Privacy Policy BP9MY — Protecting Your Personal Data as a Malaysian Member

This Privacy Policy explains how bp9my collects, uses, stores, and protects your personal information when you use the bp9my platform at bp9my.best. It also explains your rights in relation to that personal data and how you can contact us if you have any privacy concerns.

By registering for or continuing to use the bp9my platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, please discontinue use of the bp9my platform and you may request account closure through our support team.

Bp9my collects several categories of personal data depending on how you interact with our platform. The following are the main categories of data collected:

Personal data collected by bp9my is used solely for the following purposes:

• Account Management: Creating, verifying, and maintaining your bp9my account, including registration processing, login, and the required KYC verification.
• Financial Transaction Processing: Processes MYR deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), and CIMB Clicks (FPX), as well as the processing of your winnings withdrawals.
• Gaming Services Provision: Operating slots, Sports Betting on the Malaysia Super League and EPL, poker tables, roulette, MPL Malaysia E-Sports, and all other game categories available on bp9my.
• Platform Security: Detecting and preventing fraud, collusion, bot usage, multiple accounts, and any activity that violates bp9my's Terms & Conditions.
• Legal Compliance: Fulfilling legal obligations, including anti-money laundering (AML) requirements and compliance with directives from competent authorities.
• Service Communications: Sending important notifications about your account, terms updates, security alerts, and responses to your customer support enquiries.
• Platform Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve bp9my's interface, user experience, and overall service.
• Responsible Gaming: Monitoring gameplay activity patterns to identify signs of problem gambling and provide appropriate support or intervention.

Bp9my does not share your personal data with third parties except in the following limited circumstances:

Bp9my implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, misuse, loss, or destruction:

• Encryption in transit: All communication between your browser/app and bp9my servers is encrypted using TLS 1.3 with a 256-bit SSL certificate. This means that even if someone manages to intercept your data traffic, they cannot read it.
• Encryption at rest: Sensitive data such as passwords is stored in an irreversible hashed format. Financial data is stored in an encrypted environment protected by multi-layered access controls.
• Two-factor authentication (2FA): bp9my accounts support two-factor authentication via SMS OTP. Members are encouraged to enable 2FA as an additional layer of protection against unauthorised access.
• 24/7 security monitoring: bp9my's security monitoring system operates around the clock to detect suspicious activity, repeated failed login attempts, and other anomalies that may indicate a security threat.
• Internal access controls: Staff access to member personal data is restricted based on role-based access control. All access is logged for regular internal audits.
• Regular security testing: bp9my conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

Bp9my retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under Malaysian law:

Once the applicable retention period has expired, data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

Bp9my uses cookies and similar tracking technologies to enhance your experience on the platform. The types of cookies used are:

• Essential Cookies: Required for core platform functions such as maintaining your login session, processing MYR deposit transactions, and ensuring basic security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information about how you use the bp9my platform — such as which pages you visit most frequently — to help us improve the user experience. This data is collected in aggregate form and does not identify you individually.
• Preference Cookies: Stores your preferences such as display language and other display settings so you don't have to reconfigure them every time you visit the bp9my platform.
• Security Cookies: Used to detect and prevent fraudulent activity, verify user identity, and protect the integrity of your login session.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies will affect your ability to use certain features of the bp9my platform, including login and transaction processing.

Because financial transactions involve highly sensitive data, bp9my pays particular attention to protecting members' payment information. All payment methods supported by bp9my are local Malaysian options:

For each of these payment methods, bp9my's data protection practices are as follows:

• All payments are processed through certified payment gateways that support PCI-DSS security protocols for payment card data.
• Bp9my does not store your full bank account details, card numbers, or digital wallet passwords. We retain only transaction references for record-keeping purposes.
• Every deposit must be made from a payment method registered in the same bp9my member's name. This is a protective measure to ensure no unauthorised third-party funds enter the bp9my system.
• Withdrawal requests are only processed to an account or wallet whose registered name matches your bp9my account name — this protects you from unauthorised withdrawals to a third party's account.

