Privacy Policy

1 Introduction

bb7878 (hereinafter referred to as "bb7878", "we", "us", or "our") operates the online gaming and sports betting platform accessible at https://bb7878.cam. We are committed to protecting the privacy and personal data of every individual who accesses or uses the Platform, including registered Members, visitors, and any person who communicates with us via any channel.

This Privacy Policy (hereinafter the "Policy") describes the types of personal data we collect, the purposes for which we collect and process that data, the circumstances under which we may share it with third parties, the safeguards we apply to protect it, and the rights available to you with respect to your own personal data.

This Policy applies to all data processing activities carried out by bb7878 in connection with the Platform, including activities relating to account registration, deposits and withdrawals conducted in Malaysian Ringgit (MYR) via methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, and Public Bank online banking, as well as our customer support, promotional communications, and compliance activities.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data. This includes name, national identity card number (MyKad), email address, IP address, device identifiers, and financial account details.
• "Processing" — Any operation performed on personal data, whether automated or manual, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Subject" — The identified or identifiable individual to whom personal data relates — in the context of bb7878, this is typically a registered Member or Platform visitor.
• "Data Controller" — The entity that determines the purposes and means of personal data processing. bb7878 is the Data Controller with respect to personal data processed on this Platform.
• "Data Processor" — A third party that processes personal data on behalf of bb7878, under instruction and pursuant to a data processing agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "PDPA" — Malaysia's Personal Data Protection Act 2010 (Act 709), which governs the processing of personal data in commercial transactions in Malaysia.
• "Cookies" — Small text files placed on your device by the Platform to store session data, preferences, and analytics information.

3 Data Controller

bb7878 is the Data Controller responsible for personal data collected and processed via the Platform at https://bb7878.cam. As Data Controller, bb7878 determines the purposes for which personal data is collected and the manner in which it is processed, stored, and (where applicable) shared with authorised third parties.

bb7878 is committed to processing personal data in compliance with applicable data protection legislation, including but not limited to Malaysia's Personal Data Protection Act 2010 (PDPA). Our practices are aligned with the seven data protection principles under the PDPA: general principle, notice and choice, disclosure, security, retention, data integrity, and access.

4 Personal Data We Collect

bb7878 collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include the following:

We do not collect special categories of personal data (such as racial or ethnic origin, health data, religious beliefs, or biometric data) unless strictly required by applicable law and with appropriate safeguards in place.

5 How We Collect Personal Data

bb7878 collects personal data through the following means:

5.1 Directly From You

We collect personal data directly from you when you register an Account, complete KYC verification, make a deposit or withdrawal using Malaysian payment methods (including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and Public Bank), contact our support team, or voluntarily participate in promotions and surveys.

5.2 Automatically Via Technology

When you access and use the Platform, we automatically collect technical and usage data through server logs, cookies, web beacons, and similar tracking technologies. This includes your IP address, device identifiers, browser type, and pages visited. This data is used to maintain platform security, detect fraud, and improve the user experience.

5.3 From Third Parties

We may receive personal data from third-party service providers who assist us in operating the Platform, including payment processors, identity verification services, fraud detection providers, and game content providers. We require all such third parties to handle your data in accordance with applicable law and our contractual instructions.

6 Purposes of Processing & Legal Basis

bb7878 processes personal data for specific, explicit, and legitimate purposes. The primary purposes and the legal basis applicable to each are set out below:

1. Account Registration and Management — Processing is necessary for the performance of the contract between bb7878 and the Member (i.e., the Terms & Conditions). This includes creating and maintaining your account, managing your Balance, and enabling gameplay.
2. Payment Processing — Processing is necessary for contract performance and to comply with legal obligations, including anti-money laundering requirements. This covers all deposit and withdrawal transactions conducted in MYR.
3. Identity Verification and KYC — Processing is required to comply with applicable legal and regulatory obligations, including age verification (21+ minimum) and AML/CTF (Counter-Terrorist Financing) requirements.
4. Fraud Prevention and Security — Processing is necessary to protect bb7878's legitimate business interests and to safeguard Members against fraud, unauthorised access, and abuse.
5. Responsible Gambling Monitoring — Processing is carried out in pursuit of bb7878's legitimate interests and compliance obligations, to identify players showing signs of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods.
6. Customer Support and Dispute Resolution — Processing is necessary for contract performance and legitimate interests, including resolving Member complaints and maintaining support records.
7. Marketing Communications — Where you have opted in to receive promotional emails or notifications, processing is based on your consent. You may withdraw consent at any time by updating your communication preferences in Account settings.
8. Analytics and Platform Improvement — Processing is based on bb7878's legitimate interest in improving platform performance, game quality, and user experience. Where possible, analytics data is aggregated or anonymised.
9. Legal and Regulatory Compliance — Processing is necessary to comply with applicable laws, including responding to lawful requests from Malaysian regulatory authorities.

