IPay9 Privacy Policy – Data Protection for Malaysian Members

IPay9 collects members' personal information in various ways as you use our platform. We ensure that only data that is genuinely necessary for clear and legitimate purposes is requested from you.

Information You Provide Directly:

• Registration Information — Your full name, Malaysian phone number, email address, and the password you create when opening an iPay9 account.
• Identity Verification (KYC) Information — MyKad or passport number, date of birth, and identity document images requested for age verification and anti-money laundering purposes where applicable.
• Financial Information — Your Touch 'n Go e-wallet account number, GrabPay account number, bank account number for FPX, or other payment details required to process deposits and withdrawals. Credit or debit card numbers are not stored by iPay9.
• Profile Information — Language preferences, game types of interest, and other account settings you configure in your iPay9 profile.

Automatically Collected Information:

• Technical Data — IP address, web browser type and version, phone or computer operating system, screen resolution, and device information used to access iPay9.
• Usage Data — Pages visited, time spent in each section of the platform, buttons clicked, searches performed, and general navigation patterns within iPay9.
• Transaction Data — A complete record of all deposits, withdrawals, bets, and financial activity in your iPay9 account for accountability, audit, and legal compliance purposes.
• Cookie Data — Session information and preferences stored via browser cookies to ensure a consistent and personalised platform experience for you.

IPay9 uses the information collected solely for legitimate, necessary purposes that are directly relevant to operating the platform and delivering the best possible service to members in Malaysia.

iPay9 Data Usage Purposes:

• Account Management — Creating and managing your iPay9 account, verifying your identity during login, sending OTPs to your Malaysian phone number, and maintaining account security at all times.
• Payment Processing — Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling winnings withdrawals quickly and securely to your preferred payment method.
• Legal Compliance — To meet Malaysian legal compliance obligations, including Anti-Money Laundering (AMLA) requirements, age verification for betting services, and statutory financial reporting.
• Platform Security — Detecting and preventing fraud, duplicate account activity, bonus abuse, unauthorised access, and any security threats to individual accounts or the iPay9 platform as a whole.
• Service Improvement — Analysing usage patterns in aggregate and anonymised form to understand which game types are most popular among Malaysian members, identify technical issues, and plan future platform improvements.
• Service Communications — Sending important account notifications such as deposit confirmations, security alerts, terms updates, and relevant promotional information — only to members who have consented to receive such communications.
• Customer Support — This enables the iPay9 support team to accurately identify your account and effectively resolve any issues or queries you raise via live chat or email.

IPay9 does not use members' personal data for third-party advertising, psychographic profiling, or any purpose not directly related to the operation of the platform's services.

IPay9 understands the importance of member privacy and handles data sharing with the utmost care. We does not sell members' personal data to anyone under any circumstances.

IPay9 members' information is shared only in the following limited circumstances:

• Payment Service Provider — Transaction details required for processing are shared with providers such as Touch 'n Go, GrabPay, DuitNow, and the Malaysian banks involved in handling your deposits and withdrawals. These providers are bound by strict data protection agreements with iPay9 and may only use that data to process the relevant transactions.
• Platform Technology Provider — Certain technical components of the iPay9 platform are operated by approved third-party software providers. These providers are granted only the minimum access required to perform their technical functions and are not permitted to use that data for their own purposes.
• Legal Authorities — iPay9 will disclose information when required to do so under Malaysian law or by court order, including lawful requests from Malaysian law enforcement agencies for the purposes of criminal investigation or legal compliance.
• Fraud Prevention — In very limited cases, information may be shared with other platforms or industry bodies for clearly substantiated fraud prevention purposes, such as identifying players using duplicate accounts across multiple platforms.

In all of the sharing scenarios above, iPay9 ensures that only the minimum necessary data is shared and that all recipient parties are bound by appropriate confidentiality obligations.

Member data security is the technical priority that receives the greatest investment in iPay9's operations. We implement multiple layers of security to ensure your personal data and financial information remain protected at all times.

iPay9 Technical Security Measures:

• 256-bit SSL/TLS Encryption — All data transmitted between your device and iPay9 servers is encrypted using the same encryption standards employed by Malaysia's leading banks, including Maybank and CIMB.
• Secure Password Storage — iPay9 account passwords are never stored in plain text. We use strong cryptographic hashing technology, meaning no one on the iPay9 team can ever read your original password.
• Two-Factor Authentication (2FA) — 2FA via SMS to your Malaysian mobile number is available and strongly recommended. With 2FA enabled, even if someone knows your password, they cannot log in without physical access to your Malaysian phone number.
• Intrusion Detection System — The iPay9 platform uses a real-time security monitoring system that detects and responds to any unauthorised access attempts, including brute force attacks, phishing, and SQL injection attempts.
• Regular Security Audits — iPay9 conducts regular independent security audits in which third-party cybersecurity experts test our systems to identify any vulnerabilities before they can be exploited.
• Internal Access Controls — Only iPay9 employees who require access to specific data in order to carry out their assigned duties are granted such access. This access is monitored, logged, and reviewed on a regular basis to prevent any internal misuse.

