bpo777 Privacy Policy

1 Introduction

bpo777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users ("you", "the Player"). This Privacy Policy sets out in clear, formal terms what personal information we collect, why we collect it, how we use and store it, with whom we may share it, how long we retain it, and what rights you hold in relation to your data.

This Policy applies to all personal data collected through the bpo777 website, mobile interface, live chat system, customer support communications, payment processing interactions, and any other touchpoint through which you interact with us. It applies to players from across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations from which the platform is accessed.

bpo777 operates under international online gambling licensing. Our privacy practices are aligned with internationally recognised data protection standards, including principles derived from the General Data Protection Regulation (GDPR) framework, which we voluntarily adopt as a benchmark for responsible data governance regardless of a player's jurisdiction.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — Any information that can identify you, directly or indirectly, as a natural person. This includes your name, email address, phone number, national identity number, IP address, and payment account details.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" — bpo777, the entity that determines the purposes and means by which your personal data is processed.
• "Data Processor" — A third party engaged by bpo777 to process personal data on our behalf, such as payment service providers, fraud detection services, and cloud infrastructure providers.
• "Consent" — Freely given, specific, informed, and unambiguous agreement by you to the processing of your personal data for a stated purpose.
• "Cookies" — Small text files placed on your device by our platform to facilitate session management, analytics, and personalisation.
• "KYC" — Know Your Customer — the identity and age verification process conducted prior to withdrawal processing or as required by our licensing obligations.

3 Data We Collect

3.1 Data You Provide Directly

We collect the following categories of personal data that you provide to us voluntarily:

Category	Examples	When Collected
Identity Data	Full name, date of birth, national ID (MyKad), passport number	Registration & KYC verification
Contact Data	Email address, phone number, residential address	Registration & account updates
Financial Data	Bank account details, e-wallet identifiers (Maybank, CIMB, Touch 'n Go, Boost, GrabPay, DuitNow), transaction history	Deposits & withdrawals
Authentication Data	Username, hashed password, two-factor authentication data	Account creation & login
Support Communications	Live chat transcripts, email correspondence, complaint records	Customer support interactions

3.2 Data Collected Automatically

When you access the bpo777 platform, we automatically collect the following technical and behavioural data:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and connection type.
• Usage Data: Pages visited, games played, betting activity, session duration, click patterns, and feature interactions.
• Location Data: Approximate geographic location derived from your IP address for fraud prevention and regulatory compliance purposes. We do not collect precise GPS location.
• Cookie Data: Session identifiers, preference settings, and analytics data collected via cookies and similar tracking technologies. See Section 7 for full details.

4 How We Use Your Data

bpo777 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your player account, including processing deposits and withdrawals through supported Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank).
• Identity & Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our licensing obligations and AML procedures.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited activities on the platform.
• Platform Operation & Improvement: To monitor platform performance, diagnose technical issues, analyse usage patterns, and develop new features and improvements to the bpo777 experience.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance through live chat, email, and other support channels.
• Legal & Regulatory Compliance: To meet our obligations under applicable international gambling licensing requirements, anti-money laundering (AML) frameworks, and other regulatory mandates.
• Marketing Communications: With your explicit consent, to send you promotional offers, bonus notifications, and news about bpo777 products and services. You may opt out of marketing communications at any time.
• Responsible Gambling: To monitor for signs of problem gambling behaviour and to facilitate the delivery of responsible gambling tools including deposit limits, session timers, and self-exclusion where requested.

5 Legal Basis for Processing

In alignment with internationally recognised data protection standards, bpo777 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver the services you have registered for.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML reporting, and licensing conditions.
• Legitimate Interests: Processing carried out for bpo777's legitimate business interests, including fraud prevention, platform security, and improving service quality, where these interests are not overridden by your data protection rights.
• Consent: Processing for which you have provided explicit consent, primarily in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

We may share your personal data with the following categories of recipients:

• Payment Service Providers: Banks and e-wallet providers (including Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay) solely to the extent necessary to process your deposits and withdrawals.
• Game Software Providers: Third-party game providers integrated into the platform may receive session-level data necessary to facilitate gameplay. These providers are contractually bound to confidentiality and data minimisation obligations.
• Fraud & AML Detection Services: Specialist third-party services engaged for identity verification, fraud detection, and anti-money laundering screening. These processors act under strict data processing agreements.
• Regulatory & Licensing Authorities: Our international licensing authority and other regulatory bodies as required by our operating licence or by applicable law.
• Legal Authorities: Law enforcement agencies, courts, or other public authorities where disclosure is required by law, court order, or to protect the rights, property, or safety of bpo777, our players, or the public.
• Professional Advisers: Lawyers, auditors, and accountants acting as data processors and subject to confidentiality obligations, where reasonably necessary for business operations.

7 Cookies & Tracking Technologies

bpo777 uses cookies and similar tracking technologies (including web beacons and pixel tags) to operate and improve the platform. The categories of cookies we use are as follows:

Cookie Type	Purpose	Consent Required
Strictly Necessary	Maintain your session, authenticate your login, enable security features	No — essential for platform function
Functional	Remember your preferences (language, odds format, game layout)	Yes
Analytics	Understand how players navigate the platform to improve performance and usability	Yes
Marketing	Deliver relevant promotional content and measure campaign effectiveness	Yes

You may manage, restrict, or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the platform. Withdrawing consent for other cookie categories will not affect your ability to place bets or make transactions.

8 Data Retention

bpo777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory or licensing obligations. Our general retention guidelines are as follows:

• Active Account Data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements under our international licence.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship or the date of the last transaction, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years for audit, fraud investigation, and regulatory compliance purposes.
• Support Communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained until you withdraw consent or for three (3) years following your last interaction with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

9 International Data Transfers

As an internationally licensed platform, bpo777 may process and store your personal data in jurisdictions outside Malaysia. Where data is transferred internationally, we ensure that appropriate safeguards are in place, including contractual protections equivalent to or exceeding those provided under internationally recognised data protection standards (such as standard contractual clauses aligned with GDPR principles).

Malaysian players should note that Malaysia's Personal Data Protection Act 2010 (PDPA) includes provisions governing cross-border data transfers. bpo777 endeavours to comply with the spirit of these provisions. If you have questions about the safeguards applied to international transfers of your data, please contact us using the details in Section 15.

10 Your Rights

Subject to applicable law and certain limited exceptions (such as where processing is required for legal compliance), you hold the following rights in relation to your personal data held by bpo777: