Does Bagus77 sell my personal data to advertisers or third parties?

No. Bagus77 does not sell, rent, or disclose your personal data to third parties for marketing or advertising purposes. Your data is only shared with a limited set of parties required for platform operations — such as payment gateways to process your deposit and withdrawal transactions via Touch 'n Go, GrabPay, DuitNow, and others — and only the minimum necessary information is shared. Your data usage is strictly limited to the purposes stated in this Privacy Policy.

How do I request a copy of the personal data Bagus77 holds about me?

To request a copy of your personal data (Right of Access under PDPA), send an email to privacy@bagus77.top with the subject line "Data Access Request". Include your full name, Bagus77 account number, and a copy of your MyKad for identity verification. We will acknowledge receipt within 3 business days and provide a copy of your data within 30 days from the date your identity is verified. Data will be delivered in a readable format — typically a secure PDF — to your account's registered email address.

How long does Bagus77 retain my personal data after I close my account?

Data retention periods vary by data type. Registration information and KYC documents (MyKad) are retained for 7 years from the account closure date — a legal requirement under Malaysia's AMLA. Financial transaction records are also kept for 7 years for audit purposes. Game records are retained for 3 years. Support communication logs are kept for 2 years. Technical usage data is deleted or anonymised within 12 months. Once the applicable retention period expires, your data is permanently deleted or fully anonymised from our systems.

What happens to my data in the event of a security breach?

In the event of a data security incident affecting your personal information, Bagus77 is committed to notifying you within 72 hours of detecting the incident via email to your registered account address. The notification will explain: what type of data may have been exposed, the estimated timeframe of the incident, the steps Bagus77 has taken to contain and remediate the situation, and the steps you can take to protect yourself — such as changing your password or monitoring your financial accounts. We will also report material incidents to the relevant authorities as required under Malaysian law.

Can I request Bagus77 to delete all my personal data?

Yes, you may request the deletion of your personal data (Right to Erasure) by emailing privacy@bagus77.top. However, complete deletion is not always possible due to legal retention requirements. For example, financial transaction records must be retained for 7 years under Malaysia's AMLA legislation. In such cases, we will inform you of which data cannot be deleted and the reasons why, and will delete all other data not subject to legal retention requirements. Data that cannot be fully deleted will be anonymised to the greatest extent possible to dissociate it from your personal identity.

Is my payment information secure when making a deposit via Touch 'n Go or GrabPay?

Yes. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay, transactions are processed directly by the respective payment gateway using their own security infrastructure licensed by Bank Negara Malaysia. Bagus77 does not view or store your full e-wallet or bank account details — we only receive confirmation that a payment was successful and the amount received. This means your financial account details never pass directly through Bagus77's servers, providing an additional layer of protection for your financial security.

bagus77 | Privacy Policy and Player Data Protection

1

Introduction & Scope of the Privacy Policy

Bagus77 operates as a digital entertainment platform accessible at https://bagus77.top. This Privacy Policy explains how we collect, use, store, and protect the personal information of our platform's users — covering all services offered, including live casino, slots, Sports Betting, e-sports, and poker.

By registering an account or using any Bagus77 services, you agree to the collection and use of your information as described in this Privacy Policy. We encourage you to read this document carefully and to contact our support team if anything is unclear or requires further clarification.

Note: This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy Bagus77. Together, all three documents form the complete agreement between you and this platform.

Bagus77 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We take this responsibility seriously and ensure that all our data handling processes comply with the relevant legal requirements in force.

2

Personal Information We Collect

Bagus77 collects information from you in two main ways — information you provide directly when using the platform, and information collected automatically through your use of the platform.

Information You Provide Directly:

During Registration: Full name, email address, Malaysian phone number, date of birth, and a password of your own choosing.
During Identity Verification (KYC): Malaysian identity card number (MyKad), front and back copies of your MyKad, and in some cases proof of current address such as a utility bill or bank statement.
During Financial Transactions: Information related to the payment methods you use — Touch 'n Go eWallet, GrabPay, DuitNow, FPX via Maybank2u or CIMB Clicks, Boost, or ShopeePay. We do not store your full bank account numbers or sensitive card details — these are handled directly by certified payment gateways.
When Contacting Support: Records of communications via live chat, email, or WhatsApp, including conversation content and interaction timestamps.

Automatically Collected Information:

IP address and general location information (state/city) based on IP
Web browser type and device operating system
Login and logout timestamps
Pages visited and time spent in each section of the platform
A complete record of all bets placed, games played, deposits, and withdrawals.
Cookie data and session identifiers (see Section 5 for further details on cookies)

Important: Bagus77 does not request or store your full credit/debit card details, banking PIN, or e-banking passwords. If anyone claims to be from Bagus77 and asks for such sensitive information, please disregard it and report the incident to our support team immediately.

