bss777 Privacy Policy

1. Who We Are and How to Contact Us

bss777 is an online gaming platform operated at bss777.app under an international gaming authority licence. For the purposes of this Privacy Policy, bss777 is the data controller in respect of all personal data collected through the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bss777 handles your personal data, please contact the bss777 Data Protection contact via email at [email protected] (plain text — not a link). bss777 aims to respond to all data-related enquiries within 14 business days.

2. Personal Data We Collect

bss777 collects the following categories of personal data in the course of providing the Platform and its associated Services:

Category	Examples	When Collected
Identity Data	Full name, date of birth, nationality, gender	Registration and KYC verification
Contact Data	Email address, mobile number, residential address	Registration and KYC
Identity Document Data	MyKad number, passport number, document images, selfie with ID	KYC verification prior to first withdrawal
Financial Data	Payment method details (e-wallet ID, bank account suffix, card type), transaction amounts, deposit and withdrawal history	Payment processing and KYC
Gaming Activity Data	Game history, bet amounts, wager outcomes, session durations, product preferences	Automatically during Platform use
Technical Data	IP address, browser type and version, device type and OS, screen resolution, time zone	Automatically via server logs and browser signals
Usage Data	Pages visited, features accessed, referral source, session timestamps, click paths	Automatically via analytics tools
Communications Data	Live chat transcripts, email correspondence, support ticket content	When you contact bss777 support
Responsible Gaming Data	Deposit limit settings, cool-off elections, self-exclusion records	When you use responsible gaming tools

3. How bss777 Collects Your Data

3.1 Directly From You

The majority of your personal data is collected directly from you when you: register an account on bss777; complete KYC identity verification; make a deposit or request a withdrawal; contact bss777 customer support; opt into a promotion or bonus; or update your account settings.

3.2 Automatically During Your Use of the Platform

Technical and usage data is collected automatically when you access bss777.app. This includes data captured through server logs (IP address, browser agent, access timestamps), first-party cookies, and analytics tools that record navigation behaviour and session characteristics. This data is collected regardless of whether you are a registered Account holder or a non-authenticated visitor.

3.3 From Third Parties

bss777 may receive personal data about you from third parties in limited circumstances, including: identity verification service providers used to conduct KYC checks; payment processors and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, etc.) to confirm payment transactions; fraud detection and AML screening services that cross-reference your information against watchlists; and responsible gaming databases maintained by self-exclusion programmes where you have registered independently.

4. Purposes of Processing and Legal Bases

bss777 processes your personal data only for the purposes listed below, each underpinned by a lawful legal basis:

• Account creation and management — necessary for the performance of the contract between you and bss777 (account agreement and Terms & Conditions).
• Identity verification and KYC compliance — necessary for compliance with bss777's legal obligations under its gaming licence, including anti-money-laundering regulations and age verification requirements.
• Payment processing — necessary for the performance of the contract; also supports legal obligations around transaction record-keeping.
• Fraud prevention and AML screening — necessary for the legitimate interests of bss777 in protecting the integrity of the Platform and complying with applicable financial crime prevention obligations.
• Responsible gaming monitoring and intervention — necessary for compliance with bss777's licensing obligations and for the legitimate interest of protecting player welfare.
• Platform analytics and improvement — necessary for the legitimate interests of bss777 in understanding how the Platform is used and improving service quality. Where this involves non-essential tracking, bss777 relies on your consent.
• Marketing communications — based on your explicit consent, given at registration or subsequently via account settings. You may withdraw consent at any time.
• Customer support — necessary for the performance of the contract and for the legitimate interest of resolving disputes and maintaining service quality.
• Legal proceedings and regulatory compliance — necessary for compliance with legal obligations, including responding to court orders, regulatory audits, and law enforcement requests.

5. Cookies and Tracking Technologies

5.1 Types of Cookies Used

bss777 uses the following categories of cookies and tracking technologies on bss777.app:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, preferred payment method display, and responsible gaming reminder settings. Stored for the duration of your account session or up to 12 months.
• Analytics Cookies: Used to understand aggregate user behaviour — page popularity, navigation flows, error rates, and session lengths. Data is aggregated and does not identify you individually. Requires your consent.
• Marketing Cookies: Track your interaction with bss777 marketing materials to attribute registrations and deposits to specific promotional channels. bss777 does not share these identifiers with third-party advertising networks. Requires your consent.

5.2 Managing Cookies

You may manage your cookie preferences at any time via the cookie preference panel accessible from the footer of bss777.app. Withdrawing consent for non-essential cookies will not affect the functionality of your bss777 Account. You may also manage cookies through your browser settings, noting that disabling all cookies may affect the performance of the Platform.

6. Disclosure of Your Data to Third Parties

bss777 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. bss777 discloses personal data to third parties only in the following circumstances:

• Service Providers: Companies that provide services to bss777 under data processing agreements, including KYC verification providers, payment processors, fraud screening services, email delivery platforms, cloud infrastructure providers, and customer support software vendors. These parties are permitted to process your data only for the specific purpose for which they were engaged and under contractually enforceable data protection obligations.
• Gaming Licence Authority: bss777's licensing authority may require access to player account data, transaction records, or gaming activity data as part of regulatory audits or compliance reviews. bss777 is obligated to cooperate with such requests.
• Law Enforcement and Legal Process: Where bss777 is required by a valid court order, subpoena, or equivalent legal instrument to disclose personal data, it will do so to the extent legally required. bss777 will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material part of bss777's business, personal data may be transferred to the acquiring entity, subject to that entity assuming bss777's data protection obligations. You will be notified of any such transfer by email to your registered address with a minimum of 30 days' notice.

