u9login Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by u9login ("we", "us", "our", "the Platform") and describes how we handle the personal data of all individuals who register for, access, or otherwise interact with the u9login website at u9login.co and associated services (the "Service").

u9login is committed to protecting the privacy of its members. We process personal data in accordance with applicable data protection legislation and the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity. This Policy is intended to fulfil our transparency obligations under those principles.

By creating a u9login account or using the Service, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Terms & Conditions, which govern your use of the Service as a whole.

2. Personal Data We Collect

The categories of personal data collected by u9login include:

We collect only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health data, except where strictly required by applicable law.

3. How We Collect Your Data

u9login collects personal data through the following means:

• Direct submission: Information you provide when registering a u9login account, completing identity verification, making a deposit or withdrawal, contacting support, or submitting feedback.
• Automated collection: Technical data collected automatically when you access the Service, including via cookies, web beacons, server logs, and similar technologies. See Section 6 for details on cookies.
• Third-party sources: Identity verification data from KYC service providers; payment data from payment processors including banks and e-wallet providers such as Touch 'n Go and Boost; fraud screening data from anti-fraud service providers.

4. Purpose of Processing & Legal Basis

u9login processes your personal data for the following purposes and on the following legal bases:

• Account management and service delivery (legal basis: performance of contract) — Creating and managing your account, processing bets and transactions, and providing the gaming service you have requested.
• Identity and age verification (legal basis: legal obligation / legitimate interests) — Verifying that you are who you say you are and that you are at least 21 years of age, in compliance with u9login's age verification obligations.
• Payment processing (legal basis: performance of contract) — Processing deposits from and withdrawals to your registered Malaysian payment methods including bank transfers and e-wallets.
• Anti-money laundering (AML) and fraud prevention (legal basis: legal obligation / legitimate interests) — Monitoring transactions for suspicious activity, conducting enhanced due diligence on high-value accounts, and reporting where required by law.
• Responsible gaming compliance (legal basis: legal obligation / legitimate interests) — Monitoring account activity for signs of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and maintaining account history for regulatory purposes.
• Marketing and promotions (legal basis: consent) — Sending you information about u9login promotions, bonuses, and new games where you have consented to receive such communications. You may withdraw consent at any time.
• Platform improvement and analytics (legal basis: legitimate interests) — Analysing usage data to improve the performance and content of the u9login platform.

5. Sharing of Personal Data

u9login does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:

• Service providers: Third-party vendors who process data on our behalf under written data processing agreements, including payment processors, KYC verification providers, cloud infrastructure providers, and customer support tools. These parties are contractually restricted from using your data for their own purposes.
• Regulatory and law enforcement: Where required by applicable law, court order, or regulatory authority, u9login may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities. u9login will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving u9login, personal data may be transferred to the acquiring entity, subject to the same level of protection as described in this Policy.
• Fraud prevention networks: Where reasonably necessary to prevent or detect fraud, u9login may share data with fraud prevention databases and industry partners.

All third parties with whom u9login shares personal data are required to maintain appropriate security measures and to use the data solely for the specified purpose.

6. Cookies & Tracking Technologies

u9login uses cookies and similar tracking technologies to operate the platform and improve your experience. The types of cookies used include:

• Strictly necessary cookies: Required for the Service to function. These include session management cookies that maintain your u9login login state. These cookies cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, display settings) between sessions to provide a more personalised experience.
• Analytics cookies: Collect aggregated data about how visitors use the u9login platform, including pages visited and features used. This data helps us improve the Service. Analytics data is anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, such as detecting unusual login behaviour from unrecognised devices or locations.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies may prevent the Service from functioning correctly. Disabling other cookie categories will not affect your ability to access the core platform features.

7. Data Retention

u9login retains personal data for as long as is necessary for the purposes described in this Policy, or as required by applicable law, whichever is longer. Specific retention periods include:

• Account data: Retained for the duration of your active u9login membership and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction.
• Identity verification documents: Retained for the period required by applicable KYC regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for two (2) years from the date of the last communication, or longer where the communication relates to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with u9login's data disposal procedures.

8. Data Security

u9login implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and u9login servers.
• Encryption at rest for sensitive data including financial information and identity documents.
• Role-based access controls ensuring that u9login staff access only the data necessary for their job function.
• Two-factor authentication available for all u9login member accounts.
• Regular security audits and penetration testing of the platform infrastructure.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, u9login will notify affected members without undue delay in accordance with applicable data protection law requirements.

9. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by u9login:

• Right of access: You may request a copy of the personal data u9login holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may also update many details directly within your u9login account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to restrict processing: You may request that we limit our processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests or for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

To exercise any of these rights, contact u9login support. We may require identity verification before processing your request. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

10. Children's Privacy

The u9login Service is strictly for individuals aged 21 and above. We do not knowingly collect personal data from anyone under 21 years of age. If u9login becomes aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the data, and refund any deposited funds to the originating payment method.

If you have reason to believe that a minor has registered a u9login account, please contact us immediately so that we can investigate and take appropriate action.

11. International Data Transfers

u9login primarily processes data within its operational infrastructure. Where personal data is transferred to service providers located outside of Malaysia, u9login ensures that appropriate safeguards are in place to protect your data, including contractual data transfer mechanisms and verification that recipient countries provide an adequate level of data protection.

By using the u9login Service, you acknowledge that your personal data may be processed outside of Malaysia in the circumstances described above, subject to the protections outlined in this Policy.

12. Third-Party Links

The u9login website may contain links to third-party websites or services. This Privacy Policy applies solely to data collected by u9login. u9login is not responsible for the privacy practices of any third-party websites and encourages you to review their privacy policies independently before providing any personal data to those sites.

13. Updates to This Policy

u9login reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Where changes are material, we will provide notice via the u9login platform and by email to your registered address at least seven (7) days before the updated Policy takes effect.

The current version of this Policy, together with the effective date, is always accessible on the u9login website. Your continued use of the Service after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to u9login's handling of your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within five (5) business days.

Contact: support@u9login.co (plain text only — not a clickable link)

You may also raise a privacy concern via the 24/7 live chat function available after u9login login to your account. For formal data subject requests, written submissions via email are preferred to ensure proper tracking and response.