Privacy Policy a9today – Malaysian User Data Protection

1Introduction & Scope of This Policy

A9today takes user privacy very seriously. This Privacy Policy outlines our data protection practices and provides you with clear information on how we manage the personal data of users on our online Sports Betting and casino platform.

This policy applies to all users accessing the a9today platform via https://a9today.xyz or any associated mobile applications, regardless of the access method used. It also applies to all data we collect during the registration process, platform use, financial transaction processing, and interactions with our support team.

A9today complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of user data management. We believe that adherence to relevant data protection laws is the foundation of the trust we build with our Malaysian users.

2Personal Data We Collect

A9today follows a minimum data collection principle — we only gather information that is strictly necessary to deliver our services safely and efficiently. The categories of data we collect are as follows:

2.1 Information You Provide Directly

• Registration information: Full name, an active Malaysian phone number, a user-chosen password, and date of birth for age eligibility verification.
• Identity verification documents: A copy of your identity card (MyKad) or passport when requested for identity verification (KYC) purposes, particularly for withdrawals exceeding certain limits.
• Payment information: E-wallet account details (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay) or Malaysian bank account information for processing deposits and withdrawals in MYR.
• Communications: The content of messages you send to our support team via Live Chat, WhatsApp, or email, including complaints, enquiries, and feedback.

2.2 Data Collected Automatically

• Technical data: IP address, web browser type and version, device operating system, screen resolution, and unique device identifiers.
• Usage data: Pages visited, time spent on the platform, navigation patterns, features used, and actions taken within the a9today platform.
• Location data: General location information based on IP address, used for security purposes and to verify that access is made from Malaysia.
• Cookie data: Information collected through cookies and similar tracking technologies as described in Section 8.

2.3 Betting Activity Data

As a betting platform, a9today maintains detailed records of all user betting activity, including:

• All bets placed, including bet type, market, amount, and outcome
• Full deposit and withdrawal history, including payment methods and amounts in MYR
• Casino games played, including roulette, baccarat, slots, and other games
• Use of responsible gaming tools such as user-set deposit limits

This betting activity data is required for account management, dispute resolution, compliance with relevant legal requirements, and responsible gambling programmes.

3How a9today Uses Your Data

A9today uses the personal data collected solely for the following purposes:

Purpose of Use	Types of Data Used
Account registration and management	Identity, phone number, password
Deposit and withdrawal processing	Payment information, financial data
Identity verification (KYC)	Verification documents, identity information
Provision of betting services	Activity data, betting history
Account security and fraud prevention	Technical data, location data, usage patterns
Customer support	All categories related to enquiries
Responsible gambling programme	Betting activity data, deposit limits
Legal and regulatory compliance	Identity, financial transactions
Platform improvement and user experience	Usage data, technical data (aggregated form)

3.1 User Communications

A9today uses your contact information (phone number) to send important account notifications such as deposit confirmations, security alerts, two-factor authentication, and critical policy updates. a9today does not send marketing messages without your explicit consent. You can manage your communication preferences in your account settings at any time.

4Data Sharing & Disclosure

A9today does not sell or disclose users' personal data to third parties for commercial purposes. However, in the following limited circumstances, a9today may need to share certain information:

4.1 Trusted Service Providers

A9today works with authorised third-party service providers to support platform operations. These providers are given access only to the data necessary for their specific tasks and are bound by strict confidentiality agreements. Categories of providers that may receive limited data access include:

• Payment processors and e-wallet gateways (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX) that process users' MYR transactions
• Cloud service providers that store platform data to high security standards
• Identity verification service providers that assist with the KYC process
• Customer support platforms that enable our team to interact with users

4.2 Legal Requirements

A9today may disclose user information to relevant authorities when required to do so by Malaysian law, a valid court order, or as part of an investigation into fraud or illegal activity involving our platform. In such circumstances, a9today will disclose only the information required by law.

5Data Security Measures

A9today continuously invests in security infrastructure to ensure user data is protected to the highest standards. Key security measures we have in place include:

• 256-bit SSL encryption: All data transmitted between your device and a9today's servers is encrypted using 256-bit SSL, ensuring it cannot be intercepted in transit.
• Data encryption at rest: Sensitive data stored in a9today's databases, including financial information and identity documents, is encrypted at rest.
• Two-factor authentication (2FA): Users are advised to enable 2FA on their accounts for an additional layer of protection against unauthorised access.
• 24/7 security monitoring: The a9today security team continuously monitors the platform to detect any suspicious activity or unauthorised access attempts.
• Internal access controls: Access to user data by a9today staff is restricted on a need-to-know basis — only personnel who require access to carry out their duties are granted the appropriate permissions.
• Regular security audits: a9today conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.

6Data Retention Periods

A9today retains users' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. General data retention guidelines are as follows:

Data Category	Retention Period
Active account data	For as long as the account is active
Data after account closure	7 years (legal requirement)
Financial transaction records	7 years (financial compliance)
Support communication logs	3 years
Technical and security log data	12 months
Non-essential cookie data	Up to 13 months or until deleted

Once the retention period expires, a9today will securely delete or anonymise your data so that it cannot be recovered. Where legal requirements mandate retention beyond the periods stated above, we will comply while restricting access to that data as much as possible.

7User Rights Regarding Personal Data

As an a9today user, you have the following rights regarding your personal data under applicable Malaysian law:

To exercise any of the rights listed above, please contact the a9today privacy team by email at support@a9today.xyz, clearly stating your request. All data privacy rights requests will be processed within 14 business days. a9today may require identity verification before processing certain requests in order to protect the security of your account.

8Cookies & Tracking Technologies

A9today uses cookies and similar technologies to enhance user experience, maintain platform security, and analyse usage patterns for continuous improvement. Cookies are small text files stored on your device when you visit our platform.

8.1 Types of Cookies We Use

• Essential Cookies: Required for core platform operations such as login authentication, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Stores your preferences such as interface language and display settings to improve usability.
• Analytics Cookies: Collects information about how you use the platform in aggregated, anonymised form to help us understand user behaviour and improve our products.
• Security Cookies: Helps detect and prevent fraudulent activity, hacking, and platform abuse.

8.2 Managing Cookies

You can manage and control cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the a9today platform and your overall experience. Essential cookies cannot be disabled as they are required for the security and core operation of the platform.

9Children's Privacy

The a9today platform is strictly for users aged 18 and above. a9today does not knowingly collect personal data from individuals under the age of 18. Should we discover that a minor's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you believe a child under the age of 18 has registered an a9today account or provided us with personal information, please contact our support team immediately at support@a9today.xyz. We take child protection seriously and will act promptly on any such report.

10Privacy Policy Amendments

A9today reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When material changes are made to this Privacy Policy, a9today will:

• Updating the "Last Updated" date at the top of this document
• Displaying a prominent notice on the platform for at least 7 days before changes take effect
• Notifying registered users via email or in-platform messages about significant changes

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the a9today platform after any changes to the Privacy Policy take effect will be considered acceptance of the updated policy.

11Contact Us About Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way a9today handles your personal data, please contact our privacy team:

Privacy Email	Support@a9today.xyz
Live Chat	Available 24/7 via the chat icon on the a9today platform
Response Times	Privacy enquiries: within 14 working days · Chat: under 3 minutes
Support Languages	Bahasa Melayu & English

When contacting us regarding data privacy, please include your full name, account number (if applicable), and a clear description of your enquiry or request. This helps us process your request more quickly and accurately. All privacy-related communications are handled in strict confidence.