Privacy Policy BD77 – Our Commitment to Protecting the Personal Data of Every Malaysian Player

BD77 is an online Sports Betting and casino platform committed to protecting the privacy of every member who uses our services. We understand that your trust in us begins with how we handle the most personal of information — data about you.

This Privacy Policy applies to all services provided by BD77, including the bd77-jit.com website, the BD77 mobile app, and all official BD77 communication channels including email, live chat, Telegram, and WhatsApp. It also covers all game categories we offer — Sports Betting spanning the Malaysia Super League, EPL, and badminton, Live Casino, slots, virtual sports, e-sports, and digital casino.

BD77 acts as the "data controller" for the information you provide to us. This means we are responsible for determining the purpose and manner in which your data is processed, and we have both a legal and ethical obligation to do so in a way that respects your rights.

BD77 only collects data that is strictly necessary to deliver our services securely and to comply with applicable legal requirements. Below are the categories of data we collect:

BD77 does not collect data considered sensitive under the Malaysian PDPA unless with your explicit consent or as required by law. This includes information relating to ethnicity, religion, health, or criminal records.

BD77 uses your personal data only for legitimate, necessary, and proportionate purposes in relation to our service requirements. Below is a detailed explanation of why we need each category of data:

• Identity verification and KYC: Your full name and MyKad number are used to verify your identity in compliance with anti-money laundering (AML) requirements and to confirm you are 18 years of age or older. This is a legal obligation that cannot be waived.
• Transaction processing: Your bank account details and e-wallet information (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) are required to process your deposits and withdrawals accurately and securely.
• Platform operations and support: Contact information is used to send important account notifications, password resets, transaction confirmations, and customer support communications.
• Security and fraud detection: Technical data such as IP addresses and device information helps BD77 detect suspicious activity, unauthorised access, and patterns associated with fraud or money laundering.
• Legal compliance: In certain circumstances, BD77 may be required by law to retain or disclose data to competent authorities pursuant to a court order or lawful authority request.
• Service improvement: Usage activity data is analysed in aggregate (without identifying individuals) to understand usage patterns and improve the BD77 platform.
• Marketing communications (with consent): Where you have given your consent, we use your email or phone number to send you promotional information, bonuses, and the latest BD77 offers.

BD77 does not sell, rent, or share your personal data with third parties for their marketing purposes. Data sharing only occurs in the following limited and controlled circumstances:

• Payment service provider: Minimal transaction information necessary to be shared with Malaysian payment service providers such as Touch 'n Go, GrabPay, DuitNow, and banks supporting FPX in order to process your transactions. These providers are bound by strict confidentiality agreements with BD77.
• Game software provider: Non-personally identifiable betting transaction data may be shared with game providers such as Playtech, Evolution, Pragmatic Play, and others for settlement and game audit purposes.
• Competent authority: BD77 will disclose data to Malaysian authorities (police, courts, Bank Negara Malaysia) when required by applicable law or a valid court order. We will not disclose data beyond what is required by the relevant order or legislation.
• Independent auditors: Auditors appointed by BD77 for security certification or compliance purposes may have limited access to data required to conduct their audits, subject to binding confidentiality agreements.

BD77 continuously invests in security infrastructure to ensure your data is protected at every stage — in transit, at rest, and during processing. Key security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser or app and BD77's servers are encrypted using TLS 1.3 with 256-bit keys — the same standard used by Malaysia's leading banking institutions.
• Two-factor authentication (2FA): BD77 supports and encourages the use of two-factor authentication via SMS OTP for all sensitive actions, including log in, withdrawals, and changes to account information.
• Real-time threat monitoring: BD77's security monitoring system operates 24 hours a day to detect and respond to suspicious activity before it causes any harm.
• Secure password storage: Your password is stored in an irreversible hashed format using the bcrypt algorithm with a unique salt for each user. No one at BD77 is able to view your actual password.
• Internal access controls: "Least privilege" principle — BD77 staff are only granted access to the data strictly required for their specific role. All internal access is logged and audited on a regular basis.
• Regular security assessments: BD77 conducts regular penetration testing and vulnerability assessments with the involvement of independent security experts.

