Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") is published by u9play (hereinafter referred to as "u9play", "we", "us", or "our"), the operator of the online gambling and sports betting platform accessible at u9play.cam. This Policy applies to all personal data collected, processed, stored, and transmitted in connection with your use of the u9play platform, including all associated services, games, payment processing systems, customer support interactions, and promotional activities.

By registering an account on u9play, by depositing funds, by accessing any part of our platform, or by continuing to use our services after this Policy has been updated, you acknowledge that you have read, understood, and accepted the practices described herein. This Policy is to be read in conjunction with u9play's Terms and Conditions, which are available at u9play.cam/terms-conditions.

u9play is committed to maintaining the confidentiality, integrity, and security of all personal data entrusted to us by our Malaysian players and platform users. We collect only the personal data that is necessary, we retain it only for as long as required, and we process it only for legitimate, stated purposes. We do not sell personal data to third parties for commercial or marketing purposes.

The following defined terms are used throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, contact details, financial information, or any combination of data that could, directly or indirectly, identify an individual.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, or deletion.
• "Data Controller" means u9play as the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of u9play, under a data processing agreement and subject to u9play's instructions.
• "Member" / "User" means any registered account holder or visitor to the u9play platform.
• "KYC Data" means identity and address verification documents submitted by a Member in fulfilment of u9play's Know Your Customer obligations, including identity cards (MyKad), passports, driver's licences, and proof of address documentation.
• "Sensitive Data" means a subset of Personal Data that warrants enhanced protection, including financial account details, identity document numbers, and data pertaining to gambling behaviour that may be subject to harm-minimisation obligations.

u9play collects the following categories of Personal Data in the course of operating the platform and providing services to Malaysian players:

u9play does not collect special categories of sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data unless expressly required for a specific regulatory purpose and with your explicit consent.

u9play collects Personal Data through the following channels and mechanisms:

4.1 Direct Collection

Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal via Malaysian payment channels (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay), contacting customer support, completing a survey, or participating in a promotional activity.

4.2 Automated Collection

Technical and behavioural data collected automatically when you interact with the platform, including through cookies, session tracking technologies, server logs, and analytics tools. This includes your IP address, device identifiers, navigation paths, and session duration data.

4.3 Third-Party Sources

In limited circumstances, u9play may receive Personal Data from third parties, including: identity verification service providers engaged for KYC purposes; payment processors and banking partners through which transactions are routed; fraud detection and AML screening services; and, in relation to referred accounts, from the referring Member to the extent permitted under our referral programme terms.

u9play processes Personal Data for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and administering your u9play account, including registration, login authentication, account settings management, and tier progression within the VIP loyalty programme.
• Payment Processing: Facilitating deposits and withdrawals through your selected Malaysian payment method, including DuitNow, FPX, and all supported e-wallet and banking channels, and maintaining accurate transaction records.
• KYC and Compliance: Verifying your identity and address in fulfilment of applicable regulatory Know Your Customer requirements, and maintaining records of verification outcomes as required.
• Anti-Money Laundering (AML): Monitoring transaction patterns and gameplay activity to detect and prevent money laundering, fraud, and other financial crimes, including reporting to appropriate Malaysian authorities where legally required.
• Responsible Gambling: Monitoring gameplay data and wagering patterns to identify signs of potentially problematic gambling behaviour, enforcing player-set deposit and loss limits, and administering self-exclusion requests.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and audit purposes.
• Platform Security: Detecting and preventing unauthorised account access, multi-accounting, bot usage, and other activities that violate the Terms and Conditions.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications or where we have a legitimate interest in contacting existing Members.
• Analytics and Improvement: Analysing aggregate and anonymised usage data to understand platform performance, improve user experience, and inform product development decisions.

u9play processes your Personal Data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and u9play — including operating your account, processing transactions, and delivering platform services — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required for compliance with applicable laws and regulations — including KYC, AML obligations, record-keeping requirements, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing undertaken for fraud prevention, platform security, responsible gambling monitoring, and service improvement is carried out on the basis of u9play's legitimate interests, provided that such interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

u9play does not sell, rent, or license your Personal Data to third parties for their own commercial or marketing purposes. We share Personal Data only in the following limited and controlled circumstances:

7.1 Service Providers and Data Processors

We engage third-party service providers to assist with specific operational functions, including payment processing (Malaysian banks and e-wallet providers), identity verification and KYC screening services, fraud detection platforms, cloud infrastructure providers, and customer support tooling. These providers act as Data Processors under contractual agreements that restrict their use of your data to the specific services they provide to u9play.

7.2 Regulatory and Law Enforcement Authorities

u9play will disclose Personal Data to Malaysian authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or legitimate regulatory request — including in connection with AML investigations, fraud enquiries, or underage gambling incidents. Such disclosures are made in accordance with applicable legal requirements.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of u9play's business or assets, Personal Data held by u9play may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments. Members will be notified of any such transfer that materially affects the processing of their Personal Data.

