At a9member, your privacy is not merely a legal obligation — it is a core value we take seriously. This document transparently explains how we collect, use, protect, and manage your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
How we approach the protection of your personal data every day, in every action we take.
a9member only collects personal data that is strictly necessary to provide our services to you. We do not collect irrelevant or excessive information. Every piece of data we request has a clear reason and a specific purpose — we do not collect data simply to store it.
All data stored and transmitted through the platform a9member is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banking institutions. Sensitive information such as passwords is stored in an irreversible hashed format.
As a member a9member, you have the right to access, amend, request a copy of, or request deletion of your personal data at any time. We honour these rights without question and without imposing unnecessary additional conditions.
a9member has never sold, rented, or shared member personal data with any third party for marketing or other commercial purposes, and never will. Your data belongs to you — not to us as a tradeable business asset.
All data management practices a9member is designed and implemented in accordance with the requirements of Malaysia's Personal Data Protection Act 2010. We conduct regular compliance reviews and update our practices whenever relevant changes in the law occur.
Unlike many other platforms that present their privacy policies in a foreign language or in legal jargon that is difficult to understand, a9member has prepared this document in full in Bahasa Malaysia so that it is easily understood by all Malaysian users.
Transparency about what information we collect and why it is necessary for our services.
Full name, date of birth, identification number (MyKad) or passport, gender, and nationality. Collected during registration and KYC verification.
Email address, Malaysian mobile number, and residential address. Used for account communications, OTP verification, and important notifications.
E-wallet or bank account holder name, destination account number for withdrawals, and deposit and withdrawal transaction history. E-wallet card details are not stored on our servers.
Gaming history, game types played (slots, baccarat, lottery, Sports Betting), bet amounts, session times, and game outcomes. This data is not shared with any external parties.
IP address, web browser type, device operating system, platform access logs, and session cookie information. Used for security and duplicate account detection.
Records of live chat conversations with our support team, emails sent to us, and feedback you provide. Retained for service quality purposes and dispute resolution.
a9member collects your personal data through several means depending on how you interact with our platform. Data collection occurs directly when you provide information, and automatically when you use the platform.
Data you provide directly including information provided during the account registration process — full name, date of birth, MyKad or passport number, email address, and mobile phone number. In addition, information you provide during the KYC (Know Your Customer) verification process, when submitting withdrawal requests, or when contacting our customer support team is also collected and stored securely.
Automatically collected data when you use the a9member including your device's IP address, web browser type and version, device operating system, access time and date, pages visited, session duration, and other technical data required to ensure the platform operates correctly and securely. This data is collected via cookies, tracking pixels, and standard server logs.
We only collect data that is strictly necessary for the specific purposes stated in this document. We do not collect sensitive data such as medical information, religious affiliation, or political views. Your credit card details, full bank account numbers, and e-wallet passwords are never stored on our servers a9member — it is processed directly through a secure payment gateway.
Personal data collected by a9member is used solely for the following purposes, which are directly related to the provision of our platform services to you:
a9member does not use your personal data to profile you for aggressive marketing purposes or to make automated decisions that materially affect you without human review. Any marketing communications we send are based on consent you provided at registration and can be unsubscribed from at any time via the link in the relevant email.
a9member invests seriously in security infrastructure to ensure your personal data is protected at all times. The following are the key security measures we have in place:
Although a9member implements comprehensive security measures, the safety of your data also depends on your own actions. Make sure your account password is unique and strong, do not share your login credentials with anyone, and always log out on shared devices. If you suspect your account has been accessed without authorisation, contact a9member immediately.
a9member does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. However, there are limited circumstances where minimal data sharing is necessary to provide services to you:
Payment service providers: When you make a deposit or withdrawal, the information required to process the transaction — such as the account holder name and destination account number — is shared with the relevant payment service provider (for example, a DuitNow processor or FPX system). These providers are bound by strict confidentiality agreements and use the information solely for transaction processing purposes.
Game providers: Your username (not your real name) and account ID may be shared with game providers such as PG Soft, Evolution Gaming, or Pragmatic Play solely to verify gaming eligibility and resolve any technical issues related to their games. These providers have no access to your financial information or full identity details.
Legal requirement: a9member may be required to disclose your personal data to competent authorities (such as the Royal Malaysia Police, Bank Negara Malaysia, or the courts) when mandated by law, court order, or a valid official request. In such circumstances, we will disclose only the minimum information necessary and will notify you wherever possible, unless prohibited from doing so by law.
Audit and compliance: Independent auditors appointed to verify RNG compliance, system security, or financial compliance may have limited access to statistical data or system logs during the course of an audit. This data is in aggregate form and does not contain any personally identifiable information.
All third parties with whom we share data are bound by data processing agreements requiring them to protect your information to a standard equal to or higher than a9member itself. We conduct regular reviews of our third-party providers to ensure their ongoing compliance with data protection requirements.
a9member uses cookies and similar tracking technologies to keep the platform running properly, enhance the user experience, and help us understand how the platform is being used. Cookies are small text files stored on your device when you visit a website.
| Cookie Type | Purpose | Duration | Deletable? |
|---|---|---|---|
| Strictly Necessary Session Cookies | Stores login status & game session security | Until log out | No — required for core functionality |
| Preference Cookies | Storing language preferences, display settings, & user preferences | 30 days | Yes — via browser settings |
| Analytics Cookies | Understanding platform usage patterns in aggregate | 90 days | Yes — via the platform's cookie settings |
| Security Cookies | Detecting unusual access attempts & protecting against CSRF | Current session | No — required for security |
You can manage your cookie settings through your web browser. Deleting or blocking essential session cookies and security cookies may affect the functionality of the platform a9member including the possibility that you may be unable to log in or play normally. Preference and analytics cookies can be blocked without affecting the platform's core functionality.
