Compliant with Malaysia's PDPA 2010

Privacy Policy S9Asia – Personal Data Protection for Malaysian Players

S9asia values your privacy. This document transparently explains how we collect, use, store and protect your personal data in accordance with the Personal Data Protection Act Malaysia 2010 (PDPA 2010). Keeping your information secure has been our priority from day one.

Last updated: 1 January 2026  ·  Effective immediately
256-bit SSL Encryption PDPA 2010 Compliant No Sharing Without Consent
Our Privacy Commitment

The Six Data Protection Principles We Uphold

S9Asia doesn't just comply with the law — we go beyond the minimum requirements to ensure your data is truly safe in our hands.

Bank-Grade Encryption

All data transmitted between your device and s9asia's servers is protected by 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks. Data is stored in AES-256 encrypted format on servers protected by multiple layers of security.

PDPA 2010 Compliant

S9Asia is fully compliant with the Malaysian Personal Data Protection Act 2010 (PDPA 2010). This means we only collect data that is strictly necessary, process it solely for legitimate purposes, and ensure you always have control over your information.

No Sharing Without Consent

Your personal data will never be sold, rented, or shared with any third party for marketing purposes without your explicit consent. S9Asia only shares the data necessary with service providers directly involved in the operation of the platform.

Your Data, Your Control

As an s9asia player, you have the full right to access, correct, update or request deletion of your personal data at any time. Contact our support team and we will process your request within 14 business days.

24/7 Security Monitoring

The s9asia cybersecurity team monitors our systems around the clock to detect and prevent any unauthorised access attempts. Should a security incident involving your data occur, we will notify you within 72 hours.

Limited Data Retention

S9asia does not retain your data for longer than is necessary for the stated purposes. Accounts that have been inactive for more than five years will be automatically anonymised or deleted, subject to applicable legal record-keeping requirements in Malaysia.

Your Rights

Your Rights as an s9asia Player Under PDPA

The Personal Data Protection Act Malaysia 2010 grants you these important rights. s9asia is committed to respecting and facilitating the exercise of all these rights.

Right of Access

You have the right to request a copy of all personal data that s9asia holds about you. We will provide this information within 21 days of receiving your request.

Right to Rectification

If any personal data held by s9asia about you is inaccurate, incomplete or out of date, you have the right to request an immediate correction at no charge.

Right to Withdraw Consent

You may withdraw your consent to the processing of your personal data at any time. Withdrawal does not affect the validity of any processing that took place prior to that point.

Right to Opt Out of Marketing

You may opt out of receiving marketing communications from s9asia at any time via the unsubscribe link in any email or through your account settings.

1Scope & Introduction to the Privacy Policy

This Privacy Policy ("Policy") is published by s9asia and applies to all users who access or use the s9asia platform via the website https://s9asia.best, the mobile app or any other s9asia service channel. By registering an account or using the s9asia platform, you consent to the collection and processing of your personal data as described in this Policy.

S9asia is a digital entertainment platform offering Sports Betting, slot games, Live Casino and virtual sports services exclusively for Malaysian users. In operating our platform, we need to collect certain personal data from you to provide a safe, fair and high-quality experience. We understand that privacy is a fundamental right, and we take this responsibility very seriously.

This Policy is drafted in accordance with the Personal Data Protection Act Malaysia 2010 (PDPA 2010) and international best practices in data protection. It explains what data we collect, why we need it, how we use it, who can access it, and what rights you have over it. If you have any questions after reading this Policy, please contact the s9asia support team at support@s9asia.best.

Important Note: This Privacy Policy forms part of and should be read together with Terms & Conditions s9asia. In the event of any conflict, the Terms & Conditions shall prevail over this Privacy Policy, except where it concerns data protection rights under PDPA 2010.

2Personal Data We Collect

S9Asia collects personal data from you in several ways — directly when you register and use the platform, automatically through technologies such as cookies, and in some cases from trusted third parties. Below are full details of the types of data we collect:

Registration & Identity Data:

  • Full name as per your identification document
  • Date of birth (for 18+ age verification)
  • Malaysian identity card or passport number
  • Active email address
  • An active Malaysian mobile number
  • Current residential address

Financial & Payment Data:

  • Payment method information used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, ShopeePay) — we store only transaction identifiers, not your full account details
  • MYR deposit and withdrawal records
  • Financial transaction history within the s9asia platform

Usage & Technical Data:

  • IP address and approximate location based on IP
  • Device type, operating system and browser used
  • Game and betting history within the s9asia platform
  • Login and logout activity logs
  • Cookie and session data (further details in Section 6)
Data Minimisation Principle: S9Asia only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs or political views.

