bgrich Privacy Policy

This Privacy Policy ("Policy") is issued by bgrich ("bgrich", "we", "us", "our"), the operator of the online gambling and sports betting platform accessible at bgrich.cam ("Platform", "Website"). This Policy describes how bgrich collects, uses, stores, shares, and protects personal information provided by or relating to users of the Platform ("you", "Player", "User").

bgrich is committed to handling your personal data responsibly and in compliance with applicable data protection legislation, including principles aligned with the General Data Protection Regulation (GDPR) and relevant Malaysian personal data protection frameworks.

By accessing or using the bgrich platform — including registering an account, making a deposit, placing a wager, or engaging our customer support — you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. Where consent is the legal basis for processing, you may withdraw consent at any time, subject to the conditions in Section 8.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly — including name, identification number, email address, IP address, and financial information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, bgrich.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC Data" means identity and address verification documents collected under the Know Your Customer process, including government-issued identification, proof of address, and selfie photographs.
• "Transactional Data" means records of deposits, withdrawals, wagers, bonus activations, and payment method details associated with your Account.
• "Technical Data" means information automatically collected when you access the Platform, including IP address, browser type, operating system, device identifiers, and session data.
• "Cookies" means small data files placed on your device by the Platform for session management, analytics, and preference storage purposes.

bgrich collects Personal Data through several means: directly from you during registration and use of the Platform, automatically through technical systems, and in limited cases from third-party verification services. The categories of data we collect are as follows:

3.1 Registration Data

When you create an Account on bgrich, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This data is required to establish your Account and verify your identity.

3.2 KYC Verification Data

To comply with anti-money laundering (AML) and responsible gambling obligations, we collect identity verification documents including copies of your Malaysian MyKad (IC), Driver's License or Passport, proof of residential address (utility bill or bank statement dated within three months), and a selfie photograph holding your identity document.

3.3 Transactional & Financial Data

We record all deposits and withdrawals, including the payment method used (e.g., Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Visa/Mastercard, or cryptocurrency wallet addresses), transaction amounts in MYR, timestamps, and reference numbers.

3.4 Gameplay & Betting Data

We maintain records of all wagers placed, games played, bonus activations, and betting history. This data is used for account management, dispute resolution, and regulatory compliance.

3.5 Technical & Usage Data

When you access the Platform, we automatically collect your IP address, device type and identifier, browser type and version, operating system, pages visited, time spent on pages, and session duration. This data helps us maintain platform security, detect fraudulent access, and improve user experience.

3.6 Communications Data

If you contact our customer support team via live chat, WhatsApp, or email, we retain records of those communications for quality assurance, staff training, and dispute resolution purposes.

bgrich processes your Personal Data for the following purposes:

bgrich will not use your Personal Data for any purpose incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

bgrich processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bgrich — including account management, payment processing, and providing gambling services.
• Legal Obligation: Processing required by applicable law, including AML regulations, KYC obligations, and regulatory reporting requirements imposed on licensed gambling operators.
• Legitimate Interests: Processing necessary for bgrich's legitimate business interests, including fraud detection, platform security, and analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit, informed, and freely given consent to specific processing activities — such as receiving marketing communications or non-essential analytics. You may withdraw such consent at any time by contacting our support team or adjusting your account settings.

bgrich does not sell, rent, or trade your Personal Data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment Processors: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Visa/Mastercard, and cryptocurrency networks. These processors receive only the minimum data necessary to execute the transaction.
• Identity Verification Providers: Third-party KYC verification services used to authenticate identity documents and screen against sanctions lists. These providers are contractually bound to process data solely for the purpose of verification.
• Game Studios & Software Providers: Licensed game providers may receive pseudonymised Player identifiers and gameplay data for RNG certification, dispute resolution, and game performance monitoring. No directly identifiable data is shared beyond what is operationally necessary.
• Fraud Prevention & Security Services: Specialist providers engaged to detect and prevent account fraud, bonus abuse, and money laundering. Data shared is limited to transaction patterns and device signals.
• Regulatory Authorities: bgrich may be legally obligated to disclose Personal Data to financial regulators, gaming authorities, or law enforcement agencies upon receipt of a lawful request or court order.
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

Any third party receiving Personal Data from bgrich is required to implement appropriate technical and organisational security measures and is prohibited from using that data for any purpose other than that for which it was shared.

bgrich retains Personal Data for the periods set out in the table below. Retention periods are determined by the purpose of collection, applicable legal requirements, and the limitation periods applicable to potential legal claims.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is not technically feasible, data will be rendered inaccessible pending secure deletion.

