This Privacy Policy explains how dora77 collects, processes, stores, and protects your personal data when you use our Platform. We are committed to handling your information responsibly and transparently.
Six core principles guide every data processing decision at dora77. These cards summarise our approach — full details are in the policy below.
Your personal data is encrypted at rest and in transit using 256-bit SSL technology. Access is restricted to authorised personnel only, and all systems are protected against unauthorised intrusion.
dora77 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is used solely to operate, improve, and personalise your Platform experience.
You have the right to access, correct, and request deletion of your personal data at any time. You can also object to certain processing activities or request data portability — all detailed in the User Rights section below.
We collect only the data necessary to provide our services, meet legal obligations, and improve your experience. We do not collect personal data beyond what is required for the stated purposes.
All data processing at dora77 is grounded in a lawful basis — your consent, contractual necessity, legal obligation, or our legitimate interests — as described in detail within this policy.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. Data is securely deleted or anonymised when it is no longer needed.
This Privacy Policy ("Policy") is issued by dora77 ("dora77", "we", "us", "our"), the operator of the online casino and sports betting platform located at https://dora77.asia ("Platform"). It describes how we collect, use, store, share, and protect personal data relating to users of our Platform ("you", "User", "Player").
By registering an Account, accessing the Platform, or using any dora77 service, you acknowledge that you have read, understood, and agree to the terms of this Policy. This Policy is incorporated by reference into our Terms & Conditions and should be read alongside them.
dora77 is committed to protecting the privacy and security of your personal data. We process personal data in accordance with applicable data protection legislation and international privacy standards. If you have any questions about this Policy or our data handling practices, please contact us using the details in Section 15.
The following terms carry the meanings assigned below throughout this Policy:
The following table sets out the categories of Personal Data dora77 collects, the specific data types within each category, and the primary purpose for collection:
| Category | Data Types | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (MyKad / passport number) | Account registration, KYC age and identity verification |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru) | Account communications, support, verification notices |
| Financial Data | Payment method details (Touch 'n Go eWallet account ID, bank account name/number for Maybank/CIMB/Public Bank/Hong Leong, last 4 digits of card, cryptocurrency wallet address), transaction history, deposit and withdrawal amounts in MYR | Payment processing, AML compliance, fraud prevention |
| Technical Data | IP address, browser type and version, device type, operating system, session identifiers, cookie data | Platform security, fraud detection, performance optimisation |
| Usage Data | Game history, betting activity, session duration, pages visited, feature interactions, promotional participation records | Service improvement, personalisation, bonus eligibility, responsible gambling monitoring |
| Communications Data | Records of live chat interactions, email correspondence, support tickets, and any messages submitted through the Platform | Support quality, dispute resolution, regulatory record-keeping |
| KYC Documentation | Copies of government-issued ID, proof of address, payment method ownership screenshots, selfie / biometric verification images | Identity and age verification, AML compliance |
We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data for identification purposes beyond age/identity verification) unless expressly required by law or with your explicit consent.
We collect Personal Data directly from you when you:
We automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform. This includes your IP address, device identifiers, browser characteristics, and details of the pages and games you interact with.
We may receive Personal Data from:
dora77 processes your Personal Data only where we have a lawful basis to do so. The applicable bases are as follows:
dora77 uses your Personal Data for the following purposes:
We share Personal Data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Visa/Mastercard networks, cryptocurrency payment gateways), identity verification providers, cloud hosting and infrastructure providers, and customer support software vendors. All such providers are bound by data processing agreements that restrict their use of your data to the stated purpose.
Our licensed game studio partners may receive certain Technical Data and Usage Data (such as your session identifiers and device type) to deliver their games and maintain RNG audit trails. They do not receive your full name, payment details, or government identification documents.
dora77 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, including in connection with anti-money laundering obligations, fraud investigations, or judicial orders.
In the event of a merger, acquisition, or sale of dora77 or its assets, Personal Data may be transferred to the acquiring entity, provided that entity agrees to handle such data in accordance with terms at least as protective as this Policy.
dora77 does not sell, rent, or trade your Personal Data to any third party for commercial or marketing purposes. Period.
dora77 operates internationally, and your Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, we implement appropriate safeguards to protect your data, including standard contractual clauses or equivalent mechanisms that ensure a level of protection consistent with applicable data protection standards.
By using the Platform and providing us with your Personal Data, you acknowledge that your data may be transferred internationally as described in this section.
dora77 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:
Where we no longer require Personal Data, we securely delete or anonymise it so that it can no longer be associated with you.
Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognise your device, remember your preferences, maintain your login session, and collect usage analytics.
You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality, including the ability to maintain your login session. For more information on managing cookies, consult your browser's help documentation.
dora77 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, destruction, or alteration. These include:
Whilst we implement robust security measures, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Users and relevant authorities as required by applicable law, without undue delay.
The dora77 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory step in the Account registration and KYC process, and we take all reasonable technical and procedural steps to prevent underage access.
If we become aware that Personal Data has been collected from a person under the age of 21 without verified parental or guardian consent, we will immediately suspend the Account, delete the data, and return any deposited funds to the originating payment method. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].
Subject to applicable law, you have the following rights in respect of your Personal Data held by dora77. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all legitimate requests within thirty (30) days.
You may request a copy of the Personal Data we hold about you, along with information on how it is being processed. We will provide this in a clear, readable format.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
You may request that we delete your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
In certain circumstances, you may ask us to restrict the processing of your data — for example, while we verify the accuracy of data you have disputed.
Where processing is based on consent or contract, and carried out by automated means, you may request your data in a structured, machine-readable format for transfer to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease that processing immediately upon receipt of your request.
Where we make decisions about your Account solely by automated means that produce significant effects (e.g., fraud flagging), you have the right to request human review of that decision.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
If you are unsatisfied with how dora77 handles your Personal Data, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
dora77 reserves the right to revise this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or via an on-Platform notification.
Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to a material change, you should stop using the Platform and contact us to close your Account.
For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact our Data Protection team through the following channels:
We aim to acknowledge all data rights requests within 48 hours and provide a substantive response within thirty (30) calendar days. For complex requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.
dora77 is strictly for players aged 21 and above. We are committed to protecting your personal data and your wellbeing. For responsible gambling tools including deposit limits, session reminders, and self-exclusion, visit our Responsible Gambling page.
Now that you understand exactly how we handle your data, you can play knowing your personal information is in safe hands. Transparent policies, secure infrastructure, and genuine care for Malaysian players.
For players aged 21 and above only. Please gamble responsibly. Read our Terms & Conditions and Responsible Gambling policy.