Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how BP777 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the BP777 website at https://bp777.cam and any associated services ("the Platform").

BP777 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the minimum personal data necessary to deliver our services effectively and securely. We do not sell, rent, or trade personal data to third parties for commercial purposes.

By registering an account, making a deposit, or otherwise using the BP777 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the BP777 platform.

2. Definitions

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to a name, identification number, location data, online identifier, or factors specific to that person's physical, economic, or social identity.
• "Processing" — any operation performed on Personal Data, whether by automated or manual means, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. BP777 acts as the Data Controller in respect of all Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller pursuant to a documented instruction and a contractual relationship.
• "Consent" — any freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Cookies" — small text files stored on a User's device by a web browser at the direction of a website, used to maintain session state and collect analytical information.

3. Data Controller

BP777 operates as the Data Controller with respect to all Personal Data collected through the Platform. As Data Controller, BP777 is responsible for determining the purposes for which and the manner in which Personal Data is processed.

Where BP777 engages third-party service providers to process data on its behalf, such providers act as Data Processors and are bound by written agreements that require them to process data only on BP777's instructions and to implement appropriate technical and organisational security measures.

All data protection enquiries, access requests, and complaints should be directed to BP777's designated data protection contact as set out in Section 15 of this Policy.

4. Data We Collect

4.1 Registration and Identity Data

When you create a BP777 account, we collect the following information:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Username and encrypted password;
• Residential address;
• Contact telephone number (optional at registration; required at KYC stage).

4.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations, we may collect copies of:

• Government-issued photo identification (Malaysian MyKad, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or official correspondence dated within three months);
• Proof of payment method ownership (bank statement or e-wallet screenshot);
• Selfie or liveness verification image where required by our compliance procedures.

4.3 Financial and Transaction Data

BP777 collects data related to your financial interactions with the platform, including deposit amounts, withdrawal requests, payment method details (masked card numbers, bank account identifiers, e-wallet references), transaction timestamps, and currency information. Full payment card numbers are never stored on BP777 systems; all card processing is handled by PCI-DSS compliant third-party processors.

4.4 Gameplay and Betting Data

We maintain records of your gaming activity on the platform, including games played, wagers placed, outcomes, session durations, bonus claims, and betting history on sports markets including Liga Super Malaysia, EPL, and other events. This data is retained for regulatory compliance, responsible gambling monitoring, and dispute resolution purposes.

4.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data:

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Platform interaction logs (pages visited, features used, error reports);
• Cookie identifiers and session tokens.

4.6 Communications Data

Records of communications between you and BP777's support team — including live chat transcripts, email correspondence, and support ticket records — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

5. Purposes & Legal Basis for Processing

BP777 processes Personal Data only where a lawful basis exists to do so. The following table sets out the primary purposes of processing and the legal basis applicable to each:

6. Data Sharing & Disclosure

BP777 does not sell, rent, or otherwise commercially trade your Personal Data to third parties. We may share your data in the following limited circumstances:

6.1 Service Providers and Data Processors

We engage carefully selected third-party companies to support the operation of the Platform, including payment processing providers (handling transactions in MYR via DuitNow, FPX, and other Malaysian payment channels), KYC verification partners, cloud infrastructure providers, and customer support technology vendors. All such providers operate under binding data processing agreements that prohibit them from using your data for any purpose other than the specific service they are engaged to provide.

6.2 Game Studio Integrations

Certain technical identifiers (such as anonymised player session tokens) are shared with integrated game studios in order to deliver gameplay. No directly identifiable personal information is transmitted to game studios beyond what is technically necessary to authenticate your session.

6.3 Legal and Regulatory Obligations

BP777 may disclose Personal Data to competent regulatory authorities, law enforcement agencies, or legal advisers where required to do so by applicable law, a court order, or a binding regulatory direction. Where permitted, we will notify you of such disclosure in advance.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of BP777's assets, Personal Data may be transferred to the acquiring entity. You will be notified prior to any such transfer and given the opportunity to close your account if you do not consent to the transfer.

