Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how bbs177 ("the Platform", "we", "us", "our"), accessible at bs177.cam, collects, uses, stores, and protects the personal data of individuals who visit, register on, or interact with the bs177 online casino and sports betting platform.

bs177 operates as an online gaming platform serving users in Malaysia, including players in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and across the country. We are committed to handling your personal information with transparency, care, and in accordance with applicable data protection principles and international standards.

By accessing the bs177 Platform or creating an account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

Data Controller

bbs177, operating the Platform at bs177.cam, acts as the Data Controller in respect of all personal data collected through and in connection with the Platform. As Data Controller, bbs177 determines the purposes for which your personal data is processed and is responsible for ensuring that processing is lawful, fair, and transparent.

For all data protection enquiries, requests to exercise your rights, or concerns about how your personal data is handled, please contact us through the channels listed in Section 16 of this Policy.

Data We Collect

bs177 collects the following categories of personal data, limited to what is necessary for the purposes described in this Policy:

How We Collect Data

We collect personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support;
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device information, and session logs gathered through server logs, cookies, and similar tracking technologies;
• Payment processors: Transaction confirmation data received from payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank when you make deposits or receive withdrawals;
• Third-party verification services: Identity data confirmed through authorised KYC and AML verification service providers where applicable;
• Public sources: In limited circumstances, information from publicly available sources where required for fraud prevention or AML screening.

Legal Bases for Processing

bs177 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — operating your account, processing deposits and withdrawals, and delivering the gaming services you have registered to use;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations under anti-money laundering frameworks;
• Legitimate interests: Processing carried out for bs177's legitimate business interests, including fraud prevention, platform security, improving our services, and ensuring network and information security, provided these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

bs177 uses the personal data we collect for the following purposes:

1. Account management: Creating, maintaining, and administering your bs177 account throughout the account lifecycle;
2. Transaction processing: Facilitating deposits and withdrawals in MYR via your chosen payment method (e-wallet, bank transfer, DuitNow, FPX, or cryptocurrency);
3. Identity verification: Conducting KYC checks to confirm your identity and age (21+ compliance) as required for responsible gambling and regulatory purposes;
4. Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, and other security incidents;
5. Customer support: Responding to enquiries, resolving disputes, and managing complaints through our 24/7 live support team;
6. Responsible gambling: Monitoring gaming patterns to identify potential problem gambling indicators, and administering self-exclusion or deposit limit requests;
7. Platform improvement: Analysing usage data to improve site functionality, game performance, and overall user experience;
8. Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.

Data Sharing & Disclosure

bs177 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients, strictly as necessary and under appropriate data protection safeguards:

• Payment service providers: To process deposits and withdrawals, we share relevant transaction data with providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank. These providers act as data processors under their own privacy frameworks;
• KYC and identity verification providers: Authorised third-party identity verification services that assist with document authentication and AML screening;
• Game software providers: Licensed game studios whose software is hosted on or integrated with the Platform may receive pseudonymised gameplay data necessary to operate their game services;
• IT and security service providers: Cloud hosting, cybersecurity, fraud detection, and technical support vendors who process data as authorised data processors on our behalf;
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory request — including financial intelligence units or law enforcement agencies in connection with AML/CTF obligations;
• Professional advisers: Lawyers, auditors, and consultants acting under appropriate confidentiality obligations where required for legal, compliance, or business purposes.

International Data Transfers

The bs177 Platform is operated under international gaming regulations, and some of our service providers and data processors may be located outside Malaysia. Where personal data is transferred internationally, bs177 ensures that appropriate safeguards are in place, including contractual clauses requiring recipients to maintain privacy and security standards equivalent to those applied under this Policy.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. We take reasonable steps to ensure that all international data transfers are conducted securely and that your privacy rights are maintained regardless of where processing occurs.

Data Retention

bbs177 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Account data: Retained for the duration of the active account relationship and for 5 years following account closure, to comply with AML record-keeping obligations;
• KYC documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable AML legislation;
• Transaction records: Financial transaction data retained for a minimum of 5 years in accordance with applicable financial regulations;
• Support communications: Customer support records retained for 3 years from the date of the interaction;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which data is suppressed (retained solely to record your opt-out preference).

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Cookies & Tracking Technologies

bbs177 uses cookies and similar tracking technologies to operate the Platform, ensure security, analyse usage, and (where consented) deliver relevant promotional content. A cookie is a small text file stored on your device when you visit the Platform.

The following categories of cookies are used on the bs177 Platform:

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impact your ability to use the Platform. For analytics cookies, you may opt out at any time by adjusting your preferences in your account settings or browser configuration.

Security Measures

bbs177 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and our servers is protected by256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive data fields, including financial data and KYC documents, are encrypted at rest using industry-standard encryption algorithms;
• Access controls: Access to personal data within bs177 is restricted on a need-to-know basis. Staff with access to sensitive data undergo background checks and data protection training;
• Two-factor authentication: 2FA is available and encouraged for all user accounts, and is mandatory for withdrawal processing;
• Intrusion detection: Automated systems monitor for unusual access patterns, failed login attempts, and other indicators of unauthorised access;
• Regular security reviews: Our security infrastructure and data handling practices are reviewed and updated on a quarterly basis.

User Rights

Subject to applicable legal limitations and our compliance obligations, you hold the following rights in respect of your personal data held by bbs177. To exercise any of these rights, please contact us through the channels in Section 16.

All rights requests are responded to within 14 business days. In complex cases, we may extend this period by a further 14 business days with prior notification. Requests may be subject to identity verification before we process them.

Children & Minors

The bs177 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration by minors is prohibited under our Terms & Conditions, and we employ active age verification measures to enforce this requirement.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds associated with an underage account will be handled in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered an account on bbs177, please contact us immediately at the details provided in Section 16.

Changes to This Policy

bs177 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Where changes are material, we will notify registered users via email or a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

Contact & Data Enquiries

For all privacy-related enquiries, requests to exercise your data rights, or concerns about how bs177 handles your personal information, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the bs177 Platform. This is the fastest channel for general account and data queries.
• Email: [email protected] — formal data subject requests, please include "Privacy Request" in the subject line along with your registered account email address.

We aim to acknowledge all privacy enquiries within 24 hours and resolve them within 14 business days. For complex data subject access requests, we may require up to 28 business days in total, with notification to you if an extension is necessary.