While iPay9 implements all of the security measures outlined above, no system is 100% immune to increasingly sophisticated cyber threats. As a shared responsibility, we encourage you to use a strong and unique password for your iPay9 account, enable 2FA, and never share your login credentials with anyone.

The iPay9 platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for members in Malaysia.

Types of Cookies Used by iPay9:

• Essential Cookies — These cookies are essential for the iPay9 platform to function at a basic level, including maintaining your login session, remembering your Bahasa Melayu language setting, and securing forms. Without these cookies, the platform will not work properly and you will need to log in again every time you navigate to a new page.
• Performance Cookies — These cookies help iPay9 understand how members interact with the platform — which pages are visited most, how long they spend, and where members encounter navigation difficulties. This data is used to improve platform design and functionality.
• Functional Cookies — These cookies remember your preferences and settings within iPay9, such as your favourite game types, display settings, and notification preferences, so you don't have to reconfigure them every time you log in.

You can manage cookies through your web browser settings. Disabling certain cookies may reduce the functionality of the iPay9 platform, though essential cookies cannot be disabled without affecting core platform operations. For instructions on managing cookies in popular browsers such as Chrome, Safari, or Firefox, please refer to the respective browser's help documentation.

As an iPay9 member and a user based in Malaysia, you have rights guaranteed under the Personal Data Protection Act 2010 (PDPA). iPay9 respects and facilitates the exercise of all these rights.

IPay9 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy or to comply with applicable Malaysian legal obligations.

iPay9 Data Retention Policy:

• Active Account Data — For as long as your account remains active with iPay9, we retain all profile information, preferences, and data necessary to properly manage your account.
• Transaction & Financial Data — Records of all deposits, withdrawals, and financial activity are retained for a minimum of 7 years after each transaction, in accordance with Malaysian tax and financial legal requirements. This is a legal obligation that cannot be reduced even upon a member's request.
• Identity Verification (KYC) Data — KYC documents and verification records are retained for a minimum of 5 years following account closure, in accordance with Malaysia's Anti-Money Laundering Act (AMLA).
• Security Log Data — Access and security activity logs are retained for 2 years to facilitate the investigation of any security incidents that may be reported at a later date.
• Marketing Data — If you previously consented to receive marketing communications from iPay9 but have since withdrawn that consent, we will delete your marketing data within 90 days from the date of consent withdrawal.

Once the designated retention period has ended, data will be permanently deleted or anonymised so that it can no longer be linked to any individual. iPay9 conducts regular data reviews and clean-ups to ensure we do not retain data beyond the period required.

IPay9 appoints an internal data protection officer responsible for ensuring the platform complies with all Malaysian PDPA requirements and for handling all privacy-related enquiries and complaints from members.

Privacy Contact Channel:

• Dedicated Privacy Email: support@ipay9.best — Please use the subject line "Privacy Enquiry" or "PDPA Rights" so your email reaches the right officer as quickly as possible.
• Live Chat Platform: Available 24 hours a day, 7 days a week — ideal for urgent inquiries or for initial guidance on how to exercise your rights.

IPay9 is committed to responding to all privacy inquiries within 2 business days for email and within a few minutes for live chat. For requests to exercise PDPA rights that require action — such as data deletion or data transfer — the resolution period is a maximum of 30 days from the date the request is received and verified.

If you are not satisfied with iPay9's response to your privacy inquiry or complaint after contacting us, you have the right to lodge a formal complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010 (PDPA).

IPay9 reserves the right to amend this Privacy Policy from time to time to reflect changes in platform services, new Malaysian legal requirements, or industry best practices in data protection.

When significant changes are made to this Privacy Policy, iPay9 will:

• Updating the "Last Updated" date at the top of this page.
• Displaying in-platform notifications on iPay9 to inform all active members.
• Sending an email to all registered members with active email addresses in our system.
• For particularly significant amendments that fundamentally alter member rights, we will request your explicit fresh consent before those changes take effect on your account.

We encourage you to review this Privacy Policy page at least once every three months to stay informed about how iPay9 protects your privacy. Continued use of the iPay9 platform after any amendments are published constitutes your acceptance of the updated terms.