Privacy Policy
bg9 is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold over your own data as a player on our platform.
How bg9 Protects Your Data
Six principles that guide every data decision we make at bg9.
All data in transit is protected by 256-bit SSL/TLS encryption. Data at rest is stored in secured, access-controlled environments with strict internal access policies.
bg9 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used only to provide and improve our services.
You have the right to access, correct, export, and request deletion of your personal data at any time. bg9 processes all such requests within the timelines required by applicable data protection standards.
We collect only the data that is strictly necessary for account management, identity verification, fraud prevention, and regulatory compliance. No superfluous profiling.
Personal data is retained only as long as necessary for the purposes for which it was collected, or as required by applicable regulatory obligations — whichever is longer.
This Privacy Policy is written in clear English and explains every category of data we collect, why we collect it, and the legal basis on which processing occurs. No hidden clauses.
1 Introduction
This Privacy Policy ("Policy") describes how bg9 ("bg9", "we", "us", "our") collects, uses, discloses, and safeguards personal data in connection with your use of the bg9 platform accessible at bg9.cam and all related services, features, applications, and content (collectively, "the Services").
bg9 is committed to processing personal data in a manner that is lawful, fair, transparent, and consistent with applicable international data protection standards including, where applicable, the principles underlying the General Data Protection Regulation (GDPR) and the Malaysian Personal Data Protection Act 2010 (PDPA). This Policy is designed to inform you clearly about your rights and our obligations with respect to your personal information.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference.
2 Definitions
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
"Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.
"Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
"Data Subject" means the natural person to whom personal data relates — in the context of this Policy, this refers to you as a registered player or visitor to the bg9 platform.
"Data Controller" means the entity that determines the purposes and means of the processing of personal data. bg9 acts as the Data Controller with respect to all personal data collected through the Services.
"Third Party" means any natural or legal person, public authority, agency, or body other than the Data Subject, the Data Controller, or persons who, under direct authority of the Controller, are authorised to process personal data.
"Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes, by which they signify agreement to the processing of their personal data for one or more specified purposes.
3 Data Controller Information
bg9 acts as the Data Controller for all personal data collected and processed through the bg9.cam platform. bg9 operates under international online gaming licensing and is responsible for ensuring that personal data is handled in accordance with this Policy and applicable data protection requirements.
For all data protection enquiries, requests to exercise your rights, or to contact our data protection function, please use the contact details provided in Section 16 of this Policy.
4 Personal Data We Collect
4.1 Data Provided Directly by You
When you register, verify your account, or interact with bg9 support, you may provide the following categories of personal data:
- Identity Data: Full legal name, date of birth, gender, nationality, and a copy of your government-issued identification document (Malaysian IC/MyKad, Passport, or Driver's Licence);
- Contact Data: Email address, mobile phone number, and residential address;
- Financial Data: Payment method details sufficient to facilitate deposit and withdrawal processing — including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account details (Maybank, CIMB, Public Bank, Hong Leong), DuitNow IDs, and FPX reference information. Full payment credentials are not stored by bg9 — they are processed by certified payment processors;
- KYC Documentation: Utility bills, bank statements, and selfie photographs submitted for identity verification purposes.
4.2 Data Collected Automatically
When you access or interact with the bg9 platform, certain data is collected automatically, including:
- Technical Data: IP address, browser type and version, device type and identifier, operating system, and timezone;
- Usage Data: Pages visited, game sessions initiated, bet history, deposit and withdrawal records, login timestamps, and session durations;
- Behavioural Data: Clickstream patterns, game preference indicators, and navigation flows within the platform (used for responsible gambling monitoring and product improvement).
4.3 Data from Third Parties
We may receive supplementary verification data from licensed identity verification service providers and fraud screening services used during the KYC process. This data is used solely to fulfil our anti-money laundering (AML) and regulatory compliance obligations.
5 Legal Basis for Data Processing
bg9 processes personal data on the following legal bases:
6 How We Use Your Personal Data
bg9 uses the personal data it collects for the following purposes:
- To create, maintain, and administer your Account on the bg9 platform;
- To verify your identity and age (21+) in compliance with KYC and AML obligations prior to processing withdrawals;
- To process deposits and withdrawals via your selected Malaysian payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported bank channels;
- To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited activities;
- To deliver customer support services and resolve disputes through our 24/7 live chat and email channels;
- To monitor gaming patterns for responsible gambling purposes, including the application of deposit limits, self-exclusion requests, and mandatory cooling-off periods;
- To send you account-related notifications, security alerts, and transaction confirmations;
- To send promotional communications, where you have provided valid consent, which you may withdraw at any time;
- To improve our platform, products, and user experience through aggregated, anonymised analytics;
- To comply with all applicable legal, regulatory, and licensing obligations.
7 Data Sharing & Third-Party Disclosure
7.1 Service Providers
bg9 engages trusted third-party service providers who process personal data on our behalf, strictly in accordance with data processing agreements that bind them to confidentiality and security obligations equivalent to those described in this Policy. Such providers include:
- Payment processors handling e-wallet (Touch 'n Go eWallet, Boost, GrabPay) and bank transfer transactions;
- Licensed KYC and identity verification service providers;
- Fraud detection and risk management platforms;
- Customer support software providers;
- Cloud infrastructure and data hosting providers;
- Game content providers supplying certified slots, live casino, and other game categories.