Subject to applicable law and certain limitations, you have the following rights in relation to your Personal Data held by bgrich. To exercise any of these rights, please contact our Data Protection team at [email protected]. We will respond within thirty (30) calendar days of receiving a verified request.

Please note that certain rights are subject to limitations where bgrich has overriding legal obligations — particularly in relation to AML compliance, fraud prevention, and regulatory record-keeping requirements. Where a request cannot be fulfilled in full, we will explain the applicable limitation in our response.

bgrich uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website to store information about your visit. Cookies do not contain executable code or viruses.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences (e.g., language selection, display settings) to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Players use the Platform — including pages visited, time on site, and navigation paths. This data is used to improve platform performance and usability.
• Security & Fraud Prevention Cookies: Support our fraud detection systems by tracking device fingerprints, IP addresses, and behavioural signals associated with known attack patterns.

You may configure your browser to refuse all or certain cookies, or to alert you when cookies are being set. Please note that disabling strictly necessary cookies may prevent you from accessing core platform features including account login and game play. Disabling analytics cookies will not affect your access to the Platform but will limit our ability to improve user experience based on aggregate usage data.

bgrich implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption on all data in transit between your device and our servers.
• Encryption at rest for sensitive data including KYC documents, financial records, and account credentials.
• Access controls ensuring that staff can only access Personal Data on a strict need-to-know basis, with all access logged and auditable.
• Multi-factor authentication for internal systems handling sensitive Player data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
• Incident response procedures for detecting, containing, and reporting data breaches in accordance with applicable regulatory requirements.
• Staff training on data protection obligations and secure data handling practices.

Despite these measures, no data transmission over the internet or storage system can be guaranteed as completely secure. In the event of a data breach affecting your rights and freedoms, bgrich will notify affected individuals and relevant regulatory authorities in accordance with applicable data protection law.

bgrich's primary data infrastructure is hosted in secure, access-controlled data centres. Where Personal Data is transferred to or accessed from countries outside Malaysia or the European Economic Area (EEA), bgrich ensures that appropriate safeguards are in place to provide a level of data protection equivalent to applicable standards.

Safeguards used for international transfers may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules where applicable, and adequacy determinations. Where transfers are made to third-party service providers in other jurisdictions, those providers are contractually required to implement equivalent technical and organisational data protection measures.

The bgrich platform is strictly for users aged 21 years and above. We do not knowingly collect Personal Data from any individual under the age of 21. If we become aware that Personal Data has been collected from a minor, we will immediately close the associated Account, forfeit any remaining balance, and securely delete the data without undue delay.

If you have reason to believe that a minor has registered an Account on bgrich using false information, please contact our support team immediately at [email protected].

The bgrich Platform may contain references to or integrations with third-party services, including game providers and payment processors. bgrich is not responsible for the privacy practices of any third party, and this Policy does not govern data collected or processed by third parties on their own platforms or systems.

Where you interact with a third-party service accessible through or in connection with the bgrich Platform, you do so at your own discretion and subject to that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party service you engage with.

bgrich reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where amendments are material — i.e., where they significantly affect Player rights or the scope of data processing — we will notify registered Players via email or in-platform notification prior to the changes taking effect.

The effective date at the top of this Policy will be updated whenever a revision is published. The most current version of this Policy will always be available at bgrich.cam/privacy-policy. Your continued use of the Platform following notification of an amendment constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Data Protection team through the following channels. All contact details are provided as plain text — please use live chat for the fastest response.

• Live Chat: Available 24/7 within the bgrich platform — average response time 3–5 minutes.
• Email: [email protected] — responses within 30 days for data subject requests, 24 business hours for general queries.
• Languages: Support available in English, Bahasa Melayu, and Mandarin Chinese.

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. bgrich is committed to co-operating with regulators and resolving complaints in good faith.

For responsible gambling queries — including self-exclusion, deposit limits, or account restrictions — please visit our Responsible Gambling page.