Privacy Policy m9my –
Malaysian Player Data Protection

Welcome to the Privacy Policy page m9my. We understand that your privacy is something deeply personal, and we take this responsibility seriously. This Privacy Policy explains how m9my ("we", "platform") collects, stores, uses, and protects your personal information when you use the m9my.net website or any related services.

This Privacy Policy applies to all users of the m9my, including visitors, registered members, and active players. By registering an account or continuing to use our platform, you agree to the data collection and usage practices described in this document.

This document has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010 and international data protection standards. If you have any questions about how we handle your personal data, please do not hesitate to reach out to us through the channels provided at the end of this document.

m9my collects various types of information depending on how you interact with our platform. This information falls into two main categories:

A. Information You Provide Directly

• Full name as stated on your Malaysian identity card (MyKad) or passport
• Date of birth and gender
• Email address and mobile phone number
• Current residential address in Malaysia
• Bank account or e-wallet details (for deposit and withdrawal processing)
• A copy of your identity document for the KYC (Know Your Customer) process
• Transaction history and betting activity on the platform

B. Automatically Collected Information

• IP address and geographic location data (state/city only)
• Device type, operating system, and web browser used
• Session data: login time, session duration and pages visited
• Cookie data and device identifiers
• Technical error logs and platform performance data

m9my uses collected information solely for legitimate and transparent purposes. We will not use your data beyond the scope outlined below without obtaining additional consent from you:

• Account Management: To create, verify, and manage your member account on the platform m9my.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals to your bank account or e-wallet.
• KYC & AML Compliance: To fulfil legal requirements relating to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraudulent activity, unauthorized access, and platform misuse.
• Customer Support: To respond to your enquiries, complaints, and support requests more effectively.
• Service Communications: To send important notifications regarding your account, promotions, policy updates, and security information.
• Platform Improvement: Analysing aggregated usage data to improve the platform's functionality, performance, and overall user experience m9my.
• Responsible Gaming: Monitor betting behaviour to identify signs of problem gambling and provide appropriate assistance.

m9my does not share your personal information with third parties for commercial marketing purposes. However, there are limited circumstances where sharing information is necessary and legally permitted:

• Payment Providers: Information required to process transactions through payment gateways such as FPX, DuitNow, and local Malaysian e-wallet providers is shared securely and in encrypted form.
• Game Software Providers: Minimal game session data is shared with licensed game platform providers to ensure game integrity.
• Legal Requirements: m9my will disclose your information to the relevant authorities where required by Malaysian law, court order, or in efforts to prevent financial crime.
• Technical Service Providers: Hosting, cybersecurity, and analytics partners bound by strict confidentiality agreements, who process data only on our instructions m9my.

All third parties that receive data from m9my are required to uphold data protection standards equivalent to or higher than those we practise ourselves. We have zero tolerance for any misuse of data by any party working with us.

m9my invests seriously in cybersecurity infrastructure to ensure your personal data remains protected at all times. Our security measures encompass multiple layers of protection:

• Data Encryption: All transmitted data is protected with TLS 1.3 protocol and AES-256 encryption. Data stored in our databases is also encrypted.
• Access Controls: Only authorised personnel may access users' personal data, and every access is logged and monitored in real time.
• Two-Factor Authentication: Admin accounts and sensitive system access are protected with mandatory two-factor authentication (2FA).
• Periodic Security Audits: Penetration testing and independent security audits are conducted on a regular basis to identify and address system vulnerabilities.
• 24/7 Monitoring: An active threat detection system monitors suspicious activity around the clock, with incident response measures executed promptly.
• Data Backup: Data is automatically backed up to a separate, secure location to ensure continuity of service.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure. You are also responsible for keeping your account password safe and not sharing your login credentials with anyone. If you suspect your account has been accessed without authorisation, please contact m9my immediately.

Platform m9my uses cookies and similar tracking technologies to enhance your experience, ensure smooth platform functionality and analyse usage patterns in aggregate. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Optional Cookies: Saves your preferences such as language, display settings, and login details for a smoother experience.
• Analytics Cookies: Collecting anonymised usage data to help us understand how users interact with the platform and identify areas for improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect the integrity of your account.

You can manage or block cookies through your web browser settings at any time. Please note, however, that blocking certain cookies may affect the functionality of some parts of the platform m9my. Cookie retention periods vary by type — session cookies are deleted when you close your browser, while persistent cookies may last up to 12 months.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by m9my. We respect each of these rights and are committed to making them easy to exercise:

To exercise any of the above rights, please contact our data protection team m9my via email at support@m9my.net. Please include your full name and account number to help us process your request efficiently.

Platform m9my is strictly for users aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

Our registration process requires age verification through a valid identity document. Should we discover that a child's data has been collected without proper parental or guardian consent, we will take immediate action to delete that data and close the account in question.

If you believe your child has registered an account on m9my unlawfully, please contact us immediately at support@m9my.net and we will handle this as a matter of high priority.

Platform m9my may contain links to third-party websites or services provided purely for reference or user convenience. These links do not imply that m9my verify or take responsibility for the content, privacy policies, or practices of those websites.

We encourage you to read the Privacy Policy of every website you visit. m9my has no control over and is not responsible for the content, privacy policies, or practices of any third-party websites or services.

m9my retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account Data: Retained for as long as your account remains active and for 7 years following account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's Companies Act requirements and financial regulations.
• Security Logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Support Communication Data: Retained for 3 years to allow reference to customer service interaction history.
• Cookie Data: Retention periods vary from the current session up to a maximum of 12 months, depending on the cookie type.

Once the retention period has expired and there is no legal requirement to continue storing the data, your data will be securely deleted or permanently anonymised.

m9my reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. You will be notified of any material amendments through:

• In-platform notifications m9my when you log in
• Email to the address registered to your account
• A prominent notice on our website's main page

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to check this page periodically. Continued use of the m9my after an amendment is published will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way m9my manages your personal data, please contact our Data Protection Officer team through the following channels:

• Email: support@m9my.net
• Live Chat: Available 24/7 via the platform m9my
• Response Time: We are committed to responding to all privacy-related enquiries within 7 business days

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe that m9my has failed to comply with the requirements of PDPA 2010. However, we encourage you to contact us first so that we can address your concerns directly and promptly.