A9 app Privacy Policy – Malaysian Player Data Protection

1. Introduction and Scope of Privacy Policy

This Privacy Policy ("Policy") describes the personal data collection and processing practices of a9 app ("we", "our platform") in connection with the use of the website, mobile application and all services offered by a9 app to its users in Malaysia.

This policy applies to all individuals who:

• Visiting the a9 app website even without registering an account.
• Registering and maintaining a member account on the a9 app platform.
• Using any service, game, or feature provided by a9 app.
• Contacting the a9 app customer support team through any communication channel.

A9 app operates as an online entertainment platform focused on the Malaysian market. As such, all our data processing practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and the regulations enacted under it. We take our responsibilities as a data controller seriously and are committed to managing your personal data in a manner that is transparent, fair and secure.

2. Personal Data We Collect

A9 app collects personal data from various sources to enable us to deliver our platform services effectively. Below are the categories of data collected and the purposes for which they are collected:

Data you provide directly:

• Registration information: Full name, date of birth, identity card number (MyKad), mobile phone number, email address and the password you set when registering your a9 app account.
• Profile information: Display name, language preference, time zone and any additional information you voluntarily add to your account profile.
• Financial information: Details of the payment methods used, including e-wallet account numbers or bank account information required to process deposits and withdrawals in Malaysian Ringgit (RM).
• Communications: Records of all communications between you and the a9 app customer support team via live chat, email, or any other communication channel.

Automatically collected data:

• Log and technical data: IP address, web browser type, device operating system, screen resolution and other technical information automatically transmitted by your device when accessing the a9 app platform.
• Usage data: Information about how you use the platform — games played, session duration, in-account actions, and navigation patterns within the platform.
• Transaction data: A complete record of all deposits, withdrawals, bets, and winnings in your a9 app account, including the date, time, and amount of each transaction.
• Cookie data: Information collected through cookies and similar technologies while you browse the a9 app platform. Further details on our use of cookies can be found in Section 6.

Data from third parties:

• Identity verification information from KYC (Know Your Customer) service providers, used to verify the identity of new players.
• Financial transaction data from payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks, required to process your transactions.

3. How Your Personal Data Is Used

A9 app uses the personal data collected for the following purposes, all of which are necessary for the operation of the platform and the delivery of services to players:

• Account management and identity verification: To create and manage your a9 app account, verify your identity during registration and each time you log in, and ensure your account is protected from unauthorised access.
• Financial transaction processing: To process your deposits and withdrawals in Malaysian Ringgit (RM), manage bonus credits and cashback, and maintain complete transaction records for accounting and audit purposes.
• Game service delivery: To provide access to all games on the a9 app platform — including slots, Live Casino, baccarat, blackjack, table games, e-sports, and jackpots — and to store your game statistics.
• Customer support: To process and respond to enquiries, complaints, or requests for assistance submitted to the a9 app support team via live chat or email.
• Security and fraud prevention: To detect and prevent fraud, money laundering, bonus abuse, and any activity that violates a9 app's Terms & Conditions.
• Legal compliance: To fulfil the legal and regulatory obligations imposed on a9 app, including KYC and AML (Anti-Money Laundering) requirements.
• Platform improvement: To analyse aggregated usage patterns, better understand the needs of Malaysian players, and improve a9 app's platform features over time.
• Service communications: To send important account-related notifications such as deposit confirmations, withdrawal status updates, account security changes and material policy updates.

4. Data Sharing & Disclosure

A9 app does not sell player personal data to any third party. However, to keep the platform running smoothly, we may need to share certain data with the following parties under limited and controlled circumstances:

• Payment providers: Transaction information required to process your deposits and withdrawals is shared with Malaysian e-wallet and online banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks. This data sharing is kept to the minimum necessary for processing those transactions.
• Game provider: Third-party game providers that supply games to the a9 app platform may receive limited usage data (such as player ID and game statistics) required for game delivery. All such providers are bound by strict data protection agreements with a9 app.
• KYC service provider: For identity verification purposes, certain information may be shared with recognised KYC (Know Your Customer) service providers to meet legal compliance requirements.
• Law enforcement authorities: a9 app will disclose personal data to the relevant authorities when required by Malaysian law, court order, or when necessary to investigate financial crime or national security matters.
• Business transfers: In the event of a merger, acquisition, or sale of a9 app assets, player data may be transferred as part of those business assets. In such cases, players will be notified in advance via an account notification.

All third parties that receive data from a9 app are bound by confidentiality and data protection agreements ensuring your data is not used for any purpose other than those specified. We do not share your personal data with third-party advertisers or social media platforms for targeted advertising.

5. Data Security & Protection Measures

A9 app continually invests in security infrastructure to ensure your personal data and financial information remain protected at all times. Key security measures we have in place include:

• 256-bit SSL encryption: All data transmitted between your device and a9 app servers is encrypted using the latest TLS protocols, preventing any third party from intercepting or reading your data in transit.
• Encryption of data at rest: Sensitive data such as passwords and financial information is stored in encrypted form in our database. Passwords are never stored in plain text.
• Two-factor authentication (2FA): Players are encouraged to enable two-factor authentication on their a9 app account as an additional layer of security.
• 24/7 security monitoring: Our automated monitoring system operates around the clock to detect and respond to any unauthorised access attempts or suspicious activity.
• Internal access controls: Access to player personal data within a9 app's internal systems is restricted to staff who require it to perform their duties, and is strictly governed through a role-based access control system.
• Regular security audits: a9 app undergoes regular independent security audits to identify and address any vulnerabilities in our security infrastructure.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. Players also play an important role in keeping their accounts secure — please ensure your password is strong, unique, and not shared with anyone.

6. Cookies and Tracking Technologies

A9 app uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and ensure that essential platform functions run smoothly.

Types of cookies used by a9 app:

• Essential cookies: These cookies are required for the core functionality of the a9 app platform — including login session management, account security and transaction processing. The platform cannot function properly without them and they cannot be disabled.
• Performance cookies: These cookies collect information about how players use the a9 app platform — such as the most frequently visited pages, time spent in each section, and any error messages encountered. This information is used in aggregated form to improve platform performance.
• Functional cookies: These cookies allow the a9 app platform to remember your preferences, such as your display language, account settings, and saved login details for your convenience.
• Analytics cookies: a9 app uses analytics tools to understand usage patterns on an aggregated basis. The data collected is anonymised and cannot be used to directly identify any specific individual.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the a9 app platform. Most modern web browsers allow you to view, manage, and delete stored cookies from within the browser settings.

Please be aware that a9 app does not use third-party cookies for advertising or cross-site tracking purposes. The cookies we use are strictly limited to the operational needs and improvement of the a9 app platform.

7. Data Retention and Deletion Policy

A9 app retains your personal data for as long as your account remains active and for as long as required for the purposes set out in this Privacy Policy. Retention periods vary by data category and applicable legal requirements:

• Active account data: For as long as your a9 app account is active and in use, your profile data and account information will be retained to allow you to use the platform.
• Financial transaction records: Records of all financial transactions are retained for a minimum of seven (7) years from the date of the transaction, in line with Malaysia's accounting and financial legal requirements.
• Communication records: Customer support communication logs are retained for two (2) years for reference and dispute resolution purposes.
• Technical data log: Access logs and technical data are retained for ninety (90) days for security monitoring and technical troubleshooting purposes.

When your account is closed voluntarily or by a9 app, we will delete or anonymise your personal data that is no longer required, except for data that must be retained for legal obligations or legitimate business purposes. Data retained after account closure for legal compliance purposes is limited to what is strictly necessary and is subject to strict access controls.

You may request deletion of your data by contacting us at support@a9app.xyz. Data deletion requests will be processed within thirty (30) days, subject to any legal retention requirements that may prevent immediate deletion.

8. Your Rights as an a9 app Player

As an a9 app player in Malaysia, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). a9 app is committed to facilitating the exercise of these rights:

To submit any request relating to the rights above, please contact the a9 app support team by email at support@a9app.xyz with the subject line "Personal Data Rights Request". We will process your request within thirty (30) days of receipt. In complex cases, this period may be extended to sixty (60) days, with prior notification to you.

Please note that the exercise of certain rights may be limited in specific circumstances — for example, data that must be retained to comply with legal obligations cannot be deleted upon request, and deleting data required for account operations will result in the closure of your a9 app account.

9. Policy on Children's Data

A9 app is an entertainment platform strictly for users aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

The a9 app account registration process includes strict age verification. Should we discover that personal data belonging to a minor has been collected inadvertently, we will:

• Suspending the account in question immediately while the investigation is carried out.
• Deleting all personal data associated with the account once the investigation has been confirmed.
• Returning any legitimate financial balance upon verification through the appropriate process.

If you believe that an individual under the age of 18 has registered an account on a9 app, please contact us at support@a9app.xyz immediately. We treat the protection of minors as an absolute priority and will respond swiftly to any such report.

10. Privacy Policy Amendments

A9 app reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or changes to the services we offer.

When we make material changes to this Privacy Policy, we will notify you through:

• A prominent notification in your a9 app account upon your next login, requiring you to acknowledge receipt.
• A notification email to the address registered on your account, sent at least thirty (30) days before the changes take effect.
• Update the "Last Updated" date displayed at the top of this page.

Your continued use of the a9 app platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any of the changes, you have the right to request account closure and deletion of your data before the changes take effect.

For minor changes that do not materially affect your rights, we may simply update the date on this document without sending an active notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. How to Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or the way a9 app handles your personal data, we encourage you to reach out to us through the following channels:

• Email: support@a9app.xyz (use the subject line "Data Privacy Enquiry" for faster processing)
• Live chat: Available 24 hours a day, 7 days a week via the live chat icon within the a9 app platform

Our team will endeavour to respond to all privacy-related enquiries within two (2) business days. For requests relating to personal data rights that require more in-depth review, the response timeframe is as stated in Section 8.

If you are dissatisfied with a9 app's response or handling of a privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for enforcing the Personal Data Protection Act 2010 in Malaysia.