Official Platform Documents

Privacy Policy Agent A9 – Personal Data Protection for Malaysian Members

We treat your privacy as a fundamental right, not just a legal compliance requirement. Find out exactly how agent a9 collects, uses, and protects your personal data.

Updated: 1 January 2026  |  Version 2.5

Agent A9's Privacy Commitment – 6 Core Principles

Before reading our full policy, learn about the six core principles that guide how agent a9 handles your personal data.

256-Bit SSL Encryption on All Data

All data transmitted between your device and agent a9's servers is protected with SSL 256-bit encryption — the same security standard used by Malaysia's leading banking institutions, including Maybank and CIMB. No one can intercept your communications with our platform.

Personal Data Protection Act (PDPA) Compliance

Agent a9 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have clear legal rights over your personal data — including the right to access, correct, and request the deletion of that data.

Minimum Data Collection – Only What Is Necessary

Agent a9 only collects data that is strictly necessary to provide the services you request. We do not gather data "just in case" – every data point we retain has a clear purpose, as outlined in this policy.

Full Control Over Marketing Communications

You may opt out of all marketing communications from agent a9 at any time – via the unsubscribe link in emails, your account settings, or by contacting our support team. Your request will be honoured within 48 hours.

Types of Data We Collect & Their Purposes

Transparency is the foundation of trust. Here is the complete list of data collected by agent a9, why we need it, and how long it is retained.

Data Type Example Purpose of Use Retention Period
Identity Full name, date of birth, identification card number Age & identity verification, AML compliance Duration of active account + 5 years
Contact Phone number, email address OTP verification, customer support, notifications Throughout active account + 2 years
Financial Deposit records, withdrawals, payment methods Transaction processing, AML compliance, withdrawal verification 7 years (legal requirement)
Platform Activity Betting history, games played, login timestamps Fraud detection, responsible gaming, product improvement 3 years after account closure
Technical IP address, device type, web browser, session cookies Account security, unusual login detection, platform analytics 90 days (logs) / Until logout (sessions)
Communications Live chat records, support emails, WhatsApp logs Complaint resolution, quality training, proof of settlement 2 years

Retention periods may be extended if required for legal investigations, unresolved disputes, or regulatory requirements.

1

Introduction & Scope of Privacy Policy

This Privacy Policy explains how agent a9 ("we", "platform" or "company") collects, stores, uses, discloses, and protects your personal information when you use the agenta9.xyz website, the agent a9 mobile app, and all related services.

This document is written in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). By registering an account or using any agent a9 service, you consent to the collection and use of your personal data as described in this policy.

Important Note: This Privacy Policy should be read together with Terms & Conditions and policy Responsible Gaming agent a9 that forms the complete agreement between you and our platform. The effective date of the current policy is 1 January 2026.


2

Personal Information We Collect

Agent a9 operates on a data minimisation principle – we only collect information that is strictly necessary to provide a safe, compliant, and high-quality service. The main categories of personal data we collect are as follows:

  • Identity Information: Full name as shown on identification, date of birth, and Malaysian identity card number (MyKad) or passport number for age and identity verification purposes.
  • Contact Information: An active Malaysian mobile number (for OTP and support communications) and a valid email address.
  • Financial Information: Records of all deposits and withdrawals in MYR, payment methods used (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX/Maybank2u, CIMB Clicks), and the payment account holder's name for anti-money laundering (AML) compliance purposes.
  • Platform Activity Information: Betting history, games played, session times and duration, and communication records with our support team.
  • Technical Information: IP address, device type and model, operating system, web browser, language settings, and login session information.

Our Principles: Agent a9 does not collect sensitive information such as your religion, ethnicity, health details, or political views. We only collect what is necessary to operate a safe and legitimate betting platform.


