Privacy Policy —How a9agent Handles Your Data

This Privacy Policy ("Policy") sets out the data processing practices of a9agent ("Platform", "we", "us", "our"), the operator of the online betting and gaming services available at a9agent.cam. This Policy applies to all personal data collected from individuals ("Users", "Members", "you") who access or use the a9agent Platform, including visitors who browse the site without registering an account.

a9agent is committed to protecting the personal data of all Malaysian users and international Members in accordance with applicable data protection legislation and internationally recognised privacy standards. We collect only the data we genuinely need, retain it for no longer than necessary, and never sell it to third parties for marketing purposes.

By registering an account, making a deposit, placing a wager, or otherwise using any service provided by a9agent, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein. If you do not consent to this Policy, you must discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

a9agent collects several categories of personal data depending on the nature of your interaction with the Platform. The categories below outline what we collect and the context in which it arises:

a9agent collects personal data through the following primary channels:

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or update your account profile, you provide data directly to us.
• Automated Technical Collection: When you access the Platform, our servers automatically record technical data including your IP address, session duration, pages visited, and device characteristics via standard server logging and analytics tools.
• Cookies and Similar Technologies: We use first-party cookies to maintain your login session, remember preferences, and gather anonymised analytics about Platform usage. Details are provided in the Cookies section of this Policy.
• Third-Party Verification Partners: When you undergo KYC verification, our authorised verification partners may share identity confirmation results with us. These partners operate under contractual data processing agreements with9agent.
• Payment Service Providers: When you transact via Touch'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Boost, GrabPay, or USDT TRC20, transactional confirmation data is shared with us by the respective payment processor to facilitate crediting and reconciliation.

a9agent processes personal data only for specific, documented purposes. We do not use Member data for purposes incompatible with those stated at the time of collection. The following table summarises each processing purpose alongside its legal basis:

• Account Administration: Creating, maintaining, and managing your a9agent account, including login authentication and account security.
• Identity & Age Verification: Conducting KYC checks to confirm your identity and verify that you are at least 21 years of age before activating real-money services.
• Payment Processing: Processing MYR deposits and withdrawals via Malaysian payment channels including Touch 'n Go, DuitNow, FPX, and bank transfers.
• Service Delivery: Providing access to sports betting markets (EPL, Liga Super Malaysia, UFC, esports), live casino, slot games, and all other Platform features.
• Responsible Gambling Monitoring: Analysing account activity patterns to identify potential problem gambling indicators and trigger appropriate interventions or safeguards.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, money laundering, multi-account abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: Meeting our obligations under applicable anti-money laundering (AML) regulations, data protection laws, and any lawful orders from regulatory or law enforcement authorities.
• Customer Support: Responding to inquiries, resolving account disputes, and providing assistance via live chat and email support channels.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have explicitly opted in to receive such communications. You may withdraw consent at any time via account settings.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game offering.

All personal data processing carried out by a9agent is grounded in one or more of the following recognised legal bases:

1. Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and service delivery.
2. Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and responses to lawful authority requests.
3. Legitimate Interests: Processing carried out to serve the legitimate interests of a9agent or third parties, such as fraud prevention, platform security, abuse detection, and service improvement, provided such interests are not overridden by the fundamental rights of data subjects.
4. Consent: Processing based on your explicit, freely given consent, such as receiving personalised marketing communications or promotional notifications. Consent may be withdrawn at any time without detriment to your account standing.

a9agent does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Data is shared externally only in the following defined circumstances:

• Payment Service Providers: Transaction data is shared with Malaysian payment processors (Touch 'n Go, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank) solely to facilitate deposit and withdrawal processing.
• KYC Verification Partners: Identity documents are transmitted to authorised third-party verification providers to complete mandatory age and identity checks. These providers are bound by strict data processing agreements.
• Game Content Providers: Certain game studios that supply content to the a9agent Platform receive limited account session data necessary to facilitate gameplay and resolve disputes. No financial or identity data is shared with game studios beyond what is required for session integrity.
• Fraud Prevention Services: Technical data including IP addresses and device fingerprints may be shared with fraud detection service providers for the purpose of identifying multi-account abuse, bot activity, and other prohibited conduct.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, a9agent will disclose personal data to competent authorities. We will notify you of such disclosures where legally permissible to do so.
• Professional Advisors: Legal counsel, accountants, and compliance consultants engaged by a9agent may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.
• Business Succession: In the event of a merger, acquisition, or corporate restructuring involving a9agent, Member personal data may be transferred to the successor entity, who will be required to honour the terms of this Privacy Policy.

a9agent retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that permanently prevents re-identification. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active systems and prevented from further processing pending deletion.

a9agent implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the a9agent Platform is encrypted using bank-grade Transport Layer Security (TLS 1.2 and above).
• At-Rest Encryption: Sensitive data stored in our database systems is encrypted at rest using AES-256 encryption standards.
• Two-Factor Authentication: Members may enable 2FA on their accounts as an additional authentication layer. We strongly encourage all Members to activate this feature.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based permissions and audit logging for all data access events.
• Continuous Threat Monitoring: Our security team operates continuous intrusion detection and anomaly monitoring systems to identify and respond to potential threats in real time.
• Penetration Testing: The Platform undergoes regular security assessments and penetration tests conducted by qualified third-party security professionals.
• Incident Response: In the event of a data breach affecting Member personal data, a9agent will notify affected individuals and relevant authorities in accordance with applicable notification obligations, without undue delay.

a9agent uses cookies and similar browser technologies to operate core Platform functions, maintain your session, and gather anonymised analytics. We do not use third-party advertising cookies or share data with external marketing platforms.

You may control cookie settings through your browser preferences. Disabling essential cookies may impair the functionality of the Platform, including login and session management. Analytics and functional cookies may be disabled without affecting core Platform access.

As a data subject whose personal data is processed by a9agent, you hold the following rights in relation to your personal data. These rights may be exercised by contacting our Data Privacy team via the contact details in Section15 of this Policy:

We will respond to all verified data rights requests within thirty (30) days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension.

The a9agent Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to mandatory age verification as part of our KYC process.

Where a9agent becomes aware that personal data has been collected from an individual who is under 21 years of age — whether through registration, parental notification, or our own verification processes — we will immediately suspend the relevant account, delete all associated personal data, and refund any qualifying real-money balance in accordance with applicable guidelines.

If you believe a minor has accessed the Platform or registered an account using false information, please contact our support team immediately so we can take appropriate action without delay.

As an online platform serving Malaysian users through a globally distributed technical infrastructure, a9agent may transfer certain categories of personal data to servers or processing partners located in jurisdictions outside of Malaysia. Such transfers arise primarily in the context of cloud hosting services, fraud detection systems, and KYC verification partnerships.

Where personal data is transferred outside of Malaysia, a9agent ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding the protections afforded under applicable Malaysian data protection law. These safeguards include:

• Binding contractual clauses in all data processing agreements with international third-party processors.
• Transfer only to jurisdictions that provide adequate data protection frameworks assessed by relevant regulatory guidance.
• Encryption of all personal data in transit using TLS and at rest using AES-256 encryption, regardless of geographical location.

a9agent reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, we will notify registered Members via email or in-platform notification prior to the changes taking effect, where operationally practicable.

The "Last Updated" date displayed at the top of this page reflects the date on which the most recent revision became effective. Continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree to the updated Policy, you must discontinue use of the Platform and may request account closure.

For any privacy-related inquiries, data rights requests, or concerns regarding the processing of your personal data by a9agent, please contact our Data Privacy team through the channels below. All requests will be acknowledged promptly and handled in accordance with the timeframes set out in this Policy.

When submitting a data rights request, please include your full registered name, account email address, and a clear description of your request. We may additional verification to confirm your identity before processing certain requests, particularly those involving access to or deletion of personal data.