BP77 Privacy Policy – Data Protection & Personal Information

BP77 collects personal information necessary to provide quality services, ensure account security, and meet legal obligations. The types of information we collect are as follows:

Information You Provide Directly:

• Full name, date of birth, identity card number or passport number.
• Email address, phone number, and residential address.
• Bank account or e-wallet information used for transactions.
• Identity verification documents uploaded during the KYC process.
• Personal preferences and account settings you have configured yourself.

Information Collected Automatically:

• IP address, device type, operating system, and browser version.
• Activity log data including pages visited, session duration, and actions taken on the platform.
• General location data based on IP address (not precise GPS location).
• Transaction records including deposit history, withdrawals, and wagering.
• Cookie data and similar tracking technologies as described in the relevant section.

The personal information we collect is used solely for legitimate and transparent purposes. Below is a summary table of data usage purposes and their legal basis:

BP77 does not use your data for any purpose beyond those stated above without first obtaining your additional consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.

BP77 does not sell, exchange, or rent members' personal information to any third party for commercial gain. However, there are limited situations where we may need to share information with trusted business partners:

• Payment providers: Transaction information is shared with payment gateways and financial institutions that process your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• Game software provider: Game session data is shared with third-party game providers such as slot and live casino providers for game operation purposes only.
• Authorities and regulatory bodies: BP77 will disclose required information when directed by a court, law enforcement authority, or relevant regulatory body.
• Analytics services: Anonymised and aggregated data (not personally identifiable information) is shared with analytics providers to help us understand usage patterns and improve the platform.
• Fraud prevention services: Certain information is shared with security and anti-fraud service providers to protect the platform and all members from fraudulent activity.

All third parties that receive bp77 member data are required to sign data processing agreements that uphold the same security and confidentiality standards as bp77's own practices.

Protecting member personal information is bp77's highest priority. We implement multiple layers of technical and organizational security to ensure your data remains safe at all times:

• Data encryption in transit: All communication between your browser or app and bp77's servers is secured using TLS 1.3 protocol with AES-256 encryption.
• Data encryption at rest: Sensitive information such as passwords is stored in hashed form using the bcrypt algorithm. Financial data is encrypted before being stored in the database.
• Role-based access control: Only authorised staff with a legitimate business need may access member data. All access is logged and continuously monitored.
• Periodic security testing: BP77 conducts regular penetration testing and security audits by independent security experts to identify and address any vulnerabilities.
• Two-factor authentication (2FA): bp77's internal systems require two-factor authentication for all administrative access to prevent unauthorized entry.

While we take all reasonable precautions, no security system can guarantee absolute protection. In the event of a security incident involving your personal data, bp77 will notify you within 72 hours of the incident being detected, in accordance with applicable legal obligations.

BP77 uses cookies and similar tracking technologies to enhance user experience, analyse usage patterns, and ensure smooth platform functionality. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are required for core platform functions such as login session management and security. They cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Collects information about how you use the platform, such as frequently visited pages and time spent. This data helps us improve the user experience.
• Functional Cookies: Saves your preferences such as preferred language and display settings so you do not need to reconfigure them on every visit.
• Marketing Cookies (with Consent): Used to display advertisements relevant to your interests. This type of cookie is only activated after you provide explicit consent.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality or user experience of the bp77 platform.

BP77 retains members' personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. The following are our data retention guidelines:

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered. In cases where data must be retained longer due to an ongoing legal investigation, it will be locked and accessible only by bp77's compliance team.

As a bp77 member and data subject, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA). You may exercise any of these rights by contacting our support team:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) team by email at [email protected]. We will process your request within 30 calendar days. For complex requests, we may require up to 60 days and will notify you accordingly.

The bp77 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal information from anyone under 18. Our KYC process is specifically designed to verify each member's age before their account is fully activated.

If we discover that personal information of an individual under 18 has been inadvertently collected, we will take the following steps immediately:

• Suspending and closing the account in question.
• Deleting all personal data collected from that individual.
• Returning any funds that may have been deposited, where applicable and upon verification by the legal guardian.

BP77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. The "Updated" date at the top of this page will always reflect the latest version of this policy.

For material changes — those that significantly affect how we process your data — we will provide at least 30 days before the changes take effect via:

• Clear in-platform pop-up notices or banners on bp77.
• An email will be sent to your registered address with details of the changes made.
• Links to previous versions of the Privacy Policy for reference and comparison.

Continued use of the bp77 platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before the effective date by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bp77 handles your personal data, we encourage you to contact us directly:

• bp77 Data Protection Officer (DPO): [email protected]
• General Customer Support: [email protected]
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under the Malaysian Ministry of Communications and Digital, or the relevant regulatory authority in your jurisdiction.