Updated: January 2026

BP9 Privacy Policy – Malaysia Personal Data Protection

BP9 takes our responsibility to protect every member's privacy and personal data seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information in accordance with Personal Data Protection Act 2010 (PDPA 2010) Malaysia.

PDPA 2010 Compliant
SSL 256-bit Encryption
No Data Sales
BP9's Privacy Commitment

Your Privacy Is Our Priority

Six core principles that guide how BP9 manages and protects the personal data of all Malaysian members.

PDPA 2010 Compliance

All personal data handling at BP9 is fully compliant with Malaysia's Personal Data Protection Act 2010. This is not merely a legal obligation — it is a core commitment we make to every member.

Financial Institution-Grade Encryption

All data transmitted between your device and BP9's servers is protected by SSL 256-bit encryption — the same technology used by Malaysia's major banks such as Maybank and CIMB.

Your Data Is Never Sold

BP9 has never sold, rented, or traded members' personal data to any third party for marketing purposes or any other commercial gain, and never will.

Right of Access & Full Control

As a BP9 member, you have the full right to access, correct, restrict the use of, or request the deletion of your personal data at any time through our support team.

Minimum Data Collection

BP9 only collects data that is strictly necessary for platform operations, legal compliance, and service improvement. We do not collect information that is irrelevant to these purposes.

Data Breach Notification

In the event of any security incident involving members' personal data, BP9 is committed to notifying affected members within the timeframe required by law.

Key Summary — BP9 Privacy Policy
This Privacy Policy describes the privacy practices of BP9 Casino Malaysia ("BP9", "we", "us"). By using the BP9 platform, you agree to the collection and use of information as described in this policy. We encourage you to read this document carefully in its entirety.

Your trust is our most valuable asset BP9. We understand that when you register an account, make a deposit, or play on our platform, you are entrusting us with your personal information. We take that responsibility seriously.

This Privacy Policy is written in plain, easy-to-understand language — not filled with confusing legal jargon. Our goal is for every member to BP9 truly understand their rights and how their data is managed — not just skim through lengthy terms without grasping the content.

All of BP9's privacy practices comply with Personal Data Protection Act 2010 (PDPA 2010) Malaysia — the primary legislation governing how companies may collect and use personal data in this country. This means you have legally guaranteed rights under Malaysian law with respect to your personal data.

Types of Personal Data

Data Categories Description & Examples
Identification DataFull name, date of birth, identification card number (MyKad), passport number, residential address.
Contact DataEmail address, mobile phone number, and mailing address.
Financial DataBank account numbers, digital wallet details (TNG eWallet, GrabPay, DuitNow), and records of deposit and withdrawal transactions in MYR.
Usage DataGame records, betting history, session durations, game preferences, and account activity.
Technical DataIP address, device type, operating system, web browser, cookie data, and server log information.
Communication DataHistory of conversations with the customer support team, along with feedback and complaints submitted.

01 Information We Collect

BP9 collects your personal information through several different channels. We only collect data that is necessary for a specific purpose and do not gather excessive or irrelevant information.

  • During Account Registration: Full name, date of birth, email address, mobile number, residential address, and your chosen password.
  • During the KYC (Know Your Customer) Process: Copy of identification card (MyKad) or passport, proof of address such as a recent Malaysian utility bill or bank statement.
  • During Financial Transactions: Payment method details used (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks), amounts in MYR, and transaction references.
  • During Platform Use: Gaming activity data, bets placed, games played, session duration, and account settings preferences.
  • Automatically: IP address, device and browser information, location data (country/region), and technical log information collected via cookies and similar tracking technologies.
  • When Contacting Customer Support: Communication content via live chat, email, or WhatsApp, including questions, complaints, and feedback you provide.
BP9 does not collect sensitive information such as medical details, religious beliefs, or political views. Our data collection is limited to what is necessary to operate a responsible online gambling platform.

02 How We Use Your Personal Data

Personal data collected by BP9 is used for the following purposes. We ensure that every use of data has a legitimate basis and is consistent with our members' reasonable expectations.

  • Account Management: Creating and maintaining your BP9 account, verifying your identity at login, and accurately processing all deposit and withdrawal transactions.
  • Service Delivery: Gives you access to all games and features on the BP9 platform, including Malaysia Super League and EPL football betting, cricket, roulette, baccarat, jackpot slots, and live matches.
  • Legal Compliance (KYC/AML): Fulfilling legal obligations related to identity verification, anti-money laundering (AML), and the regulatory requirements of the online gambling industry.
  • Platform Security Detect and prevent fraud, unauthorized access, bot usage, duplicate accounts, and other activities that violate BP9's Terms and Conditions.
  • Marketing (with Consent): Sending promotional information, exclusive bonuses, and special offers to members who have given consent to receive marketing communications.
  • Product Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the platform experience, introduce new games, and enhance technical performance.
  • Customer Support: Managing enquiries, complaints, and assistance requests submitted by members across BP9's various support channels.

