bg9 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how bg9 ("bg9", "we", "us", "our") collects, processes, stores and protects personal data belonging to users ("Member", "you", "your") of the bg9 online gaming platform accessible at bg9.one, including all sub-pages, features and services offered therein.

bg9 is committed to protecting the privacy and personal data of all Members in a manner consistent with the requirements of applicable data protection legislation and international best practice standards for the online gaming industry. This Policy should be read in conjunction with bg9's Terms and Conditions and Responsible Gaming Policy, both of which form part of the same contractual framework.

2. Data Controller Information

bg9 acts as the data controller in respect of personal data collected through the bg9 platform. As data controller, bg9 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly and transparently.

All data protection queries, subject access requests and complaints should be directed to bg9's designated data protection contact using the details set out in Section 14 of this Policy.

3. Personal Data We Collect

bg9 collects the following categories of personal data from Members and prospective Members:

• Identity Data: Full legal name, date of birth, gender, nationality, government-issued identification number (as required for KYC verification).
• Contact Data: Email address, telephone number, registered mailing address.
• Financial Data: Payment method details (e-wallet identifiers, bank account numbers, card type), transaction history, deposit and withdrawal records denominated in MYR.
• Technical Data: IP address, device type, browser type and version, operating system, referring URLs, session duration and navigation data.
• Gaming Data: Betting history, game participation records, wager amounts, bonus usage and responsible gaming tool settings.
• Communications Data: Records of correspondence between you and bg9's customer support team, including live chat transcripts and email records.
• Verification Data: Copies of identity documents (passport, national identity card, utility bills) provided during the KYC process.

4. How We Collect Your Data

bg9 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated technologies: Technical data collected automatically when you access the bg9 platform, including via cookies, web beacons, log files and analytics tools (see Section 6).
• Third-party sources: Identity and fraud-screening data from regulatory-approved third-party verification providers; payment confirmation data from payment processors including Touch 'n Go eWallet, Boost, Maybank, CIMB and Public Bank.
• Publicly available sources: Information from public registers or fraud-prevention databases used for AML and KYC purposes.

5. Purposes & Legal Basis for Processing

bg9 processes your personal data for the following purposes, each of which rests on a distinct legal basis:

• Account administration and service delivery — necessary for the performance of the contract between bg9 and the Member.
• Identity verification and KYC compliance — necessary for compliance with bg9's legal obligations under applicable gaming and anti-money-laundering regulations.
• Payment processing and financial record-keeping — necessary for contractual performance and legal compliance.
• Fraud detection, anti-money-laundering and security monitoring — necessary for compliance with legal obligations and bg9's legitimate interest in protecting the integrity of the platform.
• Responsible gaming monitoring — necessary for compliance with gaming authority requirements and bg9's legitimate interest in player welfare.
• Platform improvement and analytics — based on bg9's legitimate interest in maintaining and improving the quality of its services.
• Marketing communications — based on your explicit consent, which you may withdraw at any time.

6. Cookies & Tracking Technologies

bg9 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used by bg9 are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that maintain your logged-in state and security tokens. These cannot be disabled without impairing platform functionality.
• Performance cookies: Used to collect anonymised information about how Members use the bg9 platform, enabling bg9 to identify areas for improvement.
• Functionality cookies: Remember your preferences (e.g., language settings, preferred payment method) to personalise your bg9 experience.
• Analytical cookies: Used with third-party analytics tools to understand aggregate usage patterns. No personally identifiable information is shared with analytics providers.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of your bg9 account.

7. Sharing & Disclosure of Personal Data

bg9 does not sell, rent or trade your personal data to third parties for marketing purposes. bg9 may share your personal data with the following categories of recipients in the circumstances described:

• Payment service providers: Financial transaction data is shared with payment processors (Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa/Mastercard) solely to facilitate deposits and withdrawals.
• Identity verification providers: KYC and identity documents may be shared with regulated third-party verification services for the purposes of AML compliance.
• Technology and hosting providers: Certain technical data is processed by bg9's infrastructure and software providers under strict data processing agreements.
• Regulatory and law enforcement authorities: bg9 will disclose personal data to gaming regulators, financial intelligence units or law enforcement agencies where legally required to do so.
• Gaming authority auditors: bg9's international gaming authority licence requires periodic audits, during which limited player data may be reviewed by the licensor's appointed auditors.

8. International Data Transfers

Given the international nature of bg9's gaming operations, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, bg9 ensures that appropriate safeguards are in place to protect your data, including contractual data transfer mechanisms and requirements that recipient organisations maintain data protection standards consistent with applicable law.

By using the bg9 platform, you acknowledge and consent to the transfer of your personal data to bg9's servers and to third-party providers located in jurisdictions outside Malaysia, subject to the protections described in this Policy.

9. Data Retention

bg9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and accounting obligations. Specific retention periods are as follows:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under applicable anti-money-laundering regulations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the relevant transaction.
• Gaming history and betting records: Retained for five (5) years from the date of the relevant activity.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless the matter is subject to an ongoing dispute or investigation.
• Marketing preferences: Retained until you withdraw your consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, bg9 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10. Security Measures

bg9 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bg9's servers.
• Encrypted storage of sensitive data including financial details and identity documents.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments, penetration testing and vulnerability scanning of bg9's infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Incident response procedures to address any data security breaches promptly and in accordance with applicable notification requirements.

While bg9 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bg9 login credentials and for logging out of your account when using shared devices.

11. Your Rights as a Data Subject

Subject to applicable data protection legislation, you have the following rights in respect of your personal data held by bg9:

• Right of Access: You may request a copy of the personal data bg9 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to bg9's legal retention obligations (particularly those arising from AML and gaming regulations).
• Right to Restriction: You may request that bg9 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact bg9 using the details in Section 14. bg9 will respond to all valid requests within thirty (30) days of receipt.

12. Children's Privacy

The bg9 platform is strictly intended for adults aged 21 and above. bg9 does not knowingly collect personal data from individuals under the age of 21. If bg9 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account suspended.

13. Changes to This Policy

bg9 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements or bg9's data processing practices. Where material changes are made, bg9 will notify affected Members via their registered email address or through a prominent notice on the bg9 platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how bg9 protects your data.

14. Contact & Complaints

For any queries regarding this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact bg9 as follows:

Data Protection Contact — bg9
Email: [email protected]

bg9 will acknowledge your enquiry within five (5) business days and aim to resolve it within thirty (30) days. If you are dissatisfied with bg9's response to a privacy complaint, you may escalate the matter to the relevant gaming authority or data protection regulator with jurisdiction over bg9's operations.