3

How We Collect Your Personal Information

Agent a9 collects your personal data through several primary channels:

  • During Registration: Information you provide during account registration, including your name, phone number, email address, and date of birth.
  • During Identity Verification: Documents you upload for KYC (Know Your Customer) verification purposes, such as a copy of your MyKad or passport when required.
  • While Using the Platform: Activity data automatically generated when you use the platform – including pages visited, bets placed, and login sessions.
  • During Financial Transactions: Information related to your deposits and withdrawals, including payment methods and amounts in MYR.
  • Via Support Communications: Information you share when contacting our support team via live chat, WhatsApp, or email.
  • Through Cookies and Similar Technologies: Technical data collected automatically via cookies, tracking pixels, and server logs when you visit agenta9.xyz.

We do not purchase or obtain your personal data from third-party data brokers or any other external sources.


4

How We Use Your Personal Information

The personal data we collect is used solely for legitimate, stated purposes. The following are the primary purposes for which data is used by agent a9:

  • Account Management: To create, verify, and manage your account on the agent a9 platform, including processing logins, OTP verification, and account recovery.
  • Service Provision: To allow you to place bets, access games, and view match odds for the Malaysia Super League, EPL, badminton, e-sports, and all other available sports.
  • Financial Transaction Processing: To process your deposits and withdrawals in MYR safely and accurately via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
  • Legal Compliance: To fulfill our legal obligations, including anti-money laundering (AML) requirements, age verification, and reporting to the relevant regulatory authorities.
  • Platform Security: To detect, investigate, and prevent fraud, account abuse, and activities that violate our terms of service.
  • Responsible Gaming: To monitor betting activity patterns that may indicate problem gambling, and to take appropriate preventive action including offering self-control tools.
  • Service Communications: To send you important account-related notifications such as transaction confirmations, security alerts, and policy updates.
  • Marketing Communications: To send you information about agent a9's latest promotions, bonuses, and offers – subject to your consent. You may withdraw your consent at any time.
  • Platform Improvement: To analyse aggregated usage patterns and better understand how Malaysian players use the platform, enabling us to make meaningful improvements.

Important: Agent a9 does not use your personal data for any purpose not stated in this policy without first obtaining your additional consent.


5

Personal Data Sharing & Disclosure

Agent a9 does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. However, there are limited circumstances in which we may need to share your data with certain parties:

  • Payment Service Providers: Transaction details required for processing are shared with digital wallet providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay) and Malaysian banks (Maybank, CIMB, and others via FPX) solely to complete your transactions.
  • Technology Service Providers: Server hosting providers, security services, and platform analytics providers that support our technical operations. All such providers are bound by strict confidentiality agreements.
  • Regulatory Bodies & Law Enforcement: Where required by law or a valid court order, agent a9 will disclose the necessary information to the relevant authorities.
  • Identity Verification Services: Approved third-party KYC service providers for the purpose of identity and age verification of new members, subject to strict confidentiality agreements.

In all cases of data sharing with third parties, agent a9 ensures that recipients maintain a level of data protection equivalent to our own standards and use the data solely for the stated purpose.


6

Data Security & Protection Measures

Agent a9 takes security infrastructure seriously to protect your personal and financial data. The key security measures we have in place are:

  • 256-Bit SSL Encryption: All data transmitted between your device and agent a9's servers is protected with SSL 256-bit encryption — the same level of security used by major banks in Malaysia.
  • Data Encryption at Rest: Sensitive data stored in our databases, including financial and identity information, is encrypted using industry-recognised encryption algorithms.
  • Strict Access Controls: Only personnel who require access to specific data to perform their duties are permitted to do so. All access is logged and audited on a regular basis.
  • Two-Factor Authentication (2FA): We offer and encourage the use of 2FA for all member accounts. Internally, staff access to sensitive systems requires multi-factor authentication.
  • 24/7 Security Monitoring: Our systems are continuously monitored for suspicious activity, intrusion attempts, and other security anomalies.
  • Regular Security Audits: agent a9's security infrastructure and policies are regularly audited by independent security experts to ensure they remain effective against the latest threats.

