Privacy Policy BP77 — Personal Data Protection for Malaysia Players

1 Personal Information We Collect

Bp77 collects several categories of personal information to enable us to provide a safe, fair, and efficient service to all players. The types of information we collect are as follows:

Identification Information:

• Full name as shown on your identification card or passport.
• Date of birth for age verification purposes (18+).
• National identification number (MyKad) or passport number.
• Full current residential address.
• A photo or copy of your identification document for the KYC process.

Contact Information:

• Active email address used during registration.
• An active Malaysian mobile phone number.

Financial Information:

• Bank name and bank account number (for withdrawal processing).
• Records of deposit and withdrawal transactions.
• Digital wallet details (such as the phone number linked to Touch 'n Go eWallet or Boost).

Platform Usage Data:

• Game history and betting records.
• Login and logout timestamps.
• IP address and device information used.
• Session data and in-platform browser activity.

2 How bp77 Collects Your Information

Bp77 collects personal information through several different channels depending on your interaction with our platform:

• Account Registration: When you register a new bp77 account, you directly provide basic information such as your name, email, phone number, and password.
• KYC Verification: During the identity verification process, you will be asked to submit a proof of identity document and proof of address for us to verify.
• Financial Transactions: Every time you make a deposit or request a withdrawal, our system automatically records the transaction details.
• Platform Usage: Automated tracking technologies such as cookies, server logs, and pixels record how you interact with the bp77 platform.
• Support Communications: When you contact the bp77 customer support team via live chat or email, the content of that communication is recorded for quality assurance and issue resolution purposes.
• Devices and Networks: Technical information such as device type, operating system, browser version, and IP address is collected automatically when you access the platform.

3 Purposes for Using Your Personal Data

Bp77 uses collected personal data solely for legitimate and necessary purposes, including:

• Account Management: Creating, verifying, and managing your player account, including secure login via two-factor authentication.
• Transaction Processing: Processing deposits and withdrawals accurately and securely to the payment method you have registered.
• KYC Identity Verification: Ensuring every player meets the minimum age requirement and verifying their true identity to prevent fraud and money laundering.
• Platform Security: Detecting and preventing fraudulent activity, bot usage, duplicate accounts, and any activity that violates bp77's terms.
• Legal Compliance: Fulfilling reporting and legal compliance obligations required by the relevant authorities.
• Service Improvement: Analysing usage data in aggregate and anonymised form to improve platform performance, user interface, and overall gaming experience.
• Important Communications: Sending notifications related to your account, transactions, terms changes, or security issues that require your attention.
• Customer Support: Resolving enquiries, complaints, and technical issues you report to the bp77 support team.

Bp77 does not use your data for any purposes not stated in this policy without first obtaining your additional consent.

4 Data Sharing with Third Parties

Bp77 understands how sensitive your personal information is. We only share data in limited situations and with parties that have undergone rigorous security assessments:

• Payment Service Provider: Transaction data is shared with trusted payment gateway providers such as FPX and digital wallet providers to facilitate deposit and withdrawal processing.
• KYC Service Provider: Identity data is shared with trusted third-party identity verification services to process background checks and document verification.
• Game Provider: Minimal game session data is shared with game software providers to ensure games function correctly and fairly.
• Legal Authority: bp77 will disclose required information to Malaysian authorities or law enforcement bodies when mandated by a valid court order or applicable legislation.

5 bp77 Data Security Measures

Bp77 continually invests in the latest cybersecurity infrastructure to ensure your personal data is always protected from online threats. Key security measures we implement include:

• End-to-End Encryption: All data in transit is protected by TLS 1.3 protocol with 256-bit encryption, ensuring no information can be intercepted while travelling between your device and our servers.
• Two-Factor Authentication (2FA): Logging in to your bp77 account requires two-step verification via an OTP sent to your registered phone number, preventing unauthorised access even if your password is compromised.
• Database Encryption: Sensitive data such as financial information and identity documents is stored in encrypted form in our database — meaning that even if the database were accessed without authorisation, the data cannot be read without the encryption key.
• Continuous Security Monitoring: bp77's threat detection system operates 24 hours a day, 7 days a week, detecting unusual activity and cyber threats in real time.
• Regular Security Audits: bp77 conducts penetration testing and security audits performed by independent security experts on a regular basis to identify and address any system vulnerabilities.
• Internal Access Controls: Access to player data within bp77 is restricted to individuals who require it to perform their duties, and all access is automatically logged.

