A9agent Privacy Policy – Personal Data Protection for Malaysian Players

A9agent is an online gambling platform operating under a valid international licence. We are fully committed to protecting the privacy of all our users, especially Malaysian players who entrust us with their personal information.

This Privacy Policy applies to all personal information we collect through:

• The a9agent website accessed via web browser.
• The a9agent mobile interface and application (where available).
• Direct communication between you and the a9agent support team via live chat, email or Telegram.
• Any other services offered by a9agent within the context of our online gambling platform.

A9agent collects various types of personal information for different purposes. Below are the categories of data we collect:

Data We Do Not Collect: a9agent never requests or stores PIN numbers, online banking passwords, or full credit/debit card details. All financial transactions are processed directly through secure payment gateways.

A9agent uses the personal data collected for the following purposes, on a valid legal basis:

• Contract Performance: To register your account, process RM deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX (Maybank2u, CIMB Clicks), process winnings withdrawals and provide the gaming services you choose.
• Legal Compliance: To fulfil identity verification (KYC) requirements, anti-money laundering (AML) compliance, and reporting obligations to relevant authorities where required by law.
• Legitimate Interest: To detect and prevent fraud, safeguard platform security, resolve disputes, and conduct data analysis to improve our services.
• With Your Consent: To send marketing communications, promotions and information about new games and offers at a9agent — only where you have given your consent.
• Responsible Gambling: To monitor gaming patterns, identify signs of problem gambling and reach out to members who may need support — part of a9agent's commitment to player well-being.

A9agent does not sell or rent your personal data to any third party. However, we may share certain information in limited circumstances and on a need-to-know basis:

• Payment Service Providers: Information required to process transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX is shared securely with the respective providers, limited strictly to what is necessary.
• Game Providers: Minimal technical information (such as player ID) is shared with game providers including Pragmatic Play, Evolution Gaming and PG Soft to ensure games function correctly.
• Authority: a9agent will disclose personal data to the relevant authorities where required by law, court order, or official investigations relating to fraud or money laundering.
• Selected Business Partners: In certain cases, data may be shared with business partners who assist in operating our platform — all such partners are bound by strict data protection agreements with a9agent.

All data sharing with third parties is subject to data protection agreements that ensure your data is safeguarded to a standard equivalent to this policy.

A9agent implements a range of technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL Encryption: All data in transit is protected with the highest level of encryption.
• Data-at-Rest Encryption: Data stored in our databases is also encrypted using modern encryption algorithms.
• Strict Access Controls: Only authorised staff who require access to carry out their specific duties may access member personal data.
• Continuous Monitoring: Threat monitoring and intrusion detection systems operate 24 hours a day, 7 days a week.
• Regular Security Audits: Independent penetration testing and security audits are conducted regularly to identify and address any vulnerabilities.
• Staff Training: All a9agent staff who handle personal data receive regular data protection training.

Data Retention Period: Active account data is retained for the duration of membership. Following account closure, transaction and financial data is kept for 7 years for audit and legal compliance purposes. Marketing data is deleted within 30 days of consent withdrawal.

Under Malaysia's Personal Data Protection Act 2010 and international standards, you have the following rights regarding your personal data held by a9agent:

To exercise any of the rights above, please contact the a9agent privacy team by email at privacy@a9agent.bet. We will process your request within 14 business days.

The a9agent platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Below are the types of cookies we use:

You can manage your cookie settings through your web browser settings. Please note that disabling essential cookies may affect the core functionality of the a9agent platform.

In operating an online gambling platform, your personal data may need to be transferred to servers or business partners operating outside Malaysia — particularly in relation to game software providers and cloud infrastructure providers.

Every cross-border data transfer carried out by a9agent is subject to the following safeguards:

• Data is only transferred to countries or organisations that provide a level of data protection equivalent to or higher than Malaysia's.
• Use of approved standard contractual clauses to ensure data is protected to a consistent standard.
• All international service providers handling a9agent member data are bound by strict data processing agreements.

The a9agent platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect personal data from children or individuals under the age of 18.

If you believe we have inadvertently collected personal data from someone under the age of 18, please contact us immediately at privacy@a9agent.bet and we will take immediate action to delete that data.

A9agent implements age verification procedures during registration and reserves the right to request age verification documents at any time to ensure compliance with this requirement.

A9agent reserves the right to update or modify this Privacy Policy at any time to reflect changes in privacy practices, legal requirements, or our platform's services.

When material amendments are made to this policy:

• We will update the "Last Updated" date at the top of this page.
• We will notify members via their registered email or in-platform notification at least 14 days before any changes take effect.
• For highly material changes, we may seek fresh consent from you before continued use of the platform.

Continued use of the a9agent platform after the effective date of any amendment constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns or complaints regarding this Privacy Policy or how a9agent handles your personal data, please reach out to us through the following channels:

For complaints that cannot be resolved internally, you have the right to refer the matter to the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital.