BSS77 Privacy Policy – Personal Data Protection for Malaysian Members

01Personal Data We Collect

BSS77 collects members' personal data solely for the purposes stated in this policy. The following are the categories of data we may collect:

Data is collected through several channels: online registration forms, your interactions with the BSS77 platform, communications with our customer support team, and automatic transfers from the devices you use to access BSS77.

02How We Use Your Personal Data

BSS77 uses members' personal data for legitimate and limited purposes only. We will not use your data for any other purpose without obtaining your consent beforehand.

• Account Management: Processing registrations, verifying identity, managing logins and ensuring the security of your BSS77 account.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX, and processing withdrawals to your bank account.
• Service Communications: Sends transaction notifications, account updates, security alerts, and important platform-related information for BSS77.
• Fraud Prevention: Detecting and preventing suspicious activity, multiple account usage, and any attempts at fraud or money laundering.
• Legal Compliance: To fulfil applicable Malaysian regulatory and legal obligations, including financial reporting requirements.
• Service Improvements: Analysing aggregated usage patterns (without identifying individuals) to improve the BSS77 platform experience.
• Marketing Communications: Sending information on BSS77 promotions, bonuses, and special offers – only if you have opted in to receive them.

03Data Disclosure to Third Parties

BSS77 takes our responsibility to protect your personal data seriously. We do not sell, rent or share members' personal data with external parties for commercial purposes. However, there are limited situations where data sharing may occur:

• Payment Service Providers: Required information is shared with licensed payment providers such as DuitNow processors, Touch 'n Go eWallet, GrabPay, and local Malaysian banks solely for the purpose of processing your transactions.
• Game Providers: Minimum technical data required is shared with third-party game software providers to ensure game integrity.
• Legal Requirements: BSS77 may be required to disclose information to Malaysian authorities when mandated by a court order, applicable laws, or regulations.
• Financial Crime Prevention: In cases suspected to involve money laundering or fraud, BSS77 reserves the right to share relevant information with the appropriate authorities.

BSS77 does not share members' personal data with advertising companies, social media platforms, or any third-party marketing entities without your explicit consent.

04Security & Data Encryption

BSS77 continuously invests in the latest cybersecurity infrastructure to ensure that members' personal and financial data remains protected at all times. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All data communications between your browser or application and BSS77's servers are encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA via SMS OTP to their registered Malaysian mobile number for an added layer of security.
• Multi-Layer Firewall: BSS77 servers are protected by a firewall system and an intrusion detection system (IDS) that monitors incoming traffic 24 hours a day, 7 days a week.
• Regular Security Audits: BSS77 conducts regular penetration testing and security audits by independent cybersecurity firms.
• Encrypted Password Storage: Member passwords are never stored in plain text – we use strong hashing algorithms with a unique salt value for each account.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection at all times. In the event of a security incident affecting your data, BSS77 is committed to notifying you in a timely manner in accordance with Malaysian legal requirements.

05Cookies & Tracking Technologies

The BSS77 platform uses cookies and similar tracking technologies to enhance user experience and account security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functionality – including login authentication, session management, and security. These cookies cannot be disabled as the platform will not function properly without them.
• Performance Cookies: Collects anonymised information on how you use BSS77 (pages visited, time spent) to help us improve the platform.
• Functional Cookies: Remembering your preferences such as language (Bahasa Melayu), display settings and saved login details for your convenience.
• Security Cookies: Detecting unusual access patterns and helping prevent unauthorised access to your account.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the BSS77 platform. BSS77 cookies are not used to track your activity on other websites.

06Your Rights as a BSS77 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and BSS77's policy, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time.
• Right to Rectification: If your data is inaccurate or outdated, you may request a correction and we will update it within 3 business days.
• Right to Erasure: You may request deletion of your personal data upon account closure, subject to applicable legal data retention obligations.
• Right to Opt Out of Marketing: You may withdraw consent to receive marketing communications at any time without affecting your core BSS77 services.
• Data Portability Rights: You may request your data in a machine-readable format for transfer to another service provider.
• Right to Complaint: If you are dissatisfied with how BSS77 handles your data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

07Data Retention & Deletion

BSS77 retains members' personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and up to 7 years after account closure, in line with Malaysia's anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Communication Logs: Customer support communication records are retained for 2 years for quality control and dispute resolution purposes.
• Cookie Data: Session cookies expire automatically when you close your browser. Persistent cookies expire within 30 days to 1 year depending on the type.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered or accessed again. For accounts closed at a member's request, data not subject to legal requirements will be deleted within 90 days.

08Changes to This Privacy Policy

BSS77 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or service improvements. Here is how we handle such changes:

• Members will be notified of any material changes via email to your registered address at least 14 days before the changes take effect.
• The latest version of the Privacy Policy is always accessible on this page with a clearly displayed "Updated" date.
• For minor changes that do not affect your fundamental rights, a notice may be displayed on the BSS77 homepage only.
• Continued use of the BSS77 platform after any changes take effect will be considered acceptance of the updated policy.

09Contact Us About Privacy

If you have any questions, concerns, or complaints regarding BSS77's Privacy Policy or how we handle your personal data, our team is ready to assist.

• Live Chat: Reach us directly via the live chat button on the BSS77 platform – available 24 hours a day, 7 days a week in Bahasa Malaysia and English.
• Email: Send your privacy enquiries to support@bss77.net – we guarantee a response within 24 hours on business days.
• Official Complaints: For serious privacy concerns, you may lodge a formal complaint with the Department of Personal Data Protection Malaysia at www.pdp.gov.my.

BSS77 is committed to addressing every privacy concern with seriousness and transparency. We value your trust and will always strive to meet your expectations as a valued BSS77 Malaysia member.