uf9 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by uf9 ("uf9", "we", "us", or "our") and governs the collection, use, storage, and disclosure of personal data relating to users ("you" or "Player") who access or use the uf9 online gaming platform available at https://uf9.lat and any associated mobile applications, APIs, or sub-domains (collectively, the "Platform").

uf9 operates primarily for the benefit of Malaysian players. We take our obligations under the Personal Data Protection Act 2010 (PDPA) of Malaysia seriously, and this Policy is drafted to reflect those obligations as well as internationally recognised data protection principles.

By registering an account, accessing the Platform, or otherwise engaging with uf9's services, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, please discontinue use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming page, which together form the full legal framework governing your relationship with uf9.

2. Information We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

2.1 Account Registration Data

When you create a uf9 account, we collect:

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Email address
• Mobile phone number
• Residential address (including postcode and state within Malaysia)
• Username and encrypted password
• Preferred currency (MYR or crypto equivalent)

2.2 Identity Verification (KYC) Data

In compliance with anti-money laundering (AML) requirements and responsible gaming obligations, uf9 may request:

• A copy of your MyKad, passport, or other government-issued photo identification
• Proof of residential address (e.g., a utility bill or bank statement issued within the last three months)
• Source of funds documentation where withdrawal amounts exceed applicable thresholds

2.3 Financial & Payment Data

When you make deposits or withdrawals, we record transaction amounts, dates, payment method types (such as Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Bitcoin, or Ethereum), and associated reference numbers. Full card or account numbers are never stored on uf9 servers — they are handled exclusively by our licensed payment processing partners.

2.4 Gaming Activity Data

We log your betting history, game sessions, wagering amounts, bonus usage, and win/loss records. This data supports responsible gaming monitoring, fraud prevention, and the personalisation of promotions where you have consented to receive them.

2.5 Technical & Device Data

Automatically collected when you use the Platform:

• IP address and approximate geolocation (country / state level)
• Browser type, version, and operating system
• Device identifiers
• Session timestamps and page interaction logs
• Referral URLs

2.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of your messages and our responses, for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Use Your Information

uf9 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your player account.
• Service delivery: Processing bets, deposits, withdrawals, and bonus claims.
• Identity verification: Confirming your age (21+) and identity as required by our gaming licence conditions.
• Fraud prevention & AML compliance: Detecting and investigating suspicious activity, money laundering, and bonus abuse.
• Responsible gaming: Monitoring gaming patterns to identify at-risk behaviour and enforcing self-exclusion or deposit-limit settings you request.
• Customer support: Responding to your enquiries, resolving disputes, and improving our support service quality.
• Legal compliance: Meeting obligations under Malaysian law, our international gaming licence, and applicable financial regulations.
• Marketing communications: Sending you promotional offers, new game announcements, and platform updates — but only where you have given explicit consent, and you may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve product features, UI/UX, and site performance.

We do not use automated decision-making or profiling in a way that produces significant legal effects on you without human review. If you believe an automated process has affected your account unfairly, you have the right to request a human review by contacting our support team.

4. Legal Basis for Processing

Under applicable data protection law, uf9 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our contract with you — i.e., operating your account and providing gaming services.
• Legal obligation: Processing required to comply with AML regulations, gaming licence conditions, and Malaysian law.
• Legitimate interests: Processing for fraud detection, platform security, and internal analytics, where our interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting prior lawful processing.

5. Disclosure to Third Parties

uf9 does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Payment processors: To facilitate deposits and withdrawals via our licensed payment partners (e.g., e-wallet providers, Malaysian banks, and crypto gateways). These providers are contractually bound to process your data only for payment purposes.
• KYC / AML service providers: To verify your identity and conduct legally required due-diligence checks.
• Regulatory authorities: If required by law, court order, or directive from a competent Malaysian authority or our licensing regulator.
• Technology and infrastructure providers: Cloud hosting, CDN, analytics, and security partners who process data on our behalf under strict data processing agreements.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.

All third parties who receive your data are required to implement appropriate technical and organisational security measures and to use your data solely for the purposes we specify.

6. Cookies & Tracking Technologies

uf9 uses cookies and similar technologies (pixels, local storage, session tokens) to operate the Platform and improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: Essential for authentication, session management, and fraud prevention. These cannot be disabled without breaking Platform functionality.
• Performance cookies: Collect anonymised data about how Players use the Platform — page views, load times, error rates — so we can continuously improve performance.
• Functional cookies: Remember your preferences such as language, display settings, and last-visited game categories.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent via your account cookie preferences settings.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use Platform features.

7. Data Retention

We retain your personal data for as long as your account remains active, and for a defined period thereafter as required by law or legitimate business need:

• Account and KYC data: Retained for a minimum of seven (7) years following account closure, as required under AML and gaming licence obligations.
• Transaction records: Retained for seven (7) years to comply with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of each interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year to evidence the withdrawal.
• Technical logs: Retained for up to twelve (12) months for security monitoring, then deleted or anonymised.

Once the applicable retention period expires, your data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

8. Your Data Protection Rights

Subject to applicable law and regulatory constraints, you have the following rights regarding your personal data held by uf9:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where we have no overriding legal obligation to retain it.
• Right to restrict processing: Ask us to pause processing of your data in certain circumstances (e.g., while a dispute is resolved).
• Right to data portability: Receive your data in a structured, machine-readable format where technically feasible.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw any previously given marketing consent at any time via your account settings or by contacting support.

To exercise any of these rights, contact our Data Protection team at [email protected]. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request to protect your data against unauthorised access.

9. Children & Minors

uf9 is strictly an adult platform. Access to and use of the Platform is permitted only to individuals who are 21 years of age or older. We do not knowingly collect personal data from anyone below the age of 21.

If we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account, delete all associated personal data, and void any transactions linked to that account. If you have reason to believe a minor is using the Platform, please contact us immediately at [email protected].

Parents and guardians who are concerned about underage gambling are encouraged to visit our Responsible Gaming page for guidance on parental controls and self-exclusion tools.

10. Security Measures

uf9 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data fields stored at rest
• Multi-factor authentication (MFA) available on all player accounts
• Web Application Firewall (WAF) and DDoS protection at the network perimeter
• Regular third-party penetration testing and vulnerability assessments
• Role-based access controls limiting internal staff access to the minimum data needed
• Incident response procedures with defined notification timelines in the event of a data breach

While we maintain robust safeguards, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for using a strong, unique password. If you suspect unauthorised access to your account, contact our support team immediately.

11. International Data Transfers

As an internationally licensed gaming operator, uf9 may process and store your personal data on servers located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to those under Malaysian PDPA
• Transfers only to jurisdictions or organisations that maintain an adequate level of data protection
• Data processing agreements with all international sub-processors that explicitly restrict onward transfers

By using the Platform, you acknowledge and consent to the transfer of your personal data to our servers and processing facilities as described above.

12. Changes to This Policy

uf9 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a prominent notice on the Platform for at least 30 days
• Send a notification to the email address registered to your account, where the changes are significant

Your continued use of the Platform following any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically. Previous versions of this Policy are available upon request by contacting our support team.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please reach out to our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 inside the uf9 platform
• Response time: We aim to acknowledge all privacy-related enquiries within 3 business days and provide a full response within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the relevant Malaysian data protection authority or seek independent legal advice. uf9 is committed to resolving all privacy concerns fairly and transparently.