Your privacy is not merely a legal obligation for bp77 — it is our moral commitment to every Malaysian member who trusts our platform. This document transparently explains how we collect, use, store, and protect your personal information.
Note: This Privacy Policy forms part of the agreement between you and BP77. By registering for or using the bp77.click platform, you agree to the data processing practices described in this document. Please read it carefully before using our services.
BP77 (bp77.click) is an online sports betting and casino gaming platform serving members in Malaysia. We recognise that in today's digital age, personal data is an extremely valuable and sensitive asset. This Privacy Policy has been developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out transparently how we handle your personal information.
At bp77, privacy is more than legal compliance — it is the foundation of the trust we have built with over 500,000 Malaysian members. Every data-related decision we make puts the interests and safety of our members first.
This Privacy Policy applies to:
BP77 has appointed a Data Protection Officer responsible for ensuring that all our data processing practices comply with PDPA 2010 and applicable international standards.
BP77 collects only the data genuinely necessary to provide you with a safe, legitimate, and high-quality betting experience. The following are the categories of data we collect:
| Data Category | Examples of Information | Collection Methods | Status |
|---|---|---|---|
| Personal Identity | Full name, MyKad number, date of birth, gender | Registration form | Required |
| Contact Information | Phone number, email address, residential address | Registration form | Required |
| Financial Information | Bank account numbers, e-wallet accounts, transaction history | Payment processing | Required |
| Usage Data | Betting history, games accessed, login timestamps | Automatic | Automatic |
| Technical Data | IP address, device type, web browser, operating system | Automatic | Automatic |
| Cookie Data | Language preferences, login sessions, analytics data | Browser cookies | Optional |
We never collect sensitive information such as passwords in plain text, full credit card details (only encrypted tokens are stored), or health information unless it is directly relevant to a responsible gaming programme at the member's own request.
Every use of your personal data by bp77 has a clear and lawful purpose. We will not use your data for unrelated purposes without obtaining your additional consent. The following are the primary purposes for which your data is used:
Important: BP77 will never sell, rent, or trade your personal data to any third party for their own marketing purposes. Your data is not a business commodity for us.
BP77 only shares members' personal data in very limited circumstances, and only with parties that have undergone rigorous security and data protection assessments. We never share your data arbitrarily. The categories of third parties that may receive your data are:
Every third party that receives bp77 member data is required to sign a strict data protection agreement and is only permitted to use that data for the specified purposes. Any breach by a third party will be acted upon immediately.
All third parties working with bp77 are bound by legally enforceable non-disclosure agreements (NDAs) and data processing agreements (DPAs). We conduct annual reviews of all our data processing partners.
BP77 invests seriously in security infrastructure to protect your personal data. The following are the layers of protection we employ:
All data transmitted between your device and bp77's servers is encrypted using industry-standard 256-bit SSL/TLS. This means any intercepted data cannot be read without the correct encryption key.
Bp77 members can and are encouraged to enable two-factor authentication on their accounts. This additional security layer ensures that only you can access your account, even if your password is compromised.
The bp77 security team monitors all system activity around the clock, 24 hours a day, 7 days a week. Our automated intrusion detection system will trigger an immediate alert should any suspicious activity be detected.
Members' personal data is stored in systems separate from operational data. Only staff with a legitimate business need who have undergone background checks are permitted to access member data.
Your data is automatically backed up daily to data centres in separate locations. bp77's disaster recovery plan ensures your data remains safe even in the event of a serious system failure.
While bp77 takes all reasonable precautions, no security system is 100% impenetrable. In the event of a data breach affecting your information, we will notify you within 72 hours, in line with industry best practices.
BP77 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the bp77 platform. For more information on how to manage cookies, please refer to your web browser's documentation.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, all of which bp77 fully respects:
You have the right to request and receive a copy of all personal data we hold about you within 21 working days from the date of your request.
You may request the correction of any personal data that is inaccurate, incomplete, or out of date. We will process correction requests within 14 business days.
You may opt out of having your data used for direct marketing purposes at any time by contacting us or through your account settings.
You may request the deletion of your personal data upon account closure, subject to the mandatory 7-year data retention obligation under Malaysian financial law.
You may request a copy of your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider of your choosing.
If you are dissatisfied with how bp77 handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia.
To exercise any of the above rights, please submit a written request to us at privacy@bp77.click by stating the right you wish to exercise along with your identity information for verification purposes.
The bp77 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.
Should we discover that we have inadvertently collected data from underage individuals, we will:
If you are a parent or guardian who believes your child has registered a bp77 account, please contact us immediately at support@bp77.click. We will address this with the highest priority.
BP77 retains members' personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.
| Data Type | Retention Period | Justification |
|---|---|---|
| Identity & active account data | Throughout the active membership period | Service operations |
| Financial transaction records | 7 years after the transaction | Financial legal requirements |
| Support communication logs | 3 years | Dispute Resolution |
| Identity verification data (KYC) | 5 years after account closure | Anti-money laundering compliance |
| Technical & security logs | 12 months | Security investigations |
| Marketing data (with consent) | Until consent is withdrawn | Member consent |
Once the designated retention period expires, personal data will be permanently deleted or fully anonymised so that it can no longer be linked to any specific individual.
If you have any questions, concerns, or complaints regarding bp77's Privacy Policy or how we handle your personal data, please contact us through the following channels:
BP77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, technology, or our business practices. Members will be notified of any material amendments via email or in-platform notification at least 14 days before the changes take effect.
The current version of this Privacy Policy is effective from 1 January 2026. We recommend checking this page periodically to stay informed about how we protect your personal data.
We don't just follow the rules — we go above and beyond to ensure every piece of personal information belonging to our Malaysian members is protected to the highest standard.
All of bp77's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010. We undergo annual compliance audits to ensure these standards are consistently upheld.
Your personal and financial data is protected with 256-bit SSL/TLS encryption — the same level of security used by leading Malaysian banking institutions such as Maybank and CIMB.
Only authorised personnel may access member data, and every instance of access is logged and monitored in real time. We follow the principle of least privilege — each staff member can only access the data necessary to perform their specific role.
Should any suspicious activity occur on your account — such as a login from a new device or an unusual withdrawal attempt — you will receive an immediate notification via SMS and email.
BP77 has never sold, and will never sell, members' personal data to advertisers or third-party data brokers. Our revenue comes from betting services — not from trading your information.
We are always ready to explain exactly what data we hold about you, why we need it, and how long it will be retained. Transparency is the foundation of our trust relationship with every bp77 member.
With robust data protection, secure payments via Touch 'n Go, GrabPay, and DuitNow, and a full commitment to member privacy — bp77 is the betting platform you can trust completely.
18+ only. Data protected under PDPA 2010. Contact: privacy@bp77.click