Privacy Policy BSS77 — Member Personal Data Protection

BSS77 understands that member trust is our most valuable asset. When you register an account and use our platform, you are entrusting us with sensitive personal information. We do not take that trust lightly. This Privacy Policy is written to clearly explain exactly what data we collect, why we need it, how it is used, and what your rights are as the owner of that data.

This policy applies to all users of the BSS77 platform, including the website bss77.app as well as the bss77 mobile app, available for free download. By using any part of our platform, you agree to the terms set out in this privacy policy. If you do not agree, we encourage you to contact our support team for further discussion.

BSS77 collects various categories of personal data depending on how you interact with our platform. This data is collected directly from you during registration and platform use, or automatically through standard tracking technologies.

Data You Provide Directly

• Identity information: Full name, date of birth, MyKad number or official identification document number.
• Contact information: Email address, mobile number and current residential address.
• Financial information: Bank account number, bank name, e-wallet number (Touch 'n Go, Boost, GrabPay) for deposit and withdrawal purposes.
• KYC Documents: Copies of MyKad, bank statements, or other identity verification documents requested to meet compliance requirements.
• Account options: Language settings, self-imposed deposit limits, notification preferences, and other profile information you choose to share.

Automatically Collected Data

• Technical data: IP address, browser type, operating system, screen resolution and app version.
• Usage data: Pages visited, session duration, games played, login frequency and navigation patterns.
• Transaction data: History of deposits, withdrawals, wagering, wins, and all financial activity on the platform.
• Location data: General location based on IP address for jurisdiction verification and fraud prevention purposes.

Every piece of data collected by bss77 has a clear and legitimate purpose. Below is a summary table of data usage purposes:

We will not use your data for any purpose other than those stated above without first obtaining your consent. Should we need to use your data for a new purpose, you will be informed and given the opportunity to express your preference.

BSS77 respects member privacy and only shares personal data in limited, necessary situations. We does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. Data sharing only occurs in the following circumstances:

Trusted Service Providers

BSS77 works with selected third-party service providers to help operate the platform, including payment processors, KYC providers, cloud server services and analytics providers. All these providers are bound by strict data protection agreements and are only permitted to process your data in accordance with BSS77's instructions.

Legal & Regulatory Requirements

BSS77 may be required to disclose personal data when mandated by Malaysian law, including requests from law enforcement agencies or legitimate regulatory bodies. In all such cases, BSS77 will ensure that disclosure is made only within the limited scope required.

Platform Protection

To help prevent fraud, money laundering and other illegal activities, BSS77 may share certain information with identity verification partners or industry fraud prevention databases.

BSS77 invests seriously in security infrastructure to ensure members' personal data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data communications between your browser/app and bss77 servers.
• Encryption of data at rest for all sensitive information including financial details and KYC documents.
• Two-factor authentication (2FA) available and encouraged for all member accounts.
• 24/7 security monitoring by the bss77 cybersecurity team to detect and respond to threats.
• Regular penetration testing by independent security experts to identify and address potential vulnerabilities.
• Internal access controls strict controls ensure that only authorised staff can access member data, and only to the extent necessary for their duties.
• Secure data backup stored in data centres protected by physical and digital security protocols.

While bss77 takes all reasonable steps to protect your data, no digital system can be guaranteed 100% secure against every threat. We are committed to responding swiftly and transparently in the event of any security incident involving member data.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by BSS77. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, contact the bss77 privacy team via live chat or email at [email protected]. Requests will be processed within 21 business days as required by PDPA. BSS77 reserves the right to verify your identity before processing any personal data request.

BSS77 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure to meet audit and compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• KYC Documents: Retained for the duration the account is active and a minimum of 5 years after account closure.
• Support communication logs: Retained for 3 years for historical reference and service improvement.
• Anonymised analytics data: May be retained longer in anonymised form for platform analytics purposes.

Once the retention period expires, data will be securely deleted or anonymised using industry-standard methods.

BSS77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve performance and user experience.
• Functional Cookies: Remembering your preferences such as language and display settings to personalise your experience.
• Analytical Cookies: Used by analytics tools to understand overall platform usage patterns.

You can manage cookie settings through your browser. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help documentation.

The bss77 platform is for users aged 18 and above only. We do not intentionally collect or process personal data from individuals under the age of 18. If we discover that a child's data has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account.

If you believe a minor has registered an account at bss77, please contact our support team immediately via live chat or email so we can take appropriate action without delay.

BSS77 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or platform developments. Any material changes will be communicated to members via in-platform notifications or email at least 14 days before the changes take effect.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. Continued use of the bss77 platform after the effective date of any changes is considered your acceptance of the updated policy. We encourage you to review this page periodically.