7. Data Retention

BP777 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of transaction.
• Communications data: Retained for a minimum of two years from the date of the communication.
• Technical and device data: Retained for up to twelve months for security and analytics purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with BP777's data disposal procedures.

8. Security Measures

BP777 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the Platform;
• Encryption of sensitive data at rest, including passwords (stored as salted cryptographic hashes) and financial identifiers;
• Role-based access controls ensuring that internal personnel can access Personal Data only to the extent required by their specific operational role;
• Regular security audits and penetration testing of Platform infrastructure;
• Multi-factor authentication available to all account holders and applied by default to all internal system access;
• Incident response procedures enabling rapid containment, investigation, and notification in the event of a data security incident.

Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for notifying BP777 immediately if you suspect that your account has been compromised.

9. Cookies & Tracking Technologies

BP777 uses cookies and similar tracking technologies to maintain session security, remember your preferences, and understand how the Platform is used in aggregate.

9.1 Essential Cookies

Essential cookies are required for the Platform to function correctly. They enable core functions such as user authentication, session management, and security token validation. These cookies cannot be disabled without disrupting Platform functionality.

9.2 Analytical Cookies

Analytical cookies collect aggregated, anonymised information about how users interact with the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This information is used solely to improve the Platform experience and is not linked to individual user identities.

9.3 Cookie Management

You may manage non-essential cookie preferences through your browser settings. Disabling cookies may affect certain Platform features. Most modern browsers provide options to block, delete, or receive notification of cookies via their settings menus. Please refer to your browser's documentation for specific instructions.

10. International Data Transfers

The Personal Data we collect may be processed on servers or by service providers located in jurisdictions outside of Malaysia. Where such transfers occur, BP777 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require receiving entities to apply data protection standards equivalent to those applied by BP777.

By using the BP777 platform, you acknowledge and consent to the potential transfer of your Personal Data to jurisdictions outside of Malaysia, subject to the safeguards described in this section.

11. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of your Personal Data held by BP777. To exercise any of these rights, please contact us using the details in Section 15.

We will respond to all verifiable data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

Note that certain rights are subject to limitations. For example, we cannot delete data that we are required to retain by applicable anti-money laundering legislation or that is necessary for the establishment, exercise, or defence of legal claims.

12. Minors & Age Restriction

BP777 is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21. Age verification is applied to all new account registrations and forms part of our mandatory KYC process.

If BP777 becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that a minor has registered an account on BP777, please contact us immediately using the details in Section 15.

13. Third-Party Services

The BP777 platform may incorporate services or features powered by third-party providers — for example, payment gateways processing transactions via Malaysian payment methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong, as well as cryptocurrency transaction processors for BTC, ETH, USDT, and BNB payments.

When you interact with these third-party services, you may be subject to their respective privacy policies in addition to this Policy. BP777 is not responsible for the privacy practices of third-party service providers operating independently of the Platform. We encourage you to review the privacy policies of any third-party services you interact with in connection with the Platform.

14. Policy Amendments

BP777 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via a prominent notice on the Platform and/or by email to the address associated with the account prior to the change taking effect.

The date on which this Policy was last updated is displayed at the top of the page. It is your responsibility to review this Policy periodically. Your continued use of the BP777 platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

15. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a complaint about how BP777 has handled your Personal Data, please contact our data protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform interface. Supported languages: English, Bahasa Melayu, Mandarin.
• Email: support@bp777.cam — responses within 2–4 hours during business hours; maximum 12 hours at any other time.

Formal data subject requests will be acknowledged within 5 Working Days of receipt and processed within 30 calendar days as described in Section 11 above. If you are unsatisfied with BP777's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

This Privacy Policy was last reviewed and updated on 1 January 2026. BP777 reserves the right to revise this document at any time. Reviewing this page periodically will ensure that you remain informed of any changes to how we handle your Personal Data.