7. International Data Transfers

bss777 operates with cloud infrastructure and service providers that may store or process data in jurisdictions outside Malaysia. Where personal data is transferred internationally, bss777 ensures that appropriate safeguards are in place, including: contractual clauses that impose equivalent data protection standards on the recipient; transfers to jurisdictions recognised as providing adequate data protection; or transfers conducted under the terms of bss777's gaming authority licensing framework where such transfers are expressly contemplated.

Malaysian players may note that Malaysia's Personal Data Protection Act 2010 (PDPA) imposes restrictions on the transfer of personal data outside Malaysia to countries not providing an equivalent level of protection. bss777 takes these restrictions into account in its data transfer arrangements and maintains appropriate contractual safeguards with all overseas data processors.

8. Data Retention

bss777 retains personal data for the period necessary to fulfil the purpose for which it was collected, plus any additional period required by applicable law or bss777's gaming licence. The following indicative retention periods apply:

• Account registration and identity data: For the duration of the account plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements under bss777's gaming licence.
• Transaction and financial records: Minimum 5 years from the date of the transaction, in line with financial record-keeping obligations.
• KYC documentation: For the duration of the account plus 5 years, or longer if required by a specific regulatory investigation.
• Gaming activity logs: 2 years from the date of the game session, unless required for longer for dispute resolution or regulatory purposes.
• Customer support communications: 2 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or investigation.
• Marketing consent records: For the period of the consent plus 2 years following withdrawal of consent, to maintain evidence of consent management.

Following the expiry of applicable retention periods, personal data is permanently deleted or anonymised in a manner that prevents re-identification.

9. Security Measures

bss777 implements the following technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and bss777.app.
• AES-256 encryption for personally identifiable data stored at rest in bss777's database infrastructure.
• Role-based access controls restricting staff access to personal data to those with a legitimate operational need.
• Full access logging and anomaly detection on systems containing player personal data.
• Two-factor authentication enforced for all bss777 staff accounts with access to production systems containing personal data.
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure.
• Documented data breach response procedures, including notification to affected players and relevant regulatory authorities within the timeframes required by applicable law.

While bss777 takes all reasonable precautions to protect your data, no data transmission over the internet or storage system is completely secure. You are encouraged to use a strong, unique password for your bss777 account and to enable two-factor authentication.

10. Your Data Subject Rights

As a data subject whose personal data is processed by bss777, you have the following rights, which you may exercise at any time by contacting bss777 support:

• Right of Access: You may request a copy of the personal data bss777 holds about you, along with information about how it is processed and the legal basis for processing.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For basic account information (email, address), you may update this directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. bss777 will action this request subject to any overriding legal obligation to retain data (for example, AML retention requirements). Where data cannot be deleted due to a legal hold, bss777 will inform you of the basis for retention.
• Right to Restrict Processing: You may request that bss777 temporarily suspend processing of your data in circumstances where you contest its accuracy or object to its processing, pending resolution of the underlying issue.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to bss777, for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data where that processing is based on bss777's legitimate interests. bss777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Requests to exercise data subject rights should be submitted to [email protected]. bss777 will respond within 14 business days. Complex requests may require up to 30 business days, in which case bss777 will notify you of the extension and the reason for it.

11. Marketing Communications

bss777 sends promotional communications — including bonus offers, product updates, and event notifications — only to players who have consented to receive them. Consent is requested at the time of registration and may be updated at any time via your bss777 account notification settings.

You may opt out of all bss777 marketing communications at any time by: unchecking marketing preferences in your account settings; clicking the unsubscribe link in any bss777 marketing email; or contacting bss777 customer support and requesting removal from all marketing lists. Opting out of marketing will not affect transactional communications (account notifications, deposit confirmations, withdrawal updates, security alerts) which are necessary for the operation of your account.

12. Children and Minors

bss777 is strictly an adult gaming platform and is not directed at or intended for use by individuals under the age of 21. bss777 does not knowingly collect or process personal data from individuals under 21 years of age. Where bss777 discovers or has reason to believe that an Account has been registered by a person under 21, the Account will be immediately closed, all data collected during the minor's use of the Platform will be deleted as soon as legally permissible, and any net deposits will be returned to the originating payment method.

Parents and guardians who believe that a minor may have registered an account on bss777 should contact support immediately at [email protected]. bss777 will investigate and act on such reports as a matter of priority.

13. Changes to This Privacy Policy

bss777 may update this Privacy Policy from time to time to reflect changes in its data processing activities, applicable law, or regulatory requirements. Where changes are material — meaning they substantively affect your rights or the purposes for which bss777 processes your data — bss777 will provide at least 14 days' advance notice by email to your registered address and by posting a prominent notice on the Platform. Your continued use of bss777 following the effective date of any update constitutes acceptance of the revised Policy.

The version and effective date of the current Privacy Policy are displayed at the top of this page. Prior versions of this Policy are available on request from bss777 customer support.

14. Contact and Complaints

For any questions, requests, or concerns relating to this Privacy Policy or bss777's data handling practices, please contact:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 on the bss777 Platform

If you are not satisfied with bss777's response to a data-related complaint, you may have the right to escalate to the data protection supervisory authority in your jurisdiction, or to the dispute resolution mechanism prescribed by bss777's gaming licence authority. Malaysian players may also seek guidance from the Department of Personal Data Protection Malaysia (JPDP) regarding their rights under the Personal Data Protection Act 2010.