Your privacy is a9play's priority. This document clearly explains what data we collect, why it is collected, how it is used, and the rights you hold as a member. All of our data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Six core principles underpinning how A9Play handles the personal data of every member in Malaysia
All of A9Play's data handling practices are in full compliance with Malaysia's Personal Data Protection Act 2010. We do not collect data beyond what is necessary, and the purpose of every data collection is clearly stated to you.
Every data exchange between your device and A9Play's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian banks such as Maybank and CIMB. Your data cannot be intercepted while in transit.
A9play has never sold, rented, or traded your personal data to any third party for marketing purposes, and never will. Your data belongs to you — a9play holds it solely in trust, for the purposes you have consented to.
You have the right to access, review and correct any personal data we hold about you. Requests can be submitted at any time via our support email and will be processed within a reasonable timeframe in accordance with the PDPA 2010.
Personal data is stored on servers secured with strict access controls. Only A9Play staff with specific authorisation may access members' personal data, and all access is logged for security audit purposes.
You may request the deletion of your personal data upon account closure, subject to record retention obligations prescribed by applicable Malaysian law. a9play does not retain data for longer than is necessary.
Important Note: This Privacy Policy describes A9Play's ("Platform") personal data handling practices in relation to information you provide while using our services. By registering an account or using the A9Play platform, you agree to the collection and use of data as described in this document. If you do not agree, please do not use our platform. For any enquiries, contact us at support@a9play.xyz.
A9play is an online entertainment platform operating in Malaysia, offering a wide range of games including video slots, live casino Baccarat, Sports Betting (Malaysia Super League, EPL, badminton, e-sports), progressive jackpots and table games. In providing these services, a9play collects and processes certain member personal data for legitimate and specific purposes.
We take this responsibility seriously. Every decision relating to your data is made with your best interests and privacy in mind — not merely to satisfy minimum legal requirements, but to genuinely honour the trust you place in us when you register as an A9Play member.
When you register an account or use A9Play's services, you provide the following personal data directly to us:
When you use the a9play platform, our systems automatically record the following technical information:
Data Minimisation Principle: A9Play only collects data that is strictly necessary for the stated purposes. We do not collect unrelated sensitive information such as health details, political views, or religious affiliations. Every category of data we collect has a clear and legitimate justification under Malaysia's PDPA 2010.
For clarity, a9play not collects the following information:
A9play uses collected personal data solely for the following legitimate purposes under Malaysia's PDPA 2010:
| Purpose of Processing | Legal Basis | Data Involved |
|---|---|---|
| Member account management | Contract performance | Name, phone number, email |
| Processing of deposit & withdrawal transactions | Contract performance | Payment information, transaction records |
| Identity verification & AML compliance | Legal obligation | MyKad, identity information |
| Customer support & complaints resolution | Legitimate interest | Communication records, game records |
| Platform improvements & analytics | Legitimate interest | Usage data (anonymised) |
| Marketing communications (with consent) | Consent | Email, phone number |
| Platform security & fraud prevention | Legitimate interest | IP address, session data, activity logs |
A9play will only send marketing communications — including information about promotions, new bonuses, new games and exclusive offers — to members who have given their consent to receive such communications. You may withdraw this consent at any time through your account settings or by contacting our support team.
A9play uses anonymised usage data to understand platform usage patterns, identify areas for improvement and personalise the user experience. This data contains no information that can be used to personally identify you when applied for analytics purposes.
A9play does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. This is an absolute commitment on our part — not merely a legal obligation, but a core value we uphold firmly in every operational decision we make.
Your personal data may be shared with a limited number of third parties only in the following circumstances:
Some of A9Play's technical service providers may operate outside Malaysia. In such cases, A9Play ensures that any cross-border data transfers are carried out with adequate contractual safeguards — at least equivalent to those provided under Malaysia's PDPA 2010 — to ensure your data remains protected regardless of where it is physically processed.
Fraud Warning: A9Play will never ask for your login credentials or password via email, WhatsApp, or any communication channel outside the platform. If you receive a message claiming to be from A9Play that requests such sensitive information, it is a fraudulent attempt. Please report it to us at support@a9play.xyz immediately.
A9Play implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, loss, alteration, or unintended disclosure:
All financial transactions on a9play are processed through payment providers that comply with PCI DSS (Payment Card Industry Data Security Standard). a9play does not store full card numbers or sensitive payment information directly on our servers — all sensitive financial data is handled exclusively by licensed and regulated payment providers.
While A9Play takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a material data breach affecting your personal data, A9Play is committed to:
Cookies are small text files stored by your web browser when you visit a website. a9play uses cookies to ensure the platform functions correctly, remember your preferences and improve your overall user experience. Cookies do not contain viruses or malware and cannot access other files on your computer or phone.
You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the A9Play platform. For guidance on managing cookies in your browser (Chrome, Safari, Firefox, Edge), please refer to the relevant browser's help section.
A9Play does not retain your personal data for longer than is necessary for the stated purposes or as required under applicable Malaysian law. Our general data retention schedule is as follows:
| Data Category | Retention Period | Justification |
|---|---|---|
| Active account information | For the duration of the active account | Required for service |
| Financial transaction records | 7 years after transaction | AML & tax legal obligations |
| Identity verification records | 5 years after account closure | Regulatory compliance obligations |
| Support communication logs | 2 years after resolution | Complaint and dispute referrals |
| Anonymous analytics data | Unlimited (anonymised) | Platform improvements |
| Session cookies | Until log out | Session security |
Once the retention period expires or when data is no longer required, a9play will securely delete or anonymise it. The deletion process employs methods that ensure the data cannot be recovered.
After Account Closure: When you close your A9Play account, your active data will be deleted from our live systems. However, certain records — particularly financial transaction records — must be retained for a specified period in accordance with Malaysia's legal obligations relating to anti-money laundering and financial reporting. This data is held in a separate archival system and is not used for any active operational purpose.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal data held by A9Play. The following outlines your rights and how to exercise them:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days and may be subject to a reasonable processing fee in accordance with the PDPA.
If the personal data we hold about you is inaccurate, outdated, or incomplete, you have the right to request a correction. You may also update basic information directly through your account settings.
You may object to the processing of your personal data for direct marketing purposes at any time. Such requests will be acted upon immediately, with no questions asked on our part.
You may request the deletion of your personal data when it is no longer required for the purpose for which it was collected, subject to record retention obligations prescribed by law.
For processing based on your consent (such as marketing), you may withdraw that consent at any time through your account settings or by contacting our support team.
If you believe your privacy rights have been violated, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia — the government body overseeing PDPA 2010 compliance.
How to Exercise Your Rights: To submit any request relating to your privacy rights, please contact the a9play team at support@a9play.xyz by stating the type of request and providing the information required to verify your identity. We will acknowledge receipt of your request within 3 business days and provide a full response within 21 business days.
The a9play platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Account registration by anyone who has not reached the age of 18 is strictly prohibited and constitutes a breach of Terms & Conditions a9play.
A9play enforces age verification procedures during the registration process to ensure compliance with this minimum age requirement. Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to:
If you become aware that someone under the age of 18 is using the A9Play platform or has provided us with their personal data, please notify us immediately at support@a9play.xyz so that prompt action can be taken.
A9Play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, relevant legislation, or improvements in how we describe those practices. Minor, non-material changes may take effect without prior notice.
For any material changes to the way we use or protect your personal data, A9Play is committed to:
Continued use of the a9play platform after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account before the effective date.
If you require a copy of a previous version of this Privacy Policy for reference, please contact our support team at support@a9play.xyz. We maintain an archive of previous versions for a reasonable period.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way A9Play handles your personal data, please reach out to us through any of the following channels:
For formal requests relating to your privacy rights (data access, rectification, deletion), please submit your request by email with the subject line "Data Privacy Request — [request type]" along with the information required to verify your identity. We are committed to responding to all privacy-related requests within the timeframe stipulated by Malaysia's PDPA 2010.
Complaints to the Authorities: If you are not satisfied with A9Play's response to your privacy concern, you have the right to lodge a complaint with Department of Personal Data Protection (JPDP) Malaysia — the government body responsible for overseeing compliance with the PDPA 2010 in Malaysia.
Everything you need to know about your personal data controls, in one concise overview
256-bit SSL, encryption in transit and at rest, strict access controls and continuous security monitoring.
A9Play never sells or trades members' personal data to any third party for marketing purposes.
Access, correct, object to or delete your data at any time. Withdrawing marketing consent is simple and takes effect immediately.
All a9play practices comply with Malaysia's Personal Data Protection Act 2010 — not merely meeting the minimum requirements, but upholding its true spirit.
Play with peace of mind at A9Play — an online entertainment platform that takes the privacy and security of every member in Malaysia seriously.