OFFICIAL DATA PROTECTION

A9Login Privacy Policy – How We Protect the Personal Data of Malaysian Players

At a9login, your privacy is more than a legal obligation — it is our moral responsibility to every player who entrusts us with their personal information. This document transparently explains how we collect, store, use, and protect your data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026
Bahasa Melayu (ms-MY)
PDPA 2010 Compliant
Our Privacy Commitment
Your data is never sold to any third party
256-bit SSL encryption for all stored data
You have the right to request access, correction, or deletion of your data
Fully compliant with Malaysia's PDPA 2010
RM transaction data stored securely and privately
Immediate notification in the event of any data breach

A9login Data Protection Principles

Data Minimisation

A9login only collects personal data that is strictly necessary to deliver its services. We do not request excessive information unrelated to your use of the betting platform.

Guaranteed Confidentiality

Your account details, betting history, and RM transaction records on a9login are strictly confidential. Only authorised staff may access this data for designated operational purposes.

High-Grade Encryption

All data transmitted and stored at a9login is protected with 256-bit SSL encryption — the same security standard used by Malaysia's leading financial institutions such as Maybank and CIMB.

Strict Access Controls

A9login's internal access control system ensures that only specifically authorised staff can view sensitive player data. All access is logged and continuously monitored.

Player Rights Respected

You have the right to access, correct, transfer, or request the deletion of your personal data held by a9login at any time through the official channels provided.

Full Transparency

In the event of a data breach affecting your information, a9login will notify you within 72 hours and take immediate steps to contain the damage.

1. Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by a9login and applies to all users of our platform in a9login.bet, including our website, mobile app, and all digital services we offer. This Policy explains our practices regarding the collection, use, disclosure, and protection of your personal data.

A9login operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best-practice data protection principles. We take the privacy rights of every Malaysian player seriously — whether you're a regular Super League football bettor on weekend nights, a badminton fan following Lee Zii Jia's matches, or an active MPL Malaysia e-sports player every week.

By registering an account or using any a9login service, you agree to the collection and use of your information as described in this Policy. If you do not agree, please stop using our platform and contact us to close your account and delete your data.

Our Commitment: a9login will not sell, rent, or transfer your personal data to any third party for marketing purposes without your explicit consent.

2. Types of Personal Data We Collect

A9login collects various types of information depending on how you interact with our platform. Below are the categories of data we may collect:

Data Category Sample Information Primary Purpose
Identification Data Full name, MyKad number, date of birth Identity verification (KYC)
Contact Details Malaysia phone number, email address Communications & account support
Financial Data RM deposit records, withdrawal history, payment methods (TNG, DuitNow) Transaction processing & compliance
Usage Data Betting history, sports viewed, active hours Service improvement
Technical Data IP address, device type, browser version Security & fraud prevention
Location Data General location based on IP (city, state) Legal compliance

We may also collect information you voluntarily provide when contacting a9login customer support, completing feedback forms, or participating in special promotional programmes such as Hari Raya bonuses or EPL season betting.

3. How We Use Your Data

The personal data we collect is used only for legitimate and specific purposes. a9login uses your data to:

  • Account Management: Creating, verifying, and maintaining your a9login account, including the KYC process required by law.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and handling withdrawals in RM to your Malaysian bank account or e-wallet.
  • Platform Security: Detecting and preventing fraud, money laundering, multiple account abuse, and cybersecurity threats against the a9login platform.
  • Legal Compliance: Fulfilling reporting obligations to the relevant Malaysian authorities when required by law.
  • Service Improvement: Analysing platform usage patterns to improve the user experience, introduce new markets (such as the Malaysia Super League or MPL Esports), and optimise system performance.
  • Communications: Sending important notices about service changes, security updates, or account information. We may also send marketing promotions if you have given your consent.
  • Customer Support: Handling complaints, enquiries, and requests submitted to the a9login support team.

Opt Out of Marketing Emails: You may opt out of marketing emails or notifications from a9login at any time by clicking the "unsubscribe" link in any of our marketing emails or by submitting a request to our support team.

4. Data Sharing & Disclosure

A9login does not share your personal data with external parties without a legitimate basis. We only share data in the following limited circumstances:

  • Service Providers: Third parties that help us operate the platform — such as payment processors TNG eWallet and DuitNow, cloud service providers, and identity verification software vendors. All parties are bound by strict confidentiality agreements.
  • Legal Requirements: When required by a Malaysian court, regulatory authority, or law enforcement agency in the course of a lawful investigation into illegal activity.
  • Fraud Prevention: We may share information with industry fraud prevention service providers to protect the a9login platform and other players from malicious activity.
  • With Your Consent: In any other situation where you have given explicit consent for your data to be shared.