While BD77 takes all reasonable steps to protect your data, no security system can guarantee 100% protection against every cyber threat. You also play an important role in keeping your account secure — use a strong and unique password, do not share your login credentials, and always log out after using the BD77 platform on a shared device.

Under PDPA Malaysia 2010 and internationally recognised data protection principles, you have the following rights regarding your personal data held by BD77:

To submit any of the rights requests above, contact us by email at support@bd77-jit.com with the subject line "Privacy Request", stating the type of request and your BD77 account username. BD77 will respond to and process your request within thirty (30) business days. For complex cases or those involving a large volume of data, this period may be extended to sixty (60) days, with prior notice to you.

Like most online platforms, BD77 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions properly. The following are the types of cookies we use:

"Essential" and "Security" cookies cannot be disabled as they are critical to the platform's basic operation and security. "Functional" and "Analytics" cookies can be managed through your web browser settings. Please note that disabling certain cookies may affect how some parts of the BD77 platform function.

BD77 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. BD77's data retention policy is as follows:

• Active account data: Retained for as long as your account is active and for the period required after account closure to resolve any outstanding claims or disputes.
• Financial transaction records: Retained for seven (7) years from the date of the transaction, in line with Malaysian legal requirements for financial records and AML/CFT compliance.
• Support communication logs: Retained for two (2) years to allow reference to past support interactions should you contact us again regarding the same issue.
• Analytics data: Retained in aggregate, non-personally identifiable form for three (3) years for platform trend analysis purposes.
• KYC Documents: Retained for five (5) years after account closure or the date of the last transaction, whichever is later, in accordance with Malaysia's PDPA requirements and financial regulations.

The BD77 platform is strictly for individuals aged 18 and above. BD77 does not knowingly collect, store, or process the personal data of individuals under the age of 18. All BD77 registration processes require age verification, and we take reasonable technical and procedural steps to prevent registration by underage individuals.

In the course of platform operations, your data may be processed or stored on servers located outside Malaysia by service providers appointed by BD77. This may occur in the context of international-grade game software providers or cloud computing infrastructure utilised by BD77.

BD77 ensures that any cross-border data transfers are carried out with adequate safeguards in place, including:

• Data processing agreements requiring recipients to uphold data protection standards equal to or exceeding Malaysia's PDPA requirements
• Use of recognised transfer mechanisms such as standard contractual clauses or adequate data protection arrangements
• Regular assessments of the data protection practices of third-party providers who receive BD77 member data

Data transferred across borders is subject to the same level of protection as set out in this privacy policy, regardless of the physical location of the storage servers.

BD77 is committed to transparency in handling any security incidents involving members' personal data. While we take all reasonable measures to prevent data breaches, we have clear procedures in place to respond should one occur.

In the event of a data breach that may pose a risk to your rights and freedoms, BD77 will:

• Notifying you via your registered email within seventy-two (72) hours of becoming aware of the breach, or as soon as reasonably practicable
• Clearly describing the type of data affected, the estimated number of individuals impacted, and the steps BD77 has taken and is taking in response
• Providing contact details so you can obtain further information or submit enquiries related to the incident
• Notifying the Personal Data Protection Commissioner of Malaysia where required under the PDPA

For any questions, concerns, or requests regarding this Privacy Policy or how BD77 handles your personal data, please contact the BD77 Privacy Officer through the following channels:

• Email: support@bd77-jit.com (subject: "Privacy Request")
• Live Chat: Available 24 hours via the chat icon on the BD77 platform
• Response time: BD77 is committed to responding to all privacy enquiries within three (3) business days

BD77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, technologies used, or evolving legal requirements. Any material amendments will be communicated to you via your registered email or an in-platform notification at least seven (7) days before they take effect.

If you believe BD77 has violated your privacy rights and are not satisfied with how we have handled your complaint, you are entitled to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.