Privacy Policy

BP9MY Privacy Policy — Your Personal Data Protection

Your privacy is bp9my's priority. This document transparently explains how we collect, use, protect, and manage your personal data as a bp9my platform user in Malaysia.

Updated: January 2026  |  Applicable in Malaysia
Contents

This policy complies with the Malaysia Personal Data Protection Act 2010 (PDPA) and international security standards.
Note: This Privacy Policy forms part of the agreement between you and bp9my. By using the bp9my platform, you confirm that you have read, understood, and agreed to the terms stated herein. Please read it together with the Terms & Conditions us.
01

Introduction

BP9MY is an online gaming platform operating exclusively for users in Malaysia. We understand that your trust is our most valuable asset — and that trust begins with how we handle your personal information. This Privacy Policy is crafted to ensure you know exactly what happens to your data from the moment you register to every day you use our platform.

This document explains what types of data we collect, why we need it, how it is stored and protected, and the rights you hold as the owner of that data. We have written this policy in plain, easy-to-understand language — not confusing legal jargon — so every bp9my player can read it without needing a lawyer.

This policy complies with the Malaysia Personal Data Protection Act 2010 (PDPA) and international information security standards. Any queries regarding this policy may be directed to the bp9my support team at any time.

BP9MY does not sell, rent, or transfer your personal data to third parties for marketing purposes without your consent. This is a commitment that has remained unchanged since our platform launched.
02

Personal Data Collected

BP9MY only collects data that is genuinely necessary to deliver a safe, seamless service and to meet legal requirements. We do not collect data beyond those needs. The following are the categories of data we collect:

Data Category Example Information Required / Optional
Identity Information Full name, identity card number, date of birth Required (KYC)
Contact Information Email address, phone number Required
Financial Information Bank account number, deposit and withdrawal transaction history Required
Platform Usage Data Gaming history, total wagering amount, login timestamps Automatic
Technical Data IP address, device type, web browser, operating system Automatic
Verification Documents Copy of identity card, bank statement, proof of address Upon request

Data collected automatically — such as IP addresses and technical data — is gathered through standard cookie and tracking technologies used by virtually all digital platforms. This data helps us detect suspicious activity and keep your account secure from unauthorised access.

You may request a full copy of the personal data bp9my holds on your account at any time. See User Rights for further details on how to submit such a request.
03

Purpose of Data Collection & Use

Every piece of data we collect serves a clear purpose. bp9my does not use your data for any purpose not stated in this policy. Below are the primary purposes for which your personal data is used:

Account Management: Creating and managing your bp9my account, including the registration process, login, and identity verification (KYC).
Transaction Processing: Processing deposits and withdrawals securely, and verifying that all financial transactions are legitimate and initiated by the rightful account holder.
Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any activity that violates bp9my's terms of service.
Legal Compliance: Fulfilling legal obligations under PDPA 2010, anti-money laundering regulations (AMLA), and directives from relevant regulatory authorities.
Customer Support: Providing you with accurate and relevant support based on your account history and previous interactions with the bp9my platform.
Responsible Gaming: Monitoring usage patterns to identify players who may need assistance or self-management tools related to responsible gaming.
Platform Communications: Sending important notifications related to your account — including transaction confirmations, security alerts, and policy updates — via email or the platform.
Experience Personalisation: Personalising the content and offers shown to you based on your gaming preferences and usage patterns, with the aim of enhancing your experience on bp9my.
For marketing and promotional communications, you may opt out at any time through your account settings or by contacting the bp9my support team. Critical communications related to account security cannot be unsubscribed from.
04

Data Storage, Security & Encryption

BP9MY employs industry-grade security infrastructure to protect your personal data. We continuously invest in the latest data protection technologies because we believe the security of your information is not merely a legal obligation — it is the foundation of the trust you place in us.

  • All data is encrypted using 256-bit SSL/TLS during transmission between your device and bp9my servers — no information can be intercepted while in transit.
  • Data stored on bp9my servers is protected with AES-256 encryption, the same standard used by banking institutions and government security agencies.
  • Access to user personal data is strictly limited — only staff who require access to perform their duties are permitted, and every access is logged and audited.
  • Threat monitoring system active 24 hours a day, 7 days a week to detect any unauthorized access attempts or suspicious activity in real time.
  • Your account data is retained for as long as required by law — typically at least 7 years after account closure to meet audit and legal compliance requirements.
  • Data backups are performed regularly and stored at separate locations with full encryption, ensuring recovery is possible in the event of any unexpected incident.
While bp9my takes all reasonable technical measures, no digital system can be guaranteed 100% secure. If you suspect your account has been compromised, contact the bp9my support team immediately for prompt action.
05

Third-Party Data Sharing & Disclosure

BP9MY does not sell or rent your personal data to any third party for commercial purposes. However, there are certain situations where we need to share your information — and we want you to know exactly when and with whom:

Payment Service Providers: Financial information required to process deposits and withdrawals is shared with the licensed payment providers we use — including banks, digital wallet providers, and FPX processors. All such providers are bound by strict confidentiality agreements.
Legal & Regulatory Requirements: BP9MY will disclose the necessary information to law enforcement authorities, regulatory bodies, or courts when required to do so under Malaysian law.
Technical Service Providers: Technology companies that help us operate the platform — such as cloud service providers, fraud detection systems, and analytics tools — may have limited access to certain data. All such third parties are bound by strict data processing agreements.
Business Transfer: In the event of any merger, acquisition, or transfer of bp9my assets, user data may be transferred as part of that process. You will be notified before your data is transferred and will have the right to opt out.
With Your Consent: In any other situations not listed here, bp9my will only share your data with your explicit prior consent.