Our Guarantee: a9login has never and will never sell players' personal data to advertising companies, data brokers, or any party not directly involved in the operation of our platform.

5. Data Security Measures

Data security at a9login is handled through a multi-layered approach covering technical, physical, and administrative safeguards:

  • 256-bit SSL Encryption: All data transmitted between your browser or app and a9login's servers is encrypted using the latest TLS 1.3 standard.
  • Encryption of Data at Rest: All data stored in the a9login database — including personal information and MYR financial records — is encrypted using AES-256.
  • Role-Based Access Control: a9login staff may only access data relevant to their specific responsibilities. All access is logged and audited on a regular basis.
  • Two-Factor Authentication (2FA): Available to all player accounts and mandatory for all a9login internal staff accounts.
  • 24/7 Monitoring: a9login's cybersecurity team continuously monitors systems to detect any suspicious activity or attempted intrusions.
  • Regular Penetration Testing: a9login conducts regular security testing through independent third-party auditors to identify and patch vulnerabilities before they can be exploited.

While we take every reasonable precaution, no system in the world can guarantee absolute 100% security. We encourage you to act as your own first line of defence by using a strong password and enabling 2FA on your a9login account.

6. Data Retention Period

A9login retains your personal data for as long as your account is active or as long as necessary to provide our services. Below are our data retention guidelines:

Data Type Retention Period Reason
Active Account Data For as long as the account is active Ongoing service management
MYR Transaction Records 7 years after transaction Legal requirements & audit
KYC Documents 5 years after account closure Malaysia PDPA & AML Compliance
Access & Security Logs 2 years Fraud & security investigations
Support Communication Data 3 years Service reference & improvement

Once the retention period expires, a9login will securely delete or anonymise your personal data in a manner that ensures it cannot be recovered or identified.

7. Cookie Policy

A9login uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you visit our site. The following are the types of cookies we use:

Cookie Name Type Purpose Duration
A9_session Important Maintaining your login session Session
A9_csrf Important Protection against CSRF attacks Session
A9_lang Important Saving language preference (ms-MY) 1 year
A9_analytics Analytics Understanding how players use the platform 6 months
A9_prefs Optional Saving display settings and preferred odds format 1 year

You can manage and delete cookies through your browser settings. However, removing essential cookies may affect certain functions on the a9login platform. Analytics and preference cookies can be disabled without impacting core platform functionality.

8. Your Rights Under PDPA 2010

As an a9login player whose personal data we hold, you have the following rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

Right to Access

Request a copy of all personal data we hold about you at a9login.

Right to Rectification

Request the correction of any personal data that is inaccurate or incomplete.

Right to Erasure

Request the deletion of your personal data when there is no longer a legitimate reason to retain it.

Right to Restriction

Restrict the processing of your data under certain circumstances provided for under the PDPA.

Portability Rights

Receive your data in a structured, machine-readable format for transfer to another platform.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

How to Submit a Request: To exercise any of the above rights, submit a written request to privacy@a9login.bet with the subject line "PDPA Rights Request". a9login will respond within 30 business days.

9. Cross-Border Data Transfers

In the course of its operations, a9login may store or process your data on servers located outside Malaysia. Where this occurs, we ensure that such transfers are carried out with safeguards equivalent to those required under Malaysia's PDPA 2010.

We only work with cloud service and infrastructure providers that meet internationally recognised security standards, including ISO 27001 and SOC 2. All contracts with third-party providers include binding data protection clauses to ensure your data is handled securely and responsibly.

If you would like to know more about the specific safeguards we apply to cross-border data transfers, please contact our Data Protection Officer at privacy@a9login.bet.

10. Changes to This Privacy Policy

A9login reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or developments in a9login's services. We will notify you of any significant changes through:

  • An in-platform notification on a9login the next time you log in.
  • Email to the address registered on your account.
  • Updating the "Last Updated" date at the top of this document.

Continued use of the a9login platform after any changes are published constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically. The currently applicable version of the Privacy Policy is dated 1 January 2026.

11. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how a9login handles your personal data, please do not hesitate to reach out to us.

Privacy Email

For PDPA enquiries & data requests

privacy@a9login.bet
24/7 Live Chat

Instant support in Bahasa Melayu

Start a Conversation
FAQ

Answers to frequently asked privacy questions

View FAQ

Response Time: a9login is committed to responding to all privacy-related enquiries within 5 business days and resolve all PDPA rights requests within 30 business days from the date of receipt.

Your Data Is Safe at a9login. Join Us Today!

Over 500,000 Malaysian players trust a9login for their Sports Betting, e-sports, and online casino needs. Register free in under 3 minutes with a minimum deposit of RM 20 via TNG eWallet or DuitNow. Your data is fully protected under PDPA 2010.

For players aged 18 and above only  ·  Protected under PDPA 2010

Bahasa Melayu