Privacy Policy Agent U9 – Personal Data Protection for Malaysian Players

Agent U9 ("we", "platform") are fully committed to protecting the privacy and personal data security of every registered member and user of our platform. This Privacy Policy has been prepared in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out transparently how we collect, use, store, protect, and disclose your personal data.

This Policy applies to all individuals who access the Agent U9 website at agentu9.best, register a member account, use any of the platform's services or games, or interact with us through any communication channel including email and LiveChat. By using our platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

We update this Privacy Policy from time to time to reflect changes in how we handle personal data or when applicable laws are revised. The latest version is always available on this page, with the effective date clearly stated at the top of the document.

Agent U9 only collects personal data that is strictly necessary for delivering platform services, meeting legal obligations, and improving the user experience. The categories of data we collect are as follows:

Identity and Contact Data:

• Full name as per identity card (MyKad) – required for the KYC process and withdrawal verification.
• MyKad number – for identity verification and legal compliance.
• An active Malaysian mobile number – for OTP verification during login and transactions.
• Email address – for account communications, transaction notifications, and customer support.
• Residential address in Malaysia – required for advanced KYC verification.
• Date of birth – to verify that members meet the minimum age requirement of 18 years.

Financial & Transaction Data:

• Deposit and withdrawal history including payment methods used (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and others).
• Bank account number or e-wallet identifier (partial only, not the full number) – to verify ownership of the payment method for withdrawal purposes.
• Complete transaction records including date, time, amount, and transaction type.

Usage and Technical Data:

• The device IP address recorded at login and throughout your active session.
• Device type, operating system, and web browser version used.
• Gaming session data including games played, session duration, bets placed, and winnings.
• Account activity logs including login attempts, password changes, and profile updates.
• Approximate geolocation data (state/city within Malaysia) – for location verification and regulatory compliance.

Agent U9 process your personal data only for purposes that are lawful, specific, and clearly communicated. The following are the primary purposes of processing:

• Service provision: To create and manage your member account, process deposits and withdrawals, provide access to games, and ensure continuity of service.
• Identity verification (KYC): To verify your identity in fulfilment of our anti-money laundering and fraud prevention compliance obligations.
• Account security: To detect and prevent unauthorized access, fraud, collusion, bot usage, and other unlawful activities on our platform.
• Service communications: To send transaction notifications, account updates, security alerts, and responses to customer support enquiries.
• Legal compliance: To meet reporting requirements to the relevant Malaysian authorities where required by law.
• Platform improvements: To analyse usage patterns in aggregate (not at an individual level) for the purpose of improving the platform's design, performance, and user experience.
• Marketing communications: To send promotional information, bonuses, and new offers – subject to the consent you have provided, which may be withdrawn at any time.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to proactively offer appropriate assistance.

Agent U9 will not process your personal data for any purpose not stated in this Privacy Policy without first obtaining your consent or without a valid legal basis.

Agent U9 does not sell, rent, or trade members' personal data to any third party. However, there are limited circumstances in which we may share your personal data with other parties:

Third-Party Service Providers: We share necessary data with service providers working on our behalf, including:

• Licensed payment gateways that process deposit and withdrawal transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX.
• Identity verification (KYC) service providers for document verification purposes.
• Cloud service providers that store data in secure data centres compliant with international security standards.
• Analytics service providers that help us understand platform usage patterns on an aggregated and anonymised basis.

All these third-party providers are bound by strict data protection agreements and are only permitted to process data for the purposes we specify.

Disclosure to Authorities: Agent U9 may disclose personal data to the relevant Malaysian authorities where:

• Required by a court order or applicable Malaysian law.
• Required for reporting suspicious transactions to Bank Negara Malaysia or the Financial Intelligence Unit (FIU) under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Required for cooperation with law enforcement agencies in criminal investigations involving our platform.

