bape77 Privacy Policy for Malaysian Players

1 Introduction and Identity of the Controller

"bape77", "we", "us" and "our" refer to the operator of the website at https://bape77.click. We act as the data controller in respect of personal information collected through the website and any associated account-related services. References to "you" and "your" mean any person who accesses the website or submits personal information to us.

We are not regulated by the Malaysian government, Bank Negara Malaysia or any Malaysian public authority. Our platform operates under an international licensing context. Malaysian users are individually responsible for understanding the laws that apply to them regarding online gambling and data submitted to international service providers.

2 Definitions

For the purposes of this policy:

• Personal Data: any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data and device identifiers.
• Processing: any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer or deletion.
• Data Subject: the individual whose personal data is being processed.
• Third Party: any entity other than bape77 and the data subject, including payment processors, identity verification providers and fraud prevention services.
• KYC: Know Your Customer — the identity and age verification process required before account functions or withdrawals may be completed.
• MYR: Malaysian Ringgit. Payment transactions may involve FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong.

3 Information We Collect

The categories of personal information bape77 may collect include:

We do not intentionally collect special-category data such as health, political or religious information. If such data is disclosed incidentally through a support message, it will not be retained or used for any purpose beyond resolving the immediate enquiry.

4 Legal Basis and Purposes of Processing

bape77 processes personal data only where a recognised legal basis applies. The primary bases and corresponding purposes are:

• Performance of a contract: to create and maintain your account, process MYR deposits and withdrawals via FPX, DuitNow or supported bank channels, administer bonuses and resolve disputes.
• Legal obligation: to meet applicable anti-money laundering, fraud prevention, age verification and record-keeping requirements that may apply under the operating jurisdiction.
• Legitimate interests: to detect fraud, protect account security, prevent prohibited conduct, maintain website functionality and improve service quality where those interests are not overridden by your rights.
• Consent: for optional communications such as promotional updates, where consent has been clearly given and can be withdrawn at any time.

5 Cookies and Tracking Technologies

bape77 may use cookies and similar technologies on the website. Cookies are small files stored on your device that help us maintain session continuity, detect fraud signals and understand aggregate usage patterns. Categories include:

• Functional cookies: remember user preferences such as language or display settings.
• Analytical cookies: provide aggregate statistics about pages visited and session duration to support website improvements. These do not identify you individually.
• Fraud-prevention cookies: used to identify unusual technical patterns associated with account misuse or automated access.

You may adjust your browser settings to refuse optional cookies, although doing so may affect certain website functions. A cookie preference notice may be displayed when you first access the website.

6 How Personal Data Is Shared

bape77 does not sell personal data. We may share it only in the following circumstances:

• Payment service providers: banks, FPX network participants, DuitNow operators, e-wallet services including Touch 'n Go, Boost and GrabPay, for the purpose of processing deposits and withdrawals.
• Identity verification providers: third-party KYC services that check identity documents and support age or address verification.
• Fraud prevention and risk management services: services that help identify account misuse, prohibited betting patterns or suspicious financial activity.
• Legal and regulatory authorities: disclosures required by applicable law, court order or formal regulatory request from a competent authority in the operating jurisdiction.
• Technology service providers: hosting, security, maintenance and support providers acting under contractual obligations that restrict independent use of any data shared.

Any third party receiving personal data is required to handle it in accordance with appropriate data protection standards and to use it solely for the defined purpose.

7 International Data Transfers

bape77 operates under an international licensing structure, and personal data may be processed or stored on servers located outside Malaysia. Where data is transferred internationally, we apply contractual or equivalent safeguards to ensure it receives a level of protection consistent with the purpose for which it was collected.

Malaysian users should be aware that data protection frameworks in other jurisdictions may differ from Malaysia's Personal Data Protection Act 2010 (PDPA). By submitting personal information, users acknowledge this international processing context.

8 Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, subject to legal, regulatory or contractual obligations that require longer retention. Indicative retention periods are:

• Account records and identity documents: for the duration of the account plus a minimum period following closure required for anti-fraud and legal compliance purposes.
• Transaction records: typically a minimum of five years from the transaction date, consistent with financial record-keeping standards.
• Support correspondence: retained for the period reasonably required to resolve disputes or respond to queries about past interactions.
• Technical and analytical data: retained in aggregate or anonymised form where possible once individual retention purposes are satisfied.

When retention periods expire, data is deleted or anonymised in manner that prevents reconstruction of individual identifiers.

9 Data Security

bape77 applies technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. These include encrypted HTTPS connections, access control restrictions, secure document upload channels and fraud monitoring.

Users are responsible for their own device and account security. You must not share your password, one-time verification code or session credentials with any other person. You must not submit identity documents through unverified channels, social media, or messaging services that are not associated with the official bape77 support address.

10 User Rights

Subject to applicable law and the circumstances of your request, you may have the right to:

• Access: request a copy of the personal data we hold about you and the purposes for which it is processed.
• Correction: ask us to correct inaccurate or incomplete personal information your account record.
• Deletion: request that personal data be deleted where it is no longer necessary and no legal obligation requires its retention.
• Restriction: ask us to pause processing while accuracy or legitimate interest grounds are reviewed.
• Objection: object to processing based on legitimate interests where your specific circumstances justify it.
• Withdrawal of consent: where processing relies on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Requests are handled through the verified support contact. We may need to verify your identity before acting on a request and may decline where legal obligations require retention or where exercising the right would affect the rights of others.

11 Children and Underage Users

bape77 gambling-related content is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from persons under 21. If we discover that personal data has been submitted by an underage individual, we will close the relevant account, delete the associated data and handle any financial implications in accordance with our Terms & Conditions.

Age is verified through identity document checks during the KYC process. Any person who believes that an underage user has created a bape77 account is encouraged to notify us through the support channel so that prompt action can be taken.

12 Responsible Gambling and Data

Where a player activates responsible gambling tools such as deposit limits, cooling-off periods or self-exclusion, bape77 retains a record of those elections for the duration required to honour the restriction. Self-exclusion records are retained for a period following the election to prevent circumvention through a new registration.

Information submitted in relation to a responsible gambling request is treated sensitively and is not used for marketing. For further guidance on available tools, please visit theResponsible Gambling page.

13 ThirdParty Links

The bape77 website contains no external links to third-party websites. This Privacy Policy applies solely to personal data collected and processed by bape77 through the website at https://bape77.click. We are not responsible for the data practices of any external service or platform that a user choses to access independently.

14 Changes to This Policy

bape77 may update this Privacy Policy to reflect changes in our data practices, legal obligations or the services we offer. When material changes are made, we will publish the revised version with an updated effective date and, where appropriate, highlight the key amendments through a notice on the website.

Continued use of bape77 after a revised policy is published constitutes acceptance of the updated terms. Users who disagree with any change should stop using the website and may request account closure by contacting support.

15 Contact and Data Enquiries

Questions, access requests, correction requests and data-related complaints should be directed to the bape77 support team using the verified contact channel. When submitting a data request, include your registered account name, the nature of your request and any relevant dates or transaction references.

Do not include your password, one-time security codes or full payment account numbers in any support communication. Website contact address: [email protected] — displayed as plain text only, this is not a clickable link.

General answers to common questions about accounts and payments are also available on the FAQ page.