bg9 Privacy Policy

1 Who We Are and How to Contact Us

bg9.club ("bg9", "we", "us", "our") operates an online casino and sports betting platform accessible at https://bg9.club. bg9 is the data controller responsible for personal data collected from members and visitors who interact with our platform.

For any privacy-related enquiries, requests to exercise your data rights, or questions about this Policy, please contact our Data Protection team:

2 Personal Data We Collect

bg9 collects the following categories of personal data, depending on your level of interaction with the platform:

We collect only data that is necessary and proportionate to the purposes described in this Policy. We do not collect sensitive personal data categories (such as health data or biometric data) beyond what is required for mandated age and identity verification.

3 How We Collect Your Data

bg9 collects personal data through the following means:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal, use responsible gaming tools, contact customer support, or update your account settings.
• Automatically: Technical data (IP address, browser information, session data) is collected automatically when you access bg9.club via cookies, server logs, and similar tracking technologies. See Section 7 for details.
• From third-party payment processors: Transaction confirmation data from Touch n Go eWallet, Boost, Maybank, CIMB, GrabPay, and other payment providers when you process deposits or withdrawals.
• From identity verification service providers: Where bg9 uses third-party KYC service providers to verify the identity documents you submit, those providers may return verified identity data to bg9.
• From fraud prevention and AML screening services: bg9 may screen your details against databases used for anti-money laundering and fraud prevention purposes, as required by our international gaming authority compliance obligations.

4 How We Use Your Personal Data

bg9 uses personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, authenticate your logins, and manage your account settings.
• Service delivery: To provide gaming and betting services, process deposits and withdrawals in MYR, settle bets, and operate promotions.
• Regulatory compliance: To fulfil obligations under international gaming authority compliance standards, including KYC, AML screening, and responsible gaming obligations.
• Responsible gaming: To operate deposit limits, loss limits, self-exclusion registers, and other responsible gaming tools, and to identify members who may be exhibiting signs of problem gambling.
• Security and fraud prevention: To detect, prevent, and investigate unauthorised account access, fraudulent activity, collusion, and money laundering.
• Customer support: To respond to your support queries, process complaints, and maintain records of our communications.
• Marketing communications: To send you promotional offers and platform updates, where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Platform improvement: To analyse aggregated usage patterns and improve bg9's features, performance, and user experience.

5 Legal Basis for Processing

bg9 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Services you have requested by registering a bg9 account and accepting our Terms & Conditions.
• Legal obligation: Processing required to comply with international gaming authority regulatory requirements, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform integrity, and internal analytics, where these interests are not overridden by your rights.
• Consent: Processing for optional marketing communications, where you have provided affirmative consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

bg9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. bg9 shares personal data only in the following circumstances:

• Payment processors: Financial data is shared with payment processing providers (e.g., Touch n Go, Boost, Maybank, CIMB) solely to the extent necessary to process your transactions.
• KYC and identity verification providers: Identity documents and personal data are shared with licensed third-party identity verification service providers as part of our KYC process.
• Game providers: Technical session data may be shared with licensed game studios (e.g., Evolution, Pragmatic Play) to facilitate game delivery and settle game outcomes.
• Fraud prevention and AML services: Data may be processed by external fraud detection and AML screening service providers as required by our regulatory compliance obligations.
• Legal and regulatory authorities: bg9 will disclose personal data to competent authorities (including international gaming authority regulators, law enforcement, and courts) where required by applicable law, court order, or regulatory direction.
• Corporate transactions: In the event of a merger, acquisition, or asset transfer, personal data may be transferred to the acquiring entity, subject to the same data protection obligations.

All third-party service providers engaged by bg9 are required to process personal data only on our documented instructions and to implement appropriate security measures.

7 Cookies and Tracking Technologies

bg9 uses cookies and similar tracking technologies on bg9.club. Cookies are small text files placed on your device that help us deliver a functioning, personalised, and secure platform experience.

bg9 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences (e.g., language settings, responsible gaming tool configurations, remembered login) to provide a personalised experience.
• Analytics cookies: Collect aggregated, anonymised data about how members use bg9.club — pages visited, session duration, features used — to help us improve the platform. bg9 uses first-party analytics tools for this purpose.
• Security cookies: Support fraud detection, login anomaly detection, and bot prevention functions.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use bg9. Blocking analytics and functional cookies will not prevent you from using the platform but may affect your experience.

8 Data Retention

bg9 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and thereafter as required by applicable regulatory obligations:

• Account data and gaming records: Retained for a minimum of 5 years following account closure, as required under standard international gaming authority record-keeping requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial record-keeping and AML obligations.
• KYC documentation: Retained for the duration of the member relationship and for a minimum period thereafter as required by regulatory frameworks.
• Responsible gaming records (self-exclusion): Self-exclusion records are retained indefinitely to prevent inadvertent re-registration by excluded members.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence compliance.

When retention periods expire, bg9 securely destroys or anonymises personal data in accordance with our internal data deletion procedures.

9 Your Data Rights

Subject to applicable law and the regulatory obligations that may override individual data rights in certain circumstances, you have the following rights in respect of your personal data held by bg9:

• Right of access: Request a copy of the personal data bg9 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where there is no lawful basis for continued retention. Note that regulatory retention requirements may prevent erasure of certain data categories.
• Right to restrict processing: Request that bg9 restricts processing of your data in certain circumstances, for example while a dispute is under investigation.
• Right to data portability: Request your personal data in a structured, machine-readable format where technically feasible.
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Withdraw consent to marketing communications at any time without affecting the lawfulness of prior processing.

10 Data Security

bg9 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include, but are not limited to:

• SSL/TLS encryption on all platform connections — all data in transit between your device and bg9 servers is encrypted.
• Hashed password storage — member passwords are stored using one-way cryptographic hashing algorithms. bg9 staff cannot access your password in plain text.
• Access controls — internal access to member personal data is restricted on a need-to-know basis using role-based access controls and authentication requirements.
• Anomaly detection — login anomaly detection systems monitor for unusual access patterns that may indicate account compromise.
• Regular security assessments — bg9 conducts periodic security reviews of its data processing systems and third-party integrations.

No data transmission over the internet or electronic storage system can be guaranteed as completely secure. While bg9 takes reasonable and appropriate steps to protect your data, we cannot guarantee absolute security against all threats. In the event of a data breach that is likely to affect your rights and freedoms, bg9 will notify affected members and applicable authorities in accordance with applicable requirements.

11 Children's Privacy

bg9 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account, return any verifiable funds, and securely delete the associated personal data.

12 International Data Transfers

bg9 may transfer personal data to service providers located outside Malaysia, including data centres, cloud hosting providers, game studios, and identity verification services. Where such transfers occur, bg9 ensures that appropriate safeguards are in place — including contractual data processing agreements and, where applicable, adherence to international gaming authority data transfer requirements — to maintain the same level of protection for your data regardless of where it is processed.

13 Changes to This Privacy Policy

bg9 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform services. Material changes will be communicated to registered members via the in-platform notification inbox and/or email to the registered address. The "Last updated" date at the top of this Policy reflects when the most recent revision was made.

Your continued use of the bg9 platform following the effective date of any revised Privacy Policy constitutes acceptance of the changes. If you do not accept the revised Policy, please discontinue use of the Platform and contact support to close your account.

14 Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or bg9's data processing practices, please contact us:

If you are not satisfied with bg9's handling of a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority or international gaming authority body applicable to your jurisdiction.