7.2 Legal and Regulatory Disclosure
bg9 may disclose personal data to law enforcement agencies, regulatory authorities, licensing bodies, or courts where such disclosure is required or authorised by applicable law, or where we reasonably believe disclosure is necessary to protect the rights, safety, or property of bg9, its players, or the public.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bg9's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected users will be notified prior to the transfer where required by law.
8 Cookies & Tracking Technologies
8.1 What Are Cookies
Cookies are small text files placed on your device when you access a website. bg9 uses cookies and similar tracking technologies (such as local storage and session tokens) to maintain your login session, remember your preferences, detect fraud, and analyse platform usage.
8.2 Types of Cookies We Use
- Essential Cookies: Required for the platform to function correctly, including authentication tokens and session management. These cannot be disabled without affecting your ability to use the Services;
- Functional Cookies: Used to remember your preferences such as language settings and display options;
- Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform to help us improve the experience;
- Security Cookies: Used to detect and prevent fraudulent login attempts and unusual account activity.
8.3 Managing Cookies
You may configure your browser to refuse or delete cookies, though doing so may impair certain functions of the bg9 platform, including the ability to stay logged in. Essential cookies cannot be disabled without exiting the platform entirely.
9 Data Retention
bg9 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following general retention principles apply:
- Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML retention obligations;
- KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by the licensing authority;
- Transaction Records: Retained for a minimum of seven (7) years for financial compliance and audit purposes;
- Support Communications: Retained for up to three (3) years from the date of the last interaction;
- Marketing Consent Records: Retained until consent is withdrawn, plus an additional record-keeping period.
Where retention is no longer required by law or legitimate business purposes, personal data is securely deleted or anonymised.
10 International Data Transfers
As an internationally licensed gaming operator, bg9 may transfer personal data to service providers and infrastructure located outside Malaysia. Where such transfers occur, bg9 ensures that appropriate safeguards are in place, including:
- Contractual data processing agreements incorporating standard data protection clauses;
- Transfers to jurisdictions recognised as providing an adequate level of data protection;
- Technical and organisational security measures appropriate to the data being transferred.
By registering on the bg9 platform, you acknowledge that your personal data may be processed and stored in jurisdictions other than Malaysia.
11 Your Data Subject Rights
You have the following rights with respect to your personal data held by bg9. To exercise any of these rights, please contact us using the details in Section 16.
Request a copy of the personal data bg9 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your account profile.
Request deletion of your personal data, subject to our legal retention obligations under AML and licensing requirements.
Request that processing of your data be restricted in certain circumstances, such as during dispute resolution.
Receive your personal data in a structured, machine-readable format where technically feasible and legally applicable.
Object to processing of your data based on legitimate interests, including direct marketing and profiling.
12 Children & Minors
The bg9 platform is strictly intended for individuals aged 21 years and above. bg9 does not knowingly collect or process personal data from any person under the age of 21. Age verification is conducted as part of the KYC process for all players prior to withdrawal processing.
If bg9 discovers or reasonably suspects that personal data has been collected from an individual under 21 years of age, the associated Account will be immediately suspended, all balances reviewed, and the personal data securely deleted in accordance with applicable data protection obligations. Any deposits made through a minor's account will be returned after verification.
13 Security Measures
bg9 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the bg9 servers;
- Encrypted storage of sensitive personal and financial data at rest;
- Role-based access controls restricting staff access to personal data on a strict need-to-know basis;
- Multi-factor authentication for internal system access by bg9 personnel;
- Regular security audits, penetration testing, and vulnerability assessments by qualified third parties;
- Incident response procedures for detecting, reporting, and managing data breaches.
While bg9 takes all reasonable precautions, no method of electronic transmission or storage is entirely secure. Players are also responsible for maintaining the security of their own account credentials and devices.
14 Third-Party Links & Services
The bg9 platform may contain references to or integrations with third-party payment providers (such as Touch 'n Go eWallet, Boost, GrabPay, and banking partners) and game content providers. These third parties operate under their own privacy policies, over which bg9 has no control.
bg9 is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the bg9 platform.
15 Amendments to This Policy
bg9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The effective date at the top of this page indicates when the most recent version was published.
Where amendments are material, bg9 will provide reasonable prior notice to registered account holders via email or a prominent platform notification. Your continued use of the Services after the effective date of any amendment constitutes your acceptance of the updated Policy.
If you do not agree to the updated terms, you must cease using the platform and may request account closure by contacting our support team.
16 Contact Us & Complaints
For all privacy-related enquiries, requests to exercise your data subject rights, or to raise a complaint about how your personal data has been handled, please contact bg9 using the following channels:
Live Chat: Available 24/7 directly within the bg9 platform — average response under 2 minutes.
Email: [email protected]
We serve players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. All privacy-related communications are handled in English.
bg9 will acknowledge all formal privacy complaints within five (5) business days and endeavour to resolve them within thirty (30) days. Where a complaint cannot be resolved to your satisfaction, you may have the right to escalate the matter to the relevant supervisory authority in your jurisdiction.
Play at bg9 with Full Confidence
Your data is safe with us. bg9 combines world-class security with the fastest local Malaysian payment methods — from Touch 'n Go to DuitNow. Join thousands of players across KL, Penang, and JB today.
21+ only. Play responsibly. Players are responsible for complying with their local laws.