Data Protection Updated: January 2026 PDPA Compliance

Bpo77 Privacy Policy —
Your Data, Our Responsibility

At bpo77, we understand that your personal data is a trust we guard with the utmost care. This document explains in detail how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026  |  Applicable to users in Malaysia

Six Pillars bpo77 Data Protection

The bpo77 Privacy Policy is built on six core principles that ensure your personal data remains secure and is used ethically at all times.

256-bit SSL Encryption

All data transmitted between your device and bpo77's servers is protected with 256-bit SSL encryption — the same highest-grade security standard used by leading banking institutions worldwide. None of your data moves without this layer of protection.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, with strict access controls and 24/7 monitoring. Only authorised personnel may access member data, and every access is logged for security audit purposes.

Malaysia PDPA Compliance

Bpo77 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all prescribed data protection principles, including the Security Principle, Data Integrity Principle, and Data Transfer Principle.

No Data Sales

Bpo77 has never and will never sell, rent, or lend your personal data to any third party for marketing or commercial purposes. Your data belongs to you — we use it solely for the purposes stated in this policy.

Full Control in Your Hands

You have the full right to access, correct, transfer, or request deletion of your personal data at any time. All requests are processed within 14 business days at no charge, through the bpo77 support team operating 24/7.

Data Breach Notification

In the event of any security incident involving your personal data, bpo77 is committed to notifying you within 72 hours via your registered email. We will also report the incident to the relevant authorities in accordance with legal requirements.

1. Introduction

Welcome to the bpo77 Privacy Policy. This document constitutes a binding agreement between you as a registered member or visitor of bpo77 and the operating company of the bpo77 platform, regarding the collection, processing, storage, and protection of your personal data.

Bpo77 is an online entertainment platform operating in Malaysia, offering a wide range of gaming options including slots, bingo, and sports betting to verified members aged 18 and above. In the course of providing these services, we collect and process various personal information that you should clearly understand.

This document is written in plain language because we believe every member deserves to know exactly what happens to their data — not just complex legal terms. If you have any questions after reading this document, our support team is always ready to help.

By registering and using the bpo77 platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

2. Personal Data We Collect

Bpo77 collects your personal data through three primary methods: information you provide directly during registration and platform use, data automatically generated while you use our services, and information we receive from legitimate third parties such as identity verification providers.

Data Category Example Information Collection Methods
Identity Full name, identification card number, date of birth, gender Account registration, KYC
Contact Phone number, email address, residential address Account registration
Financial Bank account number, bank name, e-wallet number Deposit & Withdrawal
Technical IP address, device type, browser, operating system Automatic (system logs)
Activity Game history, betting records, transactions Automatic (platform logs)
Communication Support chat records, emails, complaints Interact with our team
Important: bpo77 will never ask for your bank PIN, internet banking password, or OTP code. If anyone claims to be a bpo77 representative and requests such information, please report it to us immediately.

3. Purpose of Data Collection & Use

Every piece of data we collect has a clear and legitimate purpose. bpo77 does not collect data excessively or for undisclosed purposes. The following are the primary purposes for which your personal data is used:

  • Account management: Create, verify, and manage your member account, including the mandatory KYC process.
  • Transaction processing: Process deposits, withdrawals, and all financial activities on the platform securely and accurately.
  • Service provision: Allows you to access all games and features on the bpo77 platform with a personalized experience.
  • Fraud prevention: Detect and prevent fraudulent activity, money laundering, identity fraud, and any misuse of the platform.
  • Legal compliance: Fulfil our legal obligations under PDPA, AML/CFT regulations, and directives from relevant authorities.
  • Service communications: Send important notifications related to your account, transactions, security updates, and policy changes.
  • Platform improvement: Analyze usage patterns anonymously to improve user experience and platform performance.
  • Customer support: Enables our support team to assist you effectively when you contact us.

For marketing and promotional purposes, we will only send you communications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time.

4. Data Sharing & Disclosure

Bpo77 does not share, sell, or disclose your personal data to external parties except in the following circumstances, which are stated transparently:

  • Trusted service providers: We work with selected third parties that support platform operations, such as payment gateway providers, KYC verification platforms, and hosting services. All partners are bound by strict confidentiality agreements and may only use your data for the specified purposes.
  • Legal obligation: bpo77 will disclose your data to government authorities, law enforcement bodies, or courts when required by Malaysian law or a valid court order.
  • Protecting bpo77's interests: In cases of fraud, cybercrime, or serious violations of our terms of use, we reserve the right to share necessary information with authorities or legal firms for follow-up action.
  • Business transfer: In the event of a merger, acquisition, or asset transfer involving bpo77, member data may be transferred to the successor entity, subject to equivalent privacy protections.
Our guarantee: bpo77 has never and will never share your personal data with third-party advertisers, data brokers, or any commercial entity for marketing purposes without your explicit consent.

5. Cookies & Tracking Technologies

Bpo77 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security, and transaction verification. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymous data on how you use the platform to help us identify technical issues and improve performance.
  • Functional Cookies: Remember your preferences such as language, display settings, and login information (if you choose to be remembered) for a more convenient experience.
  • Analytics Cookies: Helps us understand aggregate usage patterns for platform improvement purposes. This data cannot be used to identify individuals.

