U9Play Privacy Policy – Data Protection for Malaysian Players

U9Play is an online entertainment platform offering casino, Sports Betting, e-sports, and table game services to players in Malaysia. To operate these services, we need to collect and process certain personal information relating to you.

We understand that privacy matters deeply to users in Malaysia. Your trust is the foundation of our relationship, and we are committed to handling your personal data in a transparent, responsible, and secure manner.

This Privacy Policy applies to all users of the U9Play platform, including visitors who browse our website without registering an account, as well as all registered members. It covers all data collected through our website, mobile application (where applicable), and any communications between you and U9Play.

U9play operates in accordance with internationally recognised data protection principles and respects the privacy needs of Malaysian users. This Privacy Policy forms part of Terms & Conditions full U9Play and should be read together with that document.

U9Play collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

Data You Provide Directly:

• Registration Data: Full name, Malaysian phone number, password (stored in encrypted form).
• Identity Verification Data (KYC): National ID number (MyKad), facial image or selfie for verification, and a copy of your identity document if required for large withdrawals.
• Financial Data: Payment method details you use – eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, and bank account details for FPX (Maybank2u, CIMB Clicks).
• Communication Data: The content of messages you send to our customer support team via live chat or email.

Automatically Collected Data:

• Technical Data: IP address, web browser type, device type and model, operating system, screen resolution.
• Usage Data: Pages visited, games played, session duration, in-platform actions, betting patterns.
• Location Data: General location based on IP address (country and region) – we do not collect precise GPS location data.
• Cookie Data: Information stored via cookies and similar tracking technologies to improve the user experience.

U9Play uses the personal data we collect for the following purposes, all of which are lawful and necessary for the provision of our services:

Platform Operations:

• Creating and managing your member account on the U9Play platform.
• Verifying your identity and age (18 and above) as required under our responsible gaming policy.
• Processing deposits and withdrawals in Malaysian Ringgit (MYR) via local payment methods.
• Settling bets, calculating winnings, and crediting funds to your account.
• Providing customer support in both Bahasa Malaysia and English.

Security & Fraud Prevention:

• Identifying and preventing fraud, money laundering, and platform abuse.
• Detecting and investigating multiple accounts held by the same individual.
• Monitoring unusual transaction patterns for member protection purposes.
• Complying with applicable anti-money laundering (AML) legal requirements.

Service Improvement:

• Analysing usage patterns to improve the interface and overall gaming experience.
• Developing new features that better suit the needs of Malaysian players.
• Optimising platform performance for the data connections and devices commonly used in Malaysia.

Communication:

• Sending transaction-related information such as deposit confirmations and withdrawal notifications.
• Notifying you of changes to the Terms & Conditions or Privacy Policy.
• Sending promotional information and bonuses — only if you have opted in to receive them.

U9Play does not sell, rent, or trade your personal information to any party for marketing purposes. However, in the course of operating the platform, we may share your personal data with the following parties under limited and controlled circumstances:

Technical Service Providers:

• Payment Processing Providers: Transaction information is shared with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX providers (Maybank, CIMB, and others) to process your deposits and withdrawals. This sharing is kept to the minimum necessary and is subject to strict confidentiality agreements.
• Game Providers: Necessary technical data may be shared with third-party game providers (such as Pragmatic Play and PG Soft) to ensure smooth gameplay sessions and for dispute resolution purposes.
• Cloud & Hosting Services: Data is stored on servers operated by certified hosting providers under strict data protection agreements.
• Analytics Services: Anonymised usage data may be shared with analytics platforms to help us understand and improve the user experience.

Legal Requirements:

• U9Play may disclose your personal data if required by law, court order, or directive from a competent authority.
• In criminal investigations involving money laundering, fraud, or other illegal activities, u9play will cooperate fully with the relevant authorities.

All third parties that receive data from U9Play are bound by strict confidentiality and data protection agreements. They are only permitted to use that data for the agreed purposes and may not use it for any other reason.

U9Play implements a range of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Technical Measures:

• 256-Bit SSL Encryption: All communications between your device and u9play's servers are encrypted using 256-bit SSL/TLS — the industry standard for online data security.
• Data Encryption at Rest: Sensitive data stored on our servers, including financial information and KYC documents, is encrypted at rest using strong encryption algorithms.
• Encrypted Password: Your account password is never stored in plain text. It is processed through a one-way, irreversible hashing function.
• Two-Factor Authentication (2FA): Available to all accounts as an additional layer of security.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to identify and respond to security threats promptly.
• Regular Security Testing: The U9Play platform undergoes regular penetration testing by independent parties to identify and address any security vulnerabilities.