7 Data Sharing with Third Parties

bb7878 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the circumstances described below and only to the minimum extent necessary:

• Payment Service Providers: We share financial data with our payment processing partners — including providers of FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and banking integration providers — solely to facilitate deposit and withdrawal transactions in MYR.
• Identity Verification Providers: We share identity and KYC documents with authorised verification service providers for the purpose of completing age and identity checks required by law.
• Game Content Providers: Certain technical data (such as session tokens and game outcomes) is shared with third-party game studio operators to provide game services on the Platform. These providers operate their own certified RNG systems.
• Fraud Prevention and Security Partners: Technical and usage data may be shared with fraud detection providers to identify and prevent unauthorised access, account compromise, and financial crime.
• Professional Advisers: We may share personal data with our legal, accounting, and compliance advisers where necessary to obtain professional advice or to manage legal proceedings.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to Malaysian regulatory bodies, law enforcement agencies, or courts where we are legally obligated to do so, or where disclosure is necessary to prevent or detect crime.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bb7878's assets, personal data held by bb7878 may be transferred to the successor entity, subject to equivalent data protection obligations.

All third parties with whom we share personal data are required, by contract, to implement appropriate technical and organisational measures to protect that data and to process it only in accordance with our documented instructions.

8 International Data Transfers

Given the global nature of the online gaming industry, some personal data processed by bb7878 may be transferred to, stored in, or accessed from countries outside Malaysia. Such transfers may occur in connection with our use of cloud infrastructure, international payment processors, or game content providers operating from other jurisdictions.

Where personal data is transferred outside Malaysia, bb7878 ensures that adequate safeguards are in place, which may include contractual clauses requiring the recipient to apply equivalent data protection standards to those applicable in Malaysia under the PDPA 2010. We do not transfer personal data to jurisdictions where appropriate safeguards cannot be established.

9 Data Retention

bb7878 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The principal retention periods we apply are as follows:

• Account data and KYC documents: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with AML/CTF regulatory requirements applicable to Malaysian financial service operators.
• Transaction records (deposits and withdrawals in MYR): Retained for a minimum of seven (7) years following the transaction date, in accordance with standard financial record-keeping requirements.
• Support correspondence: Retained for three (3) years following resolution of the relevant query or complaint.
• Marketing preferences and consent records: Retained until you withdraw consent or for three (3) years from last interaction, whichever is earlier.
• Technical and session logs: Retained for up to thirteen (13) months for fraud detection, security investigation, and analytics purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identified individual.

10 Security Measures

bb7878 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for all personal data and financial records stored on bb7878 servers.
• Two-factor authentication (2FA) available for all Member accounts.
• Role-based access controls limiting staff access to personal data to only those with a legitimate operational need.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Real-time fraud detection and anomaly monitoring systems.
• Incident response procedures, including mandatory breach notification protocols in accordance with applicable regulatory requirements.
• Staff training on data protection obligations and security awareness.

While bb7878 takes all reasonable precautions to protect your data, no system is entirely impenetrable. You also play an important role in protecting your own data — please use a strong, unique password and enable 2FA on your Account. If you believe your Account has been compromised, contact our support team immediately.

11 Cookies & Tracking Technologies

bb7878 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, analyse Platform usage, and (where you have consented) deliver personalised content and promotions. A cookie is a small text file placed on your device when you access a website.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that maintain your login state and security tokens. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings, display preferences, and previously accepted responsible gambling tool configurations.
• Analytics Cookies: Allow us to understand how Members interact with the Platform — which pages are most visited, where users encounter difficulties, and how game categories perform. This data is aggregated and used to improve the Platform.
• Marketing Cookies: Used to deliver targeted promotional content relevant to your gaming interests. These cookies are only active if you have provided explicit consent. You may withdraw consent at any time.

11.2 Managing Your Cookie Preferences

You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your Account. For analytics and marketing cookies, you may update your preferences via your Account settings or by contacting our support team.

12 Your Data Protection Rights

As a Member of bb7878 and as a data subject, you have the following rights with respect to your personal data. These rights are aligned with Malaysia's PDPA 2010 and reflect international best practice in data protection:

To exercise any of the above rights, please contact bb7878 using the details provided in Section 15 of this Policy. We will respond to all valid requests within 21 days. We may need to verify your identity before processing your request. There is no charge for exercising your rights under normal circumstances; however, for manifestly unfounded or excessive requests, we reserve the right to charge a reasonable administrative fee.

13 Minors & Age Restriction

The bb7878 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. Registration by persons under 21 is prohibited, and bb7878 actively employs age verification technology and KYC document checks to enforce this restriction.

If bb7878 becomes aware that personal data belonging to a person under 21 has been inadvertently collected, we will immediately suspend the associated Account, delete the data, and refund any deposits to the originating payment method. If you believe that a minor may have registered on the Platform, please contact us immediately using the details in Section 15.

14 Changes to This Privacy Policy

bb7878 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material, we will notify you by email (to the address registered on your Account), by in-Platform notification, or by posting a prominently flagged update on the Platform, along with the revised effective date.

Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to remain informed of how we protect your personal data. The current version of this Policy is always available at https://bb7878.cam/privacy-policy.

15 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or to the personal data bb7878 holds about you, please contact our Data Protection team through any of the following channels:

• Live Chat: Available 24/7 via the Platform — average response time under 5 minutes. Please select "Privacy / Data Request" as your query type.
• Email: [email protected] — please use the subject line "Privacy Policy Request" or "Data Subject Request" to ensure prompt routing to our Data Protection team.
• Languages: Privacy requests can be submitted in English, Bahasa Melayu, or Mandarin.
• Response Time: We aim to acknowledge all formal data subject requests within 3 business days and to provide a substantive response within 21 calendar days.
• Serving: bb7878 serves players across Malaysia, including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other Malaysian states and territories.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the Department of Personal Data Protection (JPDP) of Malaysia, the regulatory authority responsible for administering the PDPA 2010.