Bulan77 Privacy Policy – Malaysia User Data Protection

1Introduction

Welcome to the Bulan77 Privacy Policy. This document is published by Bulan77, an online entertainment platform operating in Malaysia via the domain bulan77.onl. We operate as a Sports Betting platform covering Malaysia Super League football, EPL, BWF badminton, MLBB e-sports, and an online casino featuring slots, Live Casino and a wide range of other games for Malaysian users.

Bulan77 is committed to protecting the privacy of every user who registers and uses our platform. This Privacy Policy transparently explains how we collect, process, store, protect and share your personal data when you use Bulan77's services.

By registering an account with Bulan77 or continuing to use our platform after the effective date of this policy, you are considered to have read, understood and agreed to how we handle your personal data as described in this document. If you do not agree with any part of this policy, you should stop using the Bulan77 platform.

2Types of Personal Data We Collect

Bulan77 only collects data that is necessary to operate the platform safely and effectively. The following are the categories of data we collect:

3How Your Personal Data Is Collected

Bulan77 collects your personal data through the following means:

• Account Registration: When you complete the Bulan77 registration form, you provide us directly with basic details such as your name, phone number and email address.
• Identity Verification (KYC): When you submit identity verification documents such as a Malaysian IC or passport to meet anti-money laundering (AML) compliance requirements.
• Financial Transactions: Payment method details and e-wallet account information are collected when you make a deposit or withdrawal.
• Platform Usage: Betting activity, casino game sessions, login and logout events are automatically collected while you use the Bulan77 platform.
• Automated Technologies: Technical data such as IP address, browser type, device type, and cookies are collected automatically when you visit or use the platform.
• Support Communications: When you contact the bulan77 support team via live chat, WhatsApp, or email, records of those conversations are retained for reference purposes and service quality improvement.
• Voluntary Information: Feedback, satisfaction surveys and suggestions you voluntarily submit to Bulan77.

4How We Use Your Personal Data

Bulan77 uses the personal data it collects for legitimate, limited purposes as follows:

• Account Management: Processing registrations, verifying identities, managing account settings and keeping your login secure.
• Payment Processing: Processing deposits and withdrawals via Malaysian e-wallets (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX in Malaysian Ringgit (MYR).
• Platform Operations: Providing access to Malaysia Super League football, EPL, BWF badminton, MLBB e-sports and all other Bulan77 casino products.
• Fraud Detection & Security: Monitoring suspicious activity to prevent identity fraud, money laundering and bonus abuse.
• Legal Compliance: To fulfil anti-money laundering (AML) compliance requirements, age verification, and applicable legal reporting obligations.
• Customer Support: Responding to enquiries, resolving disputes and providing technical assistance to Bulan77 users.
• Platform Improvements: To analyse usage patterns and improve the functionality, performance and user experience of the Bulan77 platform.
• Communications: Sending you important notifications related to your account, transactions, claimed bonuses, and policy updates.
• Responsible Gaming: Monitoring usage patterns to identify risks and provide responsible gambling support to users who need it.

5Sharing Data with Third Parties

Bulan77 strictly limits the sharing of users' personal data. Your data may only be shared in the following situations:

• Payment Service Providers: Information required to process transactions is shared with authorised payment providers including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX-supported banks. This sharing is limited strictly to what is necessary to complete each transaction.
• Technology Service Providers: bulan77 uses third-party service providers for platform hosting, analytics, security, and customer support. All providers are bound by strict confidentiality agreements and are not permitted to use your data for their own purposes.
• Legal Requirements: Bulan77 may be required to disclose user data to law enforcement agencies, regulatory bodies or courts when mandated by applicable Malaysian law.
• Fraud Prevention: In cases of suspected serious fraud, relevant information may be shared with law enforcement agencies.
• Your Consent: In any circumstances beyond those stated above, bulan77 will obtain your explicit consent before sharing your personal data.

Bulan77 never sell, rent or trade users' personal data to any third party for commercial marketing purposes. This commitment has remained unchanged since Bulan77 first began operations.

6Data Storage & Security

Bulan77 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• Data Encryption in Transit: All communications between your device and Bulan77's servers are encrypted using TLS protocol with SSL 256-bit encryption — the same standard used by leading financial institutions in Malaysia.
• Data Encryption at Rest: Sensitive data stored in bulan77's databases is also encrypted for additional protection, even in the event of unauthorised physical access.
• Access Controls: Only Bulan77 staff with a legitimate work requirement are permitted to access user data, governed by strict role-based access controls (RBAC).
• Two-Factor Authentication: Bulan77's internal systems require two-factor authentication (2FA) for all staff access to systems containing user data.
• Regular Security Audits: Bulan77 conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• 24/7 Monitoring: Bulan77's systems are monitored around the clock to detect and respond to any security threats or suspicious activity.
• Data Backups: User data is regularly backed up to a secure, isolated location to ensure continuity of service.

