U9login Privacy Policy – Personal Data Protection for Malaysia Members

U9login ("we", "Platform") respects the privacy of every individual who uses our online entertainment platform. This Privacy Policy is designed to transparently explain how we handle your personal data — from how it is collected and how it is used, to who it may be shared with and how you can manage your own data.

As a platform operating in Malaysia and serving Malaysian users, u9login operates in full compliance with the Personal Data Protection Act (PDPA) 2010. This means we collect only what is necessary, use it solely for the stated purposes, and always keep you in control of your own information.

When you register a u9login account, make a deposit via Touch 'n Go eWallet, GrabPay, or DuitNow, place a bet on a Malaysia Super League football match, spin your favourite slots, or simply browse our platform — you may leave a data trail. This document explains what we do with that data and why.

U9login only collects data that is genuinely necessary to deliver a safe, fair, and responsible service. The following are the categories of data we may collect:

• We do not collect credit/debit card information directly. All financial transactions are processed through secure Malaysian payment providers.
• Biometric data (such as fingerprints or facial scans) is not collected by u9login.
• We may receive data about you from third-party sources such as KYC providers for identity verification purposes only.

Data collected is used solely for legitimate purposes necessary to operate the u9login platform. We do not use your data for purposes beyond the scope stated below without your consent.

• Account Management: Creating, verifying, and managing your u9login account, including the KYC process and age verification.
• Payment Processing: Securely processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks).
• Platform Security: Detecting and preventing fraud, money laundering, and unauthorised access to your account.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and recommending appropriate self-management tools.
• Service Communications: Sending important notifications related to your account, transactions, policy updates, and promotions you have subscribed to.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to improve the u9login user experience.
• Legal Compliance: To fulfil legal obligations including anti-money laundering (AML) reporting requirements and Malaysian tax compliance.

U9login does not sell, rent, or commercialise your personal data to any party. However, in certain limited situations, we may need to share data with the following parties:

• Malaysian Payment Providers: Transaction data required for processing is shared with providers such as Touch 'n Go, GrabPay, or the FPX network solely to process your deposits and withdrawals.
• Technology & Game Providers: Minimum technical data is shared with casino software providers (such as Evolution Gaming and Pragmatic Play) to ensure games function properly.
• Identity Verification (KYC) Provider: Identity information is shared with licensed KYC providers to fulfil new member verification requirements.
• Malaysian Authorities: u9login is required to disclose data to authorities (such as the police or courts) when ordered to do so under Malaysian law.
• Aggregate Data Analytics: Non-identifiable statistical data may be shared with analytics partners for platform improvement purposes.

U9login is fully invested in state-of-the-art security infrastructure to ensure your personal data is protected at all times. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser and u9login's servers are encrypted using the same standard as Malaysian online banking.
• Two-Factor Authentication (2FA): You can enable 2FA for an additional layer of security when logging in to your u9login account.
• 24/7 Monitoring: Our security systems continuously monitor for suspicious activity and will immediately block any unauthorised access attempts.
• Encrypted Passwords: Your account password is stored as an unreadable hash, not in plain text.
• Regular Security Audits: u9login conducts regular penetration testing by independent third parties to identify and address vulnerabilities.
• Internal Access Management: Staff access to member data is restricted on a need-to-know basis and is subject to regular audits.

U9login uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Essential Cookies (Required): Required for core platform functions such as login sessions, security, and language preferences. Cannot be disabled.
• Performance Cookies: Helps us understand how you use the u9login platform so we can improve navigation and speed.
• Optional Cookies: Storing your personal preferences such as game preferences, default bet size, and display settings.
• Analytics Cookies: Aggregates usage data to help us understand usage trends. These cookies do not identify individual users.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the core functionality of the u9login platform. For more information on managing cookies on your device, please refer to your browser's help guide.

As a data subject under PDPA Malaysia 2010, you have the following rights regarding the personal data held by u9login. We are committed to respecting and facilitating the exercise of these rights.

U9login is an entertainment platform strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from minors or underage individuals.

• All prospective members are required to confirm that they are at least 18 years of age at the time of registration.
• u9login applies an age verification process during KYC procedures to ensure all members meet the minimum age requirement.
• If we discover that a child's data has been collected inadvertently, it will be deleted immediately and the account in question will be terminated.
• Parents or guardians who believe their child has registered at u9login without authorisation are encouraged to contact us immediately at support@u9login.ws.

U9login retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active Account Data: For as long as your u9login account remains active. Data is updated as required.
• Financial Transaction Data: Minimum 7 years after the transaction, in line with Malaysia's tax and AML legal requirements.
• KYC & Verification Data: Minimum 5 years after account termination for legal compliance purposes.
• Security Logs: 12 months for access logs and account activity, for security and incident investigation purposes.
• Marketing Data: Until you withdraw consent or request deletion, whichever comes first.

Once the retention period has elapsed, data will be securely deleted or converted into an anonymised format that cannot be re-identified.

As u9login involves financial transactions in Malaysian Ringgit (RM), we have strict legal obligations regarding the processing of financial data. Here is how we handle privacy in the context of payments:

• All deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX are processed through secure, encrypted channels. u9login does not store your complete digital wallet account details.
• For withdrawals, we are required to verify the recipient's identity. This is standard procedure to prevent money laundering and ensure payments reach the correct person.
• The KYC process involves the collection and verification of identity documents. This data is transmitted through secure channels and stored with full encryption.
• Your financial information will not be shared with other members or external parties except as stated in Section 4 of this policy.

U9login reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new technologies we adopt.

• You will be notified of material changes via your registered email or a prominent in-platform notification on u9login at least 14 days before they take effect.
• Minor amendments (such as spelling corrections or clarifications) may take effect immediately.
• The "Last Updated" date at the top of this document will always reflect the most current version of the policy.
• Continued use of the u9login platform after any amendments take effect constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by u9login, please contact us through the following channels: