Bpo777 Privacy Policy – Data Protection & Member Privacy Malaysia

This Privacy Policy is published by BPO777, an online Sports Betting and casino platform operating through the domain bpo777.biz. This document outlines our privacy practices and how we handle the personal data of all platform users — including registered members, website visitors and anyone who interacts with BPO777's services.

By using the bpo777 platform, registering an account or accessing any part of our website, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any aspect of this policy, we encourage you to discontinue use of the platform.

This policy applies to all forms of data collection by bpo777, including data collected through our website, registration forms, email communications, customer support systems, financial transactions, and general platform usage. It also covers information collected automatically through cookies and tracking technologies used within our platform.

Bpo777 collects your personal data across a range of situations as you interact with our platform. The following are the main categories of data we collect:

A. Data You Provide Directly

• Registration Information: Full name, date of birth, identification number (MyKad), mobile phone number, email address and account password.
• Financial Information: Your Touch 'n Go eWallet account number, GrabPay ID, DuitNow number, Boost or ShopeePay account number, and banking details for FPX purposes — including Maybank2u, CIMB Clicks or any other Malaysian bank you use for deposits and withdrawals.
• Verification Documents: A copy of your MyKad or passport, bank statement, or other supporting documents requested during the identity verification (KYC) process.
• Communications: The content of messages you send to the bpo777 customer support team via live chat or email, including conversation records.

B. Automatically Collected Data

• Platform Usage Data: Login and logout records, date and time of each session, games played, bets placed, total deposits and withdrawals, and complete transaction records.
• Technical Data: Your device's IP address, browser type, operating system, device model, screen resolution, and other technical diagnostic data.
• Cookie Data: Session information, language preferences, login status and usage analytics data collected via cookies and similar tracking technologies.
• Location Data: General location information derived from your IP address, used for security purposes and geographic eligibility verification.

BPO777 uses the personal data we collect solely for legitimate purposes as stated in this policy. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your bpo777 account, verifying your identity during registration and login, and processing account-related requests.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as managing withdrawals of your winnings to your registered payment method.
• Service Provision: Enabling you to access and use all features of the bpo777 platform, including Sports Betting, Live Casino, slots, and all other available betting products.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and any other misuse of the platform. This includes monitoring for suspicious transaction patterns and usage behavior.
• Customer Support: Handling enquiries, complaints and support requests you submit to the BPO777 support team via live chat or email.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal notices, security alerts, and updates to our terms of service.
• Marketing (with consent): Sending information about BPO777 promotions, bonuses and new offers where you have given consent to receive marketing communications. You may withdraw this consent at any time.
• Platform Improvement: Analysing aggregated, anonymised usage patterns to understand how Malaysian players use our platform and to make meaningful improvements.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including reporting and record-keeping requirements mandated by the relevant authorities.

BPO777 processes your personal data on the following legal bases, depending on the type of processing involved:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a bpo777 member — including transaction processing, account management and the provision of betting services.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, service improvement and risk management — where bpo777's legitimate interests do not override your rights and interests.
• Legal Compliance: Processing required under Malaysian law or by direction of the relevant authorities, including requirements related to anti-money laundering.
• Consent: For marketing activities and other optional data uses, we only process your data if you have given explicit consent. You have the right to withdraw this consent at any time without affecting your core services.

Bpo777 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations in which we may need to share your data with other parties:

• Malaysian Payment Providers: To process your deposit and withdrawal transactions, the necessary data is shared with the relevant payment service providers, such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and Malaysian banks that support FPX. This sharing is limited strictly to the information required to complete the transaction.
• Platform Service Providers: BPO777 uses trusted third-party services for platform operations, including casino game providers (Evolution Gaming, Pragmatic Play Live, PG Soft, Habanero), cloud infrastructure providers and analytics services. All such providers are bound by strict data confidentiality agreements.
• Supervisory Authority: BPO777 may disclose your personal data to Malaysian authorities or international regulatory bodies when required by law, court order, or in connection with investigations into fraud and financial crimes.
• Identity Verification: Where required, relevant information may be shared with approved third-party identity verification services for the purposes of Know Your Customer (KYC) compliance and fraud prevention.

Whenever data sharing occurs, bpo777 ensures that the receiving party has adequate data protection measures in place and that the use of such data is strictly limited to the specified purpose. We do not permit any third party to use your data for their own purposes unrelated to bpo777 services.

Bpo777 takes data security seriously. We employ multiple layers of technical and procedural safeguards to protect your personal data from unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL Encryption: All communications between your device and bpo777's servers are encrypted using TLS protocol with 256-bit key strength — the same standard used by Malaysian financial institutions.
• Storage Data Encryption: Sensitive data — including financial information and identification documents stored in bpo777's databases — is encrypted using robust encryption algorithms.
• Internal Access Controls: Access to members' personal data within the bpo777 organisation is strictly limited on a need-to-know basis — only employees who require access to perform their duties are permitted to do so, and all access is logged and monitored.
• Two-Factor Authentication: BPO777's internal management system, which stores member data, is protected with multi-factor authentication to prevent unauthorised access even in the event of a compromised password.
• 24/7 Security Monitoring: bpo777's IT security team continuously monitors our platform for any suspicious activity or attempted intrusions.
• Regular Security Audits: bpo777 conducts regular security audits and penetration testing to identify and address any vulnerabilities in our infrastructure.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. In the event of a data security breach affecting your personal data, bpo777 will notify you and the relevant authorities within the timeframe required by applicable law.

