Bg9 Privacy Policy – Personal Data Protection for Malaysian Users

Bg9 ("we", "the Platform") is an online sports betting and entertainment platform operating for users in Malaysia. We understand that your trust in how we handle your personal information is the foundation of the relationship we build with every member.

This Privacy Policy explains in detail how BG9 collects, processes, stores, and protects your personal data when you register, log in, and use our platform. It also outlines your rights as a data subject and how you may exercise those rights.

Bg9 is committed to complying with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia. We only collect data that is genuinely necessary for legitimate purposes, and we never sell your personal data to any third party for marketing purposes.

Bg9 collects various categories of personal data depending on how you interact with our platform. The table below outlines the categories of data collected and the purposes for which they are collected:

Bg9 does not collect sensitive data such as medical information, political views, religious beliefs, or sexual orientation. We only collect data that is necessary to operate the platform safely and in compliance with the law.

Bg9 collects your personal data through several different channels as you interact with our platform:

• Direct account registration: The information you provide in the registration form — name, email, phone number, date of birth, and password — is collected directly from you.
• Identity verification (KYC): When you submit identity verification documents such as your MyKad or passport to meet KYC requirements, the information contained in those documents is recorded in our system.
• Financial transactions: Transaction-related data for deposits and withdrawals is collected when you transact via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX online banking services such as Maybank2u and CIMB Clicks.
• Platform usage: bg9 systems automatically record your usage activity — matches you bet on, games you play (football, badminton, e-sports, slots, live casino, lottery), login times, and in-platform navigation.
• Cookies and tracking technologies: The BG9 platform uses cookies and similar technologies to collect technical data about your device and usage patterns. See Section 8 for more information.
• Communications with the support team: When you contact the bg9 support team via Live Chat or email, records of those communications are retained for reference and service quality improvement purposes.
• Authorised third parties: In certain cases, bg9 may receive data from authorised third parties such as identity verification service providers or payment gateways for transaction verification purposes.

BG9 uses the personal data collected for the following purposes, all of which are lawful under the provisions of applicable legislation:

• Account management and identity verification: To create and manage your account, verify your identity during registration and KYC checks, and keep your account secure against unauthorised access.
• Financial transaction processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals to your Malaysian bank account or e-wallet. Financial data is required to ensure every transaction is processed correctly and securely in Malaysian Ringgit (MYR).
• Platform service delivery: To give you access to all features on the BG9 platform — Sports Betting, Live Casino, slots, 4D lottery, and all other services offered.
• Security and fraud prevention: To detect and prevent fraud, money laundering, and other unlawful activities. Usage and technical data are analysed to identify suspicious patterns.
• Legal and regulatory compliance: To fulfil legal obligations including KYC/AML (Anti-Money Laundering) requirements, reporting to authorities when required by law, and compliance with Malaysia's PDPA.
• Customer support: To assist you when you contact the bg9 support team, resolve complaints, and improve the user experience based on feedback received.
• Service communications: To send important notifications related to your account, such as deposit confirmations, winning alerts, security reminders, and policy updates. These are necessary service communications, not marketing.
• Marketing and promotions (with consent): With your consent, BG9 may send you information about the latest promotions, bonuses, and special offers relevant to your interests. You may withdraw this consent at any time.
• Platform improvements: To analyse usage patterns and improve the interface, functionality, and performance of the bg9 platform so that the user experience is continually enhanced.

BG9 does not sell, rent, or disclose your personal data to any third party for their own marketing purposes. However, in certain legitimate circumstances, BG9 may share your data with the following categories of third parties:

• Payment service providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay providers, and banks handling FPX such as Maybank and CIMB. Data sharing is limited strictly to the information required to process the transaction.
• Identity verification service providers: KYC service providers that assist us in verifying user identities in accordance with compliance requirements. Data shared is limited strictly to the identity documents required for the verification process.
• Technical service providers: Companies that provide technical infrastructure for the bg9 platform — including server hosting, data analytics (in anonymised form), and cybersecurity. All such providers are bound by strict data protection agreements.
• Game providers: Live Casino and slots game providers working with bg9 may receive the minimum game transaction data required to operate those games. Users' personal data is not shared beyond what is necessary for game operations.
• Legal authorities: bg9 will disclose user data to Malaysian authorities or regulatory bodies when required by law, court order, or a valid official investigation.

Every third party that receives bg9 user data is bound by a data protection agreement ensuring they handle such data to the same standards as bg9. bg9 is not responsible for the privacy practices of third parties that fall outside the scope of the agreed data protection arrangements.

Protecting your personal data is bg9's highest priority. We continuously invest in the latest security infrastructure to keep your data safe at all times.

