At Roma77, your privacy is more than a legal obligation — it is a core value that informs every product and operational decision we make. This Privacy Policy sets out transparently how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Six data protection principles Roma77 upholds every day
This Privacy Policy describes how Roma77 ("we", "platform") collects, uses, stores, protects, and discloses your personal information when you use the Roma77 platform at roma77.online and all related services — including live casino, table games, blackjack, baccarat, poker, Sports Betting on the Malaysia Super League and EPL, e-sports, virtual sports, and all other game categories available on Roma77.
By registering an account, making a deposit, playing any game, or simply browsing the Roma77 platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of the platform and contact us to close your account if applicable.
Roma77 is the data controller for personal information collected from users of our platform. All data processing is carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles.
This Privacy Policy applies to the Roma77 platform only. It does not cover third-party websites or services that may be accessible via links on our platform. Roma77 is not responsible for the privacy practices of those third parties.
Roma77 collects various types of data from users to enable the platform to operate safely and effectively. Data is collected through three main means: information you provide directly, information generated automatically during your use of the platform, and information from legitimate third parties.
| Data Category | Examples of Data Collected | How We Collect Data |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad number (where required for verification) | Registration form, KYC verification |
| Contact Data | Malaysian phone number, email address | Registration form |
| Financial Transaction Data | Deposit and withdrawal records, transaction history, payment methods (TNG, DuitNow, GrabPay, FPX, etc.) | Automated platform activity |
| Game Data | Game history, betting records, wins, losses, play duration | Automated gameplay activity |
| Technical Data | IP address, device type, operating system, web browser, screen resolution | Automatic server logs |
| Usage Data | Pages visited, time spent on platform, user clicks and navigation | Cookies and analytics |
| Communication Data | Live chat conversation records, support emails, player feedback | Customer support interactions |
Roma77 does not collect special categories of sensitive data such as health information, biometric data, religious beliefs, or political views, unless specifically required to comply with certain legal obligations and with your explicit consent.
Roma77 does not store your full credit or debit card number. All payment processing is handled by authorized third-party payment providers (Touch 'n Go, GrabPay, DuitNow, FPX, and others) that maintain their own security and privacy policies in compliance with PCI DSS standards.
Roma77 uses collected data solely for specific, legitimate purposes. We will not use your data for purposes unrelated to platform services without first informing you and obtaining the appropriate consent.
Roma77 uses your registration data to create and manage your player account, verify your identity to meet anti-money laundering (AML) and Know Your Customer (KYC) requirements, and grant you secure access to all platform features. This includes OTP verification via your Malaysian phone number during login or sensitive transactions.
Your transaction data is used to process deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks, manage withdrawal of winnings, maintain transaction records for accounting and legal compliance purposes, and detect and prevent fraudulent financial activity.
Your communication records and account data enable Roma77's 24/7 support team to provide relevant, personalized assistance whenever you reach out via live chat or email. Without access to this data, we would not be able to effectively resolve technical issues or assist with transaction-related concerns.
Your gaming history data allows Roma77 to monitor play patterns to identify signs of problem gambling, enforce limits you have set yourself such as deposit and loss limits, and send appropriate alerts to players who may benefit from responsible gaming support.
With your consent, Roma77 uses your email address and phone number to send you information about promotions, bonuses, special offers, and platform updates that may interest you. You may withdraw this consent at any time through your account settings or by contacting us, with no impact on your gaming account.
Aggregated usage and technical data (with no individual identification) helps Roma77 understand how players interact with the platform, identify technical issues, optimise platform performance specifically for Malaysian internet speeds, and make data-driven decisions to improve the overall user experience.
Under Malaysia's PDPA 2010, Roma77 must have a valid legal basis for processing your personal data. Depending on the purpose of processing, Roma77 relies on the following bases:
Roma77 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. Data sharing only takes place in limited circumstances and for specific purposes as outlined below:
Some of Roma77's service providers may operate or store data outside Malaysia. In such cases, Roma77 ensures that any such data transfers are protected by appropriate safeguards and meet the requirements of the Malaysian PDPA with respect to cross-border data transfers.