3

How We Use Your Information

The information we collect is used for specific, legitimate purposes that are limited to the operational needs of the Bagus77 platform. We do not use your data for any purpose beyond what is stated here without first obtaining your explicit consent.

Primary Purposes of Data Use:

Account Management: Creating and managing your account, verifying your identity at login, and processing account recovery when required.
Transaction Processing: Securely processing deposits and withdrawals, verifying identity for fund withdrawals, and resolving any transaction disputes.
Service Provision: Running all live casino games, slots, Sports Betting, e-sports, and poker; tracking VIP progress and calculating cashback; and displaying your game history and transactions.
Legal Compliance: Fulfilling the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLA) and other applicable Malaysian legislation.
Platform Security: Detecting and preventing fraud, bot usage, multiple account ownership, and other activities that violate Bagus77's Terms & Conditions.
Service Communications: Sending you important notifications about your account, transactions, policy changes, and relevant platform updates.
Promotional Communications (With Consent): Sending you information about bonuses, promotions, and special offers — only if you have consented to receive marketing communications during registration or through the communication preference settings in your account.
Platform Improvements: Analysing usage patterns in aggregate (not at the individual level) to improve platform performance, refine the user interface, and enhance the overall gaming experience.

Data Type	Purposes of Use	Retention Period
Registration Information	Account management, identity verification	Throughout the active account period + 7 years
KYC Documents (MyKad)	Age & identity verification, AMLA compliance	7 years from the date of verification
Transaction Records	Payment processing, financial audits	7 years from the date of transaction
Game Records	Dispute resolution, VIP calculations	3 years from the date of gameplay
Support Communication Logs	Service references, staff training	2 years from the date of interaction
Usage Data & Technical Logs	Security, fraud detection, platform improvement	Rolling 12 months

4

Sharing Information with Third Parties

Bagus77 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes without your explicit consent. However, there are limited situations where Bagus77 needs to share your information with certain parties to enable the platform to operate properly and comply with the law.

Parties That May Receive Your Information:

Payment Service Providers: Payment gateways that process your deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay receive only the information necessary to process each transaction. They are bound by confidentiality agreements and may not use your information for any other purpose.
Game Providers: Providers such as Evolution Gaming, Pragmatic Play Live, SA Gaming, and Dream Gaming receive the session identifiers required to link your game session to your Bagus77 account. The information shared is the minimum necessary and does not include your full personal details.
Technical Service Providers: Companies providing technical infrastructure services to Bagus77 — such as server hosting, platform analytics, and fraud detection systems — may process your data as part of their services. All such providers are subject to strict data processing agreements.
Law Enforcement Authorities: Bagus77 will disclose information to the police, courts, or other Malaysian authorities when required by a court order, warrant, or applicable Malaysian law — including investigations into financial fraud and anti-money laundering.

In all data-sharing situations described above, Bagus77 ensures that only the minimum information necessary for the relevant purpose is shared. We do not grant broader access to your data than is strictly required for each specific purpose.

Should Bagus77 undergo a merger, acquisition, or asset sale, user data may form part of the transferred assets. In such an event, you will be notified via email and in-platform notification before your data is transferred to the new entity, and that entity will be required to comply with this Privacy Policy.

5

Cookies, Tracking & Similar Technologies

The Bagus77 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and understand aggregate usage patterns.

Types of Cookies We Use:

Essential Cookies: Required for the platform to function at a basic level — managing your login session, remembering your language preference, and keeping your account secure. These cookies cannot be disabled, as the platform will not function properly without them.
Functional Cookies: Remembering your preferences such as display settings, favourite games, and frequently used betting limits to provide a more personalised and comfortable experience.
Analytics Cookies: Collecting information on how players use the platform — which pages are visited most, how much time is spent in each section, and where players typically exit. This data is used in aggregate form to improve the platform and does not identify you individually.
Performance Cookies: Helps detect and resolve technical issues, monitor platform performance, and ensure live casino streaming runs smoothly across Malaysia's various internet connection types.

Managing Your Cookies: You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to use the Bagus77 platform to its full extent. More information on how to manage cookies in popular browsers can be found in the settings of Chrome, Safari, Firefox, or Edge.

Bagus77 does not use third-party cookies for advertising or cross-site tracking purposes. The analytics cookies we use operate solely within the Bagus77 platform and do not transmit your data to external advertising networks.