Bpo777 retains your personal data only for as long as necessary for the purposes outlined in this policy, or as required by applicable Malaysian law. The following are our data retention guidelines:

Once the retention period has lapsed, bpo777 will securely delete or anonymise your data. Anonymised data — from which all identifiers that could be used to identify you have been removed — may be retained for statistical analytics and service improvement purposes.

Bpo777 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain the security of your login session and understand how Malaysian players use our services. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the basic functionality of the BPO777 platform — such as maintaining your login status during an active session, temporarily storing your betting slip contents and ensuring session security. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Preference Cookies: These cookies store your preference settings — such as language, display theme, and other personal configurations — so you do not need to reconfigure them each time you log in.
• Analytics Cookies: These cookies help us understand how players use the BPO777 platform — which pages are visited most, how long a typical session lasts and where players encounter difficulties. This information is used to improve the overall user experience. Data is collected in aggregate form and does not identify you individually.
• Security Cookies: These cookies help us detect and prevent suspicious activity such as login attempts from unusual locations or usage patterns that may indicate potential fraud.

You can control and manage cookies through your internet browser settings. However, disabling certain cookies may affect the functionality of the bpo777 platform and your gaming experience. For more information on how to manage cookies across different browsers, please refer to your browser's help documentation.

As a bpo777 member, you have the following rights regarding your personal data. bpo777 is committed to respecting and facilitating the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data bpo777 holds about you at any time. We will provide this information in a readable format within 30 days of your request.
• Right to Rectification: If you find that any personal data held by bpo777 is inaccurate or out of date, you have the right to request a prompt correction. For certain details such as your name and phone number, you may update them directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): Under certain circumstances, you have the right to request that bpo777 erase your personal data. However, this right is subject to our legal obligations to retain certain records — for example, financial transaction records may need to be kept for periods required under Malaysian tax law.
• Right to Restrict Processing: In certain situations, you may request that bpo777 restrict how we process your data — for example, while you are disputing the accuracy of your data or while a deletion request is being reviewed.
• Right to Data Portability: You have the right to receive the personal data you have provided to bpo777 in a structured, machine-readable format, allowing you to transfer it to another service if you wish.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once you do so, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to that point.

To exercise any of the rights above, please contact the BPO777 privacy team via live chat on the platform or by email at support@bpo777.biz clearly stating the right you wish to exercise and the information needed to verify your identity. We will process your request within 30 days of receipt.

Bpo777 strictly prohibits the use of our platform by individuals under the age of 18. Our platform is not directed at children or minors, and we do not knowingly collect personal data from individuals in this age group.

All bpo777 registration processes are designed to verify that users are at least 18 years of age. Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will take the following steps immediately:

• Immediate account closure
• Delete all personal data associated with that individual
• Returning any remaining balance to the individual's lawful guardian

To parents and guardians: if you believe your child under the age of 18 has registered for or used the bpo777 platform, please contact us immediately via live chat or email at support@bpo777.biz. We encourage the use of parental control software to restrict access to online betting websites.

Bpo777 reserves the right to update or amend this Privacy Policy at any time when necessary — whether to reflect changes in our practices, meet new legal requirements, or improve transparency for our members.

When we make material changes to this privacy policy, we will notify members through the following channels:

• A prominent in-platform announcement displayed during your next login session
• Email notification to your registered email address
• Update the "Last Updated" date at the top of this page

For minor, non-material changes — such as grammatical corrections or clearer wording of existing practices — we may not send a dedicated notification but will always update the document date.

Continued use of the bpo777 platform after any changes to the privacy policy take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically. If you do not agree with the changes made, you may close your account and request deletion of your data.

If you have any questions, concerns or requests relating to this Privacy Policy or how BPO777 handles your personal data, we encourage you to reach out to us through the following channels:

• Live Chat: The fastest way to get an immediate response. Access live chat directly from within the bpo777 platform at any time — our team is available 24 hours a day, 7 days a week and can assist in Bahasa Malaysia.
• Email: For more detailed enquiries or written requests relating to your privacy rights, contact us at support@bpo777.biz. Please clearly state that your enquiry relates to "Privacy Policy" or "Personal Data Request" in the subject line of your email to help us process it more quickly.

BPO777 is committed to responding to all privacy-related enquiries within 5 business days for email, and promptly for live chat. For requests relating to the exercise of your privacy rights (such as data access or deletion requests), we will process these within 30 days of receiving your complete request.

We value the trust you place in bpo777 and take every privacy-related enquiry seriously. Our goal is to ensure you always feel safe and comfortable using the bpo777 platform, and transparency about our privacy practices is a fundamental part of that commitment.