Member U9 Privacy Policy – Our Commitment Protecting Your Personal Data

Member U9 understands that privacy is a serious matter to each of our members. When you register an account, make a deposit via Touch 'n Go eWallet or DuitNow, place bets on Malaysia Super League or BWF badminton matches, or simply browse our platform, you are entrusting us with your personal information. That trust is something we do not take lightly.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010, which is the primary legislation governing the processing of personal data in a commercial context in Malaysia. We are committed to complying with all provisions of the PDPA 2010 and the data protection principles it contains, including the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle, the Data Integrity Principle, and the Access Principle.

This document is designed to be easy to read and understand for everyday members. We avoid overly technical legal language unless absolutely necessary – and when technical terms are used, we explain them clearly. Our goal is to ensure every Member U9 member knows exactly what happens to their data, rather than simply signing a lengthy document that no one reads.

Member U9 collects your personal data from several sources and in various circumstances. Below is a detailed breakdown of the data we may collect, why it is needed, and where it comes from.

We do not collect sensitive data categories such as health information, religious beliefs, or political affiliations except in very limited circumstances and with your explicit consent. Personal data of children under 18 is not knowingly collected – refer to Section 9 for more information.

Not all of the data listed above is collected from every member. The type of data we collect depends on how you use the Member U9 platform and the level of verification you have completed. For example, more detailed financial data may only be required when you undergo the full KYC process for larger withdrawal amounts.

The data we collect is used for specific and legitimate purposes. Member U9 does not use your data for any purpose beyond what is stated here without first obtaining fresh consent from you.

• Managing and administering your account – processing registrations, verifying identity, enabling login, and maintaining accurate records of your account.
• Processing financial transactions – processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, ShopeePay, and Boost, as well as handling withdrawal of winnings to your registered account.
• Providing betting services – allowing you to place bets on football, badminton, e-sports, and other sports within the Member U9 platform.
• Conducting compliance checks – carrying out KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures as required under Malaysian law.
• Providing customer support – enabling our team to handle your enquiries, complaints, and support needs effectively.
• Sending important communications – to inform you of policy updates, significant platform changes, or account activity that requires your immediate attention.
• Improving the platform – analysing usage patterns in aggregate (without identifying individuals) to improve the user experience and develop new features.
• Preventing fraud and illegal activity – detecting and investigating any suspicious activity that may involve fraud, money laundering, or misuse of the platform.
• Responsible gaming support – monitoring betting patterns to identify members who may need support with responsible gambling and proactively reaching out to them where necessary.

For direct marketing purposes such as sending promotional emails or Member U9 bonus notifications, we will obtain your separate consent at the point of registration. You may withdraw this consent at any time through your account settings or by contacting our support team.

Under Malaysia's PDPA 2010, Member U9 must have a valid legal basis for processing your personal data. Depending on the type of data and the purpose of processing, we rely on one or more of the following legal grounds:

• Your Consent – for most data processing activities, we rely on the consent you provided when registering your Member U9 account or when you accepted certain terms.
• Contract performance – to process the data necessary for fulfilling our obligations to you as a member, including processing bets and paying out winnings.
• Legal requirement – where we are required by Malaysian law to process or disclose certain data, such as KYC/AML requirements or in response to a court order.
• Legitimate interests – for purposes such as fraud prevention, platform security, and service improvement, where our interests do not override your fundamental rights and freedoms.

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the validity of any processing carried out prior to the withdrawal. It may mean that we are no longer able to provide certain services to you if the processing of that data is essential to those services.

Member U9 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a principle we will not compromise on. However, there are limited situations where we need to share data with other parties in order to operate the platform properly or meet legal obligations.

• Payment service providers – data required to process transactions is shared with eWallet providers and banks such as Touch 'n Go, GrabPay, DuitNow, ShopeePay, Boost, and FPX banking institutions. This sharing is necessary to complete your financial transactions.
• Technology service providers – we utilise third-party technology companies for cloud computing, analytics, and infrastructure support. All such providers are bound by strict data protection agreements and may only use your data for purposes we have specified.
• Malaysian legal authorities – we will disclose data to the Royal Malaysia Police, Bank Negara Malaysia, the Malaysian Anti-Corruption Commission (MACC), or other relevant authorities when required by a court order, warrant, or valid legal obligation.
• Fraud prevention service providers – to detect and prevent fraudulent activity, we may share limited data with recognised risk assessment and fraud prevention services.
• Business merger or acquisition – in the event of a merger, acquisition, or sale of Member U9 assets, members' personal data may be transferred to the successor entity, subject to notice being provided to members and protections equivalent to this Policy.