6

Data Security & Protection Measures

Bagus77 implements multiple layers of technical and operational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures:

256-bit SSL/TLS Encryption: All communications between your device and Bagus77's servers are encrypted using 256-bit SSL/TLS — the same standard used by banking institutions in Malaysia.
Stored Data Encryption: Sensitive data stored in Bagus77's databases — including KYC information and financial records — is encrypted at rest using AES-256.
Two-Factor Authentication (2FA): 2FA is available on all Bagus77 accounts, adding an extra layer of protection beyond your password.
Firewall & Intrusion Detection Systems: Bagus77's infrastructure is protected by multi-layered firewalls and intrusion detection systems operating 24/7.
Regular Vulnerability Scanning: The Bagus77 security team conducts regular penetration testing and vulnerability scanning to identify and address potential weaknesses before they can be exploited.

Operational Security Measures:

Staff access to user data is strictly controlled on a need-to-know basis — staff may only access data that is required for their specific role
All staff access to sensitive data is logged and regularly audited by the internal security team
Staff undergo regular privacy and data security training
Non-disclosure agreements (NDAs) are enforced for all staff who handle user data

While Bagus77 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. In the event of a security incident affecting your data, we will notify you within 72 hours of detection and provide information on what occurred and the steps we are taking to address the situation.

Security Tips for You: Use a strong, unique password for your Bagus77 account (at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols). Enable 2FA via your account settings. Never share your login credentials with anyone, including anyone claiming to be Bagus77 staff — we will never ask for your password.

7

Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international privacy standards we adhere to, you have the following rights regarding your personal data held by Bagus77:

Right to Access

Request a copy of the personal data we hold about you. We will provide this within 30 days.

Right to Rectification

Requesting the correction of inaccurate or incomplete data about you that we hold.

Right to Erasure

Request the deletion of your personal data, subject to minimum statutory retention requirements.

Data Portability Rights

Requesting your personal data in a structured, machine-readable format for transfer to another platform.

Right to Restrict Processing

Request a restriction on the processing of your data under certain circumstances while a dispute is being resolved.

Right to Withdraw Consent

Withdrawing your consent for consent-based processing at any time, without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the rights above, please send a request to privacy@bagus77.top with the subject line "Data Rights Request", including your full name, Bagus77 account number, and a description of the right you wish to exercise. We will acknowledge receipt within 3 business days and fulfil the request within 30 days from the date your identity is verified.

Requests relating to the right to data erasure are subject to minimum legal retention requirements — for example, financial transaction records must be kept for 7 years under Malaysian law for audit and AMLA compliance purposes. In such cases, we will inform you that full deletion cannot be carried out, but the relevant data will be anonymised to the greatest extent possible.

8

Child & Minor Protection

Bagus77 is an entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we confirm or suspect that personal data from an underage individual has been collected through the registration process, we will immediately take the following steps:

Terminate the account immediately
Delete all personal data associated with the account from our systems
Return any outstanding financial balance to the bank card or e-wallet owner used for deposits, subject to the applicable verification procedures

If you believe a child or minor you know may have registered an account with Bagus77, please contact our support team immediately at support@bagus77.top. We treat such reports as a priority and will take appropriate action without delay.

We also encourage parents and guardians to make use of the parental control tools available on their devices and internet networks to prevent children from accessing online gambling platforms.

9

Privacy Policy Amendments

Bagus77 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The "Updated" date at the top of this document indicates when the most recent amendment was made.

For material amendments — those that significantly change how we collect or use your data, or that reduce your rights — we will provide advance notice via:

An in-platform notification upon your next login, with a summary of key changes
An email to your registered address at least 14 days before the amendment takes effect

For non-material amendments — such as grammatical corrections, clarification of existing wording, or formatting changes — we may make updates without specific notice, but the "Last Updated" date will be revised accordingly.

Your continued use of the Bagus77 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you have the right to close your account and request data deletion before the amendment takes effect.

10

Contact Us — Bagus77 Data Privacy Officer

Bagus77 has appointed a Data Privacy Officer responsible for ensuring the platform complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and our internal privacy policies.

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Bagus77, you may contact us via:

Privacy Email: privacy@bagus77.top — for all data privacy enquiries and user rights requests
General Support Email: support@bagus77.top — for general enquiries about your account and the platform
Live Chat: Available 24/7 directly within the Bagus77 platform after logging in
WhatsApp: Number available in the platform's support section after logging in

We are committed to responding to all privacy-related enquiries within 5 business days. For formal data rights requests (access, correction, deletion, and so on), the processing period is 30 calendar days from the date your identity is verified.

If you are dissatisfied with our response to any privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels established by the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.

Bagus77 Privacy Policy – Our Commitment to Protecting Your Personal Data Malaysian Players

Bagus77's Six Privacy Commitments

Bank-Grade Encryption

No Data Sales

Restricted & Controlled Access

Full Control Over Your Data

Responsible Data Storage

Immediate Breach Notification

Contents