A9today Privacy Policy — Personal Data Protection for Malaysian Members

1. Introduction

A9today ("we", "Platform") is a digital entertainment platform operating in Malaysia, providing live casino, slots, jackpot, table games, Sports Betting and e-sports services to registered members. We understand that your trust is the foundation of the relationship we build with you — and that trust starts with how we handle your personal data.

This Privacy Policy is designed to give you a clear and honest overview of:

• The types of personal data we collect and how they are collected.
• The purposes for which we use the data we collect.
• Parties that may have access to your data under certain circumstances.
• The technical and organisational measures we take to protect your data.
• Your rights in relation to your personal data and how to exercise them.

This Policy applies to all information you provide to a9today when registering, using the platform or interacting with our support team. It also applies to information we collect automatically through your use of the platform, such as usage data and device information.

2. Personal Data We Collect

A9today collects several categories of personal data depending on how you interact with our platform. Below is a detailed explanation of each category:

Data You Provide Directly:

• Registration Information: Your full name, Malaysian phone number, email address, and the username you chose when registering your a9today account.
• Identity Verification (KYC) Information: A copy of your MyKad or Malaysian passport, your identification number, and the demographic information required to verify your identity in accordance with compliance requirements.
• Financial Information: Bank account or digital wallet details (account number, account holder name) required to process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, FPX, and other Malaysian payment methods.
• Support Information: The content of communications you send to the a9today support team via live chat, email or other channels.

Automatically Collected Data:

• Log & Technical Data: IP address, browser type, operating system, screen resolution and device information used to access the a9today platform.
• Usage Data: Pages visited, time spent on the platform, games played, total bets placed, and general usage patterns — collected for the purpose of improving the user experience.
• Cookie Data: Information stored via cookies and similar technologies as described in Section 6.

3. How We Use Your Data

A9today uses the personal data it collects solely for legitimate purposes directly related to operating the platform and delivering services to you. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your a9today account, including login verification, password resets and profile information updates.
• Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian payment method, generating transaction receipts and maintaining accurate financial records.
• Identity Verification: Carrying out the KYC procedures required to ensure all members meet the minimum age of 18 and to prevent money laundering.
• Service Delivery: Keeping the a9today platform running smoothly for you — including access to Live Casino, slots, jackpots, Table Games, football betting, badminton, and e-sports.
• Service Communications: Sending important account-related notifications such as deposit confirmations, withdrawal processing updates, changes to terms and security alerts.
• Promotional Communications: Notifying you about bonus offers, promotions, and platform updates — only where you have given consent to receive such communications.
• Platform Security: Detecting and preventing fraudulent activity, duplicate accounts, bonus abuse, and other security threats that could compromise the integrity of the platform and the interests of other members.
• Responsible Gambling: Monitoring gameplay patterns to identify members who may need support related to problem gambling and providing the appropriate tools.
• Platform Improvements: Aggregated usage data — with no individual identification — is analysed to improve the a9today platform's interface, performance, and overall user experience.
• Legal Compliance: Complying with legal obligations and regulations applicable in Malaysia, including reporting requirements mandated by the relevant authorities.

A9today will not use your personal data for any other purpose without first obtaining your consent or having a clear legal basis to do so.

4. Sharing Data with Third Parties

A9today does not sell, rent or transfer your personal data to third parties for their own marketing purposes. However, there are limited circumstances in which your data may be shared with certain parties to enable us to operate the platform effectively:

• Payment Service Providers: Transaction information required for processing is shared with Malaysian payment processors — including DuitNow, Touch 'n Go eWallet, GrabPay, and FPX gateway service providers — solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements.
• Game Providers: Required game session information is shared with providers such as Evolution Gaming and Pragmatic Play to operate the games you play. These providers comply with international data protection standards.
• Identity Verification Providers: For KYC purposes, certain identity details may be shared with licensed and regulated third-party verification services.
• Malaysian Authorities: a9today will disclose personal data to the relevant Malaysian authorities when required by law, court order or a legitimate official investigation.
• Legal & Financial Professionals: Lawyers, accountants, or auditors appointed to assist with a9today's operations may require access to certain data, and they are bound by professional confidentiality obligations.

