u9play99 Privacy Policy

Introduction

u9play99 operates an online casino and sports betting platform accessible to eligible players in Malaysia, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. This Privacy Policy describes the personal data that u9play99 collects, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to individuals whose data we hold.

u9play99 is committed to responsible data management. We recognise that online gaming involves the collection of financial, identity, and behavioural data, and we take the corresponding obligation to protect that data seriously. This document should be read alongside our Terms & Conditions and, where relevant, our Responsible Gambling Policy.

Definitions

• "Personal data" means any information that identifies or could reasonably identify an individual, including name, identification number, contact details, payment references, IP address, device identifiers, and gaming activity records.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Data subject" means the individual to whom the personal data relates — in most cases, a registered u9play99 player or website visitor.
• "Third party" means an entity other than u9play99 and the data subject, including payment processors, identity verification services, and regulatory authorities.
• "Consent" means a freely given, specific, informed, and unambiguous indication by the data subject that they agree to the processing of their personal data for a stated purpose.

Personal Data We Collect

u9play99 collects personal data through several channels: the registration process, ongoing account activity, payment transactions, support interactions, and automatic technical processes when the website is used. The categories of data collected include, but are not limited to, the following:

Purpose of Data Processing

u9play99 processes personal data to fulfil the following purposes:

• Account management: Creating, maintaining, and securing the player account, including authentication and access controls.
• Identity and age verification: Confirming that the player is at least 21 years old and that the identity details provided are accurate, consistent with KYC obligations.
• Payment processing: Facilitating deposits and withdrawals through Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and USDT TRC20, and conducting required payment ownership checks.
• Service delivery: Providing access to casino games, live dealer tables, sports betting markets, promotional offers, and customer support.
• Fraud prevention and security: Detecting and investigating irregular activity, unauthorised access, payment abuse, and policy violations.
• Regulatory compliance: Fulfilling record-keeping, anti-money laundering, and reporting obligations required under applicable international gaming and financial regulation.
• Responsible gambling: Monitoring usage patterns where there are indicators of problem gambling, applying player-requested limits, and intervening where necessary to promote safe play.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and the player experience.
• Communication: Sending account notifications, security alerts, transaction confirmations, and, where consented, promotional updates.

Legal Basis for Processing

u9play99 processes personal data on the following legal bases, applied depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the player account agreement, including payment processing and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering controls, KYC requirements, and data retention rules.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and internal analytics, where these interests are not overridden by the data subject's rights.
• Consent: Processing for direct marketing communications, where the player has explicitly opted in and may withdraw consent at any time.

Data Sharing and Disclosure

u9play99 does not sell, rent, or commercially transfer personal data to unrelated third parties. Disclosure may occur only in the following circumstances:

Service Providers

u9play99 engages third-party service providers that process data on our behalf for specific operational purposes, including identity verification, payment gateway processing (such as FPX and DuitNow operators), fraud detection, customer support tooling, and technical infrastructure. These processors are bound by contractual obligations consistent with this Policy and are prohibited from using the data for independent purposes.

Payment Partners

When a deposit or withdrawal is initiated, limited data such as account name, amount, and reference is shared with the relevant payment partner — for example, a Malaysian bank when processing a Maybank transfer, or a licensed e-wallet operator when processing a Touch 'n Go transaction. This sharing is essential to complete the financial instruction.

Regulatory and Legal Disclosures

u9play99 may disclose personal data to government agencies, law enforcement authorities, or gaming regulators where required by law, court order, or regulatory direction. We may also disclose data where necessary to protect the rights, safety, or property of u9play99, its players, or third parties.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, personal data held by u9play99 may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations. Affected players will be notified of material changes.

Data Retention

u9play99 retains personal data for as long as the associated account remains active and for a defined period thereafter, to meet legal, compliance, and dispute resolution obligations. General retention principles:

• Account and identity records are retained for a minimum period following account closure to satisfy applicable anti-money laundering and regulatory record-keeping requirements.
• Transaction records, including deposit and withdrawal histories in MYR and cryptocurrency, are retained for a period consistent with financial record-keeping obligations.
• Support communications and complaint records are retained for a period sufficient to resolve any outstanding disputes.
• Responsible gambling records, including self-exclusion history and limit configurations, are retained to prevent circumvention during any applicable exclusion period.
• Data held solely for marketing purposes is retained only while the player has consented to receive communications and is removed upon withdrawal of consent or account closure.

When data is no longer required for any legitimate purpose, it is securely deleted or irreversibly anonymised.

Cookies and Technical Tracking

u9play99 uses cookies and similar technical mechanisms to operate the platform securely and to understand how it is used. Cookies are small data files placed on a user's device when the website is accessed.

Strictly Necessary Cookies

These cookies are essential for the website to function. They manage authentication sessions, maintain a secure login state, and support core platform features. These cookies cannot be disabled without making the site non-functional.

Analytical Cookies

Analytical cookies collect aggregated, anonymised information about how players navigate the u9play99 platform — which pages are visited most frequently, where errors occur, and how session durations compare across device types. This data helps us improve the platform experience without identifying individual users.

Preference Cookies

Preference cookies remember settings selected by the player, such as display preferences or responsible gambling reminder configurations, so those settings persist across sessions without requiring repeated adjustment.

Security Measures

u9play99 implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption applied to all data transmitted between the player's device and u9play99 servers, consistent with the standard used by Malaysian financial institutions such as Maybank and CIMB for online banking.
• Access controls restricting internal staff access to personal data on a need-to-know basis, with role-based permissions and audit logging.
• Storage of identity documents, KYC images, and MyKad data in encrypted, isolated environments separate from general platform data.
• Routine vulnerability assessments and security monitoring to detect and respond to threats promptly.
• Staff training on data handling, phishing awareness, and incident response procedures.

Players are also responsible for maintaining the security of their own account credentials. Passwords should not be shared, reused across services, or disclosed in response to any unsolicited request — including messages that claim to be from u9play99 support.

Your Rights as a Data Subject

Subject to applicable law and the limitations of our legal retention and compliance obligations, players have the following rights in relation to personal data held by u9play99:

• Right of access: You may request a summary of the personal data we hold about you, the purposes for which it is used, and the parties to whom it has been disclosed.
• Right to rectification: If personal data held by u9play99 is inaccurate or incomplete, you may request that it be corrected. Where the data relates to your registered name or identity documents, additional verification may be required.
• Right to erasure: You may request deletion of personal data where it is no longer necessary for the purposes collected, where you have withdrawn consent and there is no other legal basis, or where the processing was unlawful. This right is subject to our obligations to retain certain data under applicable regulation.
• Right to restriction: You may request that processing be limited while a dispute is investigated or while you contest the accuracy of the data.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. An objection to marketing will be acted upon without condition.
• Right to data portability: Where technically feasible and permitted by law, you may request that certain data be provided to you in a structured, commonly used format.
• Right to withdraw consent: Where processing is based on consent — for example, marketing communications — you may withdraw that consent at any time by updating preferences in your account settings or contacting support.

To exercise any of the above rights, contact u9play99 at the details in Clause 13 below. We will respond within a reasonable timeframe and may require identity confirmation before acting on a request.

Children and Underage Users

u9play99 is strictly intended for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that an account has been opened or used by a minor, we will take appropriate action including account suspension, reversal of transactions where feasible, and deletion of the associated personal data.

Age verification is conducted as part of the KYC process. Parents or guardians who believe that a person under the age of 21 has accessed u9play99 should contact our support team immediately.

Changes to This Privacy Policy

u9play99 may update this Privacy Policy from time to time to reflect changes in platform services, payment channels, applicable law, or data processing practices. The revised effective date will be displayed at the top of this page. Where a change is material — for example, a new category of data being collected or a new type of third-party disclosure — registered players will receive notification through their registered email address or through an in-platform notice.

Continued use of u9play99 after the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure by contacting support.

Contact Us

For privacy-related enquiries, data subject rights requests, or to report a security concern, please contact the u9play99 data team using the following details. Please include your registered username (not your password) and a clear description of your request so we can respond efficiently.