A9 app Privacy Policy – Personal Data Protection for Malaysian Members

A9 app collects the personal data necessary to provide safe, well-regulated, and high-quality online Sports Betting and casino entertainment services to members in Malaysia. We only collect what is genuinely needed — nothing more.

1.1 Data You Provide Directly

The following information is collected when you register an account, make a transaction, or interact with the a9 app platform:

1.2 Automatically Collected Data

When you use the a9 app platform, our systems automatically collect the following technical information for security, fraud detection, and platform performance purposes:

• IP address and geolocation information (country/city only — we do not track your precise location)
• Web browser or mobile application type and version
• Device type (Android, iOS, desktop) and operating system
• Login and logout times, session duration
• Betting records and financial transactions — all activity within your account
• Cookie data and session identifiers (see Section 6 for more details)

1.3 Data We Do Not Collect

A9 app does not collect, and will never request, the following information from you under any circumstances:

• Your internet banking password (Maybank2u, CIMB Clicks) — we only accept verification through the secure FPX gateway
• Credit or debit card details (we do not accept card payments)
• The PIN or OTP for any of your financial services
• Health data, biometric data, or other sensitive information unrelated to your use of the platform

A9 app uses collected personal data for specific, legitimate purposes only. We will not use your data for anything unrelated to the services you use without your explicit consent.

2.1 Platform Operation & Account Management

• Creating and managing your member account on a9 app
• Verifying your identity and age (confirmation that you are 18 or above) as required by law
• Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX
• Settling bets and calculating winnings accurately
• 24/7 customer support available in Bahasa Malaysia

2.2 Security & Legal Compliance

• Detecting and preventing fraud, money laundering, and platform abuse
• Complying with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA)
• Fulfilling lawful information requests from Malaysian legal authorities
• Verifying that you are not on any list of persons prohibited from betting activities

2.3 Service Improvement

• Analysing usage patterns to improve platform design and user experience
• Developing new features that are more relevant to Malaysian users
• Optimising system performance, particularly during popular Malaysia Super League and EPL football matches

2.4 Marketing Communications (With Your Consent)

With your consent, a9 app may use your contact information to send:

• Notifications about new promotions and bonuses relevant to your favourite sports or games
• Key match notifications (e.g., Malaysia Super League finals or BWF finals)
• Product updates and new platform features

You may withdraw your consent for marketing communications at any time without affecting your use of the platform, either through your account settings or by contacting our support team.

A9 app takes a very careful approach to data sharing. Our core principle is simple: we do not sell your data, and we do not share your data except in very limited and lawful circumstances.

3.1 Trusted Service Providers

A9 app may share necessary data with third-party service providers that assist us in operating the platform. All such providers are bound by strict data protection agreements and may only use your data for the specified purposes:

• Payment Processing Providers: Payment gateways handling transactions via FPX, DuitNow, and Malaysian e-wallets
• Identity Verification (KYC) Provider: Platforms that help us verify member identities in accordance with compliance requirements
• Gaming Service Provider: Live casino and slots game providers that require session information to operate the games
• Cloud Infrastructure & Security: Hosting and DDoS protection provider responsible for storing and safeguarding platform data

3.2 Legally Mandated Disclosure

A9 app will disclose your personal data to authorities when required by Malaysian law, including but not limited to lawful requests from the Royal Malaysia Police (PDRM), Bank Negara Malaysia, or a court with the relevant jurisdiction. In such cases, we will disclose only the minimum data necessary.

3.3 What We Do Not Do

• We no selling your data to advertisers, data brokers, or marketing companies
• We no share your data with other betting platforms or competitors
• We no disclosing your financial information to any external party without your explicit consent

A9 app invests heavily in security infrastructure to ensure your personal data is protected at all times — whether in transit, being processed, or at rest.

4.1 Technical Security

• Data Encryption in Transit: All communications between your browser/app and a9 app's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate
• Stored Data Encryption: Sensitive data such as financial information and identity documents is encrypted with AES-256 when stored in our database
• Two-Factor Authentication (2FA): Available to all members and required for any changes to account information or payment details
• 24/7 Monitoring: An automated threat detection system monitors for suspicious activity around the clock
• Regular Security Testing: a9 app conducts regular penetration testing and independent security audits

4.2 Access Controls

Access to member personal data within a9 app's internal systems is strictly limited on a need-to-know basis. Staff who can access member data must complete privacy and security training, and all access is logged and monitored. Access is revoked immediately upon an employee's departure from the company.

4.3 Your Responsibilities

While a9 app takes all necessary technical measures, the security of your account also depends on your own actions. We encourage you to:

• Using a strong, unique password that is not used on any other platform
• Not sharing your login credentials with anyone
• Enable two-factor authentication (2FA) in your account settings
• Notify us immediately if you suspect your account has been accessed without your authorisation
• Avoid accessing your a9 app account over unsecured public Wi-Fi networks

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by a9 app. We are committed to fulfilling these rights respectfully and within a reasonable timeframe.

A9 app uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

Essential Cookies (Cannot Be Disabled)

These cookies are required for the a9 app platform to function properly. Without them, you will not be able to log in, place bets, or carry out financial transactions. This includes login session cookies, CSRF security tokens, and betting session identifiers.

Analytics Cookies (Opt-Out Available)

We use analytics data to understand how members use the platform — which pages are visited most frequently, which features are most popular, and where users may be experiencing difficulties. This data is aggregated and is not linked to your personal identity.

Preference Cookies (Opt-Out Available)

These cookies save your preferences — such as your display language, preferred odds format, and favourite sports — so you don't have to reconfigure them every time you log in. They are purely convenience cookies that improve your experience.

6.2 Managing Your Cookie Preferences

You can manage and delete cookies through your web browser settings. Please refer to your browser's documentation (Chrome, Firefox, Safari, Edge) for instructions on how to disable or delete cookies. Please note that disabling essential cookies may affect the functionality of the a9 app platform.

7.1 Data Retention Period

A9 app retains your personal data for as long as your account is active and for the period required thereafter to meet legal obligations and legitimate business needs. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active and you continue using the a9 app platform.
• Financial Transaction Records: Retained for seven (7) years in accordance with Malaysian financial and tax regulatory requirements, even after account closure.
• KYC Documents: Retained for five (5) years from the date of last verification in accordance with AML compliance requirements.
• Customer Support Logs: Retained for three (3) years to facilitate dispute resolution and service improvement.
• Aggregated Analytics Data: May be retained indefinitely as it contains no personally identifiable information.

7.2 Deletion After Account Closure

When you close your a9 app account, we will delete or anonymise personal data that is no longer required within 90 days, subject to the legal retention obligations stated above. Data that must be kept for legal compliance will be held in a separate system with strictly limited access until the mandatory retention period expires.

7.3 Cross-Border Data Transfers

A9 app's primary servers storing Malaysian member data are located in the Southeast Asian region. In certain situations (for example, the use of global cloud infrastructure for specific processing tasks), data may be transferred outside Malaysia. In all such cases, a9 app ensures that adequate safeguards — at least equivalent to the protections afforded by PDPA 2010 — are in place before any data transfer takes place.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data at a9 app, you are welcome to reach us through the following channels: