M9Asia Privacy Policy

1. Introduction

M9Asia (hereinafter referred to as "M9Asia", "we", "us", or "the Platform") operates an international online gaming and sports betting platform accessible at https://m9asia.casa. We are committed to maintaining the privacy and security of personal data belonging to all registered members and website visitors.

This Privacy Policy (hereinafter "Policy") describes the categories of personal data M9Asia collects, the purposes for which that data is processed, the parties with whom it may be shared, the duration for which it is retained, and the rights available to data subjects with respect to their personal information. This Policy applies to all users of the M9Asia platform, including members registered in Malaysia and all other territories from which the Platform is accessed.

By registering an account on M9Asia or by continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree with this Policy, you should discontinue use of the Platform and contact our support team to close your account.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial account references, location data, and online identifiers.
• "Data Controller" means M9Asia, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of M9Asia in accordance with documented instructions.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by M9Asia — in practice, any registered Member or Platform visitor.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for one or more specified purposes.
• "KYC" means Know Your Customer verification — identity and address confirmation procedures performed to comply with regulatory anti-money laundering (AML) and fraud prevention requirements.
• "Cookie" means a small text file placed on a user's device by a website for purposes of session management, preference storage, analytics, and related functions.

3. Personal Data We Collect

M9Asia collects personal data from members and platform visitors through various touchpoints, including the registration form, KYC verification process, payment transactions, customer support interactions, and automated technical systems. The following table summarises the categories of data collected and the primary collection method for each:

4. How We Process Your Personal Data

M9Asia processes the personal data it collects for the following clearly defined purposes. We do not process personal data for any purpose that is incompatible with those stated at the time of collection.

1. Account Registration and Management: To create and maintain your member account, verify your identity, and administer your profile and account preferences on the M9Asia platform.
2. KYC and Regulatory Compliance: To verify your age (21 and above), identity, and address in fulfilment of anti-money laundering (AML), counter-terrorist financing (CTF), and fraud prevention obligations applicable to online gaming platforms.
3. Transaction Processing: To process deposits made via Malaysian payment methods (including Boost eWallet, Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect) and to execute withdrawal requests in MYR to verified accounts.
4. Game and Betting Service Delivery: To provide access to the Platform's 2,400+ game library, sports betting markets (including Liga Super Malaysia, EPL, and UFC), and promotional features.
5. Bonus and Promotions Administration: To calculate and credit bonus entitlements including birthday bonuses, referral rewards, cashback, and VIP tier benefits, and to enforce associated wagering requirements.
6. Customer Support: To respond to enquiries, resolve disputes, and manage responsible gambling requests including self-exclusion and deposit limit applications submitted to our 24/7 support team.
7. Responsible Gaming Compliance: To monitor account activity for indicators of problem gambling and to apply, at the Member's request or our own initiative, appropriate responsible gaming tools.
8. Security and Fraud Prevention: To detect, prevent, and investigate fraudulent activity, duplicate account registration, bonus abuse, collusion, and unauthorised access to Member accounts.
9. Platform Improvement and Analytics: To analyse aggregated usage patterns, technical performance, and user behaviour to improve the Platform's features, stability, and user experience.
10. Legal Obligations: To comply with applicable laws, regulatory requirements, court orders, or lawful requests from competent authorities.

5. Legal Basis for Processing

M9Asia processes personal data on one or more of the following legal bases, depending on the nature and purpose of each processing activity:

• Contractual Necessity: Processing required to perform the contract between M9Asia and the Member — including account management, payment processing, game service delivery, and customer support — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing necessary to comply with applicable regulatory, AML, KYC, and responsible gaming legal requirements is conducted on the basis of legal obligation.
• Legitimate Interests: Processing for security monitoring, fraud prevention, platform analytics, and audit trail maintenance is conducted on the basis of M9Asia's legitimate interests, provided those interests are not overridden by the Data Subject's rights.
• Consent: Where M9Asia sends direct marketing communications or engages in non-essential cookie placement, such processing is based on the Member's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Data Sharing and Disclosure

M9Asia does not sell, rent, or trade Member personal data to third parties for commercial purposes. Personal data may be disclosed in the following limited and controlled circumstances:

6.1 Payment Service Providers

Transaction-related data is shared with our integrated payment processors — including Boost, Touch 'n Go eWallet, GrabPay, DuitNow, and FPX-linked banking partners — solely to the extent necessary to execute deposit and withdrawal instructions. These providers operate under their own privacy frameworks and are contractually prohibited from using your data for purposes unrelated to payment processing.

6.2 KYC and Identity Verification Partners

Identity documents submitted for KYC verification may be shared with our authorised identity verification service providers. These providers process data on M9Asia's behalf and are bound by strict data processing agreements.

6.3 Game Studio Partners

Where necessary for the provision of specific game products — such as live dealer tables requiring real-time session data — limited technical data (such as session tokens and anonymised identifiers) may be shared with our licensed game studio partners. No sensitive personal data is transmitted beyond what is technically required.

6.4 Legal and Regulatory Authorities

M9Asia may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.

6.5 Business Succession

In the event of a merger, acquisition, or sale of all or substantially all of M9Asia's business assets, Member personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

7. Data Retention

M9Asia retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data — retained throughout the duration of the member's active account relationship with M9Asia.
• Transaction records and financial data — retained for a minimum of seven (7) years following the date of the transaction, in compliance with applicable financial record-keeping requirements.
• KYC identity documents — retained for a minimum of five (5) years following account closure, in accordance with AML regulatory obligations.
• Customer support communications — retained for a period of three (3) years from the date of the interaction.
• Technical logs and session data — retained for a maximum of twelve (12) months, after which they are either anonymised or deleted.
• Self-exclusion records — retained for the full duration of the self-exclusion period plus a minimum of five (5) years post-expiry to prevent circumvention.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

8. Cookies and Tracking Technologies

M9Asia uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, analyse usage patterns, and support security functions. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and login state persistence. These cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred deposit method, and account display options to personalise your experience between sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors navigate the Platform — including page views, session duration, and click paths — to help us improve the user experience.
• Security Cookies: Used to detect fraudulent activity, duplicate session creation, and suspicious login patterns to protect your account.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect certain features of the Platform. M9Asia does not use cookies to serve third-party advertising.

9. Data Security

M9Asia implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the M9Asia Platform.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication options available to Members for enhanced account security.
• Automated intrusion detection and incident response systems monitoring for anomalous access patterns.

10. Your Data Rights

As a Data Subject, you hold the following rights with respect to your personal data processed by M9Asia. Requests to exercise any of these rights may be submitted to our Data Protection contact at [email protected]. M9Asia will respond within 30 calendar days of receipt.

11. Children's Privacy

The M9Asia platform is strictly intended for individuals aged 21 years and above. M9Asia does not knowingly solicit, collect, or process personal data from any person under the age of 21. Age verification is a mandatory step in the KYC process for all registered Members.

If M9Asia discovers or is notified that a person under the age of 21 has registered an account or submitted personal data through the Platform, we will immediately suspend the relevant account, delete the associated personal data, and refund any remaining balance to the payment method of origin. Any bonuses or winnings accrued by a minor account will be forfeited.

Parents or guardians who believe that a minor has registered on M9Asia should contact our support team immediately at [email protected] or via live chat.

12. Cross-Border Data Transfers

M9Asia operates as an international online gaming platform. As such, personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with the technical infrastructure, payment processing, and game studio operations that underpin our service.

Where personal data is transferred to a jurisdiction that may not offer the same level of data protection as Malaysia, M9Asia implements appropriate safeguards — including contractual data protection clauses — to ensure that your data remains protected to a standard consistent with this Policy. By using the Platform, you consent to such cross-border transfers as described herein.

13. Third-Party Links and Services

The M9Asia Platform may contain references or links to third-party services, payment providers, and informational resources. M9Asia does not control the privacy practices of these third parties and is not responsible for their content or data handling. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform.

Payment processors such as Boost, Touch 'n Go eWallet, and GrabPay operate under their own independent privacy frameworks and are regulated by Bank Negara Malaysia and other relevant authorities. Any data shared with these providers in connection with your transactions is subject to their own privacy terms.

14. Amendments to This Policy

M9Asia reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. The effective date at the top of this document will be revised upon each update.

Where amendments are material — that is, where they substantively alter your rights or our data processing obligations — M9Asia will notify registered Members via the email address associated with their account. Continued use of the Platform following the publication of an amended Policy constitutes your acceptance of the revised terms.

15. Contact Us & Data Protection

If you have any questions regarding this Privacy Policy, wish to exercise any of your data subject rights, or wish to lodge a concern about how your personal data is handled by M9Asia, please contact us using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the M9Asia Platform (Malaysia Standard Time, UTC+8)
• Subject Line: Please include "Privacy Request" or "Data Rights" in your email subject for prioritised routing
• Response Commitment: All data rights requests will receive an acknowledgement within 5 business days and a substantive response within 30 calendar days

M9Asia takes privacy complaints seriously and will engage in good faith to address your concerns promptly and in accordance with applicable data protection principles.