Roma77 treats your privacy as a non-negotiable priority. This policy clearly explains how we collect, use, store, and protect your personal information as a member of our platform in Malaysia.
Data protection principles we uphold every day, without exception
All your personal information and transaction data — including payment details for Touch 'n Go, GrabPay, DuitNow and FPX — is encrypted using 256-bit SSL, the highest security standard in the industry. Your data cannot be read by unauthorised parties, whether in transit or at rest.
Roma77 has never and will never sell, rent, or distribute your personal information to any third party for commercial purposes. Your data is used solely for the purposes stated in this policy — not for third-party advertising, not for sale to data brokers, and not for any purpose to which you have not given consent.
You have the full right to access, correct, transfer, or request deletion of your personal data held by roma77. Requests can be made at any time through our support team and will be processed in accordance with the provisions of the Malaysia Personal Data Protection Act 2010.
All of roma77's data collection and processing practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We only collect data necessary for the services you use, retain it for a reasonable period, and delete it according to a defined schedule.
You have full control over whether to receive marketing communications from roma77. You can unsubscribe from promotional notifications, offer emails and SMS messages at any time through your account settings, with no effect on your core account services. Your decision is respected without question.
Your data is stored in data centres secured with multi-layered physical and digital access controls. Security monitoring systems operate 24/7 to detect and defend against any unauthorised access attempts. Regular data backups are performed to ensure service continuity and protect your information.
This Privacy Policy explains how Roma77 collects, uses, discloses and protects your personal information when you use our platform. By using roma77's services, you agree to the practices described in this policy. Please read this document carefully in its entirety. Any enquiries may be sent to support@roma77.best.
This Privacy Policy is issued by Roma77 ("we", "platform", "roma77") and applies to all users of the roma77.best platform, its associated mobile applications, and all services provided by roma77 to players in Malaysia.
Roma77 is fully committed to protecting our members' privacy and operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We recognise that your trust is our most valuable asset, and safeguarding your personal data is a responsibility we take seriously across every aspect of our daily operations.
This policy applies to all information we collect through account registration, platform use, financial transactions, customer support interactions, and any other communications between you and roma77. By registering or continuing to use our platform, you confirm that you have read, understood, and accepted this policy in full.
When you register an account or use roma77's services, we collect personal information that you voluntarily provide, including:
When you use the roma77 platform, our systems automatically record the following technical information for security and service improvement purposes:
For the purpose of processing deposits and withdrawals, roma77 records relevant transaction information including the payment method used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks — the transaction amount in Malaysian Ringgit (MYR), the date and time of the transaction, and the transaction reference number. Associated bank account numbers or e-wallet phone numbers are stored in encrypted format.
Roma77 uses the personal information collected only for legitimate and necessary purposes, as follows:
| Purpose of Use | Types of Data Used |
|---|---|
| Account registration & verification | Name, phone, email, date of birth, ID document |
| Deposit & withdrawal processing | E-wallet / bank details, transaction history |
| Fraud prevention & security | IP address, login patterns, activity history |
| Customer support | Name, email, account history, communication records |
| Legal & regulatory compliance | Name, ID, transaction records |
| Platform improvements & user experience | Anonymised usage data, navigation patterns |
| Promotional communications (with consent) | Name, email, phone number |
Roma77 does not use your personal data for any purposes beyond those stated above. Should we need to use your data for a new purpose not covered in this policy, we will seek your consent before proceeding.
Roma77 has never sold, rented, exchanged or distributed your personal information to any third party for their own commercial or marketing purposes, and we never will. This is an absolute and unwavering commitment.
There are limited situations in which roma77 may need to share certain information with specific third parties. This only occurs under the following circumstances:
In all of the above situations, roma77 ensures that any party receiving your data is bound by strict confidentiality obligations and may only use the data for the specified purpose.
Roma77 employs a comprehensive set of technical and operational security measures to protect your personal data from unauthorised access, misuse, alteration, or loss:
Roma77 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how players use the platform. Cookies are small text files stored in your web browser.
You can control or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the roma77 platform. You can also manage your cookie preferences through the privacy settings panel within the platform at any time.
As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which you may exercise at any time by contacting the roma77 support team:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.
If your data is inaccurate or out of date, you have the right to request a correction. Updates will be made within 7 business days.
You may request deletion of your personal data under certain circumstances, subject to legal obligations that require us to retain specific records.
You may object to the processing of your data for marketing purposes at any time, and your request will be actioned immediately.
In certain circumstances, you have the right to receive your data in a machine-readable format for transfer to another service provider.
You may withdraw consent for data processing at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.