Organisational Measures:

• Access to members' personal data is restricted to staff who require it to perform their duties only, in line with the principle of least privilege.
• All staff with access to user data undergo regular data protection training.
• A clear security incident response procedure to ensure that any data breach is handled swiftly and effectively.

While u9play takes all reasonable steps to protect your data, no security system can guarantee 100% protection against every threat. You also play an important role in keeping your account secure by using a strong password and never sharing it with anyone.

U9play uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

Required Cookies (Mandatory):

• Session cookies that maintain your logged-in status while you use the platform.
• Security cookies that help protect your account from unauthorised access.
• Cookies that store your language preferences and platform settings.

Essential cookies cannot be disabled, as the platform will not function properly without them.

Analytics Cookies (Optional):

• Helps us understand how visitors use the platform – most frequently visited pages, time spent, and navigation paths.
• This data is used to improve the platform's design and functionality.
• Information collected through analytics cookies is aggregated and is not used to identify you as an individual.

Functional Cookies (Optional):

• Remembering your preferences and settings, such as favourite games and display configurations.
• Delivering a more personalized experience based on your usage patterns.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the u9play platform. For guidance on managing cookies in your browser, refer to your browser's help section.

As U9Play involves financial transactions in Malaysian Ringgit (MYR), we take additional steps to safeguard your financial data:

Secure Payment Processing:

• All deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow QR, and FPX (Maybank2u, CIMB Clicks) are processed through secure, encrypted channels.
• U9play does not store full credit or debit card details on our servers. Sensitive payment information is handled by certified payment providers.
• Every transaction is recorded and retained for record-keeping and dispute resolution purposes.

KYC Verification for Your Protection:

• The KYC (Know Your Customer) process we conduct is to protect you from unauthorised use of your account by third parties.
• KYC documents you submit (such as a copy of your MyKad) are stored securely and accessed only by the team responsible for identity verification.
• KYC documents are not shared with third parties except where required by law.

Fund Segregation:

• Members' deposit funds are held in accounts separate from u9play's operational funds, ensuring your money is always available for withdrawal.
• All financial transaction records are retained for a minimum of 5 years for compliance and record-keeping purposes.

As a U9Play member and the owner of your personal data, you hold the following rights, which you may exercise at any time:

The u9play platform is strictly for individuals aged 18 years and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your minor child has registered an account with U9Play or provided us with their personal data, please contact us immediately at support@u9play.biz. We will take prompt action to close the account in question and delete all associated data.

U9Play applies an age verification process during registration and may request identity verification documents (MyKad) to confirm age during the KYC process. This forms part of our commitment to responsible gaming and the protection of young people.

In the course of its operations, U9Play may transfer your personal data to servers or service providers located outside Malaysia. This includes cloud service providers, internationally licensed game providers, and technical support platforms.

When personal data is transferred outside of Malaysia, U9Play ensures that:

• The recipient country or region maintains a level of data protection comparable to that of Malaysia.
• Appropriate data transfer agreements have been put in place between U9Play and the receiving parties.
• Data transfers are carried out only where necessary to provide the service you have requested.
• All data recipients are bound by strict privacy and security policies.

By using the U9Play platform, you consent to the transfer of your personal data as described in this section. If you have concerns about international data transfers, please contact us for more information on the safeguards we have in place.

U9play retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable laws and regulations.

Once the applicable retention period has elapsed, your personal data will be securely deleted or anonymized so that it can no longer be linked back to you as an individual. Anonymized data may be retained for aggregated statistical analysis purposes.

U9Play reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use.

When this Privacy Policy is updated:

• The "Last Updated" date at the top of this page will be revised accordingly.
• For material changes that significantly alter the way we process your data, we will notify all active members via email or an in-platform notice at least 14 days before the changes take effect.
• For minor updates that do not materially affect your privacy rights, we may update the Privacy Policy without specific notice.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your personal information. Continued use of the u9play platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way U9Play handles your personal data, please reach out to us through the following channels:

• 24/7 Live Chat: Click the chat icon on the U9Play platform — our team is ready to assist you in both Bahasa Malaysia and English.
• Email: support@u9play.biz – we aim to respond to all privacy enquiries within 48 hours.
• FAQ Page: Visit the FAQ page us for answers to common questions.

For formal requests relating to your privacy rights (data access, correction, or deletion), please clearly state the type of request, your account number, and your contact details. We will process your request within 30 days and may require identity verification before carrying out any changes to your data.