You can manage or block cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the bpo77 platform.

6. Data Security Measures

The security of your personal data is bpo77's highest priority. We continuously invest in security infrastructure and procedures to ensure your data is always protected:

  • Data encryption in transit using TLS 1.3 and 256-bit SSL.
  • Data encryption at rest using AES-256.
  • Two-factor authentication (2FA) available for all member accounts.
  • Intrusion detection systems (IDS/IPS) operating in real time.
  • Regular security audits by independent third parties.
  • Security awareness training for all staff who handle member data.
  • Tested and verified incident response procedures.
While we take all reasonable precautions, no online security system can guarantee 100% protection. We encourage you to use a strong password, enable 2FA, and never share your login credentials with anyone.

7. Data Retention Period

Bpo77 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. The following are our general data retention guidelines:

  • Active account data: Retained for the duration your account is active, plus a 5-year period following account closure for legal compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and AML legal requirements.
  • KYC Documents: Retained for 5 years after the business relationship ends or as directed by the relevant authorities.
  • Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
  • Technical log data: Retained for 90 days for troubleshooting and security purposes.

When your data is no longer needed, it will be securely deleted using industry-recognised data destruction methods, ensuring it cannot be recovered.

8. Your Rights as a Data Subject

Under Malaysia's PDPA and bpo77's policy, you have the following rights regarding your personal data. All rights requests will be processed within 14 business days at no charge:

Right of Access

You have the right to request a copy of all personal data we hold about you in a readable format.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data in our records.

Right to Erasure

You may request the deletion of your data, subject to our legal obligations to retain certain records.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes or for certain purposes based on legitimate interest.

Right to Restriction of Processing

In certain circumstances, you may request that the processing of your data be temporarily restricted pending review or dispute.

To submit any request relating to your data rights, please contact the bpo77 support team via live chat within the platform. Please have your account number and identity verification document ready to expedite the process.

9. Children's Privacy

Bpo77 is a platform designed exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from minors. Our registration process is designed to prevent sign-ups by underage individuals, including age verification during KYC.

If we discover that personal data has been collected from anyone under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians concerned about their children's use of the platform are encouraged to contact us immediately.

10. Amendments to the Privacy Policy

Bpo77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make significant amendments, we will:

  • Updating the "Last updated" date at the top of this document.
  • Sending notifications to members via their registered email at least 14 days before changes take effect.
  • Displaying a clear notice on the platform's home page for a specified period.

Continued use of the bpo77 platform after changes take effect will be considered acceptance of the updated terms. We encourage you to review this page periodically to stay informed on how we protect your data.

11. How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bpo77 handles your personal data, please contact us through the following channels:

  • Live chat: Available 24 hours a day, 7 days a week within the bpo77 platform — the fastest way to get a response.
  • Email: [email protected] — for written enquiries that require an official record.

Our Data Protection Officer (DPO) team will review each inquiry and respond within 3–5 business days. For cases involving data rights requests, the response period is up to 14 business days.

bpo77 customer support operates 24 hours a day, 7 days a week including public holidays. We pride ourselves on an average response time of under 3 minutes via live chat.

Frequently Asked Questions About bpo77 Privacy

Yes, bpo77 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to all seven data protection principles set out in the PDPA: the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle. Our compliance is reviewed regularly by our internal legal team and external advisors.

Yes, you may request deletion of your personal data by contacting our support team. However, please be aware that certain categories of data are required by law to be retained for specified periods — such as financial transaction records (7 years) and KYC documents (5 years). Data beyond these legal obligations will be deleted within 30 days of the request being received.

bpo77 does not store full credit or debit card numbers in our systems. All payment transactions are processed through PCI DSS-certified payment gateways that handle card data security directly. We store only a token referencing your payment method, not the actual card number. Bank account data is stored with AES-256 encryption and is accessible only by authorized withdrawal systems.

No. bpo77 does not use your personal data to display advertisements on third-party platforms such as social media or advertising networks. Your data is used exclusively within the bpo77 ecosystem for the purposes stated in this policy. Any marketing communications from bpo77 are sent directly to you through our official channels only, and only if you have given your consent.

Contact the bpo77 support team immediately via live chat. Our security team will freeze your account instantly to prevent any unauthorized access, conduct an investigation into account activity, and help you safely recover access through an identity re-verification process. We also recommend changing the password of the email address linked to your bpo77 account.

All data rights requests — including access, correction, deletion, or data portability — will be processed within 14 business days from the date the request is received and verified. We do not charge any fee for these requests. If your request requires additional time due to case complexity, we will notify you within the first 14 days.
Data Secure SSL 256-bit Licensed & Trusted

Ready to Play with Full Confidence?

Your personal data is fully protected. Register a bpo77 account today and enjoy a safe, fair, and responsible online entertainment experience.

By registering, you agree to the Terms & Conditions and our Privacy Policy. For users aged 18 and above only.

Bahasa Melayu