6 Cookies and Tracking Technologies

The bp77 platform uses cookies and similar tracking technologies to enhance your user experience and ensure platform features function correctly. The cookies we use fall into several categories:

• Essential Cookies: Required for core platform functions such as login sessions, security, and navigation. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Saving your preferences such as language, display settings, and login details for your convenience on future visits.
• Analytical Cookies: Helping us understand how players use the platform — most visited pages, time spent, and navigation patterns — for platform improvement purposes.

You can manage your cookie settings through your browser. Please note that disabling essential cookies may significantly affect the functionality of the bp77 platform.

7 Data Retention & Deletion Period

Bp77 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Our data retention guidelines are as follows:

• Active Account Data: For as long as your account is active and you are using bp77 services.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in accordance with applicable Malaysian financial and tax legislation.
• KYC Documents: Up to 5 years after account closure, or longer if required by a regulatory body.
• Support Communication Logs: Up to 2 years from the date of last interaction.
• Security Log Data: Up to 1 year for security investigation and fraud prevention purposes.

Once the retention period has expired, your data will be securely deleted using methods that ensure the data cannot be recovered.

8 Cross-Border Data Transfer

In the course of platform operations, some player data may need to be processed or stored on servers located outside Malaysia, particularly in relation to gaming service providers and cloud infrastructure we use.

Bp77 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Ensuring the recipient country maintains an equivalent or higher level of data protection.
• Executing binding data processing agreements with all recipient parties outside Malaysia.
• Ensuring data encryption during all cross-border transfers without exception.

9 How to Exercise Your Privacy Rights

To exercise any of the privacy rights stated in this policy, you may contact the bp77 data protection team through the following channels:

• Live chat available 24/7 on the bp77 platform.
• Section FAQ for frequently asked questions related to privacy.
• Email our data protection team at [email protected].

When submitting a privacy-related request, please include the following information to allow us to verify your identity and process your request efficiently:

• Full name and bp77 account username.
• Registered email address.
• The type of request submitted (access, rectification, erasure, etc.).
• Reason or context of the request, where applicable.

Bp77 is committed to responding to your privacy requests within 14 working days from the date the request is received. For more complex cases, we will notify you of any additional time required.

10 Links to Third-Party Websites

The bp77 platform may contain links or references to third-party websites in certain contexts, such as game providers or payment method information. This Privacy Policy applies solely to the bp77 platform and does not cover the privacy practices of those third-party websites.

Bp77 is not responsible for the content or privacy practices of external websites you may visit through links on our platform. We encourage you to read the privacy policy of every website you visit before providing any personal information to them.

11 Changes to This Privacy Policy

Bp77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or data protection improvements we implement.

When there are significant changes to this policy, bp77 will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notices on the bp77 platform regarding any changes made.
• In the case of very significant changes, a direct notification will be sent to registered players' email addresses.

Your continued use of the bp77 platform after any updates to the Privacy Policy are published will be considered your acceptance of the revised terms. If you do not agree with the changes made, you have the right to close your account and stop using the platform.

12 Contact the bp77 Data Protection Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how bp77 handles your personal data, do not hesitate to reach out. Our data protection team is always ready to assist you.

• Live Chat: Available 24/7 on the bp77 platform for immediate assistance.
• Email: [email protected] (response within 14 working days).
• FAQ: Visit the FAQ for answers to frequently asked questions about privacy and account security.