Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by Billion77 ("we", "us", "our"), the operator of the online casino and sports betting platform accessible at billion77.cam. This Policy describes how Billion77 collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User") who access or use our Platform.

Billion77 serves players across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We recognise that the handling of personal data is a matter of serious trust, and we are committed to processing your information responsibly, transparently, and in accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable international standards.

By registering an account, accessing the Platform, or submitting personal information to Billion77 in any form, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Personal Data We Collect

Billion77 collects personal data that is necessary to provide you with a secure, compliant, and fully functional gaming experience. The categories of personal data we collect are as follows:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Malaysian NRIC/MyKad number, passport number, or driver's licence number).
• Contact Data: Email address, mobile phone number, and residential address (including city, postcode, and state — e.g., Kuala Lumpur, Selangor, Penang).
• Account Data: Username, encrypted password, account registration date, account status, login history, and session metadata.
• Financial Data: Payment method details (e.g., Touch 'n Go eWallet account references, DuitNow proxy identifiers, bank account information for FPX transfers, or cryptocurrency wallet addresses); transaction history; deposit and withdrawal records denominated in MYR or cryptocurrency equivalents.
• KYC Documentation: Scanned or photographed copies of identity documents, proof of address documents, and selfie verification images submitted during the KYC process.
• Technical Data: IP address, device type and model, operating system, browser type and version, time zone, and connection data.
• Usage Data: Pages visited, game sessions played (including game type, duration, and stakes), betting activity, and navigation patterns within the Platform.
• Communications Data: Content of messages sent to our support team via live chat, email, or other channels; complaint and dispute records.
• Responsible Gambling Data: Self-imposed deposit limits, cooling-off period activations, self-exclusion requests, and responsible gambling assessment responses.

How We Collect Your Data

Billion77 collects your personal data through the following mechanisms:

• Direct Provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotional surveys.
• Automated Technologies: Data collected automatically as you interact with the Platform, including through cookies, session tokens, web beacons, and server-side logging systems that capture technical and usage data.
• Payment Service Providers: Transaction confirmation and fraud-screening data shared with us by payment processors including DuitNow, FPX, and e-wallet providers such as Touch 'n Go eWallet and Boost, in connection with deposit and withdrawal processing.
• KYC Verification Partners: Identity verification results and risk-scoring data returned by our third-party KYC service providers following document review.
• Analytics Providers: Aggregated behavioural and technical data collected by analytics services operating within the Platform to assist with performance monitoring and service improvement.

Data Processing & Purpose

Billion77 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process your data are set out in the table below:

Legal Basis for Processing

Billion77 processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform the contract we hold with you as a registered User — including account management, gameplay facilitation, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, tax reporting, and any regulatory direction from competent authorities.
• Consent: Where you have provided explicit, informed consent for a specific processing activity — such as receiving promotional communications or subscribing to newsletters. You may withdraw consent at any time by contacting our support team.
• Legitimate Interests: Processing carried out in furtherance of Billion77's legitimate business interests, including fraud prevention, platform security, analytics, and responsible gambling monitoring — provided such interests are not overridden by your fundamental rights and freedoms.

Data Sharing & Disclosure

Billion77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with third parties only in the following limited circumstances:

• Payment Service Providers: Financial data is shared with payment processors (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and cryptocurrency exchange providers) for the sole purpose of processing your deposit and withdrawal transactions.
• KYC & Identity Verification Partners: Identity Data and KYC Documentation are shared with our authorised identity verification service providers to fulfil our regulatory compliance obligations.
• Game Software Providers: Certain gameplay-related data may be shared with our licensed game providers to facilitate game delivery, fairness verification, and technical support.
• Regulatory Authorities: Where required by law, court order, or regulatory direction, Billion77 will disclose personal data to competent governmental or regulatory authorities. We will endeavour to inform you of such disclosure where legally permissible.
• Fraud Prevention Services: Anonymised or pseudonymised risk indicators may be shared with fraud prevention networks to protect the Platform and its users from financial crime.
• Professional Advisers: Personal data may be accessed by Billion77's legal, audit, or financial advisers on a strictly confidential, need-to-know basis.