3Purpose of Data Collection

S9Asia uses the personal data collected for the following purposes. We only process your data for legitimate purposes directly related to providing you with the s9asia platform's services.

Purpose of Processing Legal Basis Data Used
Identity & age verification at registration Contractual requirements & legal obligations Name, IC/Passport, date of birth
Processing of deposits & withdrawals in MYR Contractual necessity Payment information and transaction records
Provision of Sports Betting, slots & Live Casino services Contractual necessity Game history, account data
Customer support communications Contractual necessity & legitimate interests Email address, phone number
Fraud prevention & platform security Legitimate interests & legal obligations IP address, activity logs, device data
Anti-Money Laundering (AML) compliance Legal obligations Financial records, identity information
Marketing & promotions (with your consent) Your consent Email address, phone number, gaming preferences
Product improvement & platform analytics Legitimate interests Anonymised usage data

We will not process your data for any purpose other than those stated above without notifying you in advance and, where required, obtaining your fresh consent.

4Data Sharing & Disclosure

S9Asia does not sell, rent or trade your personal data to any third party for their own purposes. However, in the course of operating the platform, we share necessary data with the following parties only:

Trusted Third-Party Service Providers: These parties assist us in delivering the s9asia platform's services and are bound by strict data protection agreements to use your data solely for purposes specified by s9asia:

  • Payment Gateway Providers: To process deposits and withdrawals in RM via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay. Only the minimum financial data required to process each transaction is shared.
  • Game Software Providers: Companies such as Pragmatic Play, Play'n GO, and Evolution Gaming receive the minimum session data required to deliver the gaming experience to you. These providers hold international licences and are subject to international data protection standards.
  • Cloud & Infrastructure Service Providers: s9asia's servers and infrastructure are operated by licensed cloud service providers that comply with international security standards. All data is stored in an encrypted environment.
  • Identity Verification Service Providers: To meet KYC (Know Your Customer) verification requirements for the prevention of fraud and money laundering.

Statutory Authority: S9Asia may disclose your personal data to law enforcement agencies, courts or Malaysian regulatory authorities where required to do so by law or a valid court order. In such situations, we will endeavour to notify you in advance unless prohibited by law.

Please note: s9asia never discloses your account password to anyone, including s9asia staff. Passwords are stored in an irreversible hashed format. If anyone claims to be an s9asia staff member and asks for your password, this is a fraudulent attempt.

5Security & Data Storage

S9Asia implements robust technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. The following are the key security measures we have in place:

Technical Security Measures:

  • Transit Encryption: All communications between your device and s9asia's servers are secured by TLS 1.3 with a 256-bit SSL certificate — the highest standard used in banking and digital finance.
  • Storage Encryption: Personal data is stored in AES-256 encrypted format on servers protected by multiple layers of firewalls.
  • Role-Based Access Control: Only s9asia staff with a legitimate business need may access your personal data, and only the data relevant to their specific role.
  • Two-Factor Authentication: s9asia's internal systems use two-factor authentication (2FA) for all administrative access to databases containing personal data.
  • Regular Security Scanning: Our cybersecurity team conducts regular penetration testing and security audits to identify and address any vulnerabilities.

Data Retention Period: S9Asia retains your personal data for as long as your account remains active, and for the required periods following account closure as outlined below:

  • Financial and transaction records: Minimum 7 years from the transaction date, in line with Malaysian accounting and tax legal requirements
  • Gaming and betting records: 5 years from the date of activity for dispute resolution purposes
  • Security and access logs: 2 years for security investigation purposes
  • Customer support communication data: 3 years after case resolution

Once the retention period expires, your data will be permanently anonymised or securely deleted using methods that ensure it cannot be recovered.

6Cookies & Tracking Technologies

The s9asia platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and help us understand how users interact with our platform. Below is an explanation of the types of cookies we use:

Required Cookies (Mandatory): These cookies are essential to the core functionality of the s9asia platform and cannot be disabled. They include:

  • Session Cookies: Maintaining your login session so you do not need to sign in again each time you navigate to a different page on the platform.
  • Security Cookies: To help detect and prevent fraudulent activity and unauthorised access to your account.
  • Language Preference Cookies: Saving your language preferences and interface settings.