Primary server infrastructure a9member operates from data centres located in the Asia region. In the course of business, your personal data may be processed or stored on servers outside Malaysia — for example, by cloud service providers or game providers operating from various locations.
All cross-border data transfers are carried out using appropriate transfer mechanisms to ensure your data receives adequate protection. This includes verifying that the recipient country maintains an equivalent level of data protection, or imposing contractual safeguards on the relevant providers to protect your data.
a9member does not transfer Malaysian members' personal data to jurisdictions that lack adequate data protection laws without appropriate additional safeguards in place. If you would like to know more about the data transfer mechanisms we use, please reach out to our support team.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and industry best practices, you as a member a9member holds the following rights in relation to your personal data:
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
If any of your personal data is inaccurate or out of date, you have the right to request a correction. Corrections will be made within 7 business days.
You may request deletion of your personal data when it is no longer needed for its original purpose, subject to any legal retention obligations.
You may object to the processing of your personal data for specific purposes, including direct marketing. Objections will be honoured immediately for marketing purposes.
You may request your personal data in a machine-readable format for transfer to another platform. Requests will be processed within 21 business days.
Where data processing is based on your consent, you may withdraw that consent at any time without affecting any processing that has already taken place.
To exercise any of the rights above, please contact our support team a9member via live chat or send an email to support@a9member.best by stating the right you wish to exercise and the information needed to verify your identity. We will not charge any fee for reasonable requests.
a9member retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable Malaysian law. The following are retention period guidelines for key data categories:
Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be retained for a longer period for internal statistical analytics purposes.
a9member takes child and minor protection extremely seriously. Our platform is exclusively for individuals aged 21 and above. We do not knowingly collect, store, or process personal data of any individual under the age of 21.
Registration system a9member incorporates age verification mechanisms designed to prevent registration by underage individuals. If we discover that an account has been registered by someone under the age of 21, the account will be closed immediately and all related data will be deleted from our systems.
If you are a parent or guardian who believes that your underage child has registered an account at a9member, please contact us immediately at support@a9member.best. We will take immediate action to close the account and delete all associated data.
Platform a9member may contain links to third-party services necessary for operations — such as links to game provider support pages or technical documentation. This Privacy Policy applies solely to the a9member and does not cover the privacy practices of any third-party websites or services you may access through links on our platform.
We are not responsible for the content, privacy practices, or security policies of any third-party websites. We encourage you to read the privacy policy of any third-party website you visit before providing them with any personal information.
a9member reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, relevant legislation, or feedback from our members. Each updated version will carry a clear effective date at the top of the document.
When there are material changes to the way we use or protect your personal data, we will notify you via an in-platform notice or by email to the address registered on your account at least 14 days before the changes take effect. For less material amendments — such as clarifications or language corrections — we may simply update the date on this document without a separate advance notice.
Continued use of the platform a9member after the effective date of any amendment shall be considered your acceptance of the latest version of the Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with the procedures set out in Section 7 of this document.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to our privacy team a9member through the following channels:
For formal data rights requests (access, correction, deletion, etc.), please include "Data Rights Request" in your email subject line along with your full name and account number to help us process your request more efficiently. All data rights requests will be acknowledged within 2 business days and processed within the timeframe stated in Section 7.
We are committed to responding to every privacy-related enquiry transparently and in full. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under the Ministry of Communications Malaysia, as provided under PDPA 2010. That said, we always encourage resolving matters through our own channels first before taking external action.
Many people don't realise how much information they share each time they register with an online platform — their name, phone number, email address, and in the case of financial platforms like a9member, your payment account information is also involved. This is not something to take lightly, and we at a9member does not take it lightly.
We understand that the trust Malaysian players place in us goes beyond whether we pay out winnings promptly or offer quality games. It also comes down to a fundamental question: "Is my information safe here?" and "Will this company use my data in ways I haven't agreed to?"
Our answer to both questions is yes to the first and no to the second. Your personal data is safe at a9member — protected by bank-grade encryption, accessible only to authorised personnel on a need-to-know basis, and never sold or rented to anyone. We will never use your data for purposes you have not consented to.
In the online entertainment industry, many players are unaware that they hold strong legal rights under Malaysia's PDPA 2010. You have the right to know what data we hold about you, the right to request access to it, the right to request corrections if anything is inaccurate, and the right to request deletion when you close your account. a9member respects and upholds all of these rights — not because the law compels us to, but because we believe it is the right way to do business.
The trust you place in a9member when registering is something we do not take lightly. Every update to our security systems, every audit we conduct, and every data protection policy we put in place is part of an ongoing commitment to ensure that trust is never broken.
Below are the categories of third-party providers that may process a limited portion of your data as part of the services we deliver. All providers are bound by strict data protection agreements:
A list of the specific providers we work with at any given time is available upon request by emailing our privacy team. We update this list whenever there are changes to our provider ecosystem.
Answers to the most frequently asked questions about privacy and data protection at a9member.
a9member manages your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. Our compliance commitment includes:
A platform you can trust — not just for fair wins, but for the protection of your personal data. Join over 500,000 Malaysian players who already trust a9member, backed by real security guarantees, not empty promises.