A9 today Privacy Policy – Comprehensive Personal Data Protection for Malaysian Members

1Introduction

a9 today is committed to protecting the privacy and data security of every member who uses our platform. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and globally recognised international data protection standards.

We understand that trust is the foundation of every relationship we build with our members. That is why we are always transparent about the type of information we collect, the purpose of that collection, and how we keep it safe in our care. None of your personal information will be processed, shared, or used without a valid basis and a clear purpose.

This policy applies to all information you provide to us during the registration process, while using our services, while conducting financial transactions, and while interacting with the platform. a9 today in any manner whatsoever. It also covers information collected automatically through your use of our platform.

2Information Collected

a9 today only collects information that is strictly necessary to provide you with a safe, responsible, and high-quality service. We do not collect excessive or irrelevant information beyond the scope of our service.

The following are the categories of information we may collect from you:

3How We Use Your Data

Every piece of information we collect is used for a specific, legitimate, and transparent purpose. a9 today never uses your data for purposes unrelated to the provision of our services or contrary to your wishes.

• Identity Verification & KYC: Ensuring every member is a real individual who meets the age eligibility requirements and is not an entity prohibited by applicable law.
• Transaction Processing: Handling deposits, withdrawals, and all financial transactions quickly, accurately, and securely through supported payment channels.
• Account Security: Detecting and preventing fraud, unauthorised access, money laundering, and any suspicious activity in real time.
• Customer Support: Processing your enquiries, complaints, and support requests faster and more effectively based on relevant account records.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of addiction and providing timely assistance to members who need support.
• Regulatory Compliance: Fulfilling legal obligations under PDPA 2010, anti-money laundering laws (AMLA), and applicable regulatory reporting requirements.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform functionality, performance, and overall experience.
• Service Communications: Sending transaction notifications, platform updates, security alerts, and promotional information relevant to your account.

4Information Sharing

a9 today does not sell, rent, or transfer your personal information to third parties for marketing or commercial purposes. This is our absolute commitment to every member who trusts this platform.

However, in certain limited and controlled situations, we may need to share your information with the following parties:

• Payment Processors: Authorised payment service providers such as DuitNow, FPX, and e-wallet providers that require minimal transaction information to complete your payment securely.
• Legal Authority: Law enforcement agencies, courts, or regulatory bodies requiring information pursuant to a valid court order or legally binding requirement.
• Infrastructure Providers: Technology and cloud computing service providers that help us operate the platform, bound by strict and binding confidentiality agreements.
• Anti-Fraud Services: Fraud detection and anti-money laundering platform used to protect the integrity of the platform and the security of all members.

5Data Security

The security of your personal data is the highest technical priority at a9 today. We continuously invest in the latest security infrastructure to ensure your information is always protected against increasingly sophisticated threats.

The protection layers we apply include:

6Cookies and Tracking Technologies

a9 today uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our platform.

• Essential Cookies: Required for core platform functions such as staying logged in, session security, and language preference memory. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helping us understand how members use the platform — most visited pages, time spent, and errors encountered — for continuous improvement purposes.
• Functional Cookies: Saving your personal preferences such as display settings, preferred language, and game choices so your experience is seamless every time you log in.
• Analytics Cookies: Used internally to analyse aggregate usage patterns that help us develop new features and improve overall service quality.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and performance of the platform. a9 today on your device.

7Your Rights as a Member

Under Malaysia's PDPA and the data protection principles we uphold, you have certain rights regarding the personal data we hold about you. a9 today respects and facilitates the exercise of all these rights.

8Data Retention

a9 today retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active and in use on the platform. a9 today. Data is continuously updated to ensure accuracy of information.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with anti-money laundering (AMLA) legal requirements and Malaysian financial audit standards.
• KYC Verification Data: Retained for 5 years after account termination or after the last transaction, whichever is later, in line with regulatory requirements.
• Customer Support Records: Retained for 3 years after case resolution for reference purposes, quality audits, and legal protection of both parties.
• Technical Logs: Server logs and security data are retained for 12 months for the purpose of security incident investigation and system improvement.

Once the retention period has ended and there is no legal obligation requiring further retention, your data will be securely deleted or anonymised in accordance with approved data deletion procedures.

9Child Protection

Platform a9 today is strictly limited to individuals aged 18 and above. We do not intentionally collect, store, or process any personal information from children or minors.

We have a strict age verification process during account registration, including MyKad number verification and comprehensive KYC procedures. Should we find that information from a minor has been collected inadvertently, we will immediately take the following actions:

• Immediately suspending the account in question while a thorough investigation is conducted.
• Permanently deleting all personal information associated with the minor from our systems.
• Freezing and returning any funds that may have been deposited into the account in accordance with established procedures.
• Reporting the incident to the relevant authorities where required by law.

10Changes to the Privacy Policy

a9 today reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new technology requirements, or changes in applicable laws and regulations.

Whenever we make significant changes to this policy, we will take the following steps to ensure you are informed:

• In-Platform Notifications: Notifications will be displayed when you log in to your account, requiring read confirmation before you can continue using the platform.
• Direct Messages: For very material changes, we will send a notification directly to your registered phone number or email address at least 14 days before the changes take effect.
• Last Updated: The "Updated" date at the top of this page will be changed each time this policy is amended, allowing you to easily identify the current version.

Continued use of the platform a9 today after any policy amendment takes effect will be considered your acceptance of the updated terms. If you do not agree with the amendments, you have the right to close your account before the changes take effect.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by a9 today, our data protection team is ready to assist you.