Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how u9agent ("we", "us", "our", "the Company") collects, processes, stores, and protects the personal data of individuals ("you", "Member", "User") who register for, access, or use the u9agent online betting and gaming platform accessible at https://u9agent.cam ("the Site").

u9agent is committed to protecting your privacy and handling your personal data with transparency, fairness, and security. This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the applicable international data protection frameworks that govern our licensing obligations.

By registering an account on u9agent or by continuing to use the Site, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not consent to any part of this Policy, you should cease using the Site and contact us to close your account.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact information, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, transmission, alteration, or deletion.
• "Data Subject" means any individual whose personal data is collected and processed by u9agent.
• "Data Controller" means u9agent, as the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of u9agent under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data.
• "PDPA" means Malaysia's Personal Data Protection Act 2010, which regulates the processing of personal data in commercial transactions.
• "Sensitive Personal Data" means personal data relating to physical or mental health, political opinions, religious beliefs, criminal records, biometric data, or financial information that requires heightened protection.

Personal Data We Collect

u9agent collects the following categories of personal data from Members and Site visitors. We collect only data that is necessary and proportionate to the purposes described in this Policy.

How We Collect Personal Data

u9agent collects personal data through the following channels and mechanisms:

4.1 Directly from You

• During account registration — when you provide your name, date of birth, email address, and contact number.
• During KYC verification — when you submit identity documents and proof of address to confirm your eligibility.
• During deposit and withdrawal transactions — when payment method details are captured for processing.
• When you contact our support team via live chat, email, or any other communication channel.
• When you participate in promotions, surveys, or feedback initiatives.

4.2 Automatically

• Technical and usage data is collected automatically through cookies, server logs, and platform analytics tools each time you access the Site.
• Device fingerprinting and IP geolocation data may be collected as part of our fraud prevention and responsible gambling monitoring systems.

4.3 From Third Parties

• Identity verification service providers engaged for KYC compliance purposes may share verification outcomes with u9agent.
• Payment processing partners including FPX, DuitNow, and e-wallet providers may share transaction confirmation data to reconcile account balances.
• Anti-money laundering (AML) screening databases may be queried as part of our compliance obligations.

Data Processing & Use

u9agent processes your personal data for specific, documented purposes. We do not process data in a manner incompatible with the purpose for which it was collected.

Legal Basis for Processing

u9agent processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — including account management, payment processing, and the delivery of betting and gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, AML requirements, tax reporting duties, and licensing conditions.
• Legitimate Interests: Processing carried out in pursuit of u9agent's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and product analytics — provided that such interests do not override your fundamental data protection rights.
• Consent: Processing that relies on your freely given consent, including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

u9agent does not sell or commercially transfer your personal data to third parties. We share data only in the circumstances and with the categories of recipients described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in delivering our platform services. These providers act as Data Processors under written agreements that impose strict data protection obligations. Categories include:

• Payment processing infrastructure providers supporting FPX, DuitNow, e-wallet integrations, and cryptocurrency transactions
• Identity verification and KYC platform providers
• Cloud hosting and data storage infrastructure providers
• Customer support platform providers
• Fraud detection and AML screening technology providers

7.2 Regulatory and Legal Disclosure

u9agent may disclose personal data to competent authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by law or court order, or where disclosure is necessary to protect the safety, rights, or property of u9agent, its Members, or the public.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of u9agent's assets, personal data held by u9agent may be transferred to the relevant successor entity, subject to that entity adopting equivalent or superior data protection standards. Members will be notified of any such transfer in advance where practicable.

Data Retention

u9agent retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical and analytical purposes.

Cookies & Tracking Technologies

u9agent uses cookies and similar tracking technologies on the Site to deliver core functionality, maintain session security, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the operation of the platform, including session management, login authentication, and security token validation. These cookies cannot be disabled without breaking core Site functionality.
• Functional Cookies: Used to remember your preferences, including language settings and display options. These enhance your experience without tracking behaviour for external purposes.
• Analytics Cookies: Collect pseudonymised usage data to help us understand how Members navigate the platform, which features are most used, and where technical improvements are needed. Aggregate analytics data does not identify individual users.
• Security & Fraud Prevention Cookies: Used to detect and prevent unauthorised access, duplicate accounts, and automated bot activity. These are classified as strictly necessary and cannot be disabled.

You may manage non-essential cookie preferences through your browser settings. Disabling all cookies may impair the functionality of the Site. u9agent does not use third-party advertising or behavioural tracking cookies on its platform.

Your Data Rights

As a Data Subject under Malaysia's PDPA and applicable international data protection standards, you have the following rights with respect to your personal data held by u9agent. You may exercise any of these rights by contacting our Data Protection team at the details provided in Section 15.

u9agent will respond to all data rights requests within 30 calendar days of receipt. In complex or high-volume cases, this period may be extended by a further 30 days, and you will be notified accordingly. We do not charge fees for the exercise of data rights unless requests are manifestly unfounded or excessive.

Data Security Measures

u9agent implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher. All personal data stored at rest is encrypted using AES-256 encryption.
• Access Controls: Strict role-based access controls limit internal access to personal data on a strict need-to-know basis. All access to sensitive data systems is logged and audited.
• Two-Factor Authentication: All member accounts support two-factor authentication (2FA), which we strongly recommend enabling for an additional layer of account security.
• Penetration Testing: Regular independent security assessments and penetration testing are conducted on our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All u9agent personnel with access to personal data undergo mandatory data protection and security training as part of their onboarding and on an annual refresher basis.
• Incident Response: A documented security incident response plan is maintained and tested regularly. In the event of a confirmed breach, affected members will be notified in accordance with applicable legal timeframes.

Minors & Age Policy

u9agent's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect or process personal data from individuals under the age of 21.

During account registration and as part of our KYC verification process, we take active steps to verify that all Members meet the minimum age requirement. Where we become aware — through our own investigations or notification from a third party — that personal data has been collected from an individual under the age of 21, we will:

• Immediately suspend the relevant account pending investigation.
• Permanently close the account and return any deposited funds net of any amounts retained under applicable regulatory obligations.
• Delete all personal data associated with the account, subject to any mandatory legal retention requirements.

If you believe that a minor has registered on u9agent, please contact our support team immediately at [email protected] so we can investigate and take prompt action.

International Data Transfers

u9agent's primary data processing infrastructure is hosted within secure data centres. Some of the third-party service providers we engage — including cloud infrastructure and payment processing partners — may process data in jurisdictions outside Malaysia.

Where personal data is transferred internationally, u9agent ensures that appropriate safeguards are in place to provide a level of protection equivalent to that afforded under Malaysia's PDPA. These safeguards include:

• Standard contractual clauses or data processing agreements with receiving parties that impose binding data protection obligations.
• Transfer to jurisdictions that have been recognised as providing adequate protection equivalent to Malaysian data protection standards.
• Additional technical safeguards, including end-to-end encryption, for data transmitted across jurisdictional boundaries.

Policy Amendments

u9agent reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — meaning they significantly affect how your personal data is used or your rights as a Data Subject — we will notify you by email to your registered address and by prominent notice on the Site at least 14 days before the changes take effect.

Minor or administrative updates may take effect upon publication on the Site without advance notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of u9agent following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data as outlined in Section 10.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how your personal data is being handled, please contact u9agent's Data Protection team. We aim to respond to all privacy-related enquiries within 5 business days and to resolve data rights requests within 30 calendar days.