Privacy Policy U9Login – Data Protection for Malaysia Online Casino Players

U9login ("we", "platform") is the data controller for personal information collected through the u9login.bet website and all related services. This Privacy Policy applies to all individuals who register an account, make a deposit, use any games, or interact with the u9login platform in any capacity.

This policy covers all channels of interaction between you and u9login – including the website, mobile app (where available), email communications, live chat, and official social media interactions. We are committed to ensuring that all Malaysian players using the u9login platform receive equal and consistent privacy protection.

U9login collects only the data necessary for legitimate operational purposes. Below is a breakdown of the types of data we collect, organised by category:

• Directly provided data: Information you provide during registration, account verification, form submissions, or when contacting the u9login support team.
• Automatically collected data: Technical information collected automatically when you use the u9login platform, including log data, IP addresses, and device information.
• Data from authorised third parties: In certain situations such as payment verification, we may receive limited data from authorised payment processors such as Touch 'n Go or GrabPay solely for the purpose of confirming the transaction.

U9login uses your personal data solely for the following legitimate and transparent purposes. We will not use your data for any other purpose without obtaining your consent beforehand:

• Account management: To create, manage, and maintain your u9login account, including processing registration, identity verification, and password management.
• Financial transaction processing: To process deposits made via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u or CIMB Clicks, as well as withdrawals to your account.
• Security & fraud prevention: To detect, prevent, and address fraudulent activity, account misuse, and security threats that could affect your account or the u9login platform.
• Customer service: To provide effective customer support whenever you contact the u9login team, including addressing enquiries and resolving issues.
• Legal compliance: To fulfil legal obligations, including Anti-Money Laundering (AML) requirements and mandatory age verification.
• Platform improvements: To analyse aggregated usage patterns (without identifying individuals) in order to improve the u9login platform experience and the services provided.
• Service communications: To send important account-related notifications – such as transaction confirmations, security alerts and terms updates – which are non-marketing in nature.

There are limited circumstances in which u9login may need to share your personal data with the relevant parties:

• Authorised payment processors: Limited financial data shared with payment processors such as Touch 'n Go, GrabPay, DuitNow and banks via FPX, strictly for the purpose of completing your transactions.
• Contracted technology providers: Technology companies that assist u9login in operating the platform – such as cloud infrastructure providers and security services – are bound by strict data protection agreements with us.
• Legal obligation: In circumstances where u9login is required by law, court order, or direction from a lawful enforcement agency to disclose specific information.
• Security protection: Where necessary to prevent serious physical or financial harm to any individual, or to detect and prevent fraudulent or criminal activity.

All third parties that receive data from u9login are bound by strict confidentiality and data protection agreements, and are prohibited from using that data for any other purpose.

U9login employs multiple layers of technical and organisational security controls to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL Encryption: All data communications between your browser and u9login's servers are encrypted using 256-bit SSL technology, rendering any intercepted data meaningless to unauthorised parties.
• Two-factor authentication (2FA): We offer two-factor authentication for your u9login account as an additional security layer that keeps your account protected even if your password is compromised.
• 24/7 monitoring: The u9login cybersecurity team monitors all platform activity around the clock to detect any suspicious or unusual behaviour that may indicate an attempted breach.
• Internal access controls: Only u9login staff with a legitimate business need are permitted to access users' personal data, and all such access is logged and audited on a regular basis.
• Regular security testing: The u9login platform undergoes regular independent security penetration testing and security audits to identify and remediate any vulnerabilities.

U9login retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under Malaysian law:

• Active account data: For as long as your u9login account remains active and throughout the duration of your service relationship with our platform.
• Financial transaction data: Financial transaction records are retained for a minimum of 7 years in compliance with Malaysian tax and financial regulatory requirements, including AML obligations.
• Support communication logs: Communication records with the u9login support team are retained for 3 years for dispute resolution and service improvement purposes.
• After account closure: When your u9login account is closed, personal data not subject to legal retention obligations will be deleted or anonymised within 90 days.
• Anonymised data: Fully anonymised aggregate data that cannot be re-linked to any specific individual may be retained indefinitely for statistical analysis purposes.

As a u9login member, you have the following rights regarding your personal data, which you may exercise at any time by contacting our team:

The u9login platform uses cookies and similar tracking technologies to enhance user experience and platform operations:

• Essential cookies: Required for the core functionality of the u9login platform – including login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Saves your preferences such as language, theme, and display settings to ensure a more comfortable experience each time you visit.
• Analytics cookies: Helps u9login understand how players interact with the platform – such as pages most visited and time spent – in order to improve design and functionality. This data is collected in aggregate and does not identify individual users.
• Cookie controls: You can manage your cookie settings through your internet browser settings. Disabling certain cookies may affect the functionality of some parts of the u9login platform.

U9login handles players' financial information to the highest security standards. All deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u (FPX), and CIMB Clicks are processed through secure, encrypted channels.

• No card data storage: u9login does not store full credit or debit card details. All card transactions are processed directly by authorised, PCI-DSS certified payment processors.
• Ownership verification: u9login requires that the payment method used for deposits be registered under the same name as your u9login account, to prevent unauthorised use of third-party payment methods.
• Transaction records: All financial transaction records are securely stored and accessible only by you (via your account history) and authorised u9login staff for support and audit purposes.
• AML compliance: u9login complies with Malaysia's Anti-Money Laundering (AML) requirements, which may require additional verification for certain transactions exceeding prescribed thresholds.

• Absolute prohibition: u9login strictly prohibits the use of the platform by anyone under the age of 18. This is an absolute requirement that cannot be compromised.
• Collection of children's data: u9login does not knowingly collect any personal data from individuals under the age of 18. Should we become aware that such data has been collected inadvertently, it will be deleted immediately.
• Age verification: The u9login registration process includes age verification, and we reserve the right to request additional proof of age at any time if there is reasonable doubt.

If you have any questions, concerns or complaints regarding this Privacy Policy or the handling of your personal data by u9login, please contact us through the following channels:

• Privacy email: privacy@u9login.bet – dedicated to privacy and personal data enquiries. We will respond within 5 business days.
• General support email: support@u9login.bet – for general enquiries related to the u9login platform.
• 24/7 live chat: The u9login support team is available via live chat at any time, including public holidays.