7.4 With Your Consent

In any other circumstance where we wish to share your Personal Data with a third party not described above, we will seek your explicit and informed consent prior to doing so. You retain the right to refuse such consent without consequence to your account status.

u9play retains Personal Data for the periods necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with applicable financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later, as required under AML regulations.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, consistent with applicable financial record-keeping standards.
• Support Communications: Retained for a minimum of two (2) years from the date of the interaction, unless a longer period is required in connection with an ongoing dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of consent plus two (2) years following withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification, unless a legal obligation requires continued retention.

u9play implements and maintains a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the u9play platform is encrypted using industry-standard 256-bit SSL/TLS encryption. This applies to every page — including login, account management, deposit, withdrawal, and support interaction pages.
• Encrypted Data Storage: Sensitive Personal Data — including financial account details and KYC documentation — is stored in encrypted form at rest.
• Access Controls: Access to Personal Data is restricted to authorised u9play personnel whose roles require it. Access permissions are reviewed regularly and revoked promptly upon role change or departure.
• Pseudonymisation: Where technically feasible, Personal Data used for analytics and platform improvement purposes is pseudonymised or anonymised to reduce privacy risk.
• Incident Response: u9play maintains a data breach response protocol. In the event of a security incident affecting your Personal Data, we will notify you and, where required, the relevant authorities within the timeframes specified by applicable law.

u9play uses cookies and similar tracking technologies on the platform to support core platform functionality, improve user experience, and — where you have provided consent — to deliver relevant promotional content. A cookie is a small text file placed on your device by a website when you visit it.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function correctly. These include session management cookies, login authentication tokens, and anti-fraud security cookies. These cannot be disabled without affecting core platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate the platform, which pages are most visited, and where users encounter errors. This data helps us improve the platform experience. Analytics cookies are only placed where consent has been given.
• Preference Cookies: Used to remember your platform settings and preferences — such as language preferences and notification settings — across sessions.

10.2 Managing Cookies

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling essential cookies may impair your ability to use core platform features such as account login and payment processing. Non-essential cookies require your active consent and may be withdrawn at any time without affecting your account access.

As a data subject, you have a number of rights in relation to the Personal Data that u9play holds about you. These rights are described below. To exercise any of these rights, please contact our Data Protection team using the contact details in Section 16.

u9play will respond to all valid data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension and the reasons for it within the initial thirty-day period.

The u9play platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals below the minimum age requirement. Age verification is a mandatory component of the KYC process, and all new accounts are subject to identity document review prior to withdrawal privileges being unlocked.

Where u9play identifies, through the course of its verification processes or through a third-party report, that a registered account was opened by an individual who was under the age of 21 at the time of registration, the account will be immediately suspended, and any deposits and winnings associated with the account will be subject to review in accordance with our Terms and Conditions. Personal Data collected in connection with an underage account will be retained only as long as necessary to resolve the matter and meet applicable regulatory reporting requirements.

The u9play platform integrates with a number of third-party service providers necessary for its operation, including Malaysian payment processors (Maybank, CIMB, Public Bank, Hong Leong, RHB, DuitNow network, FPX, Touch 'n Go eWallet, Boost, GrabPay), identity verification providers, and gaming content providers. Each of these third parties operates under their own privacy policies and is governed by applicable data protection law in their respective jurisdictions.

u9play enters into Data Processing Agreements with all third-party processors to ensure that Personal Data shared with them is handled consistently with this Policy and applicable data protection standards. We conduct due diligence on the data security practices of our processors and require them to maintain appropriate technical and organisational security measures.

u9play's Privacy Policy does not govern the data practices of third-party websites or services that may be referenced or linked elsewhere. We encourage you to review the privacy policies of any third-party service you engage with independently of the u9play platform.

Some of u9play's service providers and infrastructure partners operate in jurisdictions outside Malaysia. Where Personal Data is transferred to countries that may not have data protection laws equivalent to those in force in Malaysia, u9play ensures that appropriate safeguards are in place to protect your Personal Data. These safeguards may include contractual clauses that bind the receiving party to data protection standards consistent with this Policy.

u9play will not transfer Personal Data internationally in circumstances where we cannot ensure an adequate level of protection for your data. If you have questions about specific international transfers and the safeguards in place, you may direct these to our Data Protection contact as set out in Section 16.

u9play reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where changes are material — meaning they significantly affect how we process your Personal Data or your rights as a data subject — we will provide notice via platform notification or email (to your registered email address) at least fourteen (14) days prior to the changes taking effect.

The most current version of this Privacy Policy is always available at u9play.cam/privacy-policy and is identified by the "Last Updated" date at the top of the document. Your continued use of the platform following the effective date of an amended Policy constitutes your acknowledgment of the changes.

If you wish to exercise any of your data subject rights, have a question about this Privacy Policy, or wish to raise a complaint about how your Personal Data has been handled by u9play, please contact us through the following channels:

We are committed to resolving all Privacy-related enquiries fairly and promptly. If you are not satisfied with our response to a data subject request or complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.