A9pay Privacy Policy – How We Protect Your Data

01Introduction

A9pay ("we", "our platform") takes the privacy of every user who registers and uses our services seriously. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use the a9pay.win website and all related services.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We are committed to ensuring your data is handled responsibly, transparently, and securely at all times.

If you have any questions about how we handle your data after reading this document, our data protection team is ready to assist via the channels listed at the end of this document.

02Personal Data We Collect

A9pay collects various types of data depending on your interactions with the platform. Full details are as follows:

Technical and usage data is collected automatically when you access our platform via cookies and similar tracking technologies. For more information, please refer to the Cookies section of this document.

03How We Use Your Data

The data we collect is used solely for legitimate and necessary purposes in the operation of the a9pay platform. The following are the primary purposes for which data is used:

• Account management — to create, verify, and maintain your user account.
• Transaction processing — to process deposits, withdrawals, and all financial transactions within the platform.
• Identity verification (KYC) — to comply with legal and regulatory requirements, including anti-money laundering and age verification.
• Customer support — to help you resolve issues, answer inquiries, and handle complaints.
• Platform security — to detect and prevent fraud, unauthorized access, and suspicious activity.
• Service improvement — to understand usage patterns and improve the overall user experience.
• Marketing communications — to send information about new promotions and offers, subject to your consent.
• Legal compliance — to fulfill legal obligations, regulations, and directives from relevant authorities.

04Sharing Data with Third Parties

A9pay does not sell your personal data to any third party. However, in certain situations, we may need to share your information with the following parties for legitimate operational purposes:

• Payment processors and banks — to facilitate the deposit and withdrawal transactions you carry out.
• Game software providers — minimum session information required to run games within the platform.
• KYC service providers — to verify user identity for legal compliance purposes.
• Authorities and regulatory bodies — when required by law or a valid court order.
• Professional advisors — lawyers, accountants, or auditors bound by professional confidentiality obligations.

All third parties involved in processing your data are required to meet data security standards equal to or higher than our own. We enforce binding data processing agreements with all relevant third parties.

05Data Security

A9pay continuously invests in security infrastructure to ensure your data remains protected at all times. The technical and organizational security measures we implement include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Data encryption at rest for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensuring only authorized staff can access user data.
• 24/7 security system monitoring to detect and respond to any unauthorized access attempts.
• Internal and external security audits conducted periodically by independent parties.
• Clear incident response procedures to ensure any data breach is addressed swiftly and effectively.
• Mandatory data security awareness training for all staff who handle user data.

While we take all reasonable security measures, no online system can be guaranteed 100% secure. We encourage you to take your own protective steps as well, such as using a strong password and enabling two-factor authentication on your account.

06Data Retention Period

A9pay retains your personal data for as long as your account is active, or for as long as necessary to fulfill the purposes stated in this Privacy Policy. Once an account is closed, we will delete or anonymize your personal data within a reasonable timeframe, except:

• Financial transaction data, which may need to be retained for seven (7) years or more for legal and tax compliance purposes.
• Data related to ongoing investigations or litigation.
• Data required to be retained by law or directive from relevant authorities.
• Data required to handle any outstanding claims, complaints, or disputes.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered or accessed again.

07Your Rights as a Data Subject

Under Malaysia's PDPA and this Privacy Policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team via the in-platform live chat or email us at [email protected]. We will process your request within 30 calendar days of receipt.

08Cookies & Tracking Technologies

A9pay uses cookies and similar tracking technologies to enhance the user experience and gather analytics data. The types of cookies we use are as follows:

You can manage and delete cookies through your internet browser settings. Please note that disabling required cookies may affect certain functions within the a9pay platform.

09Children's Data Protection

The a9pay platform is strictly for individuals aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. If you believe we may have collected data from a minor without appropriate consent, please contact us immediately so we can take appropriate action.

The KYC process we implement is specifically designed to verify the age of all users and prevent access by underage individuals. Any account found to be owned by a person under 18 will be terminated immediately and all related data will be deleted promptly.

10Changes to This Privacy Policy

A9pay reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Where there are significant changes, we will notify you through one of the following means:

• In-platform notification the next time you log in.
• Email notifications to the address registered on your account.
• Update the "Last Updated" date at the top of this document.

Continued use of the a9pay platform after changes are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed on how we protect your data.

11Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

We are committed to responding to all privacy-related inquiries within 5 working days. For more complex requests such as data access or account deletion, processing may take up to 30 calendar days.

If you are not satisfied with our response, you have the right to file a complaint with the Malaysia Department of Personal Data Protection or the relevant regulatory body under PDPA 2010.