u9agent Privacy Policy

1 Who We Are

This Privacy Policy is issued by u9agent ("u9agent", "we", "us", "our"), the operator of the online gaming platform accessible at u9agent.org. u9agent acts as the data controller in respect of personal data collected through the Platform and its associated services, including the live casino, sportsbook, slots, arcade games, Lucky Dice, and all customer account and support functions.

By accessing the Platform or registering as a player, you acknowledge that you have read, understood, and agreed to the data handling practices described in this Policy. This Policy should be read alongside our Terms & Conditions. If you do not agree with this Policy, you should not use the u9agent Platform.

2 Data We Collect

u9agent collects personal data through a number of channels in the course of operating the Platform. The categories of data we may hold about you include:

• Registration data: Full legal name, date of birth, residential address, email address, and contact number provided during account creation.
• Identity verification data: Copies of government-issued identification documents (such as Malaysian MyKad or passport) and proof of address submitted as part of KYC verification.
• Financial data: Payment method identifiers (e.g., masked bank account numbers, Touch n Go eWallet reference IDs, Boost wallet identifiers), transaction histories, deposit amounts, and withdrawal records. u9agent does not store full card numbers or payment credentials — these are handled directly by licensed payment processors.
• Gaming data: Game session records, wager amounts, game outcomes, bonus claim history, and responsible gaming tool settings.
• Communications data: Records of customer support interactions, live chat transcripts, and email correspondence.
• Technical data: IP address, device type, operating system, browser type, session timestamps, and geolocation data (city/country level) collected automatically when you access the Platform.
• Behavioural data: Navigation patterns, feature usage, and session duration data collected for platform improvement and fraud prevention purposes.

3 How We Use Your Data

u9agent processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your u9agent account, including identity verification, login authentication, and account security.
• Service delivery: Providing access to gaming products, processing deposits and withdrawals, settling bets, and delivering customer support.
• Regulatory compliance: Meeting our obligations under applicable gaming authority licensing requirements, including KYC verification, AML screening, and responsible gaming monitoring.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: Monitoring gaming behaviour for indicators of problem gambling and, where required, applying responsible gaming interventions in accordance with our duty of care obligations.
• Marketing: Sending you promotional communications about u9agent offers and products, where you have consented to receive such communications. You may withdraw marketing consent at any time via account settings or by contacting support.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Legal obligations: Retaining data as required by applicable laws and responding to lawful requests from regulatory or law enforcement authorities.

4 Legal Basis for Processing

u9agent processes personal data on the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform the contract with you — account creation, game delivery, payment processing, and support services.
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and data retention obligations under gaming authority licensing frameworks and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, technical analytics, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You retain the right to withdraw consent at any time.

5 Data Sharing

u9agent does not sell or trade your personal data. We may share your data with the following categories of recipients strictly as necessary to operate the Platform:

• Payment processors: Licensed payment service providers handling deposit and withdrawal transactions (e.g., processing Touch n Go eWallet, Boost, and Malaysian bank transfers). These providers process data under their own regulatory obligations and data protection agreements with u9agent.
• Game content providers: Third-party studios and platform providers whose games are accessible through u9agent. Data shared is limited to anonymised session identifiers required for game functionality.
• Identity verification services: Specialist KYC and document verification providers engaged to support regulatory identity checks.
• Fraud prevention and security: Risk management and anti-fraud service providers who assist in identifying suspicious activity.
• Regulatory and law enforcement authorities: u9agent will disclose personal data to gaming regulators, financial intelligence units, or law enforcement bodies where required to do so by applicable law or valid legal process.
• Professional advisers: Legal, financial, and audit advisers engaged by u9agent, who are bound by confidentiality obligations.

All third-party service providers engaged by u9agent are required to handle personal data in accordance with appropriate data protection standards and are prohibited from using u9agent player data for their own independent purposes.

6 Data Retention

u9agent retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligation:

• KYC and identity documents: Retained for a minimum of five years following account closure, as required under applicable AML and gaming licensing frameworks.
• Transaction records: Retained for a minimum of five years from the date of the relevant transaction.
• Gaming session records: Retained for a minimum of three years from the date of the session.
• Customer support records: Retained for three years from the date of the interaction unless a longer period is required by ongoing proceedings.
• Marketing data: Retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our data destruction procedures.

7 Cookies & Tracking Technologies

u9agent uses cookies and similar technologies to operate and improve the Platform. The categories of cookies used are:

• Strictly necessary cookies: Essential for session management, authentication, and platform security. These cannot be disabled without impairing the Platform's core functions.
• Functional cookies: Store your preferences such as language settings, table limits, and game lobby layout to personalise your experience.
• Analytics cookies: Collect anonymised data on Platform usage patterns to help us identify performance issues and improve the experience. Data is aggregated and not associated with individual player identities.
• Fraud prevention cookies: Assist in identifying unusual access patterns, detecting automated bot activity, and flagging suspicious session behaviour.

u9agent does not use third-party advertising or cross-site tracking cookies. You may manage or block non-essential cookies through your browser settings; however, disabling strictly necessary cookies will affect Platform functionality.

8 Security Measures

u9agent implements a layered security architecture to protect personal and financial data held on the Platform. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and u9agent servers.
• AES-256 encryption for data stored at rest across all production databases.
• Role-based access controls ensuring that staff can only access personal data necessary for their specific function.
• Multi-factor authentication for internal administrative access to production systems.
• Regular penetration testing and vulnerability assessments by qualified third-party security specialists.
• Continuous monitoring of system logs for anomalous access patterns and potential security events.

While u9agent takes all reasonable measures to protect your data, no system is entirely immune to security risk. You are encouraged to use a strong unique password for your u9agent account and to enable two-factor authentication where available.

9 Your Data Rights

Subject to applicable law and any overriding regulatory retention obligations, you have the following rights in respect of your personal data held by u9agent:

• Right of access: You may request a copy of the personal data u9agent holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no legitimate reason for u9agent to continue processing it, subject to regulatory retention obligations.
• Right to restriction: You may request that u9agent restricts processing of your data in certain circumstances, such as where you contest its accuracy.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests where you believe your rights override those interests.

To exercise any of these rights, contact u9agent customer support. Requests will be acknowledged within 5 business days and fulfilled within 30 days, subject to identity verification and any applicable exemptions.

10 Children's Privacy

u9agent is strictly for adults. The Platform is not directed at, and does not knowingly collect personal data from, persons under the age of 21. Age verification is a mandatory step in the registration and withdrawal process. If u9agent discovers that an account has been created or used by a person under 21, the account will be immediately suspended, all associated data flagged for regulatory review, and any balances held pending investigation.

If you believe a minor has accessed u9agent, please contact our support team immediately so that appropriate action can be taken.

11 International Data Transfers

u9agent's operations involve server infrastructure and service providers that may be located outside Malaysia. Where personal data is transferred internationally, u9agent ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses and assessments of the receiving jurisdiction's data protection standards. u9agent does not transfer data to jurisdictions that do not provide an adequate level of protection without implementing appropriate safeguards.

12 Policy Updates

u9agent reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, regulatory obligations, or platform operations. The date of the most recent revision is displayed at the top of this page. Material changes will be communicated to registered players via account notification or email. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

13 Contact

For any questions, requests, or concerns relating to this Privacy Policy or to the exercise of your data rights, please contact the u9agent data protection team:

• Live Chat: Available 24/7 through your logged-in u9agent account dashboard.
• Email: [email protected]

Please include "Privacy Request" in your subject line to ensure prompt routing to the appropriate team. u9agent aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 days.