Roma77 implements a range of technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, or destruction. While no system can be guaranteed 100% secure, we continually strengthen our security measures to stay ahead of evolving cyber threats.
While Roma77 takes all reasonable steps to protect your data, account security also depends on your own actions. Please ensure your password is strong and unique, never share your login credentials with anyone, and log out of your account when using a shared device.
Roma77 retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law.
| Data Category | Retention Period |
|---|---|
| Active account data (name, phone number, email) | Throughout the active account period + 7 years after account closure |
| Financial transaction records | 7 years after the transaction (Malaysia PDPA and AML requirements) |
| Identity verification records (KYC) | 7 years after account closure |
| Game history | 3 years after the game session |
| Support communication records | 2 years after ticket closure |
| Technical log and IP data | 90 days |
| Cookie and analytics data | 13 months (session cookies expire when the browser is closed) |
Once the retention period expires, data will be securely deleted or fully anonymized so that it can no longer be linked to any individual. Anonymized data may be retained indefinitely for long-term analytics purposes, as it no longer constitutes personal data.
As a data subject under Malaysia's PDPA 2010, you have specific rights regarding your personal data that Roma77 fully respects. Below are your rights and how to exercise them:
You have the right to obtain a copy of the personal data Roma77 holds about you. Data access requests can be made through your account settings or by contacting support@roma77.online. Roma77 will respond within 21 working days.
If the personal data Roma77 holds about you is inaccurate or incomplete, you have the right to request a correction. Basic information such as your phone number and email address can be updated directly through your Roma77 account settings.
You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for the purpose for which it was originally collected. Note: Roma77 may need to retain certain data to comply with legal obligations.
You may object to the processing of your personal data for certain purposes, including direct marketing. Once you object to processing for marketing, Roma77 will immediately cease using your data for that purpose.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider where applicable.
In certain circumstances, you may request Roma77 to restrict the processing of your data — for example, while you are verifying the accuracy of your data, or while awaiting the outcome of an objection to processing based on legitimate interests.
To exercise any of the above rights, contact Roma77's Data Protection Officer by email at support@roma77.online with the subject line "DATA RIGHTS REQUEST". Please include your account number and the specific right you wish to exercise. Roma77 will respond within 21 working days.
Roma77 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, analyze platform usage, and personalize content. Cookies are small text files stored on your device when you visit the Roma77 platform.
Types of cookies used by Roma77:
You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect your ability to log in and use certain features on the Roma77 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.
Roma77 is an adult entertainment platform designed exclusively for users aged 18 and above. We do not knowingly or intentionally collect personal data from individuals under the age of 18.
All account registrations require age verification via OTP sent to the registered phone number. Roma77 employs technical measures and internal procedures to detect and prevent registration by underage individuals.
If Roma77 discovers that personal data belonging to an individual under 18 has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered an account on Roma77, please contact us at support@roma77.online immediately.
Roma77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Any amendments will be posted on this page with a revised "Updated" date.
For material amendments — that is, changes that significantly affect your privacy rights or the way we use your data — Roma77 will endeavour to notify you by email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of the Roma77 platform.
Your continued use of the Roma77 platform after any amendments take effect will be deemed as your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request data deletion in accordance with the rights set out in Section 8.
If you have any questions, concerns, or requests regarding this Privacy Policy or how Roma77 handles your personal data, please contact our Data Protection Officer through the following channels:
If you are dissatisfied with how Roma77 handles your privacy request, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP) under the Ministry of Communications and Digital. Roma77 will cooperate fully with any valid JPDP investigation.
This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. Any privacy dispute that cannot be resolved amicably will be referred to the jurisdiction of the appropriate Malaysian courts.
The most frequently asked questions from players about data privacy at Roma77: