Privacy Policy S9MY – Your Personal Data Protection

S9MY collects various types of information from our members to ensure the platform operates smoothly, securely, and delivers the best experience to every user. The information collected falls into several main categories:

1.1 Registration and Identity Information

When you register a s9my account, we collect basic information required to create and verify your account identity. This includes your full name as stated in your official identification document, an active email address, and a valid Malaysian mobile number. For the KYC (Know Your Customer) process, we also collect a copy of your MyKad or passport, an identity verification selfie, and the latest bank statement where required.

1.2 Financial and Transaction Information

To process deposits, withdrawals, and other financial transactions on the platform, we retain records of your registered bank account number, e-wallet details (Touch 'n Go, Boost, GrabPay), deposit and withdrawal history including date, time and amount, as well as bonus and promotion records.

1.3 Technical and Device Information

Automatically, our system records certain technical information when you use the s9my platform, including IP address, device type and version, operating system, web browser type, screen resolution, and game session data.

Every piece of data we collect is used for a clear and lawful purpose. S9MY does not use your data for purposes unrelated to platform operations without your explicit consent.

2.1 Account Management and Services

Your personal data is used primarily to create and manage your s9my account, verify your identity during login and transactions, process deposits and withdrawals accurately and securely, manage bonuses and promotions you are eligible for, and provide responsive customer support whenever needed.

2.2 Security and Fraud Prevention

S9MY employs advanced analytics systems to detect suspicious activity, prevent unauthorised access, identify fraud and money laundering attempts, and ensure compliance with KYC and applicable legal requirements. This security monitoring operates continuously 24/7 to protect your account and funds.

2.3 Platform Improvement

Aggregated and anonymised usage data helps the s9my technical team understand usage patterns, identify technical issues, improve the user interface, and develop new features that are more useful for our members in Malaysia.

2.4 Communications and Notifications

We use your email address and phone number to send important transaction notifications, policy updates and terms of service, promotional information and bonuses (if you have consented to receive them), as well as responses to your customer support enquiries.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), s9my processes your personal data on valid legal grounds for each processing category:

• Contract performance — Processing required to provide the platform services you have requested, including account management, payment processing, and access to games.
• Legal obligation — Processing required to comply with legal obligations such as KYC, AML (Anti-Money Laundering) reporting, and financial regulatory compliance.
• Legitimate interest — Processing for fraud detection, platform security, and service improvement purposes that do not affect your fundamental rights and interests.
• Consent — For optional marketing communications and analytics, we require your explicit consent, which may be withdrawn at any time.

S9MY does not sell your personal data to any third party. Data sharing occurs only in the following limited situations and is always subject to strict confidentiality agreements:

4.1 Payment Service Providers

To process your deposits and withdrawals, payment information must be shared with FPX, DuitNow, and supported e-wallet platform providers. This information is limited to what is necessary to complete the transaction and is not used for any other purpose by those providers under our service agreements with them.

4.2 Game Software Providers

S9MY's partner game providers receive only the minimum necessary game session data — such as player ID and game balance — to enable gameplay. They do not receive your full identity information or financial data.

4.3 Legal Authorities

S9MY will disclose personal data to law enforcement authorities, regulators, or government bodies when required by law or a valid court order. In such situations, we will notify you in advance unless prohibited from doing so by law.

S9MY continuously invests in robust security infrastructure to ensure your personal and financial data remains protected at all times. The technical and organisational security measures we implement include:

• Static data encryption: All data stored on s9my servers is protected with AES-256 encryption, the same standard used by financial institutions and governments worldwide.
• Transmission security: All communication between your device and the s9my platform is transmitted via TLS 1.3 protocol, ensuring no third party can read or alter your data while in transit.
• Strict access controls: Access to member personal data is restricted to s9my staff with a legitimate operational need only, based on the principle of minimum access.
• 24/7 security monitoring: Intrusion detection and anomaly monitoring systems operate around the clock to detect and respond to any security threats promptly.
• Regular security audits: S9MY conducts regular internal and external security audits to ensure our infrastructure remains secure and up to date with industry standards.
• Two-factor authentication (2FA): We offer free 2FA for all member accounts to add an extra layer of protection against unauthorised access.

S9MY uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

6.1 Essential Cookies (Cannot Be Disabled)

These cookies are necessary for the platform to function properly. They include session cookies that store your login status, security tokens to prevent CSRF attacks, and basic language and region preferences. Without these cookies, the platform cannot operate.

6.2 Functional Cookies (Optional)

Functional cookies store your personal preferences such as display theme, preferred betting limits, and notification settings. These cookies enhance usability but do not affect the core functionality of the platform.

6.3 Analytics Cookies (Optional)

We use aggregated and anonymised analytics to understand how members use the platform, which pages are visited most frequently, and where technical issues need to be addressed. This data does not identify you as an individual.

You can manage your cookie settings through your s9my account settings or via your web browser settings. Disabling optional cookies will not affect your access to the platform's core features.

S9MY retains your personal data only for as long as it is needed for the purposes stated in this policy or as required by law. The following are our data retention policies:

Upon expiry of the applicable retention period, your data will be securely deleted or permanently anonymised from our systems. The deletion process uses methods that ensure the data cannot be recovered.

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by S9MY:

In certain operational circumstances, your personal data may be transferred to or accessed from servers located outside Malaysia. This occurs primarily when our partner game software providers operate their infrastructure in other countries.

S9MY ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia
• Using standard contractual clauses that bind data recipients to the protection standards set by S9MY
• Obtaining your explicit consent where required under applicable law
• Ensuring all cross-border data transfers are subject to end-to-end encryption

The s9my platform is strictly for individuals aged 18 years and above. We do not intentionally collect or process personal data from anyone under the age of 18.

During the registration and KYC process, we verify the age of every account applicant. Should we discover that a child's personal data has been collected inadvertently, the account in question will be suspended immediately and all related data will be deleted from our systems within 48 hours.

S9MY reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data protection enhancements. Any amendments will be handled as follows:

• Material amendments that materially alter your privacy rights will be communicated at least 14 days in advance via email and in-platform notifications.
• Minor amendments such as language clarifications or typographical corrections will take effect immediately upon updating the review date at the top of this document.
• Immediate amendments required by law or urgent security needs will take effect immediately with simultaneous notice to members.

The latest version of this Privacy Policy is always available on this page. We encourage you to review this page periodically. Continued use of the s9my platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, the S9MY Data Protection Officer (DPO) team is ready to assist you. You may reach us through the following methods: