Privacy Policy – Personal Data Protection for 9asia Users

Personal Data We Collect

9asia collects your personal data from several sources — directly from you during registration and platform use, automatically via tracking technologies as you browse our platform, and in some cases from legitimate third parties such as payment service providers.

Data You Provide Directly:

• Registration information: Your full name, date of birth, Malaysian phone number, email address, and the password you chose when registering your 9asia account.
• Identity verification information: Your national identity card number (MyKad) or other identity document that may be requested for age verification or enhanced account verification purposes at 9asia.
• Payment information: Details relating to the payment method you use — the account holder name for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or the FPX account number (Maybank2u, CIMB Clicks) you registered for transactions on 9asia. We do not store credit or debit card numbers directly.
• Communications with the support team: The contents of any live chat, email, or other communications you send to the 9asia support team.

Automatically Collected Data:

• Log and technical data: Your IP address, web browser type, device operating system (Android, iOS, Windows), access time and date, pages visited within the 9asia platform, and session duration.
• Game activity data: A complete record of all sports bets, Live Casino games, slots, fishing games, and esports activities conducted through your 9asia account — including the amount, outcome, and timestamp of each transaction.
• Approximate location data: General country and regional information derived from your IP address, used to determine geographic eligibility for our services and to meet 9asia's risk control requirements.

We do not collect sensitive data such as health information, religious beliefs, or political views. Data collected is limited to what is necessary to provide and improve 9asia's services to you.

How We Use Your Data

9asia uses the personal data it collects for the following purposes, all of which are directly related to delivering our services to you:

• Account operations and identity verification: To create and manage your 9asia account, verify that you meet the minimum age requirement of 21 years, and ensure that only the legitimate account holder can access the account.
• Processing financial transactions: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and manages the withdrawal of your winnings in MYR to your registered payment method.
• Provision of betting and gaming services: Managing your sports betting (Malaysia Super League, EPL, cricket, badminton, MPL Malaysia esports), Live Casino games, slots, and all other products you use on the 9asia platform.
• Security and fraud prevention: Detecting and preventing fraudulent activity, multi-account use, bonus abuse, and any activity that violates 9asia's Terms & Conditions.
• Customer support: Addressing inquiries, resolving complaints, and providing technical assistance via live chat, email, or any other 9asia support channel.
• Responsible gaming: Monitoring activity patterns to identify signs of problem gambling and providing appropriate interventions or self-exclusion tools in line with 9asia's responsible gaming commitment.
• Service communications: Sending important account updates, terms notifications, security alerts, and relevant promotions based on your stated preferences.
• Platform improvements: Analysing usage data in aggregate (without identifying individuals) to understand how users interact with 9asia and to make meaningful improvements to the user experience.

9asia will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

Data Sharing & Disclosure

9asia does not sell, rent, or commercialise users' personal data to any party for marketing or advertising purposes. However, there are limited circumstances where we need to share your data with specific parties to keep the platform running:

• Payment service providers: To process your deposits and withdrawals, the necessary information is shared with the relevant payment provider — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or your chosen FPX bank. This sharing is kept to a minimum and is solely for transaction processing purposes.
• Game and technology providers: Game providers such as Evolution Gaming, PG Soft, Pragmatic Play, JILI Games, SA Gaming, and Spribe receive the minimum technical data required to run games fairly and securely on the 9asia platform.
• Legal requirements: 9asia may disclose user data to the relevant authorities where required by Malaysian law, court order, or to fulfil legitimate compliance obligations. In such circumstances, we will notify you where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of 9asia's assets, user data may be transferred as part of that transaction. Users will be notified before their data becomes subject to a different privacy policy.

Data Security Measures at 9asia

The security of user data is 9asia's highest technical priority. We implement multiple layers of security to protect your information from unauthorised access, loss, or misuse:

• Data encryption in transit: All communications between your device and 9asia's servers are encrypted using TLS 1.3 with 256-bit SSL certificates. This ensures your data remains unreadable even if it is intercepted.
• Stored data encryption: Sensitive data stored in 9asia's databases — including passwords and payment details — is encrypted using strong encryption algorithms. Passwords are never stored in plain text.
• Two-factor authentication (2FA): 9asia supports two-factor authentication for an added layer of security on user accounts. We encourage all users to enable this feature from their account settings.
• Continuous security monitoring: 9asia's monitoring systems operate 24 hours a day to detect suspicious activity, unauthorised login attempts, and any potential security threats.
• Internal access controls: Access to user data within 9asia is restricted to staff who require it to perform their duties, based on a strict need-to-know basis.
• Regular security assessments: 9asia conducts regular security audits and penetration testing to identify and address potential vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system is entirely impenetrable. We encourage users to take their own precautions as well — such as using a strong password, not sharing login credentials, and promptly reporting any suspicious activity to 9asia.

Cookies & Tracking Technologies

The 9asia platform uses cookies and similar tracking technologies to enhance the user experience, maintain account security, and understand how the platform is used. Below is an explanation of the types of cookies we use:

You can manage or delete cookies through your web browser settings. However, blocking essential cookies may affect the functionality of the 9asia platform — you may be unable to log in or use certain features properly. Analytics and preference cookies can be disabled without affecting core platform functionality.

9asia does not use third-party cookies for advertising or cross-site tracking purposes. All cookies we use are first-party cookies fully controlled by 9asia.

Your Rights as a 9asia User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and 9asia's commitment to user privacy, you have the following rights regarding the personal data we hold about you:

• Right to Access Data: You may request a copy of the personal data we hold about you. 9asia will provide this information within 14 business days of receiving a valid request.
• Right to Rectification: If you believe the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. We will update the relevant data within a reasonable timeframe.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal.
• Right to Object to Processing: You may object to the processing of your data for specific purposes, such as direct marketing communications. We will cease such processing immediately unless there are legitimate grounds that override your interests.
• Right to Request Data Erasure: You may request the deletion of your personal data from 9asia's systems. Such requests will be processed subject to legal retention requirements and legitimate operational needs — for example, financial records may need to be retained for a specified period under applicable Malaysian law.

To exercise any of the rights above, please contact the 9asia data protection team by email at support@9asia.click with the subject line "Personal Data Request" or via live chat on the platform. We may need to verify your identity before processing the request to ensure your data remains secure.

Data Retention Period

9asia retains users' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: For as long as your 9asia account remains active, we retain all relevant data to ensure the platform continues to function properly for you.
• Financial transaction records: In accordance with Malaysian financial regulatory requirements, records of deposits, withdrawals, and financial activity on 9asia are retained for a minimum of seven (7) years from the date of the transaction, even after an account is closed.
• Identity verification data: Identity verification documents and age verification records are retained for the duration of the active account period plus six (6) years for compliance and audit purposes.
• Support communication logs: Communication records with the 9asia support team are retained for three (3) years for reference and dispute resolution purposes.
• Technical data and logs: Technical logs and platform activity data are typically retained for 90 days to 12 months, unless a longer period is required for ongoing security investigations or disputes.
• Closed account data: After a 9asia account is closed at the user's request, data not subject to legal retention requirements will be deleted or anonymised within 90 days.

Once the specified retention period has elapsed and there are no legal or operational grounds for further retention, 9asia will permanently delete or irreversibly anonymise the data.

Amendments to This Privacy Policy

9asia reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or improvements to the platform. The notification procedure is as follows:

• Significant changes to how we handle your personal data will be communicated via in-platform notifications on 9asia and/or by email to your registered address, with at least 7 days' notice before the changes take effect.
• Minor amendments that do not materially affect your privacy rights may take effect immediately, with the date at the top of this document updated accordingly.
• Continued use of the 9asia platform after the effective date of any amendment constitutes acceptance of the revised policy.
• The latest version of the Privacy Policy is always available on this page. You are encouraged to check this page periodically.

If you have any questions about this Privacy Policy or how 9asia handles your personal data, please contact us at support@9asia.click. We will endeavour to respond to all privacy-related enquiries within three (3) working days.