U9 today Privacy Policy — Protecting Our Users' Data

1 Introduction

Welcome to the u9 today Privacy Policy. This document explains in detail how u9 today ("we", "Platform") collects, processes, stores, and protects your personal information when you use our gaming platform at u9today.app, including via our mobile app and other access methods we provide.

User privacy is our priority. We believe you have the right to know exactly what data we hold about you, why we hold it, and who can view it. This document is written in plain language because we want you to genuinely understand your rights — not just fulfil a legal formality.

By registering and using the u9 today platform, you agree to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, we advise you not to use our platform. Should you have any questions after reading this document, our support team is always ready to assist.

2 Data We Collect

U9 today collects your personal information through several different methods. Generally, the data we collect can be grouped into three main categories:

A. Information You Provide Directly

• Full name as it appears on your official identity document.
• Mobile phone number for account verification and communication.
• Email address for notification and official communication purposes.
• Date of birth for age verification purposes — we are required to ensure all users are 18 years of age or older.
• Bank account details including bank name, account number, and account holder name for deposit and withdrawal purposes.
• Copies of identity documents (national ID or passport) during the KYC verification process.

B. Information Collected Automatically

• IP address and general geographic location information.
• The type and version of the browser you are using.
• Device type, operating system, and screen resolution.
• Pages visited, session duration, and navigation patterns within the platform.
• Game activity logs including bets placed, games played, and transaction outcomes.

C. Information From Third Parties

• Identity verification from a certified KYC service provider.
• Blacklist screening from regulatory bodies and anti-fraud agencies.
• Information you voluntarily share through our customer support channels.

3 How We Use Your Data

The data we collect is used solely for legitimate, pre-defined purposes. The table below outlines the purpose of each data use and its legal basis:

We will not use your data for any other purpose not stated above without obtaining your consent first. If you have previously agreed to receive marketing communications and wish to withdraw that consent, you may do so at any time through your account settings or by contacting our support team.

4 Data Sharing With Third Parties

U9 today does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are certain situations where we need to share your data with specific parties:

• Payment Service Provider: Banks and payment processors responsible for handling your deposits and withdrawals. They receive only the minimum data required to complete the transaction.
• KYC Verification Provider: Companies that help us verify user identities to ensure compliance with anti-money laundering (AML) laws.
• Game Service Providers: Third-party game software providers that supply game content on our platform may receive statistical data that cannot be personally identified.
• Regulatory Authority: We are legally required to share certain information with the relevant authorities when lawfully requested, including law enforcement agencies.
• Technical Infrastructure Provider: The cloud service and server hosting providers that store our data are bound by strict confidentiality agreements and are not permitted to use your data for their own purposes.

5 Cookies and Tracking Technologies

U9 today uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the platform to function properly. They include login session cookies, security settings, and language preferences. Disabling these cookies will affect core platform functionality.
• Performance & Analytics Cookies: We use analytics data to understand how users interact with our platform — which pages are most popular, where users encounter difficulties, and how we can improve the overall experience. This data is collected in aggregate form and cannot be personally identified.
• Functional Cookies: These cookies allow the platform to remember your preferences such as language, display settings, and login information (if you select "Remember Me") for a more convenient experience.
• Security Cookies: Used to detect suspicious login attempts, verify user identity, and prevent unauthorised access to your account.

You can manage your cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to your browser's documentation.

6 Data Security Measures

Protecting your personal data from unauthorised access, loss, or disclosure is our top technical priority. u9 today implements multiple layers of protection to ensure the security of your information:

• Data Encryption in Transit: All communications between your device and our servers are secured using TLS 1.3 protocol with AES-256-bit encryption — the highest industry standard.
• Data Encryption at Rest: Sensitive data such as bank details and KYC documents are encrypted at rest on our servers using industry-approved encryption algorithms.
• Strict Access Control: Only staff who genuinely require access to specific data are permitted to view it, based on the principle of least privilege. All staff access is logged and monitored on a regular basis.
• Two-Factor Authentication: We encourage users to enable two-factor authentication (2FA) for an additional layer of security on their accounts.
• Regular Penetration Testing: Our platform undergoes regular independent security testing to identify and address any vulnerabilities before they can be exploited.
• 24/7 Monitoring: Our real-time threat monitoring system operates around the clock to detect and respond to any suspicious activity.

7 Your Rights as a User

As a u9 today user, you have the following rights regarding your personal data. We are committed to fulfilling all valid requests within the stipulated timeframe:

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide a detailed report within 14 business days of receiving your request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request immediate correction. Basic information can be updated directly through your account profile settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that your data be deleted from our systems, subject to our legal obligations to retain certain records for the period required by financial regulations.
• Right to Restriction of Processing: In certain situations, you may request that we restrict how we use your data — for example, while a dispute investigation is in progress.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, and we will stop immediately.
• Right to Withdraw Consent: If you have given consent for certain data processing, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

To exercise any of the above rights, contact our support team via email at [email protected]. We will verify your identity before processing any request to ensure the security of your account.

8 International Data Transfers

In the course of operating the u9 today platform, your personal data may be transferred to and processed in countries outside Malaysia. This occurs primarily when we utilise international cloud infrastructure services and global technical service providers.

When your data is transferred outside Malaysia, we ensure that protection equivalent to or greater than that required under the Personal Data Protection Act 2010 (PDPA) of Malaysia is upheld through:

• Legally binding data processing agreements with all overseas data recipients.
• Use of standard contractual clauses approved by the relevant regulatory body.
• Selection of service partners operating under an equivalent or stricter data protection framework.
• A data protection impact assessment is conducted before any new data transfer is implemented.

9 Data Retention Period

U9 today does not retain your personal data longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• KYC and Identity Verification Records: Retained for a minimum of 5 years after account closure, in accordance with financial and AML regulatory requirements.
• Transaction History: Retained for 7 years for tax compliance and financial audit purposes.
• Activity and Game Logs: Retained for 2 years for dispute resolution and platform improvement purposes.
• Support Communication Records: Retained for 2 years after the case is closed.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period has expired, your data will be securely deleted or anonymised using methods that ensure it can no longer be associated with you.

10 Links to Third-Party Platforms

The u9 today platform contains links to third-party websites and services, including game providers and payment services. This Privacy Policy applies solely to the u9 today platform and does not cover the privacy practices of those third parties.

We are not responsible for the content, privacy policies, or security practices of any third-party websites or services. We encourage you to read the privacy policy of every platform you use, especially before providing any personal information to them.

11 Changes to This Privacy Policy

U9 today reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, or applicable legal requirements.

When we make significant changes to this policy, we will:

• Displaying a clear notice on the platform's home page at least three days before changes take effect.
• Updating the "Last Updated" date at the top of this document.
• For particularly significant changes, we may send direct notifications to users via email or within the platform.

Continued use of the platform after changes to the Privacy Policy take effect is considered acceptance of the updated terms. We encourage you to review this page regularly.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our data protection team:

• Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 3 business days.
• Language: You may contact us in Bahasa Melayu or English.