Basuh77 Privacy Policy

This Privacy Policy ("Policy") is published by Basuh77 ("we", "us", "our", "Platform") and applies to all personal data collected through the Basuh77 website at basuh77.cam, all associated subdomains, mobile interfaces, customer support channels, and any related services operated under the Basuh77 brand (collectively, the "Service").

Basuh77 operates as an internationally licensed online casino and sports betting platform serving members across Southeast Asia, including a significant user base in Malaysia. In the course of providing the Service, we necessarily collect and process personal data about our members. This Policy sets out the lawful basis on which we do so, the purposes for which the data is used, the safeguards in place to protect it, and the rights available to data subjects.

This Policy is to be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall legal framework governing your relationship with Basuh77. In the event of any conflict between those documents and this Policy on matters relating specifically to personal data, this Policy shall prevail.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, location data, email address, IP address, or any combination of data that could be used to identify an individual.
• "Processing" — any operation performed on Personal Data, whether by automated means or otherwise, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" — the natural person whose Personal Data is processed; in the context of this Policy, the registered member or website visitor.
• "Data Controller" — Basuh77, the entity that determines the purposes and means of processing Personal Data collected through the Service.
• "Data Processor" — a third party that processes Personal Data on behalf of Basuh77 under a contractual arrangement and in accordance with this Policy.
• "Cookies" — small text files placed on a user's device by a website server to store user preferences, session identifiers, and tracking data.
• "KYC" — Know Your Customer; the identity and age verification process required by Basuh77 before processing withdrawals or in compliance with licensing obligations.
• "Sensitive Data" — a subset of Personal Data that warrants enhanced protection, including government-issued identification numbers, financial account details, and data revealing a person's health status where relevant to responsible gambling assessments.
• "Third Party" — any natural or legal person other than the Data Subject, Basuh77, and persons acting under the direct authority of Basuh77.

Basuh77 collects Personal Data across several categories depending on your interaction with the Service:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify the mandatory 21+ age requirement).
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam).
• Email address and mobile phone number.
• Username and encrypted password credential.
• Nationality and country of residence.

3.2 KYC Verification Data

• Copies of government-issued photo identification (e.g., Malaysian MyKad, passport).
• Proof of address documentation dated within 90 days (e.g., utility bill, bank statement issued by Maybank, CIMB, Public Bank, Hong Leong, or another recognised Malaysian institution).
• Proof of payment method ownership where required for withdrawal processing.
• Selfie or facial verification images where required by our KYC service provider.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references.
• Masked payment instrument details (e.g., last four digits of a card, e-wallet account identifier for Touch 'n Go eWallet, Boost, GrabPay, or DuitNow).
• Transaction history including wager records, bonus claims, and payout events.
• Cryptocurrency wallet addresses used for deposits or withdrawals.

3.4 Usage & Technical Data

• IP address, device type, operating system, and browser version.
• Login timestamps, session durations, and geographic location data derived from IP.
• Pages visited, games played, and features interacted with on the Platform.
• Referring URL and traffic source identifiers.

3.5 Communications Data

• Records of live chat, email, and any written correspondence with Basuh77 support staff.
• Feedback, complaint, and dispute records.
• Marketing preference settings and opt-in/opt-out records.

3.6 Responsible Gambling Data

• Self-exclusion requests, cooling-off periods, and deposit limit configurations.
• Patterns of play flagged by our responsible gambling monitoring systems, where these necessitate intervention or account review.

Basuh77 collects Personal Data through the following means:

• Direct submission: Data you voluntarily provide during account registration, KYC verification, deposit or withdrawal requests, support interactions, and promotional form completions.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including via cookies, web beacons, pixel tags, and server-side logging systems.
• Third-party sources: Identity and fraud-risk data received from KYC verification service providers, payment processors, and anti-money laundering (AML) screening databases where permitted by law.
• Device and browser data: Information transmitted by your browser or device upon connecting to the Platform, including device fingerprint data used for fraud prevention purposes.

