BP77 Privacy Policy

BP77 ("the Platform", "we", "our", "us") is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with https://bp77.buzz ("the Website"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and safeguard personal information in connection with the operation of our online casino, sports betting, and related services.

This Policy applies to all users of the BP77 Website, including visitors who have not registered an account and registered players from Malaysia and other territories. It should be read in conjunction with the BP77 Terms and Conditions, available at /terms-conditions, and our Responsible Gambling Policy at /responsible-gambling.

By accessing the BP77 Website, creating an account, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Website immediately.

The following terms carry the meanings set out below throughout this Policy:

BP77 collects the following categories of Personal Data, depending on how you interact with the Platform:

Identity and Contact Information:

• Full legal name, date of birth, nationality
• Email address, mobile phone number
• Residential address and postcode
• National identification number (MyKad number) or passport details, collected during KYC verification

Financial Information:

• Bank account details for withdrawal purposes (Maybank, CIMB, Public Bank, Hong Leong, RHB, and other Malaysian banks)
• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay)
• Transaction records including deposit amounts, withdrawal amounts, dates, and payment method used
• Cryptocurrency wallet addresses (where BTC or USDT transactions are conducted)

Account and Usage Data:

• Username, account ID, account creation date, and login history
• Gameplay activity including games played, bet amounts, session duration, and win/loss records
• Bonus and promotional history, wagering records, and loyalty programme status
• Communications sent to or received from BP77 support, including live chat transcripts and emails

Technical Data:

• IP address, browser type and version, operating system, device type and identifier
• Session cookies, analytics identifiers, and clickstream data
• Geolocation data at the general region level (not real-time GPS tracking)

BP77 collects Personal Data through the following mechanisms:

• Direct submission: Data you provide when creating an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically through cookies, server logs, and analytics tools as you navigate the Website.
• Payment processors: Transaction-level data received from Malaysian payment channels including DuitNow, FPX, and e-wallet providers, limited to what is necessary for processing.
• Identity verification services: Confirmation data returned by third-party KYC and fraud-screening providers during the verification process.
• Support interactions: Any information you voluntarily share with BP77 support agents via live chat or email correspondence.

BP77 processes your Personal Data only for defined, legitimate purposes. The following table summarises the key purposes and the corresponding legal basis for each:

BP77 does not sell, rent, or trade your Personal Data to unaffiliated third parties for their own commercial or marketing purposes. We may, however, disclose your data to third parties in the following circumstances:

• Payment service providers: Financial institutions and e-wallet operators (including those operating Malaysian payment channels such as DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, and GrabPay) receive only the minimum information required to process a transaction.
• Identity and fraud-screening providers: Third-party KYC and AML service providers receive identity document data solely for the purpose of verification and regulatory compliance.
• Technology and infrastructure providers: Cloud hosting, database management, and platform security vendors who process data under data processing agreements with BP77 and are prohibited from using it for independent purposes.
• Game content providers: Licensed game studios providing casino and betting content may receive anonymous session-level data for game performance and fairness auditing purposes. No personally identifiable information is shared with game providers.
• Regulatory and law enforcement authorities: BP77 will disclose Personal Data when required to do so by law, court order, or in response to a lawful request from a competent authority.
• Corporate transactions: In the event of a merger, acquisition, or sale of business assets, player data may be transferred to the successor entity, subject to equivalent data protection obligations.

BP77 operates as an internationally licensed online gaming platform. Accordingly, your Personal Data may be processed or stored on servers located outside of Malaysia, including in data centre jurisdictions within the operating territory of BP77's licensing authority.

Where Personal Data is transferred internationally, BP77 takes appropriate measures to ensure that such transfers are made in compliance with applicable data protection obligations, including the use of contractual safeguards with data processors located in third countries.

By using the BP77 Platform, you acknowledge that your data may be transferred, stored, and processed outside of Malaysia, and you consent to such transfer where it is necessary for the operation of your account or the delivery of services.

BP77 retains Personal Data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, and operational requirements. The following indicative retention periods apply:

• Active account data: Retained for the duration of the account's active status plus a minimum of five (5) years following account closure, to satisfy regulatory record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction in accordance with anti-money-laundering obligations.
• KYC and identity documents: Retained for the period required by the applicable licensing and AML regulatory framework, typically five (5) years following account closure.
• Support and communication records: Retained for a minimum of two (2) years from the date of the last interaction.
• Technical and analytics data: Typically retained for a rolling period of up to twelve (12) months.

Where data is no longer required and no legal obligation necessitates its continued retention, BP77 will take reasonable steps to delete or anonymise the data in a secure manner.

The BP77 Website uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

BP77 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Website to function correctly, including maintaining your login session, enabling secure payment flows, and preserving your language and display preferences. These cookies cannot be disabled without materially impairing your ability to use the Platform.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the Website, including pages visited, session duration, and error events. This data is used to improve Platform performance and user experience.
• Functional Cookies: Enable enhanced personalisation features such as remembering your preferred game categories, lobby display settings, and notification preferences.
• Security Cookies: Used to detect and prevent fraudulent activity, verify user identity during sensitive operations, and protect the integrity of your account session.

BP77 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and BP77's servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access specific categories of Personal Data.
• Continuous security monitoring, intrusion detection systems, and regular security assessments of platform infrastructure.
• Secure data storage with regular backup procedures and disaster-recovery protocols.

Notwithstanding these measures, no data transmission over the internet and no storage system can be guaranteed to be completely secure. BP77 will notify affected users and relevant authorities in accordance with applicable legal requirements in the event of a significant data breach.

Players are themselves responsible for maintaining the security of their account credentials. BP77 strongly recommends the use of a unique, complex password and, where available, two-factor authentication.

Subject to applicable law and the operational requirements of BP77's international licensing framework, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact BP77 support via live chat or email at [email protected].

BP77 will endeavour to respond to all rights-exercise requests within a reasonable timeframe. Requests may be subject to identity verification before they are actioned. In some cases, we may be legally required to retain certain data notwithstanding a deletion request, in which case we will explain the applicable obligation to you.

The BP77 Platform is strictly intended for adults aged 21 years and above. BP77 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If BP77 discovers or reasonably suspects that a user under the age of 21 has registered an account or provided Personal Data, we will immediately suspend the account, delete the associated Personal Data, and decline to process any pending transactions. Any funds deposited by an underage user will be returned via the original payment method to the extent technically possible and legally required.

If you believe that a minor may have created a BP77 account, please notify us immediately via live chat or email so we can take prompt action.

BP77 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered players via an on-site notification or by email to the address associated with your account. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the BP77 Platform following the posting of a revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of any changes to how your data is handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by BP77, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the BP77 Platform — the fastest channel for routine enquiries.
• Email: [email protected] — for formal data rights requests, please include "Data Rights Request" in the subject line and provide sufficient detail to enable us to identify your account.

Formal complaints regarding BP77's data processing practices that cannot be resolved through our internal process may be escalated to the supervisory authority operating under the jurisdiction of BP77's international gaming licence.