big77 Privacy Policy

1 Introduction

big77 ("big77", "we", "us", "our") is committed to protecting the privacy and personal data of all users who register and interact with the big77 platform accessible at https://big77.click. This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we process it, the parties with whom we may share it, and the rights you hold in respect of your personal data.

This Policy applies to all personal data collected through the big77 website, mobile interface, and any associated communication channels including live chat, email correspondence, and promotional interactions. It applies to all registered Users and visitors to the Platform, including players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across Malaysia.

By creating an account with big77 or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

3 Data Controller

big77 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, big77 is responsible for determining the purposes and means of processing your Personal Data, and for ensuring that processing is carried out lawfully, fairly, and transparently.

big77 operates under an international gaming licence. All data processing activities are conducted in accordance with the data protection requirements of the governing jurisdiction and, where applicable, in a manner consistent with the principles of internationally recognised data protection frameworks.

For data-related enquiries, requests, or complaints, please contact us using the details provided in Section 15 of this Policy.

4 Data We Collect

4.1 Identity & Registration Data

When you register an Account with big77, we collect:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify the mandatory minimum age of 21 years);
• Gender (where provided);
• Residential address, including city, state, and postcode;
• Malaysian mobile phone number;
• Email address;
• Username selected at registration.

4.2 Identity Verification (KYC) Data

To process withdrawals and comply with our anti-money laundering obligations, we collect:

• Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent);
• Proof of residential address (utility bill, bank statement, or equivalent, dated within three months);
• Selfie or live verification image where required by our KYC provider;
• Source of funds documentation where applicable.

4.3 Financial & Transaction Data

We collect records of all financial transactions including:

• Deposit and withdrawal history including amounts, dates, and payment method used;
• E-wallet identifiers (Touch 'n Go eWallet number, Boost account, GrabPay account) registered to your Account;
• Bank account details for FPX and DuitNow transfers (Maybank, CIMB, Public Bank, Hong Leong Bank);
• Cryptocurrency wallet addresses used for deposits or withdrawals;
• Currency conversion records where applicable.

4.4 Usage & Behavioural Data

We automatically collect data about your interaction with the Platform, including:

• IP address and approximate geolocation data;
• Device type, operating system, and browser information;
• Session timestamps and duration;
• Pages visited, games played, and betting history;
• Clickstream data and navigation patterns.

4.5 Communications Data

Where you contact our support team or respond to marketing communications, we collect records of those interactions, including live chat transcripts, email correspondence, and any information you voluntarily provide.

5 How We Use Your Data

big77 uses Personal Data for the following purposes:

6 Legal Bases for Processing

All processing of your Personal Data by big77 is conducted on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement with you — including processing deposits, verifying your identity for withdrawals, and providing access to the Platform.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, KYC obligations, and record-keeping requirements under our gaming licence.
• Legitimate Interests: Processing conducted in pursuance of big77's legitimate business interests, including fraud prevention, platform security, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for purposes such as direct marketing communications, where we have obtained your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Where processing is based on legitimate interests, we conduct a balancing test to ensure our interests do not unduly override your fundamental rights and freedoms. You may request information about any such balancing test by contacting us at the details in Section 15.

7 Sharing Your Data

big77 does not sell your Personal Data. We may share your data only in the following limited and controlled circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers to perform functions on our behalf, including KYC verification providers, payment processing partners (including e-wallet and bank payment gateways for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks), cloud hosting and infrastructure providers, fraud detection services, and customer support platform providers.

All Data Processors are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which they are engaged and require them to maintain appropriate security standards.

7.2 Regulatory & Legal Authorities

big77 may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other governmental authorities where required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of big77, its users, or third parties.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of big77's business, Personal Data may be transferred to the relevant successor entity as part of that transaction. Users will be notified of any such transfer and any material changes to data processing that would result from it.

7.4 Responsible Gambling Partners

Where a User has voluntarily self-excluded from the Platform and requested referral to an external support service, we may share necessary contact information with that service provider with your explicit consent.

8 Retention Periods

big77 retains Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our international gaming licence obligations. The following indicative retention schedules apply:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that makes re-identification impossible. Deletion requests from Users are processed subject to any overriding legal obligation to retain the data.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the Platform. They allow the Platform to recognise your device, remember your preferences, maintain your session, and collect usage analytics.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Platform functionality, including session management and security features. These cannot be disabled without affecting core Platform operation.
• Performance & Analytics Cookies: Used to collect anonymised data about how Users interact with the Platform, helping us identify and resolve performance issues and improve the user experience.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment method display, and remembered device for two-factor authentication purposes.
• Marketing Cookies: Used where you have consented to receive personalised promotional content. These cookies track your activity to enable relevant communications.

9.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the Platform. Marketing cookies may also be controlled through your Account communications preferences.

10 Your Rights

Subject to applicable law and any overriding legal obligations on big77, you hold the following rights in respect of your Personal Data. To exercise any of these rights, please contact us using the details in Section 15.

We will respond to all valid rights requests within 30 calendar days. In complex cases, this may be extended by a further 60 days with prior notification to you. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline the request, providing written reasons for any refusal.

11 International Data Transfers

As big77 operates under an international gaming licence, your Personal Data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, big77 implements appropriate safeguards to ensure your data receives a level of protection consistent with applicable data protection standards.

Safeguards may include contractual data transfer agreements incorporating standard contractual clauses, transfer to jurisdictions that maintain adequate data protection frameworks, or other mechanisms appropriate to the nature and risk of the transfer.

If you wish to obtain information about the specific safeguards in place for any international transfer of your Personal Data, please contact us at the details in Section 15.

12 Children's Privacy

The big77 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that an Account has been registered by a person under 21, we will immediately close the Account and take appropriate steps to delete all associated Personal Data, consistent with our obligations under our gaming licence and applicable law.

If you believe that a minor has registered an Account on the Platform, please contact our support team immediately at [email protected] so that we may investigate and take prompt action.

13 Security Measures

big77 implements a multi-layered security programme to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. Our current security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data in transit is encrypted using current TLS standards.
• AES-256 encryption at rest: All stored Personal Data is encrypted using Advanced Encryption Standard 256-bit keys.
• Role-based access controls: Access to Personal Data is restricted to staff who require it to perform their specific role. Access is logged, monitored, and regularly audited.
• Two-factor authentication: Available to all Users and mandatory for staff access to systems containing Personal Data.
• Regular penetration testing: The Platform and underlying infrastructure are subject to scheduled and ad-hoc security testing by independent specialists.
• Incident response procedures: Documented procedures for identifying, containing, and recovering from data security incidents, including breach notification protocols.

While big77 takes all reasonable steps to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. You are encouraged to use a strong, unique password and to enable two-factor authentication on your Account to maximise the security of your personal information.

14 Updates to This Policy

big77 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way we process your Personal Data or the rights available to you — we will notify you by email to your registered address and display a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

Non-material changes, such as clarifications of existing practices, corrections of typographical errors, or administrative updates, may be made without prior notice. The effective date at the top of this page will always reflect when the Policy was last updated.

Your continued use of the Platform after the effective date of any update constitutes your acknowledgement of the revised Policy. If you disagree with any update, you may request Account closure and withdrawal of your balance prior to the effective date of the change.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the big77 Data Privacy team through the following channels:

• Email: [email protected] (please include "Privacy Request" in the subject line)
• Live Chat: Available on-site, 24 hours a day, 7 days a week — including all Malaysian public holidays.

All data rights requests are handled by our designated privacy contact. We acknowledge receipt of all requests within 5 business days and provide a substantive response within 30 calendar days. For responsible gambling matters, please visit our Responsible Gambling page.