Basuh77 processes Personal Data only where a lawful basis for doing so exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered member, including account management, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations including AML screening, age verification, licensing conditions, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of Basuh77's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided these interests are not overridden by the rights and interests of data subjects.
• Consent: Processing based on your express consent, including the sending of direct marketing communications. Consent may be withdrawn at any time by adjusting your account notification preferences or by contacting our support team.

Personal Data collected by Basuh77 is used for the following purposes:

• Account management: Creating, maintaining, and securing your Basuh77 account; processing login authentication; and managing account settings and preferences.
• Transaction processing: Facilitating deposits via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, Visa/Mastercard, BTC, and USDT; processing withdrawal requests; and maintaining accurate financial records.
• Identity and age verification: Confirming that members are aged 21 or older and that the identity provided during registration is genuine, in compliance with our licensing obligations.
• Fraud prevention and AML compliance: Monitoring transaction patterns for signs of fraudulent activity, money laundering, or other financial crime; screening against applicable sanctions lists; and fulfilling regulatory reporting obligations.
• Customer support: Responding to queries, resolving disputes, and managing complaints submitted via live chat, email, or other support channels.
• Platform improvement: Analysing usage patterns and player behaviour in aggregate to improve game offerings, website performance, and the overall user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and newsletters to members who have opted in to receive such communications. You may unsubscribe at any time.
• Responsible gambling: Monitoring gameplay for indicators of problem gambling behaviour; enforcing self-exclusion and deposit limit settings; and proactively engaging with at-risk members where appropriate.
• Legal compliance: Meeting obligations under applicable laws, licence conditions, and responding to lawful orders from regulatory, law enforcement, or judicial authorities.

Basuh77 does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own independent marketing or commercial purposes. We may share Personal Data in the following limited circumstances:

• Service providers and Data Processors: We engage trusted third-party providers to perform functions on our behalf, including KYC and identity verification services, payment gateway processors, fraud detection and AML screening providers, cloud hosting and infrastructure operators, and customer support software platforms. These providers are contractually bound to process data only on our instructions and in accordance with this Policy.
• Regulatory and licensing authorities: We may be required to disclose transaction records, identity verification data, or account history to the authority issuing our gaming licence, in fulfilment of conditions attached to that licence.
• Law enforcement and legal process: We will disclose Personal Data where we are under a legal obligation to do so, including in response to court orders, production notices, or requests from law enforcement agencies in jurisdictions with appropriate legal authority.
• Fraud prevention networks: Where a member's account activity raises genuine concern regarding fraud or financial crime, relevant data may be shared with fraud prevention bodies or other gaming operators participating in shared risk registers, to the extent permitted by applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of Basuh77's assets, Personal Data may be transferred to the acquiring entity as part of that transaction. Members will be notified prior to any such transfer and the acquirer will be bound by privacy obligations no less protective than those in this Policy.

Basuh77 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or our licensing conditions. The following general retention periods apply:

• Account and identity data: Retained for the duration of membership plus a minimum of five (5) years following account closure, in compliance with AML regulatory requirements and licensing obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping requirements under applicable law.
• KYC verification documents: Retained for the duration of membership plus five (5) years post-closure. Copies are stored in encrypted form on secure servers.
• Support and communications records: Retained for a period of three (3) years following the resolution of the relevant interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing preference data: Retained until you withdraw consent or close your account, at which point marketing communications will cease within a reasonable administrative period.
• Technical and usage logs: Retained for up to twelve (12) months in identifiable form; longer in anonymised or aggregated form for analytics purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised. Requests for early deletion are subject to the constraints described in Section 11 (Your Rights).