Note: While we take every reasonable precaution, no security system is entirely impenetrable. In the unlikely event of a data breach affecting your information, agent a9 will notify you within 72 hours in accordance with applicable legal requirements.


7

Cookies & Tracking Technologies

The agenta9.xyz website uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze how Malaysian players use our platform. There are several types of cookies in use:

8

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by agent a9. You may exercise these rights at any time by contacting us at support@agenta9.xyz.

Right of Access

You have the right to request and receive a copy of all personal data we hold about you. Requests are processed within 14 business days.

Right to Rectification

If personal data held by agent a9 about you is inaccurate or incomplete, you have the right to request a correction at any time.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements that may prevent full deletion within a certain period.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Your objection will take effect within 48 hours.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

Right to Restrict Processing

In certain circumstances, you may request that agent a9 restrict the processing of your data while a related issue is being resolved.


9

Children's Data Protection

Platform agent a9 is exclusively for individuals aged 18 and above. We do not knowingly or intentionally collect or process personal data from individuals under the age of 18.

If we confirm or have reasonable grounds to believe that personal data we have collected belongs to an individual under 18 years of age, we will:

  • Immediately suspend the associated account
  • Delete all personal data belonging to that individual from our systems
  • Returning any valid balance to the original deposit method

If you are a parent or guardian who believes your child has registered an account with agent a9, please contact us immediately at support@agenta9.xyz. We will take prompt action and ensure the matter is resolved appropriately.

To Parents & Guardians: We encourage you to use parental control software on devices used by your children to prevent access to online gambling websites, including agenta9.xyz.


10

Privacy Policy Amendments

Agent a9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer to Malaysian members.

When material changes are made to this policy, we will notify you through:

  • A clear notification in your account the next time you log in
  • An email to the address registered to your account (for significant amendments)
  • Prominent notice on the agenta9.xyz homepage

The "Updated" date at the top of this policy will always reflect the latest version. Your continued use of the agent a9 platform after any amendment takes effect constitutes acceptance of the updated policy.


11

Contact Us – Privacy-Related Enquiries

If you have any questions or concerns, or wish to exercise your data rights as stated in this policy, please contact our data protection team agent a9 through the following channels:

  • Privacy Email: support@agenta9.xyz (please state "Privacy Inquiry" in the email subject line)
  • Live Chat: Available 24/7 within your account – select "Data Protection" from the topic menu
  • Support WhatsApp: The number listed in the account support section of your account

We are committed to responding to all privacy-related inquiries within 14 business days. For requests that require more detailed review or data processing, we will inform you of a more realistic timeframe if needed.

Our Commitment: The agent a9 team takes every privacy enquiry seriously. You will not be judged or made to feel unwelcome for asking questions about your data – we actively encourage curious members to speak up.

Why Data Privacy Matters When You Play on an Online Betting Platform

When you register with any online betting platform, you are entrusting the company with fairly sensitive information – your full name, phone number, financial details, and your betting activity records. That trust should never be taken lightly, and at agent a9, we fully understand the weight of responsibility that comes with that trust.

One thing we have noticed in this industry is that many Malaysian players are unaware of their rights regarding personal data. They do not know that under Malaysia's Personal Data Protection Act 2010 (PDPA), they have legally protected rights to access, correct, and in certain circumstances, request the deletion of their personal data. At agent a9, we actively educate our members about these rights, because we believe that an informed user is a safer user.

Your Financial Data – Protected at Every Stage of the Transaction

Each time you make a deposit using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX into your agent a9 yours, each transaction passes through multiple layers of protection before it is credited to your balance. First, the connection between your payment app and our platform is secured with SSL 256-bit encryption. Second, your payment account details are not stored directly on agent a9's servers — we use a tokenization system that allows us to process recurring transactions without retaining your full account number in our database. This means that even in the hypothetical scenario of a data breach, your complete payment account information would not be exposed.

