Privacy Policy BJ77 —
Your Data, Our Responsibility

01Types of Information We Collect

BJ77 collects several categories of personal data to ensure a secure, seamless and legally compliant platform experience. All data collection is carried out on the basis of your consent or applicable legal requirements.

1.1 Identity Data

When registering a bj77 account, you are required to provide information such as your full name as per your identification document, date of birth, gender, MyKad or passport number, and mobile phone number. This information is needed to verify your identity as part of the KYC (Know Your Customer) process required by law.

1.2 Contact Data

Your active email address and phone number are collected for account communication, two-factor authentication (2FA), transaction notifications and customer support. BJ77 will not use this information to contact you for marketing purposes without your prior consent.

1.3 Financial Data

To process deposits and withdrawals, bj77 retains records of the payment methods you use, including bank name, account type, and the last four digits of your card number (where applicable). BJ77 never stores your full card number, CVV or banking password. All payment processing is handled through PCI DSS-certified payment gateways.

1.4 Usage & Technical Data

The bj77 system automatically records technical information when you use the platform, including IP address, browser type and version, device operating system, URL paths visited, access time and date, and game session data. This data is used for security maintenance, fraud prevention, and platform improvement.

Data Category	Example Information	Basis of Collection
Identity Verification	Name, IC, date of birth	Legal requirement (KYC)
Contact	Email, phone number	Contract management
Financial	Payment methods, transaction records	Service implementation
Usage	IP address, game sessions	Legitimate interest & security
Cookies	Language preferences, login sessions	User consent

02How We Collect Personal Data

BJ77 collects your personal data through several transparent and controlled methods. We always strive to ensure this collection process is carried out in the least privacy-intrusive manner possible.

• Account Registration: Information you provide during the bj77 account registration process.
• KYC Verification: Documents you upload for identity verification purposes prior to your first withdrawal.
• Financial Transactions: Information obtained when you make a deposit or withdrawal via various payment methods.
• Platform Usage: Data collected automatically when you browse the bj77 website or use the app.
• Support Communications: Information you share when contacting the bj77 customer support team via live chat.
• Cookies & Tracking Technologies: Information collected through first-party cookies and tracking technologies that you have consented to.

03Purpose of Personal Data Use

BJ77 uses collected personal data solely for the purposes stated below. We will not process your data for any other purpose without first obtaining your fresh consent.

• Account Management: Creating, maintaining, and securing your bj77 account.
• Transaction Processing: Verifying, processing, and accurately recording all deposits and withdrawals.
• Legal Compliance: Fulfilling KYC, AML (Anti-Money Laundering) obligations and reporting requirements to the relevant authorities.
• Platform Security: Detecting and preventing fraud, money laundering, and other unauthorized activities.
• Customer Support: Responding to inquiries, resolving complaints, and improving bj77 service quality.
• Product Improvement: Analyzing usage patterns to improve the platform experience, game features, and new functionalities.
• Marketing Communications: Sending promotional information, bonuses, and exclusive offers — only to members who have given their consent.

04Third-Party Data Sharing

BJ77 understands the sensitivity of personal data and does not share your information except in the following limited and strictly controlled circumstances:

4.1 Trusted Service Providers

We work with selected third-party companies to help operate the platform, including payment gateway providers, licensed game software providers, cloud computing services, and analytics tools. All these providers are bound by strict data protection agreements and are only permitted to process your data in accordance with bj77's instructions.

4.2 Legal Requirements

BJ77 may be required to disclose your personal data to government authorities, law enforcement bodies or relevant tribunals when mandated by Malaysian law or a valid court order. In such cases, bj77 will only disclose the minimum information necessary.

4.3 Business Transfers

In the event of any merger, acquisition, or transfer of bj77 business assets, member personal data may be transferred to the successor entity. In such situations, you will be notified in advance and your rights under this Privacy Policy will continue to be fully protected.

BJ77 has never sold, rented or traded members' personal data to any party for commercial or third-party marketing purposes. This is bj77's absolute commitment to all its members.

05Data Retention Period

BJ77 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Our retention policy is as follows:

• Active Account Data: Retained for the duration of your active account on the bj77 platform.
• Financial Transaction Data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysian anti-money laundering legal requirements.
• KYC Records: Retained for a minimum of 6 years after account closure, in accordance with licensing compliance requirements.
• Technical & Log Data: Retained for 90 days as standard; security logs may be kept longer if an active investigation is ongoing.
• Inactive Account: Account data inactive for more than 24 months will undergo a review process and may be archived or deleted in accordance with bj77's internal procedures.

06Data Security Measures

BJ77 continuously invests in the latest information security infrastructure to ensure your personal data is always protected against cyber threats, unauthorised access and data breaches. The key security measures we implement include:

• Data Transmission Encryption: TLS 1.3 and 256-bit SSL protocols for all communications between your browser/app and bj77 servers.
• Stored Data Encryption: All sensitive data stored in our database is encrypted using AES-256.
• Two-Factor Authentication (2FA): An additional security layer for account login to prevent unauthorised access.
• 24/7 Security Monitoring: Our cybersecurity team monitors the bj77 system around the clock to detect any anomalies or threats.
• Regular Penetration Testing: Independent security audits and penetration testing are conducted regularly by third-party security experts.
• Tiered Access Control: A role-based access control (RBAC) system ensures bj77 staff can only access data relevant to their responsibilities.

07Your Rights Under PDPA

As a bj77 member who is a Malaysian citizen or resident, you have the following rights under the Personal Data Protection Act 2010 (PDPA). BJ77 is committed to fulfilling all these rights within the stipulated timeframe.