdrawal notifications, security alerts, or changes to our terms of service. These operational communications will continue to be sent for as long as your account remains active, as they are essential to the security and management of your account.

10Your Rights Regarding Personal Data

As a Goat77 member, you have the following rights regarding your personal data. We respect these rights and are committed to making it easy for you to exercise them:

Right of Access

You have the right to request a copy of all personal data Goat77 holds about you. We will fulfil this request within 30 days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction. Basic profile updates can be made directly within your account.

Right to Erasure

You may request the deletion of your personal data. Such requests are subject to the legal retention obligations binding on goat77.

Right to Object

You may object to the processing of your data for direct marketing or analytics purposes at any time without having to provide a reason.

Right to Data Portability

You have the right to request your data in a structured, machine-readable format for transfer to another service provider if needed.

Right to Restrict Processing

In certain circumstances, you may request that Goat77 restrict the processing of your data — for example, while an investigation into data accuracy is ongoing.

To exercise any of the above rights, please email us at support@goat77.xyz with the subject line "Personal Data Rights Request", specifying the right you wish to exercise along with your account details. Goat77 will verify your identity before processing any personal data request. We are committed to providing an initial response within 24 hours and resolving requests within 30 calendar days.

11Child Protection

The Goat77 platform is strictly for individuals aged 21 years of age and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age verification step to prevent sign-ups by those who do not meet the minimum age requirement.

If we discover that personal data belonging to someone under the age of 21 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who discover that their underage child has a Goat77 account are urged to contact us immediately at support@goat77.xyz.

12Amendments to This Privacy Policy

Goat77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or relevant technological developments. When we make material changes, we will notify you by email (to the address registered to your account) or via a prominent notice on the Goat77 platform homepage at least 14 days before those changes take effect.

Continued use of the goat77 platform after the effective date of an updated policy constitutes acceptance of the revised privacy terms. The latest version of this Privacy Policy is always available on this page, with a clear "last updated" date at the top of the document.

We recommend checking this page periodically to stay informed about how Goat77 handles your personal data. If you have any questions about changes that have been made, our team is always on hand to provide clarification.

13Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Goat77 handles your personal data, please reach out to us through the following channels:

  • Email: support@goat77.xyz (please state "Privacy Enquiry" in the subject line)
  • Live Chat: Available 24/7 via the chat icon within the Goat77 platform
  • Account Panel: Via the support ticket system within your goat77 account

Our team is Malay-speaking and operates 24 hours a day, 7 days a week. We are committed to responding to all privacy-related enquiries within 24 hours. Goat77 takes every privacy concern seriously and will conduct a thorough investigation before providing a complete and honest response.

Effective Date: This Privacy Policy is effective from 1 January 2026. Goat77 reserves the right to amend this policy and will provide reasonable notice before any material changes take effect.

FAQ – goat77 Privacy Policy

The most frequently asked questions from members about privacy and data protection at Goat77.

Absolutely not. goat77 has never sold, rented, or permitted the use of members' personal data by any advertiser or third party unrelated to the operation of our platform, and we never will. Your data is only shared with service providers directly involved in delivering goat77's services to you — such as payment gateways and cloud infrastructure providers — and strictly for the purposes specified here.

When you make a deposit or withdrawal via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, you will be redirected to the secure page of the respective payment provider. Goat77 never sees or stores your e-wallet login credentials, OTP, or transaction PIN. All such sensitive information remains solely within the payment provider's system. We only receive a confirmation of whether the transaction was successful or unsuccessful after you complete the payment process within the provider's secure environment.

Yes, you can request the deletion of your personal data by contacting support@goat77.xyz. However, this request is subject to certain important exceptions. Goat77 is legally required to retain financial transaction records for a minimum of 7 years and KYC records for a minimum of 5 years after the business relationship ends. Data that must be kept for legal compliance purposes cannot be deleted early, even upon request. All other data not subject to statutory retention requirements will be deleted within 30 days of your request.

Goat77 strongly advises against using shared devices to access your account. If you must do so, always log out completely after each session and never save your password in the browser. Goat77 provides an automatic session timeout feature that will log you out after a period of inactivity. You can also enable two-factor authentication (2FA) in your account settings for an important additional layer of security. If you suspect that someone else has accessed your account, contact our customer support immediately to have your account temporarily frozen.

When you close your Goat77 account, we will immediately cease using your data for marketing and platform communications. However, we are required to retain certain records for periods prescribed by law — financial transaction records for 7 years and KYC records for 5 years. Once those retention periods expire, all your data will be securely deleted or fully anonymised. If you would like a copy of your data before your account is closed, please submit a data access request first.
Responsible Gaming – Goat77 Cares

Your privacy at Goat77 includes the right to use responsible gaming tools without prejudice. Set your deposit limits, loss limits, and session time limits from your account panel. This platform is for users aged 21 and above only. If gaming becomes a problem, please visit the Responsible Gaming us for confidential and responsible assistance.

🔒

Your Data Is Safe at Goat77 – Join Us Today

Over 500,000 Malaysian players trust Goat77 with their data and money. 256-bit SSL encryption, no data selling, fast payouts within 30 minutes.

Minimum deposit RM 10 • Touch 'n Go, DuitNow, GrabPay, FPX • 24/7 Support

Touch 'n Go DuitNow GrabPay FPX Boost ShopeePay
Bahasa Melayu