Agent U9 continually invests in security infrastructure to ensure members' personal data is protected to the highest standard. The security measures we have implemented include:

• Encryption of data in transit: All communications between your browser and Agent U9's servers are protected using TLS 1.3 with a 256-bit SSL certificate.
• Encryption of data at rest: Sensitive data stored in our databases is encrypted using AES-256 algorithm.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA on their accounts for an additional layer of security.
• Internal access controls: Access to members' personal data by Agent U9 staff is restricted on a need-to-know basis. All access is logged and monitored.
• Regular security audits: The Agent U9 platform undergoes independent penetration testing and security audits at least twice a year.
• 24-hour monitoring: A cyber threat detection system operates 24 hours a day to detect and respond to any intrusion attempts or data breaches.
• Incident response plan: Agent U9 has a clearly defined incident response procedure to address any data breach swiftly and notify all affected parties within the timeframes required by law.

While we take all reasonable security precautions, no system is completely foolproof. You also play an important role in keeping your account secure — always use a strong password, never share it with anyone, and contact us immediately if you suspect your account has been compromised.

Website Agent U9 uses cookies and similar tracking technologies to enhance the user experience, ensure security, and understand how our platform is used.

Types of cookies we use:

• Essential/required cookies: Required for core platform functions such as maintaining your login session, remembering your language preference, and securing transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect information about how visitors use our website – the most frequently visited pages, time spent on each page, and any error messages encountered. This information is used to improve platform performance.
• Functionality cookies: Allows the platform to remember your preferences, such as text size, display theme, and your preferred game settings.
• Analytics cookies: Used to understand platform usage patterns on an aggregate, anonymised basis through our internal analytics service.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality or user experience of the Agent U9 platform. Please note that third-party cookies from game providers operating within our platform may also be in use – these are subject to the respective privacy policies of those providers.

Agent U9 retains your personal data for as long as necessary to fulfil the original purpose for which it was collected, or for the period required under Malaysian law, whichever is longer.

As a general guide:

• Active account data: For the duration of your active account and for 7 years after account closure — to meet our legal compliance obligations under anti-money laundering regulations.
• Financial transaction records: A minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Customer support communication logs: 3 years from the date of communication for complaint management and audit purposes.
• Game session data: 2 years for responsible gaming purposes and platform performance analytics.
• Marketing data: Until you withdraw your consent to marketing communications, after which your data will be deleted within 30 days.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. Our secure deletion process ensures that deleted data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a member Agent U9 have the following rights regarding the personal data we hold about you:

• Right to access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving your request.
• Right to rectification: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Updates can be made through your account profile settings or by contacting our support team.
• Right to request erasure: Under certain circumstances, you may request that we delete your personal data. Such requests will be processed subject to our legal obligations to retain certain data for specified periods.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances, such as when you are disputing the accuracy of the data.
• Right to withdraw consent: For processing that relies on your consent (such as marketing), you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe Agent U9 has processed your personal data unlawfully, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Agent U9 is an exclusive gaming platform for adults aged 18 and above. We do not knowingly collect or process the personal data of children or individuals under the age of 18.

If we discover that personal data belonging to a child under 18 has been collected without proper age verification, we will take immediate steps to delete that information and close the account in question. Parents or guardians who suspect their underage child has registered an account with Agent U9 should contact our support team immediately at support@agentu9.best for prompt action.

Agent U9's age verification system is designed to prevent registration by individuals under 18 years of age. However, we acknowledge that no system is perfect, and we rely on the cooperation of parents and guardians to ensure children do not access this platform.

Agent U9 may update this Privacy Policy from time to time to reflect changes in our data practices, new technologies, legal requirements, or other legitimate operational reasons. We are committed to informing you of any material changes.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying a prominent notice on the Agent U9 platform's main page for an appropriate period.

Your continued use of the Agent U9 platform after the effective date of any amendment to this Privacy Policy will be deemed acceptance of those changes. If you do not agree with the changes made, you have the right to close your account before the effective date and request a refund of any remaining balance.

If you have any questions, concerns, or requests relating to this Privacy Policy or how Agent U9 handles your personal data, please contact us through the following channels:

• Privacy Email: support@agentu9.best (please indicate the subject as "Privacy Enquiry" or "Privacy Rights Request")
• LiveChat: Available 24 hours a day, 7 days a week on the Agent U9 platform
• Response time: We will acknowledge receipt of your privacy enquiry within 3 business days and provide a full response within 14 business days.

For formal complaints regarding personal data protection that cannot be resolved through Agent U9's internal channels, you have the right to lodge a report with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.