SSL Encryption

256-bit for all data transmitted and stored.

No Data Sales

Your information is never sold to any party.

Full Confidentiality

Data is only accessed by authorized personnel.

Secure Storage

Data servers are protected with multi-layered access controls.

User Rights

You can review, amend, or delete your data at any time.

PDPA Compliance

This policy complies with Malaysia's Personal Data Protection Act.

1Introduction

BP9C ("we", "Platform", "company") is committed to protecting the privacy and security of personal information of all members and visitors to our platform. This Privacy Policy explains our practices regarding the collection, use, storage, protection, and disclosure of your personal information when you use the bp9c.win website, our mobile app, or any related services.

This policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy standards. By accessing or using the bp9c platform, you agree to the data protection practices described in this document.

Our Commitment: BP9C does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data belongs to you — we only use it to deliver a better and safer platform experience.

2Data We Collect

BP9C collects various categories of personal information required to operate the platform safely and effectively. Below is a summary of the data we collect:

Data Category Example Information Primary Purpose
Personal Identity Full name, date of birth, MyKad number Identity verification (KYC)
Contact Information Email address, phone number Communication & support
Financial Information Bank account number, transaction records Payment processing
Usage Data Game history, login frequency Service improvement
Technical Data IP address, device type, operating system Security & fraud prevention
Location Data Country, region based on IP Regional regulatory compliance

Data We Do Not Collect

BP9C does not collect sensitive data categories such as health information, political affiliations, biometric data (except as required for KYC), or religious information. We also do not store credit/debit card details directly — all card transactions are processed through payment gateways certified to PCI-DSS standards.

3Data Collection Methods

We collect your personal information through several means:

  • Account registration: Information you provide when creating a bp9c account, including your name, email, and date of birth.
  • KYC verification: Identity documents you upload during mandatory verification processes, such as copies of your MyKad and bank statements.
  • Platform usage: Data automatically generated when you play games, make deposits, withdraw funds, or interact with the platform.
  • Cookies and tracking technologies: Information collected via cookies, web beacons, and similar technologies when you visit our website.
  • Support communication: Records of your conversations with the bp9c customer support team via live chat, email, or WhatsApp.
  • Third-party sources: In certain cases, we may receive data from identity verification providers or fraud prevention agencies for security purposes.

4Data Usage Purpose

BP9C uses your personal information for the following purposes, and no more than what is required for each purpose:

  • Account management: Creating, verifying, and maintaining your account on the bp9c platform.
  • Transaction processing: Processing deposits, withdrawals, and all financial activities securely and accurately.
  • Fraud prevention & security: Identifying and preventing fraudulent activity, money laundering, and unauthorised access to your account.
  • Legal compliance: Fulfilling legal obligations related to KYC, anti-money laundering (AML), and reporting to relevant authorities when required.
  • Product improvement: Analysing usage patterns to improve games, the interface, and the overall platform experience.
  • Service communication: Sending important notices regarding your account, policy updates, and security information.
  • Customer support: Handling enquiries, complaints, and assistance requests from members.
  • Marketing (with consent): Sending information about promotions, bonuses, and new games — only to members who have opted in to receive them.
Data Minimisation Principle: BP9C only collects data that is strictly necessary for the stated purposes. We do not collect excessive data and will delete data when it is no longer needed.

5Data Sharing

BP9C upholds the principle that your data is confidential. We do not sell or rent your personal information. However, in certain situations, we may need to share data with the following parties:

Trusted Service Providers

We share necessary data with third-party service providers who help us operate the platform, including payment gateway providers, identity verification services, cloud service providers, and game providers. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

Regulatory Authorities & Legal Compliance

BP9C may disclose your personal information to government authorities, law enforcement bodies, or judicial tribunals when required by law or court order. This includes reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

No Data Sales: BP9C has never and will never sell members' personal information to advertisers, data brokers, or any third party for commercial purposes. This is our unconditional commitment to all members.

