This Privacy Policy describes bss77's practices regarding the collection and use of personal data. By using the bss77 platform, you agree to the terms set out herein. Please read this document carefully — it is written in plain, straightforward language, not complex legal jargon.
1. Introduction
BSS77 values the privacy of every player who entrusts us with their data. This Privacy Policy has been established to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We operate on the fundamental principle that your personal data belongs to you — we only use it to enable us to deliver the best possible service to you.
This policy applies to all information you provide to bss77 through our website, mobile app, customer support, and all other interaction channels between you and our platform. It also covers information we collect automatically when you use our services.
2. Personal Data We Collect
Bss77 only collects data that is strictly necessary to provide a safe, fair, and enjoyable service. The categories of data we collect are as follows:
2.1 Data You Provide Directly
- Identity Information: Full name, date of birth, national identification number (MyKad) or passport.
- Contact Information: Email address, phone number, and residential address.
- Financial Information: Bank account number, bank name, and e-wallet information for deposit and withdrawal processing.
- Verification Documents: Copies of your MyKad, passport, or other KYC supporting documents that you have uploaded.
- Communication Information: Any messages or feedback you send to the bss77 support team.
2.2 Automatically Collected Data
- Technical Data: IP address, device type, operating system, browser type, and language settings.
- Usage Data: Pages visited, session duration, games played, and betting patterns (for responsible gaming monitoring purposes).
- Transaction Data: A complete record of all deposits, withdrawals, bets, and wins in your account.
- Location Data: General location data based on IP address for geographic region verification purposes.
Bss77 practises the principle of minimal data collection — we only collect data that is genuinely necessary for the stated purposes. We do not collect sensitive information such as health data, political views, or religious beliefs.
3. How We Use Your Personal Data
Every piece of data we collect has a clear and legitimate purpose. Here is how bss77 uses your personal information:
- Account Management: Creating, verifying, and maintaining your player account securely.
- Transaction Processing: Processing deposits, withdrawals, and all financial activity in your account accurately and promptly.
- KYC Verification: Verifying your identity to meet legal compliance requirements and prevent fraud.
- Customer Support: Handling your enquiries, complaints, and support requests effectively.
- Platform Security: Detecting and preventing fraudulent activity, money laundering, and security breaches.
- Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and offer appropriate assistance.
- Service Improvement: Analysing anonymised usage data to improve platform quality and user experience.
- Marketing Communications: Sending relevant promotional offers and updates — only if you have consented to receive them.
4. Basis for Data Processing
Bss77 processes your personal data on the following bases recognised under Malaysia's PDPA:
| Processing Basis | Usage Examples |
|---|---|
| Contract Fulfillment | Processing deposits and withdrawals, and managing your gaming account. |
| Legal Obligation | KYC verification, suspicious transaction reporting, PDPA compliance |
| Legitimate Interest | Fraud prevention, platform security, product enhancement |
| Consent | Sending marketing communications, use of non-essential cookies |
5. Sharing Data with Third Parties
BSS77 does not sell players' personal data to anyone. However, in certain limited situations, we may share your data with the following parties:
- Payment Service Provider: To process your deposits and withdrawals — they receive only the information necessary for the relevant transaction.
- Game Provider: Username and session information required to run third-party games within the bss77 platform.
- Statutory Authority: When required by Malaysian law or a valid court order.
- Technical Service Provider: Companies providing bss77's technology infrastructure, subject to strict confidentiality agreements.
- Regulatory Body: In the context of audits or investigations conducted by enforcement authorities with valid jurisdiction.
All third parties that receive bss77 player data are bound by data processing agreements that require them to protect such information to the same or higher standard as bss77.
6. Data Security
The security of your personal data is a top priority for bss77. We implement multiple layers of technical and organisational protection to keep your data safe at all times:
- 256-bit SSL/TLS encryption for all data in transit.
- AES-256 encryption for sensitive data stored in our databases.
- Role-based access control (RBAC) — only authorised staff may access player data.
- 24/7 security monitoring by the bss77 cybersecurity team.
- Regular security audits conducted by qualified independent third parties.
- A detailed incident response plan that is tested on a regular basis.
- Encrypted data backups to ensure service continuity.
While bss77 takes all reasonable steps to protect your data, account security also depends on your own actions. Please use a strong password, enable two-factor authentication (2FA), and never share your login credentials with anyone.
7. Data Retention Period
Bss77 does not retain your personal data for longer than necessary. The following are the general data retention guidelines we follow:
- Active Account Data: Stored for the duration your account is active and for the required period after account closure to meet legal obligations.
- Financial Transaction Records: Stored for a minimum of 7 years in accordance with Malaysian legal and accounting requirements.
- KYC Documents: Stored for 5 years after the date of account verification or closure, whichever is later.
- Support Communication Logs: Stored for 2 years from the date of last interaction.
- Session & Technical Log Data: Stored for 90 days for security and troubleshooting purposes.
Once the retention period has ended, data is securely deleted using methods that ensure it cannot be recovered.
8. Your Rights Under Malaysia's PDPA
As a bss77 player, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:
Right of Access
You have the right to obtain a copy of the personal data we hold about you within 21 business days from the date of your request.
Right to Rectification
If your data is inaccurate or incomplete, you may request that we correct it promptly.
Right to Erasure
You may request the deletion of your personal data, subject to any legal obligations that may require us to retain certain data.
Right to Withdraw Consent
You may withdraw your consent to consent-based data processing (such as marketing) at any time.
Right to Object
You have the right to object to the processing of your data for specific purposes, including direct marketing communications.
Right to Data Portability
You may request your data in a machine-readable format for use with other services where applicable.
To exercise any of the above rights, please contact our Privacy Officer by email at [email protected]. We will process your request within 21 business days.
9. Cookie Policy
The bss77 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website.
Required for core platform functions such as login sessions, security, and basic preferences. Cannot be disabled without affecting platform functionality.
Helps us understand how players use the platform for continuous improvement. Data is collected in anonymised form.
Saving your preferences such as language, display theme, and game settings for a more personalised experience.
You can manage your cookie settings through your browser at any time. Disabling certain cookies may affect your experience on the bss77 platform.
10. Cross-Border Data Transfers
As an online platform, some of bss77's technical service providers may operate outside Malaysia. In situations where your personal data needs to be transferred abroad, bss77 ensures that:
- Transfers are only made to countries or entities that provide an equivalent or higher level of data protection.
- Appropriate contractual agreements exist between bss77 and data recipients outside the country.
- All transfers comply with Malaysia's PDPA provisions and applicable laws in force.
11. Children's Privacy
The bss77 platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors. Should we discover that a child's data has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.
If you believe a minor has registered an account at bss77, please contact us immediately through our customer support channels so prompt action can be taken.
12. Amendments to the Privacy Policy
BSS77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the protections we offer. Any significant changes will be communicated to members via:
- In-platform or bss77 mobile app notification at least 30 days before taking effect.
- An email will be sent to your registered address for material changes that require renewed consent.
- Updates the "Last Updated" date at the top of this document.
Continued use of the bss77 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.
13. Contact Our Privacy Officer
Bss77 has appointed a Data Privacy Officer (DPO) responsible for ensuring PDPA compliance and addressing any privacy-related enquiries from players. For any questions, requests, or complaints regarding this Privacy Policy, please contact:
- BSS77 Data Privacy Officer
- Email: [email protected]
- Response Time: Within 3 business days for general enquiries; 21 business days for formal data rights requests.
You may also lodge a complaint with the Department of Personal Data Protection Malaysia if you are dissatisfied with how we handle your personal data. Further information about your rights is also available on the FAQ ours.