All financial transaction records at agent a9 stored in encrypted format and accessible only by authorised personnel for specific purposes such as resolving disputes or meeting statutory reporting requirements. These records are retained for seven years in accordance with Malaysian legal requirements – after which they are securely deleted.

How Agent A9 Uses Your Betting Activity Data

Your betting history records on agent a9 not merely stored for record-keeping purposes — it is actively used to protect you. Our responsible gambling system automatically analyzes betting patterns to identify early signs of potential gambling problems, such as a sudden increase in betting frequency, wagers placed at values far exceeding your usual pattern, or betting behavior that suggests chasing losses. If the system detects such patterns, our team will reach out to you in a sensitive and non-judgmental manner to offer helpful resources.

Your activity records are also used to verify claims in the event of any dispute regarding betting outcomes – this is ultimately there to protect your interests as a member. Aggregated analysis (with no individual identification) helps us understand which sports and markets are most popular among Malaysian players, and to develop platform features that better suit local needs.

Protection Against Identity Theft – Steps You Can Take

In addition to the protective measures taken by agent a9 on our end, there are also steps you can take to protect your own personal data. Enable two-factor authentication (2FA) in your account settings – this means even if someone knows your password, they will still need access to your phone to log in. Use a unique, strong password for your agent a9 account that is different from passwords used on other accounts. Never share your login credentials with anyone – our support team agent a9 will never ask for your password. Always remember to log out of your account when using a shared device.

FAQs – Agent A9 Privacy Policy

Answers to the most frequently asked questions by Malaysian members about how agent a9 protects their personal data.

No. Agent a9 does not disclose your betting information or account activity to any individual or organization without your explicit consent, except in two very limited situations: first, if required by a court order or directive from a legitimate regulatory authority; and second, where there are serious security concerns such as a fraud investigation. In both cases, agent a9 will disclose only the minimum data necessary. Family members, employers, friends, or anyone else requesting your account information will not receive any details from us without your consent.

To request the deletion of your personal data, contact us by email at support@agenta9.xyz with the subject line "Data Deletion Request", or via live chat within your account. Please state clearly that you wish to exercise your right to data erasure under the PDPA. We will process your request within 14 business days. Please note that some data may not be immediately deletable due to legal retention requirements – for example, financial transaction records must be retained for seven years under Malaysian law. In such cases, we will clearly inform you which data can be deleted immediately and which must be retained, along with the applicable retention period.

When you close your agent a9 account, your data is not deleted immediately. Instead, it is retained for a period required by Malaysian law and our compliance obligations – typically between 2 and 7 years depending on the data type. This is a legal requirement we are obligated to follow. However, closed accounts will not be used for any marketing activity, and you will not receive any communications from us after closure. Once the mandatory retention period has ended, your data will be securely and permanently deleted from all our systems. You may request written confirmation of this process at the time of account closure.

Yes, identity documents including copies of your MyKad submitted for KYC verification at agent a9 are handled with the highest level of protection. These documents are stored on secure servers with strict access controls — only staff specifically authorized for identity verification tasks can access them. They are encrypted both at rest and in transit. Once the verification process is complete, original copies of your documents are not retained any longer than necessary. We also do not share images of your identity documents with any third party, except for KYC service providers who are bound by strict confidentiality agreements and act solely as our agents.

This Privacy Policy Should Be Read Together With Other Documents
This Privacy Policy should be read together with Terms & Conditions and policy Responsible Gaming agent a9, which together form the complete agreement between you and our platform. If you have any questions about how we handle your personal data, please do not hesitate to reach us at support@agenta9.xyz. We are always ready to provide clear and honest answers.

Your Data Is Safe. Ready to Get Started with Agent A9?

Over 100,000 Malaysian players trust agent a9 with their data and funds. Register free today and claim your welcome bonus of up to RM1,000 – with full privacy guaranteed.

SSL 256-bit PDPA Compliance Data Not Sold 18+ only
Bahasa Melayu