Privacy Policy BS777 – Malaysia Member Data Protection

BS777 collects personal information from members through several means – primarily during the registration process, during platform use and through interactions with our support team. The following are the categories of data we collect:

Personally Identifiable Information:

• Full name as stated on your MyKad or official Malaysian identification document.
• An active Malaysian mobile number (used for OTP verification and account communications).
• Date of birth (for age verification, 18+ only).
• Email address (if provided during registration or correspondence).
• Identity card number (MyKad) – only where required for withdrawal identity verification or compliance processes.

Financial & Transaction Information:

• Records of all deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u FPX or CIMB Clicks.
• Records of all withdrawals processed to your registered payment method.
• Betting history and gameplay activity within the BS777 platform.
• Current account balance and balance history.

Technical & Usage Information:

• The IP address of the device used to access BS777.
• Device type, operating system and web browser used.
• Session information such as login time, session duration, and pages visited.
• Cookie data and device identifiers for authentication and security purposes.

Every piece of information we collect has a clear and legitimate purpose. BS777 uses member data for the following purposes:

BS777 will not use your data for any purpose not stated above without first obtaining your consent. If you no longer wish to receive promotional communications, you may withdraw your consent at any time through your account settings or by contacting our support team.

BS777 does not sell, rent, or disclose members' personal data to third parties for their own commercial purposes. However, in the normal course of operating the platform, there are situations where data needs to be shared with specific parties:

Platform Operations Service Providers: We work with companies that help operate specific aspects of the BS777 platform — including server infrastructure providers, gaming software providers, payment processors that integrate Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as customer support service providers. All of these parties are bound by strict confidentiality agreements and may only use the data provided for the specified purposes.

Legal Requirements & Authorities: BS777 may be required to disclose member information to the relevant Malaysian authorities when ordered to do so through a lawful legal process — such as a court order, police investigation, or compliance requirements under the Anti-Money Laundering Act 2001 (AMLA). In such situations, we will comply with the legal obligation while endeavouring to notify the affected member to the extent permitted by law.

Business Transfer: In the event of a merger, acquisition, or transfer of BS777's assets, member data may form part of the assets transferred. In such circumstances, BS777 will ensure that the receiving party is committed to upholding data protection standards at least equivalent to those set out in this Privacy Policy.

Sharing With Your Consent: BS777 may share your data with third parties in other circumstances where you have given explicit and specific consent for such sharing. This consent may be withdrawn at any time.

BS777 continually invests in security infrastructure to ensure members' data is protected against ever-evolving threats. The technical and organisational security measures we have in place include:

• Data Encryption in Transit: All communications between your browser or app and BS777's servers are protected by TLS 1.3 with 256-bit SSL certificates. This ensures that no third party can read the data transmitted, even if they manage to intercept the network traffic.
• Encryption of Data at Rest: Sensitive data — including passwords (stored as hashes rather than plain text), financial information, and identity documents — is stored in encrypted form within BS777's databases.
• Layered Access Controls: A role-based access control (RBAC) system ensures that only staff with the required authorisation can access specific data categories. All access is logged for audit purposes.
• 24/7 Monitoring: BS777's security monitoring system operates around the clock to detect unauthorised access attempts, cyberattacks, and abnormal activity.
• Regular Security Testing: BS777 conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: BS777 supports two-factor authentication (2FA) as an additional layer of protection for member accounts.

Despite all these measures, no system can be guaranteed 100% secure. In the event of a security incident involving member data, BS777 is committed to:

• Identifying and containing incidents in the shortest possible time.
• Notifying affected members within 72 hours of detecting an incident, in line with industry best practices.
• Providing clear information on what occurred, which data was involved and the steps you can take to protect yourself.
• Cooperating fully with the relevant authorities where required.

The BS777 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

Essential Cookies (Required): These cookies are necessary for the core functionality of the platform and cannot be disabled. They include session cookies that maintain your logged-in status, security cookies that prevent CSRF attacks, and cookies that remember your language preference. Without these cookies, the BS777 platform will not function correctly.

Performance & Analytics Cookies: These cookies help us understand how members use the BS777 platform so we can improve it. The information collected is anonymised and used in aggregate form to identify technical issues, slow-loading pages, and navigation patterns that can be optimised.

Functionality Cookies: These cookies allow the platform to remember your preferences — such as preferred text size, display settings, and frequently played games — to deliver a more personalised experience each time you visit BS777.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the BS777 platform. For guidance on managing cookies in popular browsers such as Chrome, Safari, or Firefox, refer to the respective browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles adopted by BS777, you have several rights in relation to your personal data:

BS777 retains members' personal data for as long as necessary to fulfil the purpose for which it was collected, or to meet legal requirements, whichever is longer. The following are our data retention guidelines:

• Active account data: Retained for the duration of the active account plus 5 years after account closure, to meet Malaysia's financial audit and regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Security logs: Retained for 12 months for security incident investigation purposes if required.
• Support communication data: Retained for 3 years to allow historical reference in dispute resolution.
• Marketing data: Deleted within 30 days of marketing communication consent being withdrawn.

Once the retention period has expired and there is no legal requirement to continue holding the relevant data, BS777 will securely delete or anonymise it using methods appropriate to the sensitivity of the data.

In the case of a deletion request from a member, BS777 will delete all data that can be removed and clearly explain to the member which categories of data must be retained for legal compliance, along with the applicable retention periods.

If you have any questions, concerns or complaints regarding how BS777 handles your personal data, we encourage you to reach out to us directly. The BS777 team is committed to responding to all privacy enquiries seriously and within a reasonable timeframe.

You can reach us through the following channels:

• Live Chat: Available on the BS777 platform 24 hours a day, 7 days a week. The fastest way to get an immediate response.
• Email: support@bs777.link – for more detailed privacy enquiries or data-related requests. We aim to respond within 2 business days.

When reaching out to us regarding privacy matters, please clearly indicate that your enquiry relates to "Privacy Policy" or "Personal Data" so it can be promptly handled by the appropriate staff.

BS777 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technology. Any significant changes will be communicated to members via in-platform notifications or email at least 14 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy.