U9Play Privacy Policy – Personal Data Protection for Malaysian Players

Introduction & Scope of the Privacy Policy

This Privacy Policy outlines U9Play's practices regarding the collection, use, storage, and protection of personal information you provide when using the U9Play online entertainment platform at u9play.run. U9Play takes our responsibilities seriously as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA).

This Policy applies to all users of the U9Play platform in Malaysia — whether you are simply browsing our website without registering, an active registered member, a VIP Rewards programme participant, or anyone interacting with our platform in any capacity. By accessing or using U9Play's services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

If you have any questions about how we handle your personal data, please contact our Data Protection Officer by email at support@u9play.run with the subject line "Data Privacy Enquiry". Our team will respond within 5 business days.

Information We Collect from You

U9Play collects two main categories of information — information you provide directly, and information collected automatically as you use our platform.

Information you provide directly:

• Full name as per your Malaysian identity card (MyKad) or passport
• An active Malaysian mobile number
• A valid email address
• Date of birth (for age verification)
• Payment method details — e-wallet account name or FPX account name (we do not store debit/credit card numbers)
• Identity verification documents when required for the KYC (Know Your Customer) process

Automatically collected information:

• IP address and geographic location data (state within Malaysia)
• Device type, operating system, and web browser version used
• Session data and platform usage time
• Gaming activity history — game categories, slots played, Sports Betting and more
• Deposit and withdrawal transaction records
• Cookie data and similar tracking technologies

How We Use Your Personal Data

U9Play uses the personal data we collect solely for legitimate purposes that are directly related to providing our platform services to you. The key purposes are as follows:

• Account management: Creating, verifying and managing your U9Play account, including the login process and password recovery
• Transaction processing: Handles deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and processes withdrawals to your payment account
• Provision of gaming services: Operates slots, live casino, roulette, poker, live Sports Betting for football, e-sports, cricket, and all other game categories
• VIP Rewards Programme: Calculating and crediting VIP points, weekly cashback, and VIP tier benefits based on your gaming activity
• Security and fraud prevention: Detecting and preventing unauthorised access, identity fraud, money laundering, and platform abuse
• Legal compliance: To fulfil legal obligations under Malaysian law, including PDPA 2010 and relevant reporting requirements
• Customer support: Responding to enquiries, resolving complaints, and providing you with technical assistance
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the overall user experience

Sharing Information with Third Parties

U9Play does not sell, rent, or trade our players' personal data. However, there are limited situations in which we share certain information with carefully selected third parties:

• Payment service providers: To process deposits and withdrawals, the necessary transaction information is shared with Malaysian e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and FPX providers. Such sharing is kept to a minimum and is strictly for transaction processing purposes.
• Game providers: To operate games from third-party providers (such as slots and live casino providers), the game data required to run a gaming session is shared. These providers are recognised and are required to comply with strict privacy standards.
• Platform analytics provider: Anonymised and aggregated data (not personally identifiable information) is shared with analytics tools to help us understand usage patterns and improve the platform.
• Legal authorities: U9Play will disclose personal information to the relevant Malaysian authorities when required by law, court order, or a legitimate criminal investigation — without prior notice to you in cases involving fraud or unlawful activity.

U9Play Data Security Measures

Protecting our players' personal data from unauthorised access, loss or misuse is one of the most significant investments U9Play makes in platform operations. The following are the technical and organisational measures we employ:

Technical security measures:

• 256-bit SSL/TLS encryption for all data communications between your browser and our servers
• Data-at-rest encryption for all databases containing personal information
• Account passwords are stored in bcrypt hash format — irreversible even by our own staff
• Two-factor authentication (2FA) is available as an additional security layer for all accounts
• Intrusion detection (IDS) and intrusion prevention (IPS) systems operating 24/7
• Penetration testing is carried out periodically by independent security firms
• The random number generator (RNG) for all games is independently audited to ensure fairness

Organisational control measures:

• Minimum access principle — staff may only access the data required for their specific job responsibilities
• All access to systems containing personal data is logged and monitored automatically
• Mandatory data security and privacy training for all U9Play staff who handle user data
• A clear, tested security incident response plan

Data Retention & Deletion

U9Play adheres to the principle of data storage minimisation — we do not retain personal data longer than is necessary for its stated purpose or as required by Malaysian law.

Retention periods by data type:

• Active account data: Retained for the duration of the active account and 12 months following account closure
• Financial transaction records: 7 years from the transaction date, in line with Malaysia's tax and financial legal requirements
• Gaming history: 5 years from the date of activity, for dispute resolution and compliance purposes
• Customer support communication logs: 3 years from the date of last contact
• Technical data (IP logs, sessions): 90 days from the date of recording
• Cookie data: Varies by cookie type — from the current session up to a maximum of 2 years (see Section 8)

Once the retention period expires, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to you. Our data deletion process uses methods that ensure the data cannot be recovered.

If you close your U9Play account voluntarily, we will delete your active personal data within 30 days — except for records that must be retained for legally mandated periods, such as financial transaction records.

Your Rights as a U9Play User

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by U9Play. All requests may be submitted via email to support@u9play.run with the subject line "Personal Data Rights Request":

• Right to Access: You have the right to obtain a copy of the personal data we hold about you, including account information, game history, and transaction records
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data — most corrections can be made directly through your account settings
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data — subject to applicable legal retention obligations
• Right to Restriction of Processing: You have the right to request that we restrict how we process your data in certain situations — for example, while a dispute regarding data accuracy is ongoing
• Right to Object: You have the right to object to the processing of your data where it is based on our legitimate interests, including for direct marketing purposes
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform
• Right to Withdraw Consent: Where processing is based on your consent (such as analytics cookies), you may withdraw that consent at any time without affecting any processing that took place beforehand

Cookie Policy

U9Play uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login session management, security, and language preferences. These cannot be disabled, as the platform will not function without them.
• Preference Cookies: Stores your personal preferences such as favourite game selections, display settings, and other platform configurations you have set.
• Analytics Cookies: Collects anonymised information about how you use the platform — pages visited, time spent, and buttons clicked — to help us improve the overall user experience. You may opt out of these cookies.
• Security Cookies: Used to detect suspicious login attempts, prevent fraud, and maintain the integrity of your session.

You can manage your cookie preferences through your web browser settings or via the cookie panel available on our website. Please note that disabling essential cookies may affect platform functionality. For analytics cookies, opting out will not affect your access to any part of the U9Play platform.

Protection of Children's Data

The U9Play platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from anyone under the age of 18.

Should U9Play discover that personal data belonging to an individual under the age of 18 has been inadvertently collected — whether through account registration with incorrect age information or any other means — we will take the following steps immediately:

• Immediate suspension of the account in question
• Returning all funds in that account to the original payment method
• Delete all personal data associated with the account
• Reporting the incident to the relevant authorities where required

Privacy Policy Amendments

U9Play periodically reviews this Privacy Policy to ensure it reflects our current practices, changes in relevant Malaysian law, and developments in data protection technology. When we make material changes to this Privacy Policy, we will take the following steps to notify you:

• Updating the "Last Updated" date at the top of this document
• Displaying a prominent notice on the U9Play platform homepage for a minimum of 14 days
• Sending email notifications to all registered members for significant changes
• For changes requiring fresh consent — a consent form will be displayed upon your next login

Your continued use of the U9Play platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. All previous versions of this Privacy Policy are retained and available upon request — contact us at support@u9play.run if you wish to access a previous version.

If you do not agree with any amendments made to this Privacy Policy, you have the right to discontinue use of the platform and close your account. We will process your account closure request and return any remaining balance within the timeframe stipulated in our Terms and Conditions.