goat77 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") sets out how goat77 ("we", "us", "our") collects, processes, stores, and shares personal data relating to registered players and visitors to goat77.win ("the Platform").

1.2 goat77 is operated by a company incorporated and licensed under international gaming authority jurisdiction. As a licensed gaming operator, goat77 is subject to regulatory obligations that require the collection and retention of certain categories of personal data, including identity verification and transaction records.

1.3 By creating an account on goat77.win, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the goat77 Terms & Conditions.

1.4 We are committed to handling your personal data in accordance with applicable data protection legislation and the data handling requirements of our international gaming licence.

2. Data Controller

2.1 For the purposes of data protection law, goat77's operating company is the data controller in respect of personal data collected through the goat77 platform. Details of the data controller are available upon request via the contact information provided in Section 13 of this Policy.

2.2 Where goat77 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and customer support platforms — those providers act as data processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.

3. Data We Collect

goat77 collects personal data in the following categories:

3.1 goat77 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where specifically required for responsible gaming assessments or where voluntarily provided by the player in the context of a support interaction.

4. How We Use Your Data

goat77 processes your personal data for the following purposes:

• Account Administration: To create, manage, and maintain your goat77 account, including authentication, password management, and account settings.
• Identity Verification & KYC: To verify your identity and age in compliance with our gaming licence obligations and to prevent fraud and underage gambling.
• Payment Processing: To process deposits, withdrawals, and refunds via the payment methods you have selected, and to maintain financial transaction records as required by law.
• Responsible Gaming: To monitor gameplay patterns, identify signs of problem gambling behaviour, apply player-set limits, and administer self-exclusion requests in accordance with our responsible gaming programme.
• AML Compliance: To fulfil our anti-money laundering obligations under our international gaming licence, including transaction monitoring, suspicious activity reporting, and customer due diligence.
• Customer Support: To respond to queries, handle complaints, and provide account assistance via live chat and email.
• Platform Improvement: To analyse usage patterns, improve game offerings, optimise the user interface, and develop new features — using aggregated or pseudonymised data where possible.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or in-platform notifications — subject to your marketing preferences, which you may update at any time from your account settings.
• Legal Compliance: To comply with legal obligations, respond to regulatory enquiries, and enforce the goat77 Terms & Conditions.

5. Legal Basis for Processing

5.1 goat77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to provide you with a goat77 account and the services you have requested, including account management and payment processing.
• Legal Obligation: Processing required to comply with goat77's regulatory obligations under its international gaming licence, including KYC, AML, and responsible gaming programme requirements.
• Legitimate Interests: Processing for platform security, fraud prevention, and improvement of goat77 services — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications — which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Data Sharing

6.1 goat77 does not sell personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:

• Payment Processors: To facilitate deposits and withdrawals, goat77 shares relevant transaction data with payment service providers including Touch n Go eWallet, Boost, Maybank, CIMB, and other accepted payment channels. Each provider processes this data under their own privacy terms and applicable payment regulations.
• Identity Verification Providers: goat77 uses third-party KYC and identity verification services to process identity documents and conduct liveness checks. These providers act as data processors under binding agreements with goat77.
• Game Providers: Game studios whose titles are hosted on the goat77 platform may receive anonymised or pseudonymised gameplay data for game integrity and RNG audit purposes.
• Regulatory Authorities: goat77 is required under its gaming licence to provide player data to the relevant gaming regulatory authority upon request. Disclosure is also made to law enforcement agencies where legally compelled.
• Customer Support Platforms: Third-party live chat and ticketing platforms used to deliver goat77's customer support service process communication data on our behalf as data processors.

6.2 Any third party that processes personal data on goat77's behalf is required to maintain appropriate technical and organisational security measures and to process data only in accordance with goat77's instructions.

7. Cookies & Tracking Technologies

7.1 goat77 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session state, and analyse platform usage.

7.2 The following categories of cookies are used on goat77.win:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load balancing identifiers. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display preferences to improve your goat77 experience.
• Analytics Cookies: Collect aggregated data about how players use the goat77 platform — which pages are visited, how long sessions last, and which features are used most frequently. This data is used to improve the platform.

7.3 You may manage non-essential cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using goat77 but may affect certain platform features and personalisation.

8. Data Retention

8.1 goat77 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by our gaming licence:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• AML and suspicious activity records: Retained for a minimum of five (5) years from the date of the relevant activity.
• Customer support communications: Retained for three (3) years from the date of the final communication in a support thread.

8.2 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with goat77's data deletion procedures.

9. Data Security

9.1 goat77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your browser and goat77.win.
• Bcrypt password hashing — your goat77 account password is never stored in plain text.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the goat77 platform infrastructure.
• Two-factor authentication (2FA) available to all registered players for account login security.

9.2 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, goat77 will notify you and the relevant regulatory authority in accordance with applicable data protection law and licensing obligations.

10. Your Data Rights

10.1 Subject to applicable data protection law and goat77's regulatory obligations, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data goat77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your goat77 account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data — subject to goat77's legal and regulatory retention obligations, which may override this right.
• Right to Restriction: You may request that goat77 restricts its processing of your personal data in specified circumstances.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of these rights, contact goat77 support via live chat or email at [email protected]. goat77 will respond to verified requests within 30 days.

10.3 Note that goat77's ability to fulfil data erasure or portability requests may be limited by its obligations to retain data under applicable gaming licence requirements.

11. Children & Minors

11.1 goat77 services are strictly available to persons aged 21 years and above. goat77 does not knowingly collect or process personal data from individuals under the age of 21.

11.2 Where goat77 becomes aware that personal data from a person under the age of 21 has been collected — including through the goat77 registration process or KYC review — that account will be immediately suspended, the data will be securely deleted in accordance with our data retention procedures, and any deposits will be returned via the original payment method.

11.3 If you believe that a minor may have accessed the goat77 platform using your payment details or device, please contact goat77 support immediately via live chat.

12. Changes to This Policy

12.1 goat77 reserves the right to update this Privacy Policy at any time. Changes will be published on this page with an updated "Last Updated" date. Where changes are material, goat77 will notify registered players by email to the address associated with their account prior to the changes taking effect.

12.2 Your continued use of the goat77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you may close your account by contacting goat77 support.

13. Contact Us

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way goat77 handles your personal data, please contact our support team:

• Live Chat: Available 24/7 via the goat77 platform. Peak staffing: 8:00 AM – 2:00 AM MYT.
• Email: [email protected]

13.2 goat77 aims to acknowledge all data-related enquiries within 5 business days and to provide a substantive response within 30 calendar days.