Member U9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by Malaysian law. For financial and transaction records, Malaysian law generally requires retention for seven years. For other data, retention periods are determined based on operational needs and applicable legal requirements.

After your account is closed, we will retain the records necessary for legal compliance purposes and to handle any outstanding disputes. Data that is no longer required will be securely deleted or anonymised so that it can no longer be linked back to you.

On the technical security front, Member U9 implements multiple measures to protect your personal data against unauthorised access, disclosure, modification, or destruction:

• 256-bit SSL/TLS Encryption for all data transmitted between your browser and Member U9's servers.
• Encryption of data at rest – sensitive data such as financial information is stored in encrypted form within our databases.
• Strict access controls – only staff with a legitimate need to carry out their duties are granted access to member personal data, and all access is logged and monitored.
• 24/7 security monitoring – a threat-detection system that operates around the clock to identify and respond to any security threats without delay.
• Regular security audits – periodic security assessments conducted by independent parties to identify and address vulnerabilities before they can be exploited.
• Environment segregation – production and development data are kept fully separate to prevent any inadvertent access.

While we take all reasonable steps to protect your data, no security system can guarantee absolute protection. In the event of a data breach that affects your rights, Member U9 is committed to notifying you and the relevant authorities within a reasonable timeframe, in accordance with legal requirements.

The Member U9 platform uses cookies and similar tracking technologies to enhance the user experience, maintain login sessions, and understand how members use our platform. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie settings through your internet browser at any time. However, disabling essential cookies may affect the functionality of the Member U9 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's PDPA 2010, you have specific rights regarding the personal data Member U9 holds about you. We are committed to making it straightforward for you to exercise those rights in a clear and hassle-free manner.

• Right of Access – you have the right to request a copy of the personal data we hold about you. This request can be submitted by email to our data protection team. We will process your request within 21 business days.
• Right to Correction – if the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You may also update basic information directly through your Member U9 account profile settings.
• Right to Object – you have the right to object to the processing of your personal data for specific purposes, particularly direct marketing. Objecting to direct marketing will not affect your account or core services.
• Right to Withdraw Consent – where data processing is based on your consent, you may withdraw that consent at any time. Such withdrawal does not affect the validity of any processing that took place prior to the withdrawal.
• Right to Complain – if you believe your privacy rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or through Member U9's internal complaints channel.

To exercise any of the above rights, send a written request to support@memberu9.com with the subject line "Privacy Rights Request" along with your account details. We may need to verify your identity before processing the request to ensure we do not disclose your data to unauthorised parties.

Please note that these rights are not absolute – there are circumstances where legal requirements or other legitimate interests may override your request. In such cases, we will clearly explain our reasons in our response.

The Member U9 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you are a parent or guardian and believe your child under 18 has provided us with their personal data without your consent, please contact us immediately at support@memberu9.com.

Once we have confirmed that the data in question belongs to an individual under 18 years of age, we will take immediate steps to delete that data and close the account. This is part of Member U9's commitment to platform safety and the protection of vulnerable groups.

Member U9 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or new features introduced to the platform. Whenever this policy is updated, the "Last Updated" date at the top of this page will be revised to reflect the date of the latest amendment.

For material amendments that significantly affect your rights, we will notify you via your registered email and/or through an in-platform notification on Member U9 at least 14 days before the amendment takes effect. For minor amendments that do not materially affect your rights, we may update this page without a specific notice.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data. Your continued use of the Member U9 platform after any amendments take effect will be considered your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Member U9 handles your personal data, our data protection team is here to help. We take every privacy enquiry seriously and are committed to providing a clear, helpful response within a reasonable timeframe.

• Email: Send a written request to support@memberu9.com with the subject line "Privacy Inquiry" for faster processing.
• Live Chat: Use the live chat within the Member U9 platform for general privacy enquiries. For formal rights requests, email is the recommended channel.
• WhatsApp & Telegram: Our support team is available 24/7 via WhatsApp and Telegram (@memberu9support) to assist you with initial privacy-related enquiries.

Member U9 will respond to all privacy inquiries within 5 business days. For formal rights requests (access, correction, or objection), we have 21 business days to process your request in accordance with Malaysia's PDPA 2010 requirements. If additional time is needed due to the complexity of the request, we will notify you and provide a realistic estimated timeline.