a9member Privacy Policy

Introduction

This Privacy Policy governs the collection, use, storage, and protection of personal information by a9member ("we", "us", "our") in connection with your use of the a9member platform accessible at a9member.lat, including our sportsbook, live casino, slot games, and all related services (collectively, the "Platform").

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Platform immediately.

Who We Are

a9member is an online betting and casino platform serving members across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and beyond. We operate the Platform at a9member.lat and are the data controller responsible for your personal information collected through this site.

As a data controller, a9member determines the purposes and means by which your personal data is processed. We are committed to handling your data responsibly, lawfully, and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable legislation.

For any privacy-related enquiries, you may contact us directly via our support team. Contact details are provided in Section 13 of this policy.

Personal Data We Collect

When you interact with a9member, we may collect the following categories of personal data, depending on how you use the Platform:

• Identity Data: Full legal name, date of birth, nationality, and a copy of a government-issued identification document (MyKad, passport) collected during Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile phone number, and residential address in Malaysia or elsewhere.
• Account Data: Username, encrypted password, account preferences, notification settings, and self-exclusion or responsible gaming elections.
• Financial Data: Bank account details (e.g., Maybank, CIMB, Public Bank), e-wallet identifiers (Touch 'n Go eWallet, Boost), deposit and withdrawal transaction records, and MYR account balance history.
• Usage Data: Pages visited, games played, bets placed, session durations, clickstream data, device type, browser version, and operating system.
• Technical Data: IP address, device identifiers, cookie identifiers, and geolocation data (where permitted and enabled by your device).
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts, emails, and support ticket history.
• Marketing Preferences: Your preferences regarding receipt of promotional materials from a9member, including opt-in and opt-out records.

How We Use Your Personal Data

a9member processes your personal data for specific, explicit, and legitimate purposes. We will not use your data for purposes incompatible with those described below:

• Account Registration & Management: To create and maintain your a9member account, verify your identity, and enable you to access our sportsbook, slots, and live casino products.
• Payment Processing: To facilitate deposits and withdrawals via supported Malaysian payment methods, including Touch 'n Go eWallet, Boost, Maybank, CIMB, and Public Bank transfers.
• Legal & Regulatory Compliance: To fulfil obligations under Malaysian law, including anti-money laundering (AML) checks, Know Your Customer (KYC) verification, and age verification to confirm you are 21 years of age or older.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of the Platform.
• Service Improvement: To analyse usage patterns, improve product functionality, personalise your experience, and develop new features within the a9member Platform.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Responsible Gaming: To monitor play patterns, enforce self-exclusion elections, apply deposit limits, and refer members to responsible gaming resources where warranted.
• Marketing Communications: To send promotional offers, bonuses, and platform updates — but only where you have given explicit consent to receive such communications.

Legal Basis for Processing

Under the Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, a9member relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered member, including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with Malaysian statutory requirements, including AML obligations, tax reporting, and regulatory directives from relevant authorities.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests — such as fraud detection, platform security, and service analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — most notably in relation to marketing communications and optional data collection. You may withdraw consent at any time without affecting prior processing.

Sharing & Disclosure of Your Data

a9member does not sell, rent, or trade your personal data to third parties for commercial purposes. We may disclose your information to the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: Licensed financial institutions and e-wallet operators in Malaysia required to process your transactions securely.
• Identity Verification Partners: Regulated KYC and AML service providers who assist in verifying your identity and screening against sanctions lists.
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure vendors who process data on our behalf under strict contractual data processing agreements.
• Regulatory Authorities: Malaysian government agencies, law enforcement bodies, or courts where disclosure is required by law, court order, or regulatory mandate.
• Fraud Prevention Agencies: Shared databases used to identify and prevent fraudulent activity across regulated online platforms.

Where data is transferred to service providers outside Malaysia, a9member ensures that adequate data protection safeguards are in place, consistent with the requirements of the PDPA and applicable international standards.

Data Retention

a9member retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements.

As a general guideline:

• Active Account Data: Retained for the duration of your membership with a9member.
• Transaction Records: Retained for a minimum of seven (7) years following the date of the transaction, in line with Malaysian financial record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the end of the business relationship, as required under AML regulations.
• Support Communications: Retained for up to three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until consent is withdrawn or the record is no longer required to demonstrate compliance.

Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

Cookies & Tracking Technologies

a9member uses cookies and similar tracking technologies to enhance your experience on the Platform, ensure proper functionality, and collect analytics data. Cookies are small text files stored on your device when you visit our site.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core features such as user authentication, session management, and security controls. They cannot be disabled.
• Performance & Analytics Cookies: Help us understand how members use the Platform — which pages are visited most, where errors occur, and how load times can be improved. Data collected is aggregated and anonymous.
• Functional Cookies: Remember your preferences, such as language settings, display options, and previously entered information to improve your experience on return visits.
• Marketing Cookies: Used to track the effectiveness of our promotional campaigns and display relevant content to members who have opted in to marketing communications.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the a9member Platform. Full cookie details are available in our Cookie Notice, which can be accessed from your account settings.

Security Measures

a9member implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options available to all registered members.
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure.
• Role-based access controls ensuring only authorised personnel can access member data.
• Continuous 24/7 system monitoring and automated alerting for suspicious activity.

Your Data Protection Rights

As an a9member member and data subject, you have the following rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Correction: You may request that we correct inaccurate or incomplete personal data held about you. Members may also update certain information directly via their account settings.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your personal data while a complaint or correction request is being resolved.
• Right to Erasure: Subject to our legal and regulatory retention obligations, you may request deletion of your personal data upon closing your a9member account.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights.

To exercise any of these rights, please contact our support team via live chat on the Platform or by email at the address provided in Section 13. We will respond to all verified requests within 30 calendar days.

Age Restrictions & Protection of Minors

The a9member Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under this age. All new account registrations are subject to mandatory age and identity verification as part of our KYC process.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the account, refund any outstanding balance in accordance with our terms, and securely delete all associated personal data.

If you believe that a minor has registered on the Platform, please notify us immediately via our support team. We take underage gambling extremely seriously and cooperate fully with parental requests and regulatory authorities on such matters.

Updates to This Privacy Policy

a9member reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a revised "Last Updated" date at the top;
• Displaying an in-platform notification upon your next login, where the changes are significant; and/or
• Sending an email notification to the address registered to your a9member account.

Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your information.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way a9member handles your personal data, please do not hesitate to get in touch with our Data Protection team:

We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them fully within 30 calendar days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.