U9 Privacy Policy — Our Commitment to Protecting Your Personal Information

This Privacy Policy ("Policy") is established by u9 ("Company", "we") to describe how we collect, use, disclose and protect your personal information when you use the u9 platform, website and mobile applications.

This Policy applies to all users accessing u9 services, including registered members, website visitors and any individuals who interact with us through any official u9 communication channel. We are committed to protecting your privacy and ensuring your personal information is handled responsibly, transparently and securely.

U9 recognises that your personal data is a trust placed in us, and we do not take that responsibility lightly. Every decision regarding data handling is made with the interests and security of our members as the priority, in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).

U9 collects two main categories of information — information you provide directly and information collected automatically when you use our platform.

A. Information You Provide Directly

• Registration Information: Full name, date of birth, national ID or passport number, email address, mobile number, and account password.
• Identity Verification Information (KYC): Copy of identity document, verification selfie, proof of residential address such as a utility bill or recent bank statement.
• Financial Information: Bank account details, e-wallet account numbers (TNG, Boost, GrabPay), deposit and withdrawal transaction records.
• Communications: Any messages, complaints, enquiries or feedback you send to the u9 support team via live chat, email or other official communication channels.

B. Information Collected Automatically

• Technical Data: IP address, web browser type, device operating system, screen resolution and language settings.
• Usage Data: Pages visited, time spent on the platform, games played, betting records, and general usage patterns.
• Cookie Data: Session cookies, preference cookies, and analytics cookies that help us understand how users interact with the platform for continuous improvement.
• Device Data: Unique device identifiers, mobile network information, and GPS data (only when you grant permission through the u9 mobile app).

U9 uses your personal information solely for legitimate and stated purposes. We will not use your data for any other purpose without first obtaining your consent.

U9 does not sell or rent your personal data to any party. However, we may share certain information with selected third parties in the following circumstances:

• Payment Service Providers: Banks and e-wallet providers that process your financial transactions. They receive only the information necessary to complete the relevant transaction and are bound by strict confidentiality agreements.
• KYC Service Providers: A third-party identity verification provider that helps us validate the authenticity of documents you submit. This process complies with international security standards.
• Game Providers: Casino game and sports development companies that partner with u9 may receive anonymised usage data for game improvement purposes only.
• Government Authorities: u9 will disclose the required information when mandated by law, court order or a legitimate regulatory authority in Malaysia.
• Strategic Business Partners: In the event of a business restructuring, merger or acquisition, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third parties that receive data from u9 are required to comply with strict privacy policies and are prohibited from using that information for any purpose other than what is specified in our agreements with them.

U9 invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration or destruction. The security measures we employ include:

• End-to-End Encryption: All data transmitted between your device and u9 servers is protected using TLS 1.3 and SSL 256-bit encryption — the highest security standard in the industry.
• Two-Factor Authentication (2FA): An additional security layer that ensures only you can access your u9 account, even if your password is known to someone else.
• Continuous Monitoring: Our automated threat detection system monitors account activity 24/7 and will issue an immediate alert if any suspicious activity is detected.
• Internal Access Controls: Only u9 employees who require access to your personal data to perform their duties are permitted to do so. All access is logged and audited on a regular basis.
• Regular Security Testing: u9 conducts regular penetration testing and security audits by independent cybersecurity experts.
• Secure Data Backup: Data is backed up regularly and stored at geographically separate data centres to ensure availability and integrity in emergency situations.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by u9:

To exercise any of the above rights, contact the u9 support team via live chat within the platform. Requests will be processed within 14 working days. In complex cases, this period may be extended up to 30 days, with prior notification to you.

U9 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use and their purposes:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled as the platform will not function properly without them.
• Preference Cookies: Saving your preferences such as language, display theme, and account settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helps us understand how users interact with the platform in order to improve the user experience. All data collected is anonymised.
• Marketing Cookies: Used to display relevant promotions to you based on your interests and activity on the platform. You may opt out of these cookies.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the u9 platform.

U9 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. General guidelines on retention periods are as follows:

• Active Account Data: Retained for the duration your account is active and for any additional period as required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the transaction date, in line with Malaysian tax and financial legal requirements.
• KYC Documents: Retained for five (5) years after the business relationship ends, in line with anti-money laundering (AML) legal requirements.
• Support Communication Logs: Retained for three (3) years for reference and service improvement purposes.
• Analytics and Usage Log Data: Anonymised data is retained for two (2) years for trend analysis and platform improvement.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

In the course of our global operations, your personal information may be processed on servers located outside Malaysia. u9 ensures that any such data transfers are carried out with adequate safeguards, including:

• Binding data protection agreements with all overseas data processors.
• Ensuring that recipient countries have data protection laws equivalent to or stronger than those in Malaysia.
• Using recognised data transfer mechanisms such as Standard Contractual Clauses.
• Regular audits of all overseas data processors to ensure ongoing compliance.

U9 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. Whenever we make material changes, we will:

• Sending a notification to your registered email address at least 14 days before changes take effect.
• Displaying prominent notices on the u9 homepage and within the mobile app.
• Updating the "Last Updated" date at the top of this document.
• Maintaining an archive of previous versions of the Privacy Policy for your reference.

Your continued use of the u9 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before they take effect.

For any enquiries, concerns or requests relating to your privacy and personal data, please contact the u9 Data Protection Officer (DPO) via live chat within the platform or submit your enquiry through the FAQ us.