03 Legal Basis for Data Processing

In accordance with Malaysia's PDPA 2010, BP9 processes your personal data on the following legal bases. Understanding these bases is essential to understanding your rights.

  • Contract Performance: Data processing required to provide BP9 platform services to you as a registered member — including payment processing in MYR and account management.
  • Legal Obligation: Data processed to fulfil Malaysian legal requirements, including KYC, AML, and regulatory reporting obligations.
  • Legitimate Interest: Data processed for legitimate business interests — such as platform security, fraud prevention, and product improvement — provided this does not override your fundamental rights.
  • Consent: For marketing and promotional communications, BP9 obtains your explicit consent. You may withdraw this consent at any time.
Under PDPA 2010, you have the right to know the legal basis for each type of data processing carried out by BP9. If you have questions about a specific basis, contact us at support@bp9.casino.

04 Sharing Data with Third Parties

BP9 does not sell or trade members' personal data. However, there are limited situations where we need to share data with certain parties to keep the platform running properly or to comply with the law.

  • Payment Service Providers: Required transaction details are shared with Malaysian payment gateway providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and others) to process deposits and withdrawals in MYR.
  • Game Providers: Required game session data is shared with licensed game software providers (RNG providers, live casino studios) to ensure game fairness and auditability.
  • KYC/AML Service Providers: Identity verification data may be shared with accredited third-party identity verification services to fulfil our legal compliance obligations.
  • Malaysian Authorities: Required information will be shared with Malaysian law enforcement agencies or regulatory bodies when mandated by law or court order.
  • Technology Infrastructure Providers: The cloud and technical infrastructure service providers used by BP9 may have limited access to data within the scope of their services, subject to strict confidentiality agreements.
All third parties who receive BP9 members' personal data are bound by strict data protection agreements and may only use that data for purposes specified by BP9. BP9 is not responsible for the privacy practices of third parties whose data sharing was initiated at your own request.

05 Data Security Measures

Protecting members' personal and financial data is BP9's foremost technical and operational priority. We continually invest in the latest security infrastructure to keep your data safe at all times.

  • 256-bit SSL Encryption: All data transmitted between your device and BP9's servers is protected by TLS/SSL 256-bit protocol — the same security standard used by Malaysia's leading financial institutions.
  • Data-at-Rest Encryption: Personal data stored in BP9's databases is encrypted using industry-standard algorithms. Passwords are stored in a hashed format that cannot be recovered, even by BP9 staff.
  • Strict Access Controls: Access to members' personal data within BP9 is restricted to staff with a legitimate operational need only, based on the principle of least privilege.
  • 24/7 Security Monitoring: Threat monitoring and intrusion detection systems operate around the clock to identify and respond to any suspicious activity.
  • Regular Security Assessments: BP9 undergoes regular penetration testing and security audits by independent third parties to identify and address vulnerabilities before they can be exploited.
  • Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an additional layer of security on their BP9 account.

06 Data Storage & Retention Period

BP9 retains your personal data only for as long as necessary for its stated purposes or as required under Malaysian law.

  • Active Account Data: For as long as your BP9 account remains active, your personal data is retained to enable us to provide uninterrupted service.
  • After Account Closure: Account and transaction records are retained for 7 years after account closure to comply with Malaysia's accounting and AML legal requirements.
  • Communication Records: Customer support conversation logs are retained for 3 years for reference, dispute resolution, and service improvement purposes.
  • Technical Log Data: Server logs and technical data are retained for 12 months for security purposes and technical troubleshooting.
  • Marketing Data: Marketing preference information is retained until you withdraw your consent or close your account, whichever comes first.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any specific individual. Anonymised data may be retained for aggregate analytics purposes.

07 Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA 2010, you have specific rights regarding the personal data BP9 holds about you. We are committed to respecting and facilitating the exercise of these rights.

🔍
Right of Access

You have the right to request a copy of all personal data we hold about you in a readable format.

✏️
Right to Rectification

You may request the correction of any inaccurate or incomplete personal data held in our records.

🗑️
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

⏸️
Right to Restriction

You may request a restriction on the processing of your data under certain circumstances, such as when there is a dispute regarding the accuracy of your data.

📦
Data Portability Right

You may request your data in a structured, portable format for transfer to another service provider where applicable.

↩️
Withdraw Consent

You may withdraw your marketing consent at any time through your account settings or by contacting us.

📋
Right to Complain

If you are not satisfied with how we handle your data, you may lodge a complaint with the Department of Personal Data Protection Malaysia.

How to Exercise Your Rights: To exercise any of the rights above, please contact us by email at support@bp9.casino, stating the right you wish to exercise along with the required identity verification details. We will respond within 14 working days.

08 Cookies & Tracking Technologies

BP9 uses cookies and similar technologies to enhance your user experience, analyse platform usage, and keep your login session secure. Below are the types of cookies we use.