Performance & Analytics Cookies: These cookies collect information about how you use the s9asia platform, such as the pages you visit most often and the time spent in each section. This information is used in aggregated and anonymised form to help us improve the user experience. You may disable these cookies through your browser settings, though doing so may affect certain platform functions.

Marketing Cookies: Where you have given your consent, we use marketing cookies to show you s9asia advertisements and promotions more relevant to your preferences. You may withdraw this consent at any time through your account settings or by contacting s9asia customer support.

Managing Cookies: Most web browsers allow you to control cookies through your browser settings. However, disabling required cookies may affect the functionality of the s9asia platform, including potentially being unable to log in or place bets correctly.

7Your Rights Under PDPA 2010

The Malaysian Personal Data Protection Act 2010 (PDPA 2010) grants you certain rights regarding your personal data processed by s9asia. S9Asia is committed to helping you exercise these rights easily and within a reasonable timeframe.

Right of Data Access: You have the right to request and receive a copy of all personal data that s9asia holds about you. Data access requests can be submitted by email to support@s9asia.best. S9Asia will process such requests within 21 days of receiving a complete request. A reasonable administrative fee may be charged for repeated or extensive requests.

Right to Data Rectification: If any personal data held by s9asia about you is inaccurate, incomplete or out of date, you have the right to request a correction at no charge. Some corrections, such as your display name, can be made directly through your s9asia account settings. For corrections that require document verification, such as an official name change, please contact our support team.

Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw your consent at any time. Withdrawal does not affect the validity of any processing that took place prior to it. Certain data processing is required for the provision of our services and cannot be withdrawn without closing your account.

How to Submit a Data Rights Request:

  • Email support@s9asia.best with the subject line "PDPA Data Rights Request"
  • Include your full name, registered phone number and type of request
  • Identity verification may be required before we process your request
  • S9asia will respond within 14 business days

8Payments & Financial Privacy

S9Asia takes an extremely careful approach to the privacy of your financial information. All transactions on the s9asia platform are conducted in Malaysian Ringgit (MYR) only. We do not store your full bank account details or credit card numbers — all payments are processed through licensed, secure third-party payment gateways.

When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost or ShopeePay, your transaction is processed directly by the respective payment platform using their own security protocols. S9Asia only receives a transaction success confirmation and a unique transaction identifier — we do not view or store your e-wallet or online banking login credentials.

In accordance with Malaysia's Anti-Money Laundering laws and KYC (Know Your Customer) requirements, s9asia retains records of all financial transactions for a minimum of seven years. These records may be disclosed to the relevant authorities where required by Malaysian law.

Additional Verification for Your Security: For withdrawals above a certain amount, s9asia may request additional identity verification. This is a security measure to protect your funds from unauthorised use — not to obstruct legitimate withdrawals.

9Policy Amendments & Contact Us

S9Asia reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. When we make material amendments, we will notify you via an in-platform notice on s9asia or by email to your registered address at least 14 days before the changes take effect.

Your continued use of the s9asia platform after any amendments to this Privacy Policy take effect will be deemed as your acceptance of the revised policy. If you do not agree with the changes and do not wish to accept them, you must stop using the platform and may request the closure of your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this document will always reflect the latest version in effect.

For any enquiries, complaints or requests relating to this Privacy Policy, please contact the s9asia Data Privacy Officer:

  • Email: support@s9asia.best (Subject: "Privacy Policy Enquiry")
  • Live Chat: Available within the s9asia platform, 24 hours a day, 7 days a week
  • WhatsApp: Number provided within the platform after login

Our team is committed to responding to all privacy-related enquiries within 14 business days. For complaints that cannot be resolved internally, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions. The Malay language version is the official binding version.

Quick Navigation

Have questions about your data privacy? Get in touch with us.

support@s9asia.best
PDPA 2010 Protected

Your personal data is processed in accordance with the Personal Data Protection Act Malaysia 2010.

S9Asia Data Security Commitment

All your personal data, MYR transaction records and account information on s9asia are protected by AES-256 and 256-bit SSL encryption. s9asia does not share your personal information with any third party without your written consent, in compliance with PDPA 2010. For privacy-related enquiries, email us at support@s9asia.best.

Your Data Is Safe with S9Asia

Join S9Asia – The Malaysian Betting Platform That Protects Your Privacy

Register for free today and enjoy peace of mind knowing your personal data is protected by bank-grade encryption and processed in accordance with PDPA 2010. Minimum deposit RM10 via Touch 'n Go, GrabPay or DuitNow.

SSL 256-bit PDPA 2010 Compliant No Data Selling 24/7 Support
Bahasa Melayu