BMW77 takes your privacy and personal data protection very seriously. This document provides a transparent and detailed account of how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Six core principles governing how BMW77 handles your personal data
All data you submit to BMW77 – including personal information, login credentials, and financial transactions – is protected by 256-bit SSL encryption. This is the same level of security used by Malaysia's leading banks, such as Maybank and CIMB.
Malaysian Banking StandardsBMW77 has never and will never sell, rent, or commercialise your personal data to any third party for marketing or any other purpose. Your data belongs entirely to you – we are simply its responsible custodian.
Zero Data SellingAll of BMW77's data handling practices are designed and implemented in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). We adhere to all seven data protection principles set out in the Act, without exception.
PDPA 2010 CompliantBMW77 only collects data that is strictly necessary to provide the services you request. We do not collect more information than needed – this "data minimisation" principle is built into the core design of the BMW77 platform.
Data MinimisationAs a BMW77 member, you have the full right to access, correct, delete or export your personal data at any time. All requests will be processed within 14 business days in accordance with the requirements of PDPA 2010.
Full Right of AccessIn the event of any data security breach that may affect your personal information, BMW77 is committed to notifying you within 72 hours of becoming aware of the incident – sooner than the minimum legal requirement.
72-Hour NotificationThis Privacy Policy ("Policy") sets out in detail how BMW77, operating through the website bmw77.click ("BMW77", "we", "our platform") collects, uses, discloses, processes, and protects your personal data when you register, access, or use any of the services we offer.
This policy applies to all users of the BMW77 platform, including registered members, unregistered visitors, and any individuals who interact with us through official communication channels such as support email and live chat. We encourage you to read this document carefully, as it contains important information about your privacy rights as a BMW77 user in Malaysia.
This BMW77 Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy us. Together, these three documents form a comprehensive data protection framework for all BMW77 users.
BMW77 operates under the jurisdiction of Malaysian law. All data processing activities we carry out are in compliance with Personal Data Protection Act 2010 (PDPA 2010) as well as any supplementary regulations in force from time to time. By using the BMW77 platform, you consent to the collection and use of your personal data as described in this Policy.
BMW77 collects your personal data through several channels – including registration forms, identity verification processes, platform usage activity, and communications with our support team. Below are the categories of data we collect:
| Data Category | Specific Examples | Primary Purpose |
|---|---|---|
| Identification Data | Full name, MyKad/passport number, date of birth, gender | Identity verification & legal compliance |
| Contact Data | Malaysian phone number, email address, mailing address | Account communications & notifications |
| Financial Data | Bank account number, e-wallet phone number (TnG, GrabPay, Boost), transaction records | Deposit & withdrawal processing |
| Security Data | Password (stored in hashed form), security questions, login activity logs | Account Protection |
| Support Data | Live chat conversation records, support tickets, email correspondence | Issue resolution & service improvement |
When you use the BMW77 platform, our systems automatically record certain technical information needed to ensure the platform operates correctly and securely:
Important Note: BMW77 does not access, read or store the content of your private conversations on third-party applications such as WhatsApp or Telegram. We only collect data that you provide directly through the BMW77 platform or that is automatically generated through your use of our platform.
BMW77 uses the personal data we collect solely for legitimate, reasonable purposes directly related to providing online entertainment services to our members in Malaysia. We will never use your data for unrelated purposes without your prior consent.
BMW77 does not use your personal data to make automated decisions that carry legal consequences or a significant impact on you without human involvement. Any decision that could materially affect your account – such as a suspension or closure – is reviewed by qualified BMW77 staff before being carried out.
BMW77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain limited situations, BMW77 may need to share some of your data with the following parties:
BMW77 works with trusted third-party service providers to help us deliver our services. These providers are given access only to the data required for their specific tasks and are not permitted to use that data for any other purpose:
BMW77 may be required to disclose your personal data to Malaysian authorities where mandated by law, court order, or lawful directive from an enforcement agency. In such circumstances, BMW77 will endeavour to notify you in advance where permitted by law.
BMW77 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. Our commitment to data security goes beyond mere legal compliance – it is a core value that underpins every technical decision we make.
256-bit SSL for all data transmissions. Passwords are stored as irreversible bcrypt hashes.
BMW77 staff are only granted access to the data required for their specific roles. All access is logged and continuously monitored.
A round-the-clock threat detection system that identifies and responds to any security threats.
Data is automatically backed up every 24 hours to a separate, secure server location to ensure your data is never lost.
External security audits are conducted periodically by independent firms to identify and address vulnerabilities before they can be exploited.
All BMW77 staff undergo regular data protection training. The handling of personal data forms part of their employment agreement.
Shared Responsibility: While BMW77 implements comprehensive security measures, the safety of your account also depends on your own actions. Ensure your password is strong and unique, never share your login credentials with anyone, and make use of the two-factor authentication (2FA) feature provided by BMW77. BMW77 will never ask for your password through any communication channel.
BMW77 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, meet Malaysian legal obligations, and resolve any disputes that may arise. Our principle is "no longer than necessary" – we do not store your data indefinitely.
| Data Category | Retention Period | Justification |
|---|---|---|
| Active account data | Throughout the active account period + 5 years | PDPA audit & compliance requirements |
| Financial transaction records | 7 years from the transaction date | Companies Act requirements & Malaysian tax laws |
| Game session logs | 2 years from the session date | Game fairness audits & dispute resolution |
| Customer support records | 3 years from the date the case is closed | Service reference & improvement |
| Identity verification (KYC) data | 5 years after account closure | Anti-money laundering (AML) requirements |
| Non-essential cookie data | Maximum 12 months | Platform analytics & experience enhancement |
Once the retention period expires, BMW77 will securely delete or anonymise your data using industry-recognised methods to ensure it cannot be recovered or reused. You may request early deletion of your data (subject to any legal requirements that may prevent immediate deletion) through the channels specified in Section 8 of this document.
BMW77 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand platform usage patterns. Cookies are small text files stored on your device when you visit the BMW77 website.
You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the BMW77 platform and prevent you from logging in correctly.
As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), you are entitled to the following legally guaranteed rights regarding your personal data held by us:
To exercise any of the above rights, you may contact BMW77 through the following channels:
BMW77 is committed to processing and responding to all privacy rights requests within 14 business days upon receiving a complete and verifiable request. For complex cases, we may require up to 30 working days and will notify you if this is the case.
BMW77 may require you to verify your identity before processing any privacy rights request. This is an important security measure to ensure we do not disclose your data to unauthorised parties who may be impersonating you.
The BMW77 platform is an adult service designed exclusively for individuals who are of age 18 years and above. BMW77 strictly does not knowingly collect, process, or store personal data from individuals under the age of 18.
Should BMW77 discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge or consent – whether through age misrepresentation or any other means – we will take immediate steps to delete all such data and close the account in question without further notice.
If you believe a child has registered or is using the BMW77 platform, please contact us immediately at support@bmw77.click so that we may take appropriate action promptly.
BMW77 has appointed a Data Privacy Officer (DPO) responsible for ensuring full compliance with PDPA 2010 and all applicable data protection laws. If you have any questions, concerns, or complaints regarding this Privacy Policy or the way BMW77 handles your personal data, you may reach us through the following channels:
BMW77 aims to respond to all privacy enquiries within 5 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), reachable via the official website of the Ministry of Communications and Digital.
This Privacy Policy was last updated on 1 January 2026. BMW77 reserves the right to update this policy from time to time to reflect changes in law, industry practices, or platform operations. Material changes will be communicated to members via email notification or an in-platform notice on BMW77 before taking effect.
Related documents you should read: