PRIVACY POLICY

A9play Privacy Policy – Personal Data Protection for Malaysian Members

A9play takes your privacy seriously. This document explains clearly and transparently how we collect, use, store and protect your personal information — in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Compliant with Malaysia's PDPA 2010
Our Privacy Commitment
Your data not sold to any third party under any circumstances.
Encryption 256-bit SSL protecting all your transactions and communications.
You have the right to access, correct, or delete your data at any time.
We comply with PDPA 2010 – Malaysia's data protection law, in full.

Six Core Privacy Principles of a9play

These principles form the foundation of how a9play handles the personal data of every Malaysian member.

Minimum Data Collection

A9play only collects personal data that is genuinely necessary to provide the platform's services — nothing more. We do not collect irrelevant or excessive data simply because we have the technical capability to do so. Every type of data we collect has a clear, justifiable purpose.

Purpose Limitation

Data collected is used only for the purposes stated in this Privacy Policy. Information you provide during account registration will not be used for any other purpose without your explicit consent. We do not use data for profiling unrelated to a9play's services.

Advanced Technology Protection

All a9play member data is stored on servers protected with AES-256 encryption. Communication between your browser and the a9play platform is encrypted using 256-bit SSL/TLS — the same standard used by leading Malaysian banks such as Maybank and CIMB.

Member Data Controls

You have full control over your personal data at a9play. At any time, you may request a copy of all data we hold relating to your account, request corrections to inaccurate information, or request the complete deletion of your account and data in accordance with your rights under the PDPA 2010.

Not Sold to Third Parties

A9play has never and will never sell, rent, or share members' personal data with any third party for marketing or commercial purposes. Your data is only shared in limited situations as outlined in this policy — such as with local payment providers to process your transactions.

Malaysia PDPA 2010 Compliance

A9play's Privacy Policy is designed and regularly updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This is not merely a formality – it is a legal commitment we uphold for every one of our members across Malaysia.

A9play Full Privacy Policy

This document explains how a9play manages your personal data. By using the a9play platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue your use of the platform.

1Key Definitions

In this Privacy Policy, the following terms carry the meanings stated:

  • "Personal Data" refers to any information that can be used to identify you, directly or indirectly, including your name, email address, phone number, IP address and account information.
  • "Processing" refers to any operation carried out on personal data, including collection, storage, use, disclosure, and deletion.
  • "Data Controller" refers to a9play as the party that determines the purposes and means of processing members' personal data.
  • "Data Processor" refers to third parties that process personal data on behalf of a9play — such as local Malaysian payment providers.
  • "Consent" refers to the freely given, specific, and informed consent you provide for the processing of your personal data for a defined purpose.
  • "PDPA" refers to Malaysia's Personal Data Protection Act 2010.
Note: This Privacy Policy applies to all personal data collected through the a9play.wine website, mobile applications (where available), customer support channels (Live Chat, WhatsApp, Telegram, email) and any other interactions between you and the a9play platform.
2Personal Data We Collect

A9play collects several categories of personal data from our members. The following is a complete list of the data we may collect and the purposes for which it is collected:

Data Category Specific Examples Required?
ACCOUNTRegistration Data Username, password (encrypted), email address, mobile phone number Yes
IDENTITYVerification Data Full name, date of birth, identity card number (for large withdrawals) Conditional
FINANCETransaction Data Deposit and withdrawal records, betting history, payment methods used Yes
TECHNICALDevice Data IP address, browser type, operating system, device ID, login timestamp Automatic
USEActivity Data Pages visited, games played, session duration, preferences and settings Automatic
COMMUNICATIONSSupport Data Live Chat records, support emails, WhatsApp/Telegram messages with the a9play team Where Relevant

We do not collect sensitive data categories such as health information, biometric data, religious beliefs or political views. The financial data we retain consists of transaction records in Malaysian Ringgit (RM) and does not include full credit card details or full bank account numbers – all sensitive payment information is processed directly by our local payment providers such as Touch 'n Go eWallet, GrabPay and DuitNow.

3How We Use Your Personal Data

A9play uses the personal data collected solely for the following purposes:

  • Account Management: To create, verify and manage your member account, and to securely process login requests.
  • Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u and CIMB Clicks; and to process winnings withdrawals in MYR (RM) to your verified account.
  • Service Provision: To provide access to all a9play game categories, including EPL and Malaysia Super League Sports Betting, live casino, roulette, poker, table games and e-sports.
  • Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, money laundering and violations of the platform's terms of use.
  • Service Communications: For sending account-related notices, transaction confirmations, updates to terms and conditions, and other important information regarding your use of the platform.
  • Customer Support: To respond to enquiries, resolve technical issues, and provide assistance via Live Chat, WhatsApp, Telegram, and email.
  • Legal Compliance: To comply with applicable Malaysian legal requirements, including anti-money laundering (AML) and know your customer (KYC) obligations.
  • Platform Improvements: To analyse aggregated usage patterns (without identifying individuals) in order to improve the performance, usability, and overall experience of the a9play platform.
Marketing Note: a9play will only contact you with promotional offers and bonus information if you have given explicit consent to receive marketing communications during registration or in your account settings. You may withdraw this consent at any time through your account settings panel or by contacting our support team.
4Legal Basis for Data Processing

Under Malaysia's PDPA 2010, a9play processes your personal data on the following legal bases:

  • CONTRACT Processing is necessary to fulfil the agreement between you and a9play — that is, to provide the platform services you registered to use.
  • CONSENT For marketing communications and preference data collection, we obtain your explicit consent beforehand. This consent may be withdrawn at any time.
  • LEGITIMATE INTEREST For fraud prevention, platform security, and service improvement — where the legitimate interests of a9play and our members outweigh the minimal privacy risk.
  • LEGAL OBLIGATION To comply with applicable Malaysian legal requirements such as AML and KYC reporting obligations to relevant authorities where required.

We always strive to maintain a fair balance between our business needs and your privacy rights. If you would like to know more about the specific legal basis for any processing activity, please contact us using the details provided in section 11.

5Data Sharing with Third Parties

A9play does not sell, rent, or share your personal data with third parties for their own marketing purposes. Your personal data may only be shared in the following limited circumstances:

  • Local Payment Providers: Information required to process your transactions is shared with your chosen payment provider — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, or CIMB Clicks. This sharing is limited strictly to the information needed to complete the transaction.
  • Licensed Game Providers: To enable you to access games provided by third-party suppliers (such as live casino and slots), basic account information may be shared with those suppliers. All such suppliers are bound by strict data confidentiality agreements.
  • Malaysian Authorities: a9play will disclose personal data when required by Malaysian law, a valid court order, or a request from an authority with proper jurisdiction.
  • Security Researchers: In cases of fraud or cybercrime, relevant information may be shared with security investigators or law enforcement to assist with the investigation.
Important Reminder: a9play never shares members' personal data with advertisers, unrelated third-party analytics companies, or any external commercial entity that has no direct role in delivering our platform services to you. If you receive marketing communications from a party claiming to be an a9play partner that you do not recognise, please report it to us immediately.
6Data Security Measures

A9play implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

  • Encryption in Transit: All data transferred between your browser and the a9play platform is protected by TLS 1.3 protocol with 256-bit encryption.
  • Encryption at Rest: Sensitive data such as passwords are encrypted using the bcrypt hashing algorithm. Financial data is stored with AES-256 encryption.
  • Access Controls: Access to member personal data by a9play staff is restricted based on the principle of least privilege – only staff who need to view relevant data to carry out their duties may do so.
  • 24/7 Monitoring: a9play's security system continuously monitors account activity to detect suspicious patterns and potential unauthorised access attempts.
  • Two-Factor Authentication: Two-factor authentication is available for all member accounts and is strongly recommended as an added layer of protection.
  • Regular Security Audits: a9play's security systems are regularly audited by independent third parties to identify and address any vulnerabilities.
Shared Responsibility: While a9play takes all reasonable steps to protect your data on our end, account security also depends on your own actions. Use a strong and unique password for your a9play account, do not share your login credentials with anyone, and always log out when using a public or shared device.
7Data Retention Period

A9play retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by Malaysian law:

  • Active Account Data: Retained for as long as your account remains active and in use on the a9play platform.
  • Financial Transaction Records: Retained for a minimum of 7 years after each transaction, in accordance with Malaysia's accounting and legal compliance requirements.
  • Security Logs: Retained for 12 months for fraud detection and investigation purposes.
  • Support Communication Records: Retained for 2 years to assist in resolving any future disputes relating to customer support interactions.
  • Closed Account Data: When an account is closed at a member's request, personal data will be deleted or anonymised within 90 days, except for data that must be retained to meet legal requirements.

Once the relevant retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you as an individual.

8Your Rights as a Member Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights with respect to your personal data held by a9play:

  • RIGHT OF ACCESS You have the right to request a copy of all personal data we hold in relation to your account. Such requests will be processed within 21 business days.
  • RIGHT TO CORRECTION If you find that personal data held by a9play is inaccurate or incomplete, you have the right to request a correction. Updates can be made directly through the account panel or by contacting support.
  • RIGHT TO ERASURE You may request the deletion of your personal data when it is no longer required for the original purpose for which it was collected, subject to applicable legal retention requirements.
  • RIGHT TO OBJECT You have the right to object to the processing of your personal data for direct marketing purposes. Once an objection is submitted, we will cease processing your data for that purpose immediately.
  • RIGHT TO WITHDRAW CONSENT You may withdraw consent given for data processing at any time, without affecting the lawfulness of any processing carried out on the basis of that consent prior to its withdrawal.

To exercise any of these rights, contact the a9play support team by email at support@a9play.wine or via Live Chat within the platform. We may need to verify your identity before processing your request to ensure the security of your data.

9Cookies & Tracking Technologies

A9play uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session security and your basic preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymous information about how visitors use the platform to help us identify and improve areas that need enhancement.
  • Functional Cookies: Stores your preferences such as language, display settings and game preferences to deliver a more personalised experience.

You can manage or disable non-essential cookies through your browser settings. However, disabling essential cookies may affect the functionality of the a9play platform. Cookies are not used to personally identify you beyond the requirements of your login session.

Mobile Note: When you access a9play through a mobile browser on your Android or iOS device, similar tracking technologies may be used. Your mobile browser's privacy settings can be used to control cookies and tracking data on your mobile device.
10Changes to This Privacy Policy

A9play reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, updates to Malaysian law, or changes to the services we offer.

  • Members will be notified of any material changes via an in-platform notice upon their next login, as well as by email to their registered address.
  • The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy.
  • Your continued use of the a9play platform after changes take effect constitutes your acceptance of the updated Privacy Policy.
  • If you do not agree with the changes, you have the right to close your account and request deletion of your data before the changes take effect.
11Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your personal data rights, please contact the a9play team through the following channels:

  • Email: support@a9play.wine – for written privacy enquiries and formal data requests
  • Live Chat: Available on the a9play platform 24 hours a day, 7 days a week in Bahasa Melayu
  • WhatsApp / Telegram: Via the support number listed on the platform after logging in

All privacy-related enquiries will be processed within 3 business days. Data access and deletion requests will be processed within 21 business days in accordance with Malaysia's PDPA 2010. We will verify your identity before processing any request relating to personal data to ensure the security of your information.

Complaints to the Authorities: If you believe a9play has violated your privacy rights and the issue cannot be resolved through our support channels, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP), the enforcement authority for the PDPA 2010 in this country.

Your Privacy Rights at a9play

Five key rights you hold as an a9play member under Malaysia's PDPA 2010 – and how to exercise them.

Right to Know

You have the right to know what personal data a9play holds about you. Request a full copy of your data records at any time by emailing support@a9play.wine. We will process your request within 21 business days at no charge.

Right to Rectification

If the information in your account is inaccurate or outdated, you can update much of it directly through your account panel. For changes that require additional verification, contact a9play support and we will assist with the correction process.

Right to Erasure

Upon account closure, your personal data will be anonymised or deleted within 90 days, except for data that must be retained under Malaysian law, such as financial transaction records for 7 years.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Opt out of marketing communications via your account settings or by contacting support. Objections will be actioned immediately, no questions asked.

Right to Protection

A9play protects your data with 256-bit SSL encryption, strict access controls and 24/7 security monitoring. In the event of any data breach that affects you, we will notify you promptly in accordance with the requirements of PDPA 2010.

Right to Withdraw Consent

If you have given consent for a specific type of data processing, you may withdraw it at any time through your account settings or by contacting us. Withdrawal does not affect the validity of processing that took place prior to withdrawal.

Why Your Data Is Safe at a9play

Banking-Grade 256-bit SSL Encryption
All communications between you and a9play are protected with the same encryption standards used by Maybank, CIMB and other leading Malaysian banks. Your data cannot be read by any third party during transmission.
Secure Servers with Layered Encryption
Members' personal data is stored on servers protected both physically and digitally with layered encryption. Physical access to the servers is restricted and subject to strict auditing. Data backups are performed regularly to a secure, separate location.
Staff Trained in Data Handling
All a9play staff with access to member data undergo rigorous data protection training and are bound by confidentiality agreements. Data access is restricted on a need-to-know basis — no staff member has access beyond what their role requires.
Periodic PDPA Compliance Audit
a9play's privacy practices are reviewed and audited on a regular basis to ensure ongoing compliance with Malaysia's PDPA 2010 and relevant international privacy standards. This Privacy Policy is updated as necessary to reflect changes in law or practice.

Malaysian Local Payments – Privacy Guaranteed

A9play supports only Malaysian local payment methods. This not only makes things more convenient for you — it also means your financial data is processed by institutions you already know and trust, under Malaysia's stringent legal requirements.

Touch 'n Go eWallet GrabPay DuitNow FPX / Maybank2u CIMB Clicks Boost ShopeePay
Payment Data Protection: a9play does not store your full payment method details (such as bank account numbers or digital wallet details). All sensitive payment information is processed directly by the relevant payment providers using their own industry-compliant security infrastructure.

A9play Privacy Policy – Why Your Trust Is Our Priority

When you register an account on a9play and enter your personal information, you are placing your trust in us. That is not a responsibility we take lightly. Many registered Malaysian players on a9play have shared that one of their key reasons for choosing our platform is that they feel their information is safer and more respected here than on other platforms they have used. We want to continue deserving that trust — and this Privacy Policy is the document that explains exactly how we do so.

One way a9play stands apart from many online entertainment platforms is our deliberate decision to support only Malaysian local payment methods. When you deposit via Touch 'n Go eWallet, GrabPay, or DuitNow, your transaction is processed by a Malaysian entity subject to Malaysian laws and regulations. Your financial data does not cross borders into foreign payment systems that may operate under different or unfamiliar data protection standards. This is an intentional design choice made to safeguard the financial privacy of our members.

Compliance with Malaysia's PDPA 2010 is not simply a box we tick on a legal checklist. It is the framework we use when making decisions about how we handle data. Whenever we consider adding a new feature or service to the a9play platform, one of the first questions we ask is: "What are the privacy implications of this feature, and is it consistent with our commitment to our members?" This approach — sometimes referred to as 'privacy by design' — means privacy is not an afterthought once a product is built; it is part of the development process from the very start.

