Privacy Policy ipay9 – Your Data, Our Responsibility

Ipay9 is an online gaming and betting platform operating in Malaysia. We understand that your trust is the foundation of our relationship, and protecting your personal data is an absolute priority in every business decision we make.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you provide to us when using the ipay9 platform, whether through our website, mobile app, or other communication channels we operate.

This document is subject to Personal Data Protection Act 2010 (PDPA) Malaysia and related legislation in force from time to time. By using the ipay9 platform, you consent to the collection and use of your information as described in this Privacy Policy.

Ipay9 collects various types of information depending on your interactions with our platform. Generally, the information we collect falls into two main categories:

Information you provide directly:

• Identity information: Full name, date of birth, identity card number (MyKad) or passport, nationality and residential address.
• Contact information: Email address, mobile phone number, and mailing address.
• Financial information: Bank account number, bank name and details of other payment methods you use for deposits or withdrawals.
• Verification documents: Copies of MyKad, utility bills, bank statements, or other documents required for the KYC (Know Your Customer) process.
• Account information: Username, password (stored in encrypted form) and account preferences.

Automatically collected information:

• Technical data: IP address, device type, operating system, web browser type, and application version.
• Usage data: Pages visited, games played, session duration, in-platform actions and usage patterns.
• Location data: General geographic location based on IP address for legal compliance and fraud prevention purposes.
• Cookie data: Session information, user preferences and analytics data collected via cookies and similar tracking technologies.

Every piece of information we collect is used for specific and legitimate purposes. ipay9 does not use user data for purposes beyond the scope stated here without first obtaining additional consent.

The primary purposes for which your personal data is used include:

• Account management: Creating, maintaining and securing your ipay9 account, including registration processing and identity verification.
• Transaction processing: Securely and accurately processing deposits, withdrawals and all financial activities on the platform.
• Legal compliance: Fulfilling obligations under anti-money laundering (AML) laws, KYC compliance and other regulatory reporting requirements.
• Platform security: Identifying and preventing fraud, unauthorised access, account misuse and activities that violate the terms of service.
• Service improvement: Analysing usage patterns to improve the interface, user experience and game selection offered.
• Customer support: Processing complaints and inquiries and providing effective, timely technical support.
• Marketing communications: Sending information about promotions, bonuses and platform updates — only to users who have given their consent.
• Responsible gaming: Monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate assistance.

Ipay9 takes an extremely cautious approach to sharing users' personal information. We does not sell, rent or trade your personal information to any party for their own commercial purposes.

Your information may be shared with third parties only in the following limited circumstances:

• Payment service providers: To process deposits and withdrawals, the required transaction information is shared with trusted and verified payment providers.
• KYC service providers: Third-party identity verification service providers integrated into our system help securely verify user documents.
• Technology providers: Companies providing technical infrastructure, server hosting, platform analytics, and other technical support services required for ipay9's operations.
• Relevant authorities: When required by law, court order, or a valid request from law enforcement authorities.
• Fraud prevention: Limited information sharing with industry fraud prevention bodies to protect the platform and all users from unlawful activity.

All third parties working with ipay9 are subject to strict data processing agreements and are required to comply with security and privacy standards equivalent to our own.

Ipay9 continually invests in the latest cybersecurity infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we implement include:

• 256-bit SSL encryption: All communications between your device and ipay9's servers are encrypted using the latest TLS protocol, ensuring no third party can read the data transmitted.
• Encryption of data at rest: Sensitive data stored in our database, including financial details and identity information, is encrypted using robust algorithms.
• Multi-layer access controls: Access to ipay9's internal systems containing user data is restricted to authorised personnel only and is strictly monitored.
• Periodic security audits: The ipay9 platform undergoes regular penetration testing and independent security audits to identify and address potential vulnerabilities.
• 24/7 monitoring: Our automated monitoring system operates around the clock to detect suspicious activity and respond to security threats in real time.
• Incident response plan: ipay9 has a clearly defined incident response procedure. In the event of a material data breach, we will notify affected users and the relevant authorities within the timeframe stipulated by law.

Ipay9 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how users interact with our platform.

Types of cookies we use:

• Essential cookies: Required for core platform operations, including Login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting anonymised data on how users navigate the platform to help us improve overall performance and user experience.
• Functionality cookies: Saving your preferences such as language, display settings and other configurations so you do not need to reset them each time you login.
• Analytics cookies: Used to gather statistical information on platform usage for internal improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the ipay9 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation, you have the following rights regarding the personal data held by ipay9:

To exercise any of the above rights, please contact the ipay9 privacy team via in-platform live chat or through the email address listed in the Contact Us section. We will process your request within 30 calendar days of receipt.

Ipay9 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods vary by data type:

• Active account data: Retained for the duration your account is active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
• Technical data and logs: Retained for 12 months for security and incident investigation purposes.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with procedures established by ipay9.

The ipay9 platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from underage children or minors.

If we discover that we have collected personal information from someone under the age of 18 without valid parental consent verification, we will take immediate steps to delete that information and close the relevant account.

Ipay9 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or developments in the services we offer.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notices on the ipay9 platform to inform users of such changes.
• Sending notifications via your registered email for material and significant changes.

Your continued use of the ipay9 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of the latest updates.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the ipay9 Data Protection Officer (DPO) team is ready to assist you.

You can reach us via:

• In-platform live chat: Available 24 hours a day, 7 days a week for immediate assistance.
• Email: [email protected]
• FAQ Page: Visit FAQ section us for answers to commonly asked privacy questions.

We will endeavour to respond to all privacy-related inquiries within 5 working days from the date of receipt.