Privacy Policy BP77 —
Malaysian User Data Protection

Welcome to the bp77 Privacy Policy page. This document is written to give you a clear, transparent, and easy-to-understand overview of how bp77 handles your personal information as a user of our platform in Malaysia.

When you register an account, log in, make a deposit, play games, or simply browse bp77.wine, you entrust us with certain data. BP77 takes this trust extremely seriously and is fully committed to protecting your privacy in line with industry best practices and applicable Malaysian law — specifically the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all services provided by BP77, including the official website at bp77.wine, the BP77 mobile app (where available), and all our official communication channels such as customer support email and in-platform Live Chat.

We encourage you to read this Privacy Policy in full. If you have any questions or concerns, please contact us by email at [email protected] or via Live Chat on the platform — our team is available 24 hours a day, 7 days a week.

BP77 only collects information that is genuinely necessary to deliver our services safely and efficiently. We do not collect irrelevant or excessive data. Generally, the data we collect falls into three main categories:

A. Information You Provide Directly

• Full name as shown on your identity card or passport
• Date of birth and national identity card (NRIC) or passport number
• Email address and mobile number
• Current residential address
• Bank account details for deposits and withdrawals (bank name and account holder name only — full account numbers are not stored on our servers)
• Identity document photos during the KYC (Know Your Customer) process

B. Information Collected Automatically

• IP address and general location information (city/state level)
• Device type, operating system and browser version
• Game session logs, betting records and transaction history
• Cookies and session data for a smoother user experience
• Platform usage time and duration

C. Information from Trusted Third Parties

• Identity verification data from licensed KYC service providers
• Transaction verification information from registered payment processors
• Risk assessment data from anti-money laundering (AML) service providers

Every piece of data we collect is used for a specific and legitimate purpose. bp77 does not use your data for purposes unrelated to the provision of our platform services. The following are the primary uses of the information we collect:

• Account Management: Creating, verifying and maintaining your user account, including the login process, password resets and KYC verification.
• Transaction Processing: Processing deposits, withdrawals and all other financial transactions you make on the bp77 platform securely and accurately.
• Platform Security: Detecting and preventing fraud, multi-accounting, money laundering, unauthorized access and any other security threats.
• Customer Support: Enabling our support team to assist you more effectively whenever you contact us with any issue or enquiry.
• Platform Improvement: Analyzing usage patterns in aggregate (not at an individual level) to improve platform performance, interface and overall user experience.
• Service Communications: Sending important notices regarding your account, policy changes, active promotions and security updates via email or in-platform notifications.
• Legal Compliance: Fulfilling the legal and regulatory obligations applicable to the bp77 platform, including AML reporting requirements.

BP77 understands that you want to know who can access your data. As a matter of principle, we do not share your personal information with external parties except in specific, legitimate, and necessary circumstances as described below.

Third parties that may receive limited access to your data include:

• Licensed Payment Processors: FPX, Touch 'n Go eWallet, GrabPay, and any other payment methods used to process your transactions. They only receive the data necessary to complete the relevant transaction.
• KYC Service Providers: A licensed and accredited identity verification platform used to authenticate your identification documents during the KYC process.
• Game Software Providers: Live casino, slots and other game providers operating within the bp77 platform may receive game session IDs without your full identity information.
• Legal Authorities: BP77 will disclose information to the Malaysian police, courts, or government agencies where required by a valid court order, writ, or statutory provision.
• Technical Service Providers: Server hosting providers, cybersecurity services and platform analytics partners bound by strict confidentiality agreements with bp77.

BP77 never sells, rents, or trades users' personal information to any marketing company, data aggregator, or information broker. This is an absolute commitment with no exceptions.

BP77 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and remember your preferences.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality — including secure login, session verification, and account security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting data on how users interact with our platform (pages visited, time spent, navigation paths) to help us continuously improve the overall user experience.
• Functional Cookies: Remembering your preferences such as language, region and display settings so you do not need to reconfigure them each time you log in.
• Security Cookies: Used to detect suspicious login attempts, bot activity, and other security threats that may compromise your account.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling essential cookies may cause certain BP77 platform features to not function properly.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a BP77 user have certain rights regarding the personal information we hold about you. BP77 respects and facilitates the exercise of all these rights:

BP77 consistently invests in robust security infrastructure to ensure your data remains protected at all times. We adopt a defense-in-depth approach that combines technical safeguards with strict internal operational procedures.

• End-to-End Encryption: All data transmitted between your device and bp77 servers is protected by TLS 1.3 protocol with AES-256 encryption.
• Two-Factor Authentication (2FA): We offer two-factor authentication for all user accounts as an additional layer of protection, which we strongly recommend enabling.
• 24/7 Security Monitoring: Our automated monitoring system detects and responds to suspicious activity, intrusion attempts, and cyber threats in real time.
• Regular Security Audits: The bp77 platform undergoes regular independent security audits by certified cybersecurity firms to ensure compliance with industry standards.
• Internal Access Restrictions: Only authorized personnel who require access to perform their duties are permitted to access user data, and every access is logged for audit purposes.
• Incident Response Plan: BP77 has a comprehensive incident response procedure. In the event of any data breach, we will notify affected users within 72 hours.

The bp77 platform is strictly for users aged 18 years and above only. We do not knowingly collect any personal information from children under the age of 18. If you believe a child has registered an account on our platform, please contact us immediately at [email protected].

Should we discover that personal information of a user under the age of 18 has been collected, we will take immediate action to delete all related data and close the account with no fees or penalties to the guardian who reported the case.

BP77 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, platform improvements, or user feedback. All changes take effect immediately upon publication on this page.

For significant and material changes, we will:

• Posting a prominent notice on the bp77.wine homepage at least 7 days before changes take effect.
• Sending email notifications to all registered users with a verified email address.
• Updating the "Last Updated" date at the top of this page to reflect the date of the latest revision.

Continued use of the bp77 platform after changes are published will be considered your acceptance of the updated terms. If you disagree with any changes made, you have the right to close your account by contacting our support team.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to help. We encourage you to contact us directly rather than attempting to resolve issues on your own.