All third parties that receive data from bp9my are required to protect it under security standards equal to or exceeding those that bp9my applies itself.

06

Cookies, Tracking & Similar Technologies

Like most modern digital platforms, bp9my uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you. Here are the types of cookies we use:

Essential Cookies

Required for the platform to function — including login sessions, account security, and language preferences. Cannot be disabled.

Analytics Cookies

Helping us understand how users interact with the platform so we can make meaningful improvements. Data is collected in aggregate and anonymised form.

Functional Cookies

Storing your personal preferences such as display settings, favourite games, and other preferences for a smoother experience.

Security Cookies

Used to detect suspicious activity, prevent fraud, and ensure that only you can access your bp9my account.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the bp9my platform. Essential cookies cannot be disabled as they are critical to the security of your login session.

07

Your Rights as a Data Owner

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data bp9my holds. We fully respect these rights and have clear procedures in place for you to exercise them:

Right to Access
Request a copy of all personal data bp9my holds about you within 21 working days.
Right to Rectification
Request correction of inaccurate or incomplete data via account settings or customer support.
Right to Erasure
Request deletion of your data once your account is closed, subject to legal record-keeping obligations.
Right to Object
Object to the processing of your data for direct marketing or promotional communications at any time.
Right to Data Portability
Request your data in a machine-readable format for transfer to another platform of your choice.
Right to Restrict Processing
Request bp9my to restrict the processing of your data in specific situations while your request is under review.
To exercise any of the above rights, contact the bp9my support team via live chat on the platform or by email at [email protected]. We will notify you of the action taken within 14 business days of receiving your request.
08

Children's Data Protection

BP9MY is a platform designed exclusively for adults aged 18 years and above. We do not intentionally collect or store any personal data from minors or underage individuals.

  • The bp9my registration process is designed to ensure that only individuals who meet the age requirement can create an account.
  • If bp9my becomes aware that personal data of a child has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account.
  • If you believe that someone under the age of 18 may be using the bp9my platform, please contact us immediately so that appropriate action can be taken.
Parents and guardians are encouraged to monitor their children's internet usage and ensure they do not access online gambling platforms. Reports of underage use of the platform will be acted upon immediately and referred to the relevant authorities.
09

Privacy Policy Amendments

BP9MY reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. The "Updated" date at the top of this document will always reflect the latest version currently in effect.

You will be notified via the platform or email of any significant changes to this Privacy Policy at least 14 days before the changes take effect.
Your continued use of the bp9my platform after any changes take effect will be considered your acceptance of the updated policy.
If you disagree with any amendments made, you have the right to close your account and request deletion of your data in accordance with the established procedures.
We encourage you to review this page regularly so you are always informed of the latest ways we protect your personal data.
10

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bp9my handles your personal data, we are ready to listen and respond promptly.

Live Chat

Reach the bp9my support team directly via live chat on the platform. Available 24 hours a day, 7 days a week for any privacy enquiries.

Privacy Email

Send us a written enquiry at [email protected] — we aim to respond within 2 business days.

Complaints regarding the handling of your personal data may also be submitted to Department of Personal Data Protection (JPDP) Malaysia if you believe that bp9my has not complied with the provisions of PDPA 2010.

Why Your Data Is Safe with BP9MY

Bank-Grade Encryption

All data transmitted between your device and bp9my servers is protected with 256-bit SSL encryption — the same technology used by Malaysia's leading banks to secure their customers' financial transactions.

PDPA 2010 Compliance

BP9MY operates in full compliance with the Malaysia Personal Data Protection Act 2010. Every process of collecting, storing, and using your personal data is designed in accordance with the legal framework in force in Malaysia.

No Data Sales

Bp9my's most fundamental commitment: we have never and will never sell, rent, or transfer your personal data to advertisers or third-party data brokers for their own commercial purposes.

Full Control Is Yours

You have full rights to access, correct, download, or delete your personal data. The bp9my platform provides easy-to-use tools to manage your personal information directly, without going through a complicated process.

24/7 Threat Monitoring

Bp9my's security monitoring system operates around the clock to detect and block any unauthorized access attempts, cyberattacks, or fraudulent activity that could compromise your account in real time.

Minimum Staff Access

Only bp9my staff who genuinely require access to your data to perform their duties are permitted to do so — and every access is logged, monitored, and regularly audited to ensure there is no misuse.

Privacy Protected, Gaming Made Easier

Over 500,000 Malaysian players have trusted bp9my for a safe and fair gaming experience. Register a free account today and enjoy a platform that protects your data every step of the way.

By registering, you confirm that you are 18 years of age or older and agree to the Terms & Conditions and Privacy Policy bp9my.

Bahasa Melayu