Ipay9 Privacy Policy

ipay9 (operating under the domain ipay9.vin) values the privacy of every user who trusts our platform. This Privacy Policy was established to provide full transparency on how we handle your personal data — from the moment you first visit our website to when you become an active member using our services every day.

We understand that trust is the foundation of the relationship between a platform and its users. That is why we are committed to hiding nothing behind complex legal language. This document is written in plain language so you know exactly what happens with your information.

This Privacy Policy applies to all services provided by ipay9, including the main website, mobile app (iOS and Android), all games within the platform, and any communications we send to you via email, SMS, or app notifications.

We only collect data that is genuinely necessary to provide you with a safe, seamless, and satisfying service. Below are the categories of data we collect along with the purpose of collection:

All data is collected directly from you during registration, during your use of the platform, or through your interactions with our customer support team. We do not purchase or obtain your data from third-party data brokers.

The data we collect is used solely for legitimate purposes necessary to ensure the platform ipay9 functions properly and securely for all users. The following are the main purposes for which your data is used:

• Account Management: Creating and maintaining your user account, processing registration, login, and password resets.
• Transaction Processing: Securely verifying and processing all deposits and withdrawals via DuitNow, FPX, and other local payment methods.
• Identity Verification (KYC): Verifying your identity to meet anti-money laundering (AML) compliance and fraud prevention requirements.
• Service Improvement: Analysing aggregated usage patterns to improve user experience, identify technical issues, and develop new features.
• Important Communications: Sending account-related notifications, security updates, and important information about our services.
• Responsible Gaming: Monitoring gaming patterns to identify early signs of problem gambling and providing appropriate support to users who need it.
• Marketing Communications: Sending offers, promotions, and bonus information — only to users who have given consent to receive such communications.

ipay9 does not share your personal data with external parties except in the following limited situations, each of which has a solid legal or operational basis:

• Payment Processors: Required transaction details are shared with licensed payment processors such as the FPX gateway and DuitNow providers to enable deposits and withdrawals to be processed securely.
• Game Software Providers: Game session data is shared with our licensed game platform providers solely to enable games to function properly.
• Regulatory Authorities: We will disclose data when required by law, court order, or direction from a competent authority in Malaysia.
• Technical Service Providers: Our cloud service and technical infrastructure providers may have limited access to data necessary to carry out their operations, subject to strict confidentiality agreements.

All third parties we work with are required to meet data security standards equal to or exceeding our own. We never share your data with advertisers, data brokers, or any other party for commercial purposes.

We invest seriously in security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we employ include:

• 256-bit SSL Encryption: All communications between your device and ipay9 servers are encrypted using the latest TLS protocol, making your data unreadable to unauthorised parties even if intercepted.
• Layered Access Control: Only staff with a legitimate operational need are granted access to user data, and every access is recorded and actively monitored.
• Two-Factor Authentication (2FA): Our internal management system requires 2FA for all access to sensitive user data.
• 24/7 Monitoring: Our cyber threat detection system operates around the clock to identify and respond to any suspicious activity before it affects users.
• Regular Security Audits: We conduct penetration testing and security audits on a regular basis by independent third-party experts.

Website and app ipay9 uses cookies and similar tracking technologies to enhance your experience. The following are the types of cookies we use:

Essential and Security Cookies are mandatory for the platform to function properly and cannot be disabled. Preference and Analytics Cookies can be managed through your web browser settings. Please note that disabling certain cookies may affect specific features within the platform.

As a user ipay9, you have the following rights regarding your personal data, in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, you may access your account settings or contact the ipay9 customer support team. Requests will be processed within 30 business days.

ipay9 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law.

• Active Account Data: Retained for as long as your account remains active and you continue to use ipay9 services.
• Financial Records Data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's tax and AML legal requirements.
• Closed Account Data: After your account is closed, your personal data will be deleted or anonymised within 90 days, except for data that must be retained for legal reasons.
• Security Logs: Activity log records are retained for 12 months for security investigation purposes when required.
• Customer Support Records: Support conversations and tickets are retained for 24 months for reference and service improvement purposes.

When the retention period expires or you request deletion, your data will be securely erased using methods that ensure it cannot be recovered.

ipay9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

When we make significant changes, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Sending email notifications to all registered users informing them of the changes.
• Displaying a clear notice on the platform's home page for at least 14 days before the changes take effect.

Continued use of the platform ipay9 after any Privacy Policy changes take effect will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before those changes take effect.

We recommend you review this page periodically, at least once every six months, to ensure you are always aware of how we handle your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

For formal privacy-related complaints, please submit full details via email. We will acknowledge receipt of your complaint within 48 hours and provide a full response within 14 business days. If you are not satisfied with our response, you have the right to refer your complaint to the Personal Data Protection Department of Malaysia.