Privacy Policy bp9my

1. Introduction and Scope

This Privacy Policy is issued by bp9my ("we", "platform") and applies to all users who register, access or use bp9my services through the website bp9my.onl. It describes the types of data collected, the purpose of collection, the methods of processing and the rights you have as the data owner.

By registering an account or continuing to use the bp9my platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our services.

2. Information We Collect

bp9my collects your personal information in several ways — including during the account registration process, while you use the platform, and through interactions with our support team. The categories of information collected are as follows:

• Identity information: full name, date of birth, MyKad number or valid identity document, nationality.
• Contact information: email address, mobile phone number, and residential address.
• Financial information: e-wallet account numbers (Touch 'n Go, Boost, ShopeePay), bank account details (for FPX and DuitNow verification), and crypto wallet information where applicable.
• Usage data: betting history, deposit and withdrawal transaction records, login activity, and game preferences.
• Technical data: IP address, device type, operating system, browser used, and session data.
• Communications: records of conversations with the customer service team via live chat or email.

3. Purpose of Data Processing

Personal information collected is used for legitimate and specific purposes. bp9my does not process data for purposes outside the following defined scope:

• Verifying your identity during registration and during the KYC (Know Your Customer) process required by our international licensing.
• Processing deposits and withdrawals securely through your chosen payment method.
• Managing user accounts, including the assignment of VIP levels, bonuses and related cashback.
• Complying with legal obligations including anti-money laundering (AML) and counter-terrorism financing (CFT).
• Providing 24/7 customer support in Malay and English.
• Sending promotional information, platform update notices and related service communications — subject to your communication preferences.
• Analysing usage patterns to improve platform performance and security.

4. Sharing with Third Parties

bp9my does not sell or rent your personal information to other parties. However, in certain situations, information may be shared with trusted third parties to ensure the platform operates properly:

• Payment providers: e-wallet and online banking gateway providers that require minimal transaction data to process payments.
• Game software providers: studios such as PG Soft, Pragmatic Play, JILI and Spribe receive limited session data to ensure game functionality.
• Regulatory bodies: when required by licensing or a valid court order.
• Security services: third-party fraud prevention and identity verification platforms that help protect your account.

All third parties working with bp9my are bound by data protection agreements that prohibit them from using your information for other purposes.

5. Data Security

bp9my implements appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, destruction or unlawful disclosure. These measures include:

• 256-bit SSL encryption for all communications between your browser and our servers.
• Password storage using irreversible hashing algorithms.
• Continuous monitoring of account activity to detect suspicious behaviour.
• Internal access to personal data is restricted to staff who require it, based on the principle of minimum privilege.
• Regular security audits by independent third parties.

6. Data Retention Period

bp9my retains your personal information for as long as your account is active and for the period required to fulfil legal obligations and licensing requirements. In general:

• Transaction records and KYC data are retained for the period set by international licensing requirements, typically at least five years after account deletion.
• Customer support communication data is retained for review and service improvement purposes.
• Anonymised analytics data may be retained for a longer period for platform improvement purposes.

When the retention period expires or you request data deletion, your personal information will be securely deleted or anonymised.

7. Cookies and Tracking Technologies

The bp9my platform uses cookies and similar tracking technologies to improve the user experience. There are several categories of cookies we use:

• Necessary cookies: required for core platform functions such as login session verification and security.
• Performance cookies: collect statistical information about how the platform is used, in a form that does not identify individuals.
• Functional cookies: store user preferences such as language and display settings.

You can control or disable cookies through your browser settings. However, disabling necessary cookies may affect certain functions on the platform.

8. Cross-Border Data Transfers

As a platform operating under international licensing, your personal data may be transferred to and stored on servers located outside Malaysia. In such cases, bp9my ensures that such data transfers are carried out in accordance with appropriate data protection agreements and safeguards equivalent to international standards.

9. Your Rights as a Data Owner

As a registered bp9my user, you have the following rights regarding your personal information. To exercise any of these rights, contact us through the available support channels.

10. Contact Us Regarding Privacy

If you have any questions or concerns, or wish to exercise any of your rights as stated in this Privacy Policy, please contact the bp9my customer service team:

• Live chat 24/7 directly through the bp9my platform
• Email: [email protected]
• Support in Malay and English

We aim to address all privacy-related enquiries promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.