5. Data Security

A9today implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your browser and a9today's servers is encrypted using the latest TLS/SSL protocols, ensuring your information cannot be read by any third party while in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including passwords and financial details, is encrypted using robust hashing and encryption algorithms.
• Two-Factor Authentication (2FA): a9today members are encouraged to enable 2FA, which adds an extra layer of security to the login process — even if someone knows your password, they cannot access your account without the secondary verification code.
• 24/7 Security Monitoring: Our automated monitoring system detects suspicious activity in real time, including unusual login attempts, access from unrecognised locations, and anomalous transaction patterns.
• Internal Access Controls: Only a9today employees with a legitimate business need are permitted to access member personal data, and all such access is recorded and regularly audited.
• Regular Security Audits: a9today conducts regular penetration testing and independent security audits to identify and address any potential vulnerabilities.
• Incident Response Plan: We have clear procedures in place to handle any data security incidents. In the event of a significant data breach, affected members will be notified within a reasonable timeframe.

While we take all reasonable steps to protect your data, please be aware that no security system can be guaranteed to be 100% foolproof. As a member, you also play an important role in keeping your account secure — use a strong password, never share your login credentials, and report any suspicious activity to the a9today support team promptly.

6. Cookies & Tracking Technologies

The a9today platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are required for the a9today platform to function and cannot be disabled. They enable core functionality such as page navigation, access to secure areas and your login session. These cookies do not store any personally identifiable information.
• Performance Cookies: These cookies help us understand how visitors interact with the a9today platform by collecting and reporting information anonymously. This allows us to identify the most visited pages, time spent on specific pages and any technical errors that may occur.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as your selected language, display settings, and login details — so you don't have to re-enter them each time you access the platform.
• Session Cookies: These temporary cookies are deleted when you close your browser. They are used to identify your current session and enable in-session operations such as adding items to a cart or confirming transactions.

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the a9today platform and your overall user experience. Please refer to your browser's help guide for more information on how to manage cookies.

7. Data Retention Period

A9today retains your personal data for as long as it is needed to fulfil the purposes stated in this Privacy Policy, for as long as your account remains active, or for as long as required to meet our legal obligations.

As a general guide on retention periods:

• Active Account Data: Retained for as long as your account remains active on the a9today platform and for a reasonable period after the account is closed.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian legal and tax requirements.
• KYC Data: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering compliance requirements.
• Support Communication Log: Retained for 3 years for reference and dispute resolution purposes.
• Usage Data & Technical Logs: Retained for 12 months for security and system improvement purposes.

When your personal data is no longer needed and there is no legal obligation to retain it, a9today will securely delete or anonymise it in accordance with industry-standard procedures.

8. Your Rights Regarding Personal Data

As an a9today member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable format within 30 days of receiving your request.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we update it. For basic account information, you may also update it yourself via your a9today account profile page.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations to retain certain data — for example, financial transaction records may need to be kept in accordance with Malaysian law even if you request their deletion.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations — for example, while we are verifying the accuracy of data you have disputed.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another data controller.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.

To exercise any of the rights above, please contact the a9today support team via the platform's live chat or by email at support@a9today.click. We may need to verify your identity before processing your request in order to protect your privacy. Requests will be processed within 30 days, and we will notify you if a longer period is required for reasonable grounds.

9. Children's Privacy

The a9today platform is strictly for individuals aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that information and close the associated account. Any winnings credited to that account will be fully voided.

If you have reason to believe that someone under the age of 18 has registered or is using the a9today platform, please report it to our support team immediately at support@a9today.click. We take this very seriously and will take appropriate action.

10. Policy Amendments & How to Contact Us

A9today reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable legal requirements in Malaysia or developments in the data protection industry. When we make significant amendments, we will notify you via:

• Email notifications sent to your registered email address.
• A clear notice on the main page of the a9today platform.
• Update the "Last updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the a9today platform after any amendments take effect will be considered acceptance of the updated policy.

Contact Us:

If you have any questions, concerns, or complaints regarding this Privacy Policy or how a9today handles your personal data, please contact us through the following channels:

• Email: support@a9today.click
• Live Chat: Available 24/7 directly from the a9today platform
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days.