Privacy Policy 77bd — Malaysia Member Data Protection

77bd ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy explains the types of information we collect, how we use it, and the steps we take to keep your data safe and protected at all times.

This policy applies to all registered members, website visitors, and 77bd mobile app users across Malaysia. When you register an account, access our platform, or interact with any of our services, you agree to the terms set out in this Privacy Policy.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards, ensuring your personal information is handled responsibly and transparently.

We collect only the information necessary to provide a safe, efficient, and tailored service to you as a 77bd member. Below is a summary of the data we collect:

How We Collect Data

• Directly: Information you provide during registration, KYC verification, or when contacting our support team.
• Automatically: Technical data collected when you use our website or app via cookies and tracking technologies.
• Third parties: Information from identity verification providers and payment processors we partner with to process your transactions.

All information we collect is used solely for legitimate and necessary purposes. We will not use your data for any other purpose without informing you in advance. The primary purposes of data use are as follows:

• Provide, manage, and maintain your member account in good standing.
• Process deposits, withdrawals, and all financial transactions securely and accurately.
• Conduct KYC (Know Your Customer) processes to comply with regulatory requirements.
• Detect, investigate, and prevent any fraudulent activity, money laundering, or platform abuse.
• Personalize your gaming experience and recommend relevant promotions or games.
• Send important account-related communications, such as transaction confirmations and security alerts.
• Comply with all legal and regulatory obligations applicable to our operations.
• Improve platform performance, identify technical bugs, and develop new features.

77bd does not sell, rent, or trade your personal data to any third party for marketing purposes. We only share your information in the following limited and controlled circumstances:

Trusted Service Providers

We work with carefully selected third-party service providers — including payment processors, identity verification providers, and cloud service providers — who help us operate the platform. All such providers are bound by strict confidentiality agreements and may only use your data for specified purposes.

Legal Requirements

We may be required to disclose your information to relevant authorities if mandated by law, court order, or directive from a legitimate regulatory body. In such situations, we will always notify you unless prohibited by law from doing so.

Business Transfer

In the event of any merger, acquisition, or transfer of company assets, member data may be transferred as part of that process. You will be notified in advance and a new privacy policy will be published if any material changes occur.

The security of your personal data is our top priority. 77bd continually invests in the latest security infrastructure to ensure your information is always protected against unauthorized access, data breaches, or misuse.

The security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocol, ensuring no third party can intercept your information.
• Two-Factor Authentication (2FA): An additional security layer for account login that protects you even if your password is compromised.
• 24/7 Monitoring: An automated threat detection system that continuously monitors all suspicious activity across accounts and the platform.
• Internal Access Controls: Only authorized personnel may access member personal data, and all access is logged and regularly audited.
• Secure Backup: Data is regularly backed up to secure servers with full encryption to prevent data loss.

The 77bd website and app use cookies and similar tracking technologies to enhance your experience, understand platform usage patterns, and maintain the security of your session.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Collect anonymized information about how you use the platform to help us identify areas for improvement.
• Functional Cookies: Store your preferences such as language, display settings, and login information for convenient reuse.
• Analytics Cookies: Help us understand traffic and usage patterns for continuous platform improvement.

You can manage your cookie settings through your internet browser at any time. However, disabling essential cookies may affect platform functionality. Continued use of the platform is considered consent to our use of cookies.

As a 77bd member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010. We respect and facilitate the exercise of these rights:

To exercise any of the above rights, please contact our support team via live chat or email. We will process your request within 30 working days. If a longer period is required, we will notify you accordingly.

77bd retains your personal data only for as long as necessary for the stated purposes or as required by law. The following are general guidelines for our data retention periods:

• Active account data: Retained for the duration your account is active and up to 5 years after account closure for regulatory compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• Support communication records: Retained for 3 years for reference and dispute resolution purposes.
• Technical log data: Retained for 90 days for security and fraud detection purposes.
• KYC documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with AMLA requirements.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be associated with you.

77bd services are exclusively for individuals aged 18 and above. We do not knowingly collect or store personal data from minors. Should we discover that a minor's data has been collected without our knowledge, we will take immediate action to delete the information and close the associated account.

If you suspect that someone under the age of 18 has registered an account on our platform, please notify our support team immediately so that appropriate action can be taken.

77bd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other relevant factors. The date of the last update will always be displayed at the top of this document.

For material amendments that significantly affect your privacy rights, we will provide appropriate notice via your registered email or in-platform notification at least 14 days before the amendment takes effect.

Your continued use of the 77bd platform after any amendments are published will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, the 77bd data protection team is here to help. You may reach us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly from our platform — the fastest way to get a response.
• Privacy Email: [email protected] (displayed as plain text only)
• Frequently Asked Questions: Visit our FAQ page for answers to frequently asked privacy questions.

We are committed to responding to all privacy-related inquiries within 72 working hours. For official requests such as data access or deletion, please clearly state the type of request so we can process it more efficiently.