  • Strictly Necessary Cookies: These cookies are required for the BP9 platform to function properly. They include login session cookies, CSRF security tokens, and account authentication cookies. Disabling them will affect core platform functionality.
  • Functional Cookies: Saves your preferences such as display language, interface theme, and game settings so you don't have to reconfigure them each time you log in.
  • Analytics Cookies: Collecting usage data in aggregate, without identifying individuals, to help us understand how members use the platform and identify areas for improvement.
  • Security Cookies: Helps detect suspicious activity, unauthorised login attempts, and usage patterns that may indicate fraud or account misuse.

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of some features on the BP9 platform. For more information on managing cookies, please refer to the help section of your web browser.

09 Children's Privacy

The BP9 platform is intended for individuals aged 18 years and above only. We do not knowingly collect or process personal data from minors.

  • BP9 applies a rigorous KYC process to verify the age of all new members. Registration by individuals under 18 years of age is strictly prohibited.
  • If we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.
  • Parents or guardians who suspect their underage child has registered an account with BP9 are urged to contact us immediately at support@bp9.casino.

10 Links to Third-Party Websites

The BP9 platform may contain links to third-party websites or services in certain contexts, such as sports information or gaming news.

  • BP9 has no control over the content, privacy policies, or practices of those third-party websites.
  • We recommend reading the Privacy Policy of any website you visit outside the BP9 platform.
  • BP9 is not liable for any loss or damage arising from your interactions with third-party websites.

11 International Data Transfers

In the course of operating the BP9 platform, some members' personal data may be stored or processed outside Malaysia by the cloud infrastructure or technical service providers we engage.

  • Any transfer of data outside Malaysia is carried out with adequate safeguards in accordance with PDPA 2010 requirements, including the use of standard data transfer agreements or equivalent protective mechanisms.
  • BP9 only works with service providers that meet internationally recognised security and privacy standards.
  • Information on the country or region where your data may be processed is available upon request at support@bp9.casino.
All international data transfers carried out by BP9 are subject to contractual safeguards that ensure your data receives a level of protection equivalent to that provided in Malaysia.

12 Changes to This Privacy Policy

BP9 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or product developments.

  • For significant material changes, BP9 will provide notice via your registered email or an in-platform notification at least 14 days before the changes take effect.
  • The "Updated" date shown at the top of this page reflects the date this Privacy Policy was last modified.
  • Continued use of the BP9 platform after any changes take effect will be considered acceptance of the updated policy.
  • We encourage you to review this page regularly to stay up to date with BP9's privacy practices.

13 Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how BP9 handles your personal data, please contact us through the following channels.

Privacy Email
support@bp9.casino
Response within 14 business days
Live Chat
Available 24/7 on the BP9 platform
Fastest response time

If you are not satisfied with BP9's response to your privacy request, you have the right to lodge a formal complaint with Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

FAQ — BP9 Privacy Policy

The most common questions asked by Malaysian players about privacy and data protection on the BP9 platform.

No, absolutely not. BP9 has never sold, rented, or traded members' personal data to any third party for marketing or commercial gain, and never will. Your data is only shared with parties necessary to operate the platform — such as payment providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX) and technical service providers bound by strict confidentiality agreements — or when required by Malaysian law.

All financial and transaction information at BP9 is protected by 256-bit SSL encryption — the same technology used by Malaysia's major banks. BP9 does not store credit card numbers directly; all financial processing is handled through PCI-DSS certified payment gateways. Transaction records in MYR are stored in systems protected by strict access controls and are audited on a regular basis.

Yes, you have the right to request deletion of your personal data. However, certain limitations apply under Malaysian law — BP9 is required to retain account and transaction records for 7 years for AML compliance and accounting purposes. Data not subject to these legal obligations will be fully deleted or anonymised upon receipt of your request. Contact us at support@bp9.casino to initiate the data deletion process.

After account closure, BP9 will retain the minimum data required to meet Malaysia's legal obligations for 7 years. This includes account records, transaction history in MYR, and KYC records. Data not required for legal purposes — such as marketing preferences and cookie data — will be deleted within 30 days of account closure. You may request written confirmation of what data is still being held after your account is closed.

There are several ways to stop receiving promotional emails from BP9: (1) Click the "Unsubscribe" link found at the bottom of any marketing email we send. (2) Log in to your BP9 account, go to account settings, and disable your marketing communication preferences. (3) Contact our support team at support@bp9.casino with an unsubscribe request. Changes will take effect within 5 business days. Please note that important transactional emails relating to your account and security cannot be disabled.

BP9 uses automated systems for security purposes such as fraud detection and suspicious activity monitoring. This may result in temporary account suspension in clear-cut cases of fraud. However, any material decisions affecting member rights — such as account closure or rejection of large withdrawals — involve human staff review. You have the right to request a human review of any automated decision that significantly affects you.
PDPA 2010
SSL 256-bit
No Data Sales
24×7 Support
Right to Access Data
Officially Licensed
Right to Erasure
Withdraw Consent

Play with Complete Confidence at BP9

Your privacy and data security are fully protected at BP9. Register today and enjoy Malaysia's trusted casino and Sports Betting platform — with the assurance that your personal information is always safe with us.

Bahasa Melayu