Gaming activity data is a category that warrants further explanation. When you play EPL Sports Betting, Liga Super Malaysia, BWF badminton, MPL Malaysia e-sports, live casino, or poker on a9play, your game records are stored in our systems. This is an unavoidable operational requirement — these records are needed to process winnings accurately, resolve any disputes, meet responsible gaming obligations, and maintain platform integrity. We do not use gaming activity data to sell your profile to advertisers or unrelated third parties. This data is also not shared with third-party game providers beyond what is necessary to enable you to play their games.

Marketing communications is another area where a9play takes a more considered approach than most platforms. Many players have experienced signing up to a platform only to find their inbox flooded with unsolicited offers. a9play does things differently – marketing communications, including information about welcome bonuses, daily odds boost promotions and special offers, are only sent to members who have actively opted in. And that choice can be changed at any time through account settings, with no need to contact support or wait for a processing period.

One aspect of a Privacy Policy that players often overlook — until it becomes relevant — is the section on data breaches. In the tech industry, the risk of a data breach is a reality that must be acknowledged honestly. a9play has made significant investments in security infrastructure to minimise this risk — but should a breach occur that affects members' personal data, we are committed to notifying affected members promptly, clearly explaining what happened, what data may have been compromised, and what steps are being taken. Transparency in the face of an unwanted incident is just as important as preventing one in the first place.

Finally, we want to emphasise that this Privacy Policy is not a static document written once and forgotten. It is reviewed regularly by the a9play team to ensure it continues to reflect our actual practices and remains compliant with changes in Malaysian law. Any material changes will be communicated to you before they take effect. Your trust is a9play's most valuable asset — and we will continue working every day to deserve it.

Frequently Asked Questions About a9play's Privacy Policy

Answers to the most frequently asked questions from members about privacy and data protection at a9play.

No. a9play does not share member personal data with any advertising companies, marketing networks, or social media platforms for targeted advertising purposes. If you see a9play ads on other websites, these are the result of standard advertising campaigns that do not require us to share individual member data. We use privacy-compliant advertising methods that do not involve profiling based on our members' personal data.

Submit a written request by email to support@a9play.wine with the subject line "Data Access Request – [your username]". Include your account username and registered phone number for identity verification. The a9play team will process your request within 21 business days and send a copy of your data in a readable format. No fee is charged for the first request within any 12-month period. You may also use Live Chat to initiate this request.

Staff Trained in Data Handling

Customer support communication records – including Live Chat transcripts, emails and WhatsApp or Telegram messages – are retained by a9play for 2 years. This is to serve as a reference should you contact support again regarding the same issue, and to assist in resolving any disputes that may arise. These records are not used for any purpose other than customer service management and are accessible only to support staff on duty. You may request a copy of your communication records at any time.

a9play uses a layered approach to cybersecurity. The first layer is encryption – all communications use 256-bit SSL and all stored data is encrypted with AES-256. The second layer is active monitoring – our security system monitors traffic and account activity 24/7 to detect suspicious patterns. The third layer is access control – staff can only access the systems they need for their duties, and all access is logged. The fourth layer is external auditing – independent third parties conduct regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

Privacy in Responsible Gaming

Your gaming activity data is also used to support responsible gaming – in a manner that respects your privacy.

Personal Deposit Limit

Deposit limit settings are private and can only be viewed and changed by you. This information is not shared with any third party.

Confidential Self-Exclusion

Your self-exclusion status is personal information handled with the highest level of confidentiality. It will not be disclosed to any party without your consent.

Your Game History

Your game history is accessible only to you through your account panel. It is intended to help you monitor your own playing habits and is not used for any other purpose.

18 Years and Above

Age verification data collected during registration is used solely to confirm your eligibility to use the platform. It is not used for any marketing purpose.

Your Data is Safe, Your Game is Fun

You now know how a9play protects your privacy. It's time to enjoy everything our platform has to offer – EPL and Malaysia Super League Sports Betting, live casino, roulette, poker and e-sports – with full confidence that your data is handled properly and responsibly. Register for free in under 2 minutes.

PDPA 2010 Protected
256-bit SSL encryption at all times
Bahasa Melayu