Bp9 Privacy Policy — Malaysian User Data Protection

1Privacy Policy Introduction and Scope

Bp9 understands that your trust is our most valuable asset. We have developed this Privacy Policy not merely to meet legal obligations, but as a genuine reflection of our commitment to protecting the personal information of every user who trusts our platform.

This Privacy Policy provides a comprehensive explanation of our data collection and processing practices, including the types of information we collect, the reasons for collecting it, how it is used, who may access it under limited and controlled circumstances, and the rights you hold over your own personal data.

All data processing activities at bp9 are carried out in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary legislation governing personal data protection in the country. We continually update our practices in line with the latest regulatory and technological developments.

2Personal Data We Collect

Bp9 collects your personal information through several means: information you provide directly, information collected automatically during your use of the platform, and in certain cases, information from legitimate third-party sources.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you use the bp9 platform, our systems automatically record certain technical information required to ensure the service operates correctly and securely:

• Usage Data: Pages visited, games played, session duration, in-platform actions.
• Device Data: Device type, operating system, browser version, screen resolution.
• Network Data: IP address, general geographic location (state/city), internet service provider name.
• Transaction Data: Complete history of deposits, withdrawals, wagering, and wins in your account.
• Session Data: Login time, logout time, number of daily sessions.

3How We Use Your Data

Bp9 uses the personal data collected for the following purposes, all of which are legitimate and necessary for the safe and effective operation of our platform:

• Account Management: Creating, verifying, and maintaining your user account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and other suspicious activities.
• Service Improvement: Analysing usage patterns to improve the interface, performance, and overall user experience.
• Service Communications: Sending important notices regarding your account, security, policy updates, and transaction information.
• Legal Compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable Malaysian law.
• Customer Support: Handling your enquiries, complaints, and support requests effectively.
• Promotions and Bonuses: Personalising relevant bonus offers and promotions based on your gaming patterns, with your consent.

4Data Sharing and Disclosure

Bp9 does not sell, rent, or trade your personal information to any third party. However, there are limited circumstances in which we may need to share your data with certain parties, as described below:

4.1 Third-Party Service Providers

We work with selected service providers who help us operate the bp9 platform, including payment processors, IT infrastructure providers, and identity verification services. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

4.2 Legal Requirements

Bp9 may be required to disclose your personal information to government authorities, law enforcement bodies, or courts where there is a legal obligation to do so, or where such disclosure is necessary to protect public safety or prevent financial crime.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of bp9's business assets, user data may be transferred to the new entity. In such cases, we will notify you in advance and ensure that equivalent data protection standards are maintained by the receiving party.

5Data Security

Bp9 continuously invests in the latest cybersecurity infrastructure to ensure your personal data remains protected at all times. Key security measures we have implemented include:

• End-to-End Data Encryption: All data is transmitted using TLS 1.3 protocol with a 256-bit SSL certificate issued by a recognised certificate authority.
• Server Security: bp9's server infrastructure is hosted in certified data centres equipped with multi-layered physical and digital security systems.
• Internal Access Control: Only authorised staff with a legitimate operational need are permitted to access user data, and every access is recorded in an audit log.
• Regular Security Testing: bp9 conducts regular penetration testing and security audits to identify and address any system vulnerabilities.
• 24/7 Monitoring: A real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity immediately.

6Cookies and Tracking Technologies

Bp9 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how users interact with the platform for continuous improvement. Collected data is anonymised.
• Functional Cookies: Saving your preferences such as language, location, and display settings to provide a more personalised experience.
• Analytics Cookies: Used to analyse traffic and usage patterns to help us make better business decisions.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the bp9 platform. For more information on managing cookies, please refer to your web browser's help section.

7Your Rights Under PDPA

As a bp9 user protected under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the bp9 privacy team via email at [email protected]. We will process your request within 5 to 10 business days and may require identity verification before processing the request.

8Data Retention Period

Bp9 retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Our general data retention guidelines are as follows:

• Active Account Data: Stored for as long as your account is active and in use.
• Data After Account Closure: Retained for a minimum of 5 years after account closure for legal compliance and dispute resolution purposes.
• Financial Transaction Records: Stored for 7 years in accordance with Malaysian financial regulatory requirements.
• KYC Documents: Stored for 5 years after the business relationship ends, or longer if required by the relevant authorities.
• Support Communication Log: Stored for 2 years for service quality and dispute resolution purposes.

Once the specified retention period has ended, your data will be securely deleted or anonymised using recognised methods to ensure it cannot be recovered.

9Children's Privacy

If we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who believe their minor child has registered at bp9 are requested to contact us immediately at [email protected].

10Amendments to the Privacy Policy

Bp9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes occur, we will:

• Displaying a clear notice on the bp9 homepage for at least 14 days before the changes take effect.
• Sending email notifications to all registered users informing them of the changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the bp9 platform after the effective date of any changes will be considered your acceptance of the revised Privacy Policy. If you do not agree with the changes, you have the right to stop using the platform and request the closure of your account.

11Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by bp9, we encourage you to reach out to us. Our Data Protection Officer (DPO) team is available to assist you 24 hours a day, 7 days a week.