7Cookies & Tracking Technologies

Bulan77 uses cookies and related tracking technologies to enhance platform functionality and the user experience. The types of cookies we use are as follows:

• Essential Cookies (Required): These cookies are essential for the Bulan77 platform to function correctly. They enable secure login, maintain active sessions and prevent fraud. These cookies cannot be disabled, as the platform will not function without them.
• Functional Cookies: These cookies remember your preferences such as language, display settings, and frequently visited betting markets to deliver a more personalised experience.
• Analytics Cookies: We use analytics cookies to understand how users interact with the bulan77 platform — including the most frequently visited pages, time spent on the platform, and navigation patterns. This information helps us improve the platform.
• Security Cookies: These cookies help identify and prevent fraudulent activity, unauthorised access, and other security threats to bulan77 user accounts.

You can control and manage cookies through your browser settings. However, disabling essential cookies may prevent you from accessing some or all features of the Bulan77 platform. For more information on managing cookies, refer to your browser's documentation.

8User Rights Regarding Personal Data

As a Bulan77 user based in Malaysia, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact the bulan77 support team by email at support@bulan77.onl or via 24/7 live chat. We take all requests seriously and will respond within a reasonable timeframe.

9Children's Data

Bulan77 is a platform built exclusively for adults aged 18 years and above only. We do not intentionally target, collect or process personal data from minors.

10Links to Third Parties

The Bulan77 platform may contain links to third-party websites or services in certain contexts. Bulan77's Privacy Policy applies only to the bulan77.onl platform and does not cover the privacy practices of any third-party websites.

Bulan77 is not responsible for the privacy policies, content or security practices of any external websites you may access through links on our platform. We encourage you to read the privacy policy of every website you visit before providing them with any personal information.

11Cross-Border Data Transfers

In operating the bulan77 platform, some user data may be stored or processed on servers located outside Malaysia by our technology service providers. Where such transfers occur, bulan77 ensures that:

• The destination country provides a level of data protection that is adequate or equivalent to Malaysian standards.
• Appropriate data processing agreements have been put in place with all service providers involved in cross-border data transfers.
• Additional protective measures such as end-to-end encryption are applied during data transfers.
• Those service providers are bound by confidentiality and security obligations equivalent to the standards applied to Bulan77 itself.

12Data Retention Period

Bulan77 retains users' personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law:

• Active Account Data: Retained for as long as your account remains active on Bulan77. You may request account closure at any time through customer support.
• Financial Transaction Data: Transaction records in Malaysian Ringgit (RM), including deposits and withdrawals via Malaysian e-wallets, are retained for a minimum of 7 years in accordance with Malaysia's financial legislation and AML compliance requirements.
• KYC Records: Identity verification documents, such as copies of Malaysian identification cards, are retained for 5 years after account closure in accordance with AML compliance requirements.
• Security Activity Logs: Access logs, login records, and security activity records are retained for 2 years for fraud investigation purposes where required.
• Customer Support Records: Support conversation records are retained for 2 years for reference and service quality purposes.
• Closed Account Data: After account closure, your personal data will be deleted or anonymised once the mandatory minimum retention period expires, unless there are outstanding legal requirements or unresolved disputes.

13Amendments to This Privacy Policy

Bulan77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. When significant amendments are made:

• The latest version of the Privacy Policy will be published on this page with an updated date at the top of the document.
• For significant amendments, we will make reasonable efforts to notify you via an in-platform notice on Bulan77 or to your registered email within a reasonable period before the changes take effect.
• Continued use of the Bulan77 platform after an amendment takes effect will be considered your acceptance of the revised Privacy Policy.
• If you do not agree with any amendments to this Privacy Policy, you should stop using the platform and contact us to close your account.

We encourage you to review this Privacy Policy page periodically to stay informed about how Bulan77 protects your data.

14Contact Us About Privacy

If you have any questions, concerns or requests regarding Bulan77's Privacy Policy or the handling of your personal data, please reach us through the following channels:

We take all privacy-related enquiries seriously and will respond within a reasonable timeframe. For user rights requests such as data access, correction, or deletion, please clearly state the type of request and provide sufficient information for us to verify your identity before we proceed.