The technical and organisational security measures bg9 uses to protect your data include:

• 256-bit SSL Encryption: All data transmitted between your device and BG9's servers is protected with 256-bit SSL encryption — the same standard used by Malaysia's major banks. This ensures no third party can intercept or read your data in transit.
• Data encryption at rest: Sensitive data including financial information and identification documents is stored in encrypted form within BG9's database. Data is never stored as plain readable text.
• Strict access controls: Only BG9 staff with a legitimate business need are permitted to access users' personal data. All access is logged and continuously monitored.
• Two-factor authentication (2FA): BG9 supports and encourages the use of two-factor authentication for all member accounts. BG9 internal staff who handle sensitive data are required to use 2FA.
• 24/7 security monitoring: bg9's cybersecurity team monitors the platform continuously to detect any threats, intrusion attempts, or suspicious activity. Automated alert systems trigger an immediate response upon threat detection.
• Regular security testing: bg9 conducts regular penetration testing and security audits carried out by qualified independent cybersecurity firms to identify and address potential vulnerabilities.
• Secure data backups: User data is regularly backed up to a secure, separate location to ensure service continuity and data protection in the event of a system failure.

While bg9 takes all reasonable steps to protect your data, no system can guarantee absolute 100% security. You also have a responsibility to keep your account safe — use a strong password, never share your login details, and enable two-factor authentication. Contact us immediately at support@bg9.world if you suspect any suspicious activity on your account.

Bg9 does not retain your personal data for longer than is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. bg9's data retention policy is as follows:

• Active account data: Personal data for active accounts is retained for as long as the account remains active and the member continues to use the bg9 platform.
• Data following account closure: When an account is closed — whether voluntarily or for other reasons — BG9 retains personal data and transaction records for a minimum of 7 years following closure. This is a legal requirement for AML compliance and financial reporting purposes.
• Financial transaction records: All deposit and withdrawal transaction records are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Customer support communication records: Records of interactions between members and the BG9 support team are retained for 3 years from the date of the interaction, for reference and complaint resolution purposes.
• System and security log data: System access and activity logs are retained for 12 months for security and technical troubleshooting purposes.
• Marketing data: Data used for marketing communications (with consent) is retained until you withdraw that consent. Once consent is withdrawn, marketing data will be deleted within 30 days.

Once the defined retention period has elapsed and there is no other legal obligation to retain the data, bg9 will delete or destroy it securely and irreversibly.

The bg9 platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and analyse usage patterns. Cookies are small data files stored on your device when you visit the bg9 platform.

BG9 uses four main categories of cookies:

You can control or disable cookies through your browser settings. Please note, however, that disabling certain cookies — particularly essential and security cookies — may affect the functionality and security of the bg9 platform. bg9 is not responsible for any issues arising from a user's choice to disable required cookies.

As a registered bg9 user in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) of Malaysia. bg9 respects and facilitates the exercise of these rights:

To exercise any of the rights above, send a written request to support@bg9.world with the subject line "Data Privacy Rights Request", along with proof of your identity. BG9 will process your request within the timeframes prescribed by applicable law and will contact you if any additional information is required.

The BG9 platform is intended solely for adults aged 18 and above. BG9 does not knowingly collect or process personal data of individuals under the age of 18.

If you believe a minor has registered an account or provided personal data to bg9, please contact us immediately at support@bg9.world. bg9 will take prompt action to verify and delete the relevant data and close the account if it is confirmed to have been registered by an individual under age.

Parents and guardians are encouraged to monitor their children's online activity and ensure they do not access platforms intended for adults, such as BG9.

Bg9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the way we handle user privacy.

When significant amendments are made, bg9 will take the following steps to notify you:

• Updating the "Last Updated" date at the top of this Privacy Policy.
• Publishing clear notices on the BG9 platform to inform users of any changes that have been made.
• Sending notification emails to all registered members outlining the key changes taking effect.
• For amendments that require your renewed consent, bg9 will actively obtain that consent before the changes take effect for you.

You are responsible for reviewing this Privacy Policy periodically. Continued use of the bg9 platform after any amendments are published will be considered acceptance of the updated privacy terms, unless those amendments require your fresh consent, in which case we will obtain it separately.

If you have any questions, concerns, or complaints about how BG9 handles your personal data, we encourage you to reach out to us directly. BG9's data privacy team is ready to assist and committed to addressing every inquiry seriously and within a reasonable timeframe.

You can reach bg9 regarding privacy matters through the following channels:

• Email: support@bg9.world (use the subject line "Data Privacy Enquiry" to speed up processing)
• Live Chat: Available 24/7 within the bg9 platform — select the "Privacy & Security" category
• Ticket system: In your bg9 account, select "Submit a Ticket" and choose the "Data Privacy" category

Bg9 is committed to responding to all privacy-related inquiries within 5 business days. For formal requests concerning user rights (access, correction, deletion), the full process will be completed within 21 business days from the date a valid request is received along with the required proof of identity.