All third-party processors engaged by Billion77 are bound by contractual data processing agreements that require them to process personal data only in accordance with Billion77's instructions and applicable data protection law.

Cookies & Tracking Technologies

The Billion77 Platform uses cookies and similar tracking technologies to deliver core functionality, maintain session continuity, analyse usage patterns, and personalise your experience. The categories of cookies deployed are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to operate. They maintain your login session, remember your preferences, and ensure secure navigation. You cannot opt out of these cookies while using the Platform.
• Functional Cookies: These cookies remember your language preferences, display settings, and last-used game categories to provide a more personalised experience. They do not track cross-site behaviour.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve Platform performance.
• Fraud & Security Cookies: Short-lived session tokens used to detect anomalous login patterns, protect against cross-site request forgery (CSRF), and flag suspicious account activity.

Data Retention

Billion77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce contractual rights.

• Account Data: Retained for the duration of your account and for a minimum period of five (5) years following account closure, in accordance with AML and gaming regulatory record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the last relevant transaction, as required by AML legislation.
• Financial & Transaction Records: Retained for a minimum of seven (7) years for accounting, tax, and regulatory audit purposes.
• Communications Data: Support interaction records are retained for a period of two (2) years, unless the record relates to an open dispute, complaint, or legal proceeding.
• Technical & Usage Data: Retained in anonymised or aggregated form for up to twenty-four (24) months for analytics and platform improvement purposes. Identifiable technical data is deleted or anonymised within twelve (12) months of collection.

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual.

Data Security

Billion77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-Bit TLS/SSL Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS), the same standard employed by major financial institutions.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form using AES-256 encryption at rest.
• Access Controls: Access to personal data is restricted to authorised Billion77 personnel on a strict need-to-know basis. All internal access is logged and subject to regular review.
• Intrusion Detection & Monitoring: Continuous automated monitoring systems detect and alert on anomalous access patterns, potential intrusions, and data exfiltration attempts.
• Penetration Testing: The Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All Billion77 personnel who handle personal data receive mandatory data protection training and are bound by contractual confidentiality obligations.

Your Data Rights

As a data subject, you hold the following rights with respect to your personal data held by Billion77. You may exercise any of these rights by contacting our Data Protection team via the support channels set out in Section 15 of this Policy.

Billion77 will respond to all data rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, with notification provided to you before the initial deadline expires. There is no charge for making a data rights request, unless requests are manifestly unfounded or excessive.

Children's Privacy

The Billion77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21 under any circumstances.

If Billion77 becomes aware that personal data has been collected from a person under 21 — whether through misrepresentation during registration or any other means — we will take immediate steps to delete all associated data, close the account in question, and return any funds to the payment source, subject to our standard AML verification procedures.

If you are a parent or guardian and believe that a minor has registered an account on the Billion77 Platform, please contact our support team immediately using the contact details provided in Section 15 of this Policy.

International Data Transfers

In the course of operating the Billion77 Platform and engaging third-party service providers, your personal data may be transferred to and processed in countries outside Malaysia. Such transfers may occur in connection with payment processing, KYC verification, customer support infrastructure, or cloud hosting services.

Whenever personal data is transferred outside of Malaysia, Billion77 will ensure that appropriate safeguards are in place to maintain a level of data protection consistent with applicable Malaysian law and this Privacy Policy. Such safeguards include:

• Standard contractual clauses or equivalent binding commitments between Billion77 and the relevant data processor;
• Processor selection criteria that require demonstrated compliance with internationally recognised data protection standards;
• Transfer impact assessments conducted in advance of any new cross-border data flow arrangement.

Amendments to This Policy

Billion77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to our Platform's security and compliance posture. All amendments will be published on this page with a revised effective date.

Where changes are material — for example, where we introduce a new processing purpose, a new category of data collection, or a change to your rights — Billion77 will take reasonable steps to notify registered Users in advance via email or in-platform notification. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to remain informed of how we handle your personal data. The current effective date is displayed at the top of this page.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Billion77 Data Protection team through the channels below. All contact information is provided as plain text and is not a clickable link.