Privacy Policy Bet9ja — How We Protect the Personal Information of Malaysian Players

Bet9ja is an online entertainment platform offering casino, Sports Betting, e-sports, and a variety of other games to adult players in Malaysia. In providing these services, we need to collect and process certain personal data — and we understand that your privacy matters greatly.

This Privacy Policy applies to all registered Bet9ja players, visitors to our website, and anyone who interacts with our platform in any capacity. It covers all data collected through the Bet9ja website, mobile app, email communications, customer support, and any other channels related to our services.

Bet9ja acts as Data Controller (Data Controller) for all personal data collected through our platform. This means we are responsible for determining the purposes and means of processing your data, and we are fully accountable for ensuring that such data is processed in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Bet9ja collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect and their sources:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

When you use the Bet9ja platform, we automatically collect certain technical data required for the platform's secure and efficient operation:

• Device Data: Device type, operating system, phone model, screen resolution.
• Network Data: IP address, internet connection type, general location based on IP.
• Session Data: Login and logout times, session duration, pages visited.
• Game Data: Game history, bets placed, results, account balance.
• Cookie Data: Session cookies, preference cookies, analytics identifiers — see Section 8 for details.

2.3 Data from Third-Party Sources

In certain circumstances, Bet9ja may receive data about you from legitimate third-party sources — for example, from identity verification service providers we use for the KYC (Know Your Customer) process, or from payment platforms such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u and CIMB Clicks to confirm your financial transactions. Data from these sources is used only for the specified purpose and is not retained beyond the period required.

Bet9ja uses your personal data only for lawful and necessary purposes. Below are the primary purposes for which data is processed, along with the legal basis supporting each:

3.1 Account & Platform Operations

We use your data to register and manage your Bet9ja account, process deposits and withdrawals, provide access to games and services, verify your identity during the KYC process, and handle customer support when you need assistance. Without this processing, we are unable to provide you with the platform's services.

3.2 Security & Fraud Prevention

Bet9ja uses technical data and account activity to detect and prevent fraud, money laundering, unauthorised access, and other platform abuse. This includes monitoring for unusual transaction patterns, detecting the use of multiple accounts, and identifying unauthorised bot or automation activity. This processing is essential to protect your legitimate interests as a player.

3.3 Legal Compliance

As a platform operating in Malaysia, Bet9ja has certain legal obligations that require the collection and processing of data — including Anti-Money Laundering (AML) requirements, Know Your Customer (KYC) requirements, and compliance with directives from relevant authorities. Data processing for these purposes is mandatory and does not require your separate consent.

3.4 Service Improvements

Anonymous and aggregated usage data is used to understand how players interact with the Bet9ja platform, identify areas for improvement, and develop new features that add value for Malaysian players. Data used for this purpose cannot be traced back to any individual.

3.5 Marketing Communications

With your consent (given during registration or at a later stage), Bet9ja may send you information about promotions, bonuses, special offers and platform updates via email or in-app notifications. You may withdraw this consent at any time through the notification settings in your account or by clicking the unsubscribe link in any marketing email.

Bet9ja retains your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by law. The following are our data retention guidelines by category:

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to you as an individual. Data deletion is carried out on a regular basis in accordance with Bet9ja's internal schedule.

Bet9ja takes a highly cautious approach to data sharing. We do not sell or disclose your personal data to third parties for their own marketing or commercial purposes. That said, in the course of operating the platform, we may need to share data with certain parties who help us deliver our services:

5.1 Approved Third-Party Service Providers

Bet9ja works with a carefully selected set of third-party service providers to support platform operations. These providers include:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks — to process your deposits and withdrawals.
• Identity Verification Providers: KYC companies that assist in verifying player identities in accordance with compliance requirements.
• Game Software Providers: A game studio that provides slots, table games and Live Casino to the Bet9ja platform.
• Cloud Infrastructure Provider: Server and data storage service providers that meet the highest security standards.
• Analytics Providers: Analytics services that help us understand platform usage — shared data is anonymised.

All third-party providers are bound by strict data processing agreements and may only use your data for the specific purposes we have authorised. They are not permitted to use your data for their own purposes.

5.2 Legally Required Disclosure

In certain circumstances, Bet9ja may be legally required to disclose your data to the relevant authorities — for example, in financial crime investigations, money laundering cases, or pursuant to a valid court order. In such situations, Bet9ja will comply with the legal requirement and will notify you of the disclosure where permitted to do so.

Bet9ja continually invests in robust security infrastructure to protect your personal data from unauthorised access, alteration, disclosure or destruction. Our technical and organisational security measures include:

6.1 Technical Security

• 256-Bit SSL/TLS Encryption: All data in transit between your device and Bet9ja's servers is encrypted using TLS 1.3 — the highest available standard.
• Data at Rest Encryption: Sensitive data stored in Bet9ja's databases — including passwords and financial information — is encrypted using strong encryption algorithms.
• Two-Factor Authentication (2FA): 2FA is available to all Bet9ja players as an additional layer of protection during login.
• Firewall & Intrusion Detection Systems: Bet9ja's infrastructure is protected by multiple layers of firewalls and IDS/IPS systems that monitor for threats 24/7.
• Vulnerability Scanning: Bet9ja's systems undergo regular vulnerability scanning and penetration testing carried out by independent security specialists.

6.2 Organisational Security

• Mandatory data protection training for all Bet9ja staff who handle personal data.
• Role-Based Access Control ensuring each staff member can only access data necessary for their specific role.
• Background screening process for staff handling sensitive data.
• A clear, tested incident response procedure to address any data breaches swiftly and effectively.

6.3 Data Breach Notification Procedure

If Bet9ja detects a data breach that may affect the security of your personal information, we will:

• Notify the relevant data protection authorities within the timeframe required by law.
• Contacting you directly via your registered email within a reasonable timeframe.
• Providing clear information about what happened, what data may have been affected, and the steps we are taking to address the situation.
• Providing guidance on steps you can take to protect yourself.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and recognised data protection practices, you have certain rights regarding the personal data we hold about you. Bet9ja is committed to respecting and facilitating the exercise of these rights.

The Bet9ja platform uses cookies and similar tracking technologies to ensure proper functionality, enhance user experience, and understand how the platform is used. Below are the categories of cookies we use:

You can manage your cookie preferences through your browser settings. Please note that disabling optional cookies may affect your experience on the Bet9ja platform but will not prevent you from accessing it entirely. Essential cookies cannot be disabled via the browser without impacting core platform functionality.

In the course of platform operations, your personal data may be processed outside Malaysia — for example, on cloud infrastructure servers or by international service providers that support Bet9ja's technical operations. Where cross-border data transfers occur, Bet9ja ensures that a level of protection equal to or greater than that required under Malaysian law is applied.

The measures we take to protect data in cross-border transfers include:

• Ensuring that providers receiving data maintain a robust, certified data protection programme.
• Using standard contractual clauses that mandate adequate levels of data protection.
• Only working with providers operating in countries recognised as having adequate data protection laws.
• Ensuring all data transfers are fully encrypted in transit.

Bet9ja reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments. When material changes are made to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered players about important changes.
• Displaying an in-platform notice on Bet9ja when players log in for a set period after an amendment takes effect.

Continued use of the Bet9ja platform after any amendments take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your privacy.

Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how Bet9ja handles your personal data, you may reach us through the following channels: