BMW77 Privacy Policy — Personal Data Protection for Malaysian Users

01Introduction & Scope of Privacy Policy

BMW77 ("we", "our platform") is committed to protecting the privacy and security of the personal data of all individuals who interact with our platform. This BMW77 Privacy Policy provides a thorough and comprehensive explanation of how we collect, process, store, share, and protect your personal data when you use the BMW77 website, mobile application, or any of the services we offer.

This document is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. As your personal data controller, BMW77 is committed to ensuring that the information you share with us is handled with the utmost integrity, security, and transparency.

This Privacy Policy covers all bmw77 channels and touchpoints, including: the main website, Android and iOS mobile apps, email communications, customer support live chat, promotions and marketing campaigns, and all financial transactions carried out through our platform.

02Types of Personal Data Collected

BMW77 collects various types of personal data depending on the nature of your interactions with our platform. Below is a detailed breakdown of the data categories we may collect:

Bmw77 does not collect sensitive data such as medical information, religious beliefs, political opinions, or biometric data, unless specifically required by applicable Malaysian law and with your explicit consent.

03How BMW77 Uses Your Data

Personal data collected by BMW77 is used solely for legitimate purposes necessary to the operation of our platform. We use your data for the following:

• Account management — to register, verify, and manage your BMW77 account, including the KYC process
• Transaction processing — processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your Malaysian bank account
• Customer support — responding to enquiries, resolving technical issues, and providing assistance via live chat, email, or phone
• Platform security — detecting and preventing fraud, money laundering, account misuse, and other unlawful activities
• Legal compliance — fulfilling reporting obligations to the relevant Malaysian authorities when required by law
• Service improvement — analysing usage patterns to improve platform functionality, games, and the overall user experience
• Marketing communications — sending promotional information, bonus offers, and the latest BMW77 news (subject to your consent, which may be withdrawn at any time)
• Responsible Gaming — monitoring gaming patterns to identify early signs of problem gambling and providing appropriate assistance

BMW77 will not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent. Any new data uses we may introduce in the future will be communicated to you via a Privacy Policy update notice.

04Data Sharing With Third Parties

BMW77 does not sell, rent, or disclose members' personal data to third parties for marketing or commercial purposes. However, under the following limited circumstances, we may need to share your data:

• Service providers — companies that support the operation of the BMW77 platform, such as payment processors (Touch 'n Go, GrabPay, DuitNow), game software providers, server hosting companies, and analytics services — all bound by strict confidentiality agreements
• Legal authorities — when required by court order, Malaysian law, or directives from authorised enforcement agencies such as Bank Negara Malaysia or the Securities Commission
• Fraud prevention — sharing only the minimum required information with identity verification and anti-fraud service providers to safeguard platform security and all members
• Business transfer — in the event of a merger, acquisition, or sale of BMW77's assets, member data may be transferred to the successor entity, with adequate notice given to members

In all data-sharing instances outlined above, bmw77 ensures that only the minimum necessary data is shared, and all recipients are bound by confidentiality and data protection obligations that meet bmw77's own standards.

05Data Security Measures

BMW77 continuously invests in the latest cybersecurity infrastructure to ensure that members' personal data is always protected against unauthorised access, loss, destruction, or accidental disclosure. Our key security measures include:

• 256-bit SSL Encryption — all data transmitted between your device and BMW77's servers is encrypted using industry-standard TLS/SSL protocols
• Hashed password storage — your account password is never stored in plain text; we use the latest cryptographic hashing algorithms
• Two-Factor Authentication (2FA) — an additional layer of security available to all BMW77 accounts and strongly encouraged for all members
• 24/7 Monitoring — bmw77's cybersecurity team continuously monitors platform activity to detect any threats or suspicious behaviour
• Regular security audits — BMW77 conducts periodic penetration testing and independent security audits to identify and address system vulnerabilities
• Internal access controls — only BMW77 employees who require access to specific data to perform their duties are permitted to do so, and all access is logged and monitored

While bmw77 takes all reasonable precautions, no security system can be guaranteed to be 100% secure. In the event of a data breach affecting your personal information, bmw77 will notify you and the relevant authorities within the timeframe stipulated by Malaysian law.

06Cookies, Tracking Technologies & Analytics

The bmw77 platform uses cookies and similar tracking technologies to enhance the user experience, remember your preferences, and understand how members use our platform. We use several types of cookies:

• Essential Cookies — required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality
• Performance Cookies — collecting information on how pages are used to help us improve the speed and performance of the bmw77 platform
• Functional Cookies — remembering your personal preferences such as favourite payment methods, display settings, and game choices to deliver a more personalised experience
• Analytics Cookies — helps us understand traffic patterns and platform usage in aggregate, anonymised form for continuous improvement purposes

You can manage or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the bmw77 platform. For more information on managing cookies, please refer to the help documentation of your web browser.

07Your Rights as a Data Subject

In accordance with Malaysia's PDPA and best practices in data protection, you as a BMW77 member have the following rights regarding your personal data:

To submit any request relating to the rights listed above, please contact the BMW77 Privacy team at privacy@bmw77.ws. We will process your request within 14 business days from the date of receipt. For more complex cases, this period may be extended by up to 30 days, with appropriate notice provided to you.

08Data Retention Period

Bmw77 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required under Malaysian law. The following are our general data retention guidelines:

• Active account data — retained for the duration your bmw77 account remains active, plus any additional period required by law
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian financial and tax legislation
• KYC records and identity verification — retained for 5 years after account closure in compliance with anti-money laundering (AML) requirements
• Customer support communication logs — retained for 3 years for quality control and historical reference purposes
• Analytics and usage data — anonymised aggregate data is retained indefinitely; identifiable usage data is deleted after 2 years

Once the applicable retention period has lapsed, BMW77 will securely delete or destroy your personal data using methods that meet industry security standards. Data that is no longer required will not be retained in our systems.

09Changes to This Privacy Policy

BMW77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new Malaysian legal requirements, or technological developments. Whenever we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date shown at the top of this document
• Sending email notifications to all registered BMW77 members at least 14 days before changes take effect
• A prominent notice will be displayed on the bmw77 platform during the first login session after any changes take effect
• Archiving previous versions of the Privacy Policy for members' reference when required

Continued use of the bmw77 platform after the updated Privacy Policy takes effect will be considered acceptance of the revised terms. If you do not agree with any of the changes, you have the right to close your bmw77 account and request deletion of your data.

10Contact the bmw77 Privacy Team

If you have any questions, concerns, or complaints regarding bmw77's Privacy Policy or how we handle your personal data, please do not hesitate to reach out to us through the following channels:

• Privacy Email: privacy@bmw77.ws
• General Support Email: support@bmw77.ws
• Live Chat: Available 24/7 within the BMW77 platform

The bmw77 Privacy Team is committed to responding to all privacy-related enquiries within 3 business days. For formal complaints or data subject rights requests, please email privacy@bmw77.ws and include your bmw77 account number to help us process your request more promptly.

You may also refer to BMW77 Terms & Conditions for more information on the platform's terms of use, or visit the Responsible Gaming us for guidance on safe and healthy gaming practices.