Basuh77 implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your device and the Basuh77 platform is encrypted using industry-standard TLS 1.2 or higher protocols, ensuring that data in transit cannot be intercepted in readable form.
• 256-bit AES encryption: Sensitive data at rest — including KYC documents, financial records, and authentication credentials — is encrypted using 256-bit AES encryption on Basuh77's secure server infrastructure.
• Access controls: Access to systems holding Personal Data is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative personnel.
• Penetration testing and vulnerability assessments: Regular third-party security audits are conducted to identify and remediate vulnerabilities in the Platform's infrastructure and application layer.
• Incident response procedures: In the event of a confirmed data breach that poses a risk to data subjects, Basuh77 will notify affected members and relevant authorities within the timeframe required by applicable law.

Basuh77 uses cookies and similar tracking technologies to operate and improve the Service, remember your preferences, and analyse how the Platform is used. The categories of cookies we deploy are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing tokens, and security identifiers. These cookies cannot be disabled without impairing core Service functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred currency display, and previously set responsible gambling limits. Disabling these cookies may reduce the personalisation of your experience.
• Analytical cookies: Used to collect aggregate, anonymised data about how visitors use the Platform — including pages visited, games played, and error events — to help us identify areas for improvement. These cookies do not track individuals across unrelated websites.
• Fraud prevention cookies: Used to detect and prevent fraudulent account activity, duplicate account creation, and automated bot interactions. These cookies form part of our security infrastructure.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary or fraud prevention cookies may prevent you from accessing certain features of the Service or may result in your session being flagged for additional security review.

Subject to applicable law and the constraints of our legal and regulatory obligations, Basuh77 recognises the following data subject rights and provides mechanisms to exercise them:

Basuh77 will respond to verifiable data subject requests within a reasonable period, not exceeding 30 days from receipt. Complex or high-volume requests may require an extension; we will notify you if this is the case. We may need to verify your identity before processing a request to protect against fraudulent data access attempts.

The Basuh77 Service is strictly intended for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and access to wagering functionality is withheld pending confirmation that the member meets the minimum age requirement.

If Basuh77 determines or has reasonable grounds to believe that Personal Data has been collected from a person under the age of 21, the following steps will be taken immediately:

• The relevant account will be suspended pending investigation.
• Any wagers placed or winnings accrued by the underage individual will be voided.
• Deposited funds will be returned to the original payment source at Basuh77's discretion following an investigation.
• All Personal Data associated with the underage account will be deleted as promptly as legally permissible.

We encourage parents and guardians to use parental control software to prevent minors from accessing online gambling websites. If you believe a minor has accessed Basuh77, please contact our support team immediately at [email protected].

Basuh77 operates on a global infrastructure and may transfer Personal Data to servers or service providers located outside of Malaysia. When Personal Data is transferred internationally, Basuh77 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including:

• Engaging only with data processors who maintain data protection standards equivalent to or greater than those applied by Basuh77 under this Policy.
• Incorporating contractual data protection clauses into agreements with third-party service providers who receive Personal Data as part of service delivery.
• Where applicable, relying on recognised legal mechanisms for cross-border data transfer under the laws of the jurisdiction in which Basuh77 is incorporated.

By using the Service, you acknowledge that your Personal Data may be stored and processed outside Malaysia. Basuh77 will not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without implementing the safeguards described above.

Basuh77 reserves the right to update or revise this Privacy Policy at any time. Revisions will be published on this page with an updated "Last Updated" date prominently displayed at the top of the document. Where changes are material — such as the introduction of a new processing purpose or a new category of data sharing — we will use reasonable efforts to notify registered members via the email address on file or through a notice displayed upon login.

Continued use of the Service following publication of a revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Service and request account closure in accordance with the process described in our Terms & Conditions.

We recommend that you review this Policy periodically so that you remain informed about how your Personal Data is being handled. If you have any questions about a specific change, our support team is available to assist.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, you may contact the Basuh77 Data Privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. Average first-response time is under 2 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered username to expedite handling.

When submitting a data subject rights request, please provide your full registered name, your Basuh77 username, and a clear description of your request. We may require additional identity verification before processing requests to access, correct, or erase Personal Data.