As a Malaysian citizen or resident, you have specific rights under the Personal Data Protection Act 2010 (PDPA) regarding the personal data bp9my holds about you:

To submit any request relating to your privacy rights, please contact the bp9my support team via live chat or email at support@bp9my.best. bp9my will process your request within 14 business days.

The bp9my platform is strictly for individuals aged 21 and above. bp9my does not knowingly collect or process personal data from individuals under the age of 21.

If we discover that personal data belonging to an underage individual has been collected inadvertently, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child or dependent has registered on the bp9my platform are advised to contact us immediately via live chat or email at support@bp9my.best.

Bp9my reserves the right to update this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or platform feature additions that affect how data is handled.

When significant changes are made to this Privacy Policy, bp9my will:

• Updating the "Last Updated" date at the top of this document.
• Displaying prominent update notices in key areas of the bp9my platform.
• Sending SMS notifications to your registered phone number for highly significant changes that directly affect your privacy rights.

Your continued use of the bp9my platform after any Privacy Policy changes take effect will be considered as your acceptance of the updated policy. You are encouraged to review this page periodically to stay informed about how bp9my protects your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how bp9my handles your personal data, we welcome you to get in touch with us:

• Live Chat: The fastest method — available 24/7 on the bp9my platform in both Bahasa Malaysia and English.
• Privacy Email: support@bp9my.best — for formal written data requests, including data access and deletion requests. Please include your bp9my account number and the details of your request.
• Response Time: bp9my aims to respond to all privacy enquiries within 3 business days and to resolve formal requests within 14 business days.

In the world of online betting, data privacy is one of the most legitimate concerns Malaysian players have. When you sign up on any platform, you hand over sensitive personal information — your full name, MyKad number, phone number, and payment method details. The fair questions to ask are: where does all this information go, who can see it, and what happens if it ends up in the wrong hands? bp9my's Privacy Policy exists to answer these questions clearly and transparently.

The core principles guiding bp9my's approach to privacy are straightforward: collect only what is necessary, use it only for purposes you have authorised, protect it to the best of our ability, and never sell or hand it over to anyone who does not need it. This may sound like a standard corporate pledge, but bp9my puts these principles into practice through concrete systems and procedures that you can verify.

For Malaysian players, one of the most important considerations is the protection of financial information tied to MYR transactions. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks, bp9my does not store your wallet password or PIN. We only receive confirmation from the certified payment system that a transaction was successful. What bp9my does retain are transaction records only — the date, amount in MYR, and reference number — as required for account records and legal compliance.

Regarding the 256-bit SSL encryption bp9my uses — this is not merely a marketing label. 256-bit SSL means that data travelling between your phone or computer and bp9my's servers is encrypted using a cryptographic key that would theoretically take longer than the age of the universe to crack with current computing power. This is the same standard used by Malaysia's leading banks to protect their customers' online banking transactions. Whether you are playing slots, placing a bet on the Malaysia Super League, or sitting at a bp9my poker table, all data you send and receive is protected by this layer of encryption.

Regarding compliance with Malaysia's PDPA — the Personal Data Protection Act 2010 is a Malaysian law governing how organisations may collect, store, and use the personal data of Malaysians. bp9my operates in accordance with the principles of the PDPA, which means you have legal rights — not merely voluntary commitments from bp9my — to access your data, correct inaccuracies, and in certain circumstances request its deletion. Should bp9my fail to uphold these rights, you have legal recourse to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

One thing to be absolutely clear about: bp9my does not sell your data. This is a commitment we make not because it sounds good, but because it is the right thing to do. bp9my's business model is built on providing a quality betting platform for Malaysian players — not on monetising user data for advertisers or third-party data brokers. Any marketing communications you receive from bp9my concern bp9my's own platform offers and promotions, not third-party advertising using your data.

Ultimately, privacy is a two-way responsibility. bp9my can implement the most sophisticated security systems available, but if you use a weak password, share your login credentials with others, or access your bp9my account over an unsecured public WiFi network, risks remain. We encourage every bp9my member to enable two-factor authentication (2FA), use a strong and unique password, and stay alert to phishing attempts that may try to obtain your account information. Together, we can ensure that the bp9my experience is safe and secure for everyone.