Privacy Policy

BS77 ("we", "us", "our", or "the Company") operates the online gaming and sports betting platform accessible at bs77.cam (the "Platform"). In the course of providing our services to players across Malaysia — including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond — we collect and process personal data in accordance with applicable data protection legislation.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. We take our obligations under data protection law seriously and are committed to ensuring that your privacy is respected and your personal information is handled responsibly at every stage.

This Policy applies to all users of the BS77 Platform, including registered account holders, visitors browsing the website, and prospective players who have initiated but not completed registration. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein.

Throughout this Policy, the following terms carry the meanings defined below:

BS77 collects only the personal data that is necessary for the provision of our services, compliance with legal obligations, and the improvement of the Platform experience. The categories of data we collect include:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth (for age verification purposes — BS77 requires players to be aged 21 or above);
• Gender (where voluntarily provided);
• Nationality and country of residence;
• Malaysian MyKad number, passport number, or equivalent government-issued identification number.

3.2 Contact Data

• Email address (primary communication channel);
• Mobile phone number (for account verification and two-factor authentication);
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru) and postcode.

3.3 Financial Data

• Bank account details or e-wallet identifiers used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal amounts, bonus credits, and wager records;
• Payment method type (e.g., DuitNow, Touch 'n Go eWallet, FPX, Maybank2u, CIMB Clicks);
• Cryptocurrency wallet addresses where applicable.

3.4 Technical Data

• IP address and geolocation data;
• Browser type, version, and operating system;
• Device type, model, and unique device identifiers;
• Session duration, login timestamps, and access logs.

3.5 Behavioural Data

• Game play history, including games played, bets placed, and outcomes;
• Platform navigation data, including pages visited and features used;
• Promotional interactions, including bonuses claimed and wagering activity.

3.6 Communications Data

• Records of communications between you and BS77 support staff via live chat, email, or other channels;
• Survey responses and feedback submitted through the Platform.

BS77 collects personal data through the following channels:

• Direct Submission: Data you provide when registering an Account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting our support team.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies as described in Section 10.
• Payment Processors: Transaction confirmation data received from Malaysian payment service providers including DuitNow, FPX, and e-wallet operators, used solely to confirm successful payment processing.
• Identity Verification Providers: Where BS77 uses a third-party KYC provider to verify identity documents, that provider may return verification status data to BS77 in accordance with its own privacy terms.
• Publicly Available Sources: In limited circumstances, BS77 may supplement account data with publicly available information for fraud prevention or AML compliance purposes.

BS77 processes personal data for the following specific purposes:

BS77 does not process personal data for purposes incompatible with those listed above without first obtaining your explicit consent.

BS77 processes personal data on the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing that is necessary to provide the gaming and payment services you have requested, including Account management and transaction processing.
• Legal Obligation: Processing required to comply with applicable law, including KYC identity verification, AML monitoring, regulatory reporting, and age verification requirements.
• Legitimate Interests: Processing for purposes that BS77 has assessed as necessary for its legitimate business interests and that are not overridden by your privacy rights — including fraud prevention, platform security, and service improvement analytics.
• Consent: Processing based on your freely given, specific, and informed agreement — primarily for the delivery of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

BS77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We may share personal data with the following categories of recipients solely to the extent necessary for the stated purpose:

• Payment Service Providers: Malaysian banking and e-wallet operators (including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) receive only the transaction data necessary to complete payment instructions. These providers are bound by their own regulatory obligations under Bank Negara Malaysia requirements.
• Identity Verification Partners: Third-party KYC and document verification providers receive identity document data solely for the purpose of verifying your identity in accordance with our AML obligations. These providers operate under binding data processing agreements.
• Gaming Technology Providers: Game software providers and live dealer studio operators may receive pseudonymous session and wager data necessary to operate their games on our Platform. No name or contact data is shared without your explicit knowledge.
• Regulatory and Law Enforcement Authorities: BS77 will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction, including requests from financial intelligence units for AML investigation purposes.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by BS77 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of BS77's business or assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Some of BS77's service providers and technology partners are located outside Malaysia. Where personal data is transferred to recipients in countries that do not provide an equivalent level of data protection to Malaysia, BS77 will implement appropriate safeguards to protect the data during and after transfer.

Appropriate safeguards may include contractual clauses requiring the recipient to protect personal data to the same standard as required under this Policy, or equivalent recognised international data transfer mechanisms. Where such safeguards are in place, your data remains protected regardless of where it is processed geographically.

BS77 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in accordance with AML regulatory requirements.
• Transaction and Financial Records: Retained for a minimum of 7 years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documentation: Copies of identity documents are retained for a minimum of 5 years following Account closure, or longer where required by applicable regulatory direction.
• Communications Records: Support interaction records are retained for a minimum of 2 years from the date of each communication.
• Cookie and Behavioural Data: Session cookies expire at the end of each browsing session; persistent cookies are retained for no longer than 13 months unless renewed with your consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

BS77 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform functionality, including session management, security, and fraud prevention. These cannot be disabled without affecting core Platform features.
• Performance and Analytics Cookies: Used to measure how users interact with the Platform — including pages visited, time spent, and error encountered. Data is aggregated and anonymised where possible.
• Functional Cookies: Store your preferences, such as language selection and responsible gambling settings, to provide a personalised experience across sessions.
• Marketing Cookies: Used only where you have provided explicit consent to receive personalised promotions. These cookies track engagement with BS77 content and may support tailored bonus offers.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Consent for non-essential cookies may be withdrawn at any time through your Account preferences.

BS77 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and BS77's servers is encrypted using the same standard employed by major international financial institutions.
• Two-Factor Authentication (2FA): Available on all Accounts to prevent unauthorised access even where login credentials are compromised.
• Access Controls: Personal data is accessible only to BS77 personnel and authorised processors with a documented business need, subject to role-based access restrictions.
• Encrypted Data Storage: Sensitive data fields, including payment information and identification document copies, are stored in encrypted form with access keys managed independently.
• Regular Security Audits: BS77's platform and data infrastructure are subject to regular third-party security assessments and penetration testing.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, BS77 will notify affected individuals and relevant authorities in accordance with applicable legal timeframes.

While BS77 takes all reasonable precautions, no internet-based system is entirely immune to risk. You are responsible for maintaining the security of your own Account credentials and for notifying BS77 immediately of any suspected unauthorised access.

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by BS77. To exercise any of these rights, please contact our support team using the details in Section 15.

BS77 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, with written notification to you of the extension and its reasons.

BS77 strictly prohibits access to, and use of, the Platform by any person under the age of 21. This is a firm operational requirement, not simply a terms of service provision, and is enforced through mandatory identity verification at account registration and prior to processing any withdrawal request.

BS77 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If BS77 discovers that an Account has been registered by, or on behalf of, a person under the age of 21, that Account will be immediately suspended, all associated data will be deleted to the extent legally permissible, and any deposited funds will be handled in accordance with applicable regulatory requirements.

If you believe that a minor has accessed BS77 or provided personal data to us, please contact our support team immediately so that appropriate action can be taken.

BS77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing activities, or our business operations. Where amendments are material — for example, a change in the categories of data collected, the purposes for processing, or the identity of third-party recipients — BS77 will provide notice to registered players via email or a prominent on-Platform notification at least 7 calendar days prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent version of this Policy entered into effect. We recommend that you review this Policy periodically to remain informed of how your data is handled. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data BS77 holds about you, please contact us using the details below. All privacy-related enquiries will be acknowledged within 5 business days and resolved within 30 calendar days.