Privacy Policy MAS9 – Personal Data Protection for Malaysian Members

MAS9 (mas9.ws) is an online entertainment platform operating exclusively for the Malaysian market. We understand that member trust is our most valuable asset, and protecting your personal data is central to that trust.

This Privacy Policy explains in detail how mas9 collects, processes, stores, shares, and protects your personal data when you register and use our platform — including Sports Betting (Malaysia Super League, EPL, BWF badminton, cricket), Live Casino, slots, table games, and all other services offered by mas9.

Mas9 only collects data that is strictly necessary to deliver platform services and comply with applicable legal requirements. The data we collect falls into three categories:

A. Data You Provide Directly:

• Full name (as shown on official Malaysia documents)
• Malaysian mobile phone number
• Date of birth (for age verification)
• Payment method details — email address or phone number linked to Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX bank account details (Maybank2u, CIMB Clicks)
• A copy of your identity document (MyKad or passport) where required for the KYC process
• Correspondence with the mas9 support team

B. Data We Collect Automatically:

• IP address and general location information (state/city within Malaysia)
• Device type, operating system, and web browser used
• Platform activity logs — matches watched, bets placed, games played
• Session data — login times, session duration, pages visited
• Cookie data and similar tracking technologies

C. Data from Third Parties (Where Applicable):

• Identity verification from approved third-party KYC providers
• Transaction data from trusted Malaysian payment processors
• Blacklist information from recognised gambling exclusion programmes

Mas9 uses your personal data only for the following purposes, all of which are necessary to deliver our platform services effectively and securely:

• Account management — To create, verify, and maintain your mas9 account.
• Transaction processing — To process deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, and to manage withdrawals to your account.
• Identity verification (KYC) — To comply with legal requirements in preventing fraud, money laundering, and access by underage individuals.
• Customer support — To resolve enquiries, complaints, and technical issues you report to the mas9 team.
• Experience personalisation — To display relevant content, promotions, and recommendations based on the sports or games you follow.
• Platform security — To detect and prevent fraudulent activity, bot usage, collusion, and other security threats.
• Legal compliance — To comply with the legal and regulatory obligations applicable to mas9's operations.
• Platform improvements — To analyse usage patterns in aggregate (not at the individual level) for product development and service improvement purposes.

Mas9 does not sell, rent, or disclose members' personal data to third parties except in the following limited circumstances:

• Payment processors — Malaysia's digital wallet and online banking providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) receive only the minimum data required to process your transaction.
• KYC Provider — Approved third-party identity verification providers for anti-money laundering compliance purposes.
• Technical service provider — Companies providing technical infrastructure to mas9 (such as cloud and cybersecurity services) that are bound by strict confidentiality agreements.
• Legal authorities — When required by Malaysian law, a court order, or an official request from a competent authority.
• Platform security — With fraud prevention services where necessary to protect the integrity of the mas9 platform and the security of all members.

Mas9 employs comprehensive technical and organisational security measures to protect your personal data:

• Encryption of data in transit: SSL/TLS 256-bit for all communications between your device and mas9's servers.
• Encryption of data at rest: All sensitive data is stored in encrypted form within mas9's database.
• Internal access controls: Principle of least privilege — only authorised staff may access specific data, and all access is logged.
• Regular security audits: The mas9 platform undergoes regular penetration testing and security audits conducted by independent security experts.
• Two-factor authentication (2FA): Available and encouraged for all mas9 member accounts.

Data retention period: mas9 retains your personal data for as long as your account remains active. Following account closure, certain data may be kept for the period required under Malaysian law (typically 7 years for financial records) before being securely deleted.

Platform mas9 uses cookies and similar tracking technologies to enhance your experience, analyse platform performance, and deliver relevant content. The types of cookies we use are as follows:

You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the mas9 platform.

Platform mas9 is NOT intended for individuals under the age of 21. We do not knowingly collect personal data from children or minors below that age.

As a member mas9 and as an individual protected under Malaysian law, you have the following rights regarding your personal data:

Some of the technical service providers used by mas9 may store or process data on servers located outside Malaysia. Where this occurs, mas9 ensures that:

• All data transfers are carried out with protections equivalent to or exceeding those required under the Malaysia PDPA 2010.
• All data recipients are bound by comprehensive data processing agreements.
• Only the minimum data necessary for the relevant service will be transferred.

Financial data related to transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX is processed through Malaysia's local payment systems and is subject to Bank Negara Malaysia regulations.

Platform mas9 may contain links to games or content provided by third-party providers (such as slots or live casino vendors). Each provider has its own privacy policy, independent of mas9.

Mas9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. When material changes occur, we will:

• Sending an email notification to your registered address at least 14 days before any amendment takes effect.
• Displaying a pop-up notice on the mas9 platform upon your next login.
• Updating the "Last Updated" date at the top of this document.

Continued use of the mas9 platform after the effective date of any amendment constitutes acceptance of the updated policy. You have the right to close your account and withdraw your balance if you do not agree with the changes made.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mas9 handles your personal data, please contact us through the following channels:

• Privacy Email: privacy@mas9.ws
• Support Email: support@mas9.ws
• Live Chat: Available 24/7 on the mas9 platform in Bahasa Malaysia

The mas9 Privacy Team will respond within 14 business days of receiving your enquiry. For matters requiring a thorough investigation, this period may be extended with written notice.