To exercise any of the above rights, please submit a written request to support@roma77.best by stating your full name, account number, and the right you wish to exercise. We will verify your identity before processing the request to ensure the security of your account.
Roma77 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law. In general:
When data is no longer needed and there is no legal obligation to retain it, roma77 will delete or anonymise that data securely in accordance with our internal procedures.
The roma77 platform is intended solely for individuals aged 18 and above. Roma77 does not knowingly collect or process personal information from individuals under the age of 18. Should we become aware that a minor's personal information has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question.
If you believe that someone under the age of 18 has registered an account at roma77, please notify us immediately at support@roma77.best so that we can take the appropriate action.
Roma77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable law, or service enhancements. When significant changes occur, we will provide notice through:
The latest version of the Privacy Policy will always be available on this page with a clear update date. Continued use of the roma77 platform after any changes take effect will be considered acceptance of the updated policy. If you disagree with any changes, please contact us to discuss your options, including account closure if you choose to proceed.
If you have any questions, concerns or complaints regarding how roma77 handles your personal data, or if you wish to exercise any of your rights under PDPA 2010, please contact our privacy team through the following channels:
We are committed to responding to all privacy-related enquiries within 5 business days. For complaints that cannot be resolved through our team, you have the right to contact the Department of Personal Data Protection under the Ministry of Communications and Digital Malaysia.
Latest version: June 2026. This policy should be read together with Terms & Conditions and Responsible Gaming Policy roma77.
In the world of online entertainment, there is one thing that matters more than any bonus or promotion — and that is trust. Trust begins with how a platform handles your most personal information. Roma77 understands this not merely as a business matter, but as a responsibility we feel toward every member who chooses to trust us with their personal data.
When you register at roma77, you provide your name, phone number, payment information and more. This data is not just numbers in our system — it is your identity, your privacy, and in the context of financial transactions, the security of your money. That is why we invest seriously in security infrastructure and a privacy policy that is clear, transparent and easy for everyone to understand.
The Personal Data Protection Act 2010 (PDPA) is a Malaysian law that governs how companies collect and use the personal data of Malaysians. Roma77 does not comply with the PDPA merely because it is a legal requirement — we believe that the principles enshrined in the PDPA are the right and proper standards for any responsible platform to uphold.
The seven PDPA principles — the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Integrity Principle, Access Principle, and Use Limitation Principle — all reflect how roma77 handles your data. We only collect what we need, we tell you what we collect and why, we don't disclose it without your consent, and we give you control over your own data.
Every time you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u or CIMB Clicks, the transaction is processed through a fully encrypted payment channel. Roma77 does not store your full card number or e-wallet password — we only retain the information needed for transaction processing and record-keeping purposes.
The same applies to withdrawals — the withdrawal process at roma77 is designed to ensure that your funds can only be sent to an account that has been verified as belonging to you. This is a security measure that protects you against any fraudulent attempts by unauthorised parties. Identity verification for first-time withdrawals is part of this protection, not an obstacle to the process.
Roma77 sends promotional communications, special offers and platform updates to our members — but only to those who have opted in to receive them. During registration, you will be asked whether you wish to receive marketing communications. You can change this preference at any time through your account settings or by contacting our support team directly. There is no way to be locked into a mailing list you did not sign up for.
Non-marketing communications — such as transaction notifications, account security alerts, and important updates about platform changes — will continue to be sent regardless of your marketing preferences, as they form part of the core service you agreed to upon registration. These are communications that are genuinely essential to your account security and management.
Many members ask — "What happens to my data if I close my account?" The answer: the majority of your account information will be deleted or anonymised within a reasonable period after closure. However, financial transaction records are required to be retained for 7 years under Malaysian law — this is not roma77's choice but a legal requirement that applies equally to all financial institutions and payment platforms operating in this country.
Another common question: "Does roma77 use my data to set odds or alter game outcomes?" No. Your personal data is not used to influence game results in any way. Games on roma77 use independently verified RNG, and outcomes are entirely random — there is no player profiling to adjust your odds. The data we collect is for security, service delivery, and legal compliance purposes — not to gain an advantage over you.
Your privacy is not just empty words in a lengthy document nobody reads. For roma77, it is a practical commitment reflected in every technical decision and policy we implement. If you have any questions, concerns, or issues relating to your data privacy on the roma77 platform, our team is always ready to speak with you openly and honestly.
The questions our members ask most frequently about privacy and data protection
This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy which together form the complete framework protecting your rights as a roma77 member. For privacy enquiries, contact us at support@roma77.best.
Roma77 protects your privacy with SSL 256-bit encryption and full compliance with Malaysia's PDPA. Register with confidence and claim your welcome bonus of up to RM 1,500.