6Data Storage & Security

BP9C uses industry-grade security infrastructure to protect your personal data from unauthorized access, disclosure, modification, or destruction.

  • 256-bit SSL encryption: All data transmitted between your device and bp9c servers is encrypted using TLS 1.3.
  • Encrypted storage: Sensitive data is stored in encrypted form on secure servers protected by multi-layered access controls.
  • Strict access controls: Only specifically authorised bp9c staff may access personal data, and all such access is logged and monitored.
  • 24/7 security monitoring: An active threat detection system monitors our platform around the clock to identify suspicious activity.
  • Regular security audits: The bp9c platform undergoes regular independent penetration testing and security audits.

Data Retention Period

We retain your personal data for as long as necessary for the purposes it was collected, or as required by law. Generally, financial transaction records are kept for a minimum of 7 years in line with Malaysia's legal requirements. Account data that has been inactive for 5 years or more may be deleted or anonymised after notice is given to the member.

7Cookie Policy

The bp9c platform uses cookies and similar tracking technologies to enhance user experience, analyze traffic, and ensure platform security. Below are the types of cookies we use:

Cookie Types Purpose Can Be Declined?
Important Maintaining login sessions, account security, and core platform functionality. No (required)
Functional Saving your language preferences, theme, and display settings. Yes
Analytics Understanding how users interact with the platform for improvement purposes. Yes

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the bp9c platform.

8Your Rights

As a bp9c member, you have the following rights regarding your personal data under Malaysia's PDPA:

Right of Access

You have the right to request a copy of all personal data we hold about you.

Right to Rectification

You may request correction of any inaccurate or incomplete information.

Right to Erasure

You may request deletion of your data under certain circumstances permitted by law.

Right to Object

You may object to data processing for direct marketing purposes at any time.

Right to Data Portability

You may request your data in a machine-readable format for transfer.

Right to Restriction

You may request that we restrict the processing of your data in certain situations.

To exercise any of the above rights, please contact our data protection team by email at [email protected]. We will process your request within 30 days of receipt.

9Children's Data

The bp9c platform strictly prohibits registration or use by individuals under the age of 18. We apply age verification during registration and KYC checks to ensure compliance with this minimum age requirement.

If we discover that we have inadvertently collected personal data from minors, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on the bp9c platform are asked to contact us immediately at [email protected].

10Third-Party Links

The bp9c platform may contain links to third-party websites or services, including game providers and payment gateways. This Privacy Policy applies only to the bp9c platform. We are not responsible for the privacy practices of any third party and encourage you to read the privacy policy of each third-party service you use.

11Cross-Border Data Transfers

In operating the platform's global operations, some of your personal data may be processed or stored on servers located outside Malaysia. When this occurs, BP9C ensures that such data transfers are carried out with protections equivalent to Malaysia's PDPA standards, including through appropriate data transfer agreements with the receiving parties.

Protection Guarantee: Regardless of where your data is physically processed, the level of protection we provide remains consistent with this Privacy Policy and bp9c's security standards.

12Privacy Policy Updates

BP9C reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. When we make significant changes, we will notify you via:

  • Prominent notices on the bp9c platform homepage.
  • Email notification to your registered email address at least 14 days before changes take effect.
  • In-app pop-up notifications at next login.

Continued use of the bp9c platform after a policy change takes effect will be considered your acceptance of the updated version. The "Updated" date at the top of this page indicates when this Privacy Policy was last reviewed.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the bp9c Data Protection Officer (DPO) via:

Data Protection Email
Live Support
Live Chat in the bp9c App (24/7)

We aim to respond to all privacy-related enquiries within 3 business days. For more complex requests such as data access or data deletion, processing may take up to 30 days.

Your Data is Safe with bp9c — Play with Peace of Mind

With 256-bit SSL encryption, a no-data-sale policy, and industry-grade security controls, you can enjoy over 1,500 games on bp9c without worrying about your privacy.

Bahasa Melayu