Official PDPA Document

Privacy Policy ufo9
Data Protection & Member Security

Ufo9 takes every member's privacy seriously. This document clearly explains how we collect, store, protect and use your personal data — in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
256-bit SSL Encryption
PDPA Full Compliance
0 Sale of Data to Third Parties
24/7 Security Monitoring

How ufo9 Protect Your Privacy

We have built a multi-layered data protection system to ensure your personal information remains secure and is never misused.

End-to-End Data Encryption

All data transmitted between your device and ufo9 servers is protected with 256-bit SSL encryption — the same security standard used by major banks in Malaysia. No one can intercept your information in transit.

Strict Access Control

Members' personal data is accessible only to specifically authorised ufo9 staff and solely for designated purposes. All access is automatically logged and monitored to prevent any internal misuse.

Secure Data Storage

All member personal data is stored in certified data centres equipped with multi-layered physical and digital protection. Our servers perform regular automated backups and are fully encrypted to prevent data loss or leakage.

No Sale of Personal Data

Ufo9 has never and will never sell, rent or trade member personal data to any third party for marketing or commercial purposes. Your data belongs to you — we only use it to provide you with the best possible service.

Malaysia PDPA Compliance

The ufo9 privacy policy is fully drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure every data collection and processing activity has a clear and transparent legal basis.

Data Breach Notification

In the event of any security incident involving your data, ufo9 is committed to notifying you in a timely manner in accordance with our established incident response procedures, including the remediation steps taken.


1

Information Collected by ufo9

As an online gaming platform operating in Malaysia, ufo9 collects personal data from members for legitimate and transparent purposes. We only collect information that is strictly necessary to provide a safe, fair and legally compliant service.

There are two main categories of data we collect:

A. Information You Provide Directly

  • Registration Information: Full name, date of birth, identification number (MyKad/Passport), mobile number, email address, and encrypted password.
  • KYC (Know Your Customer) Information: A copy of your official identification document (front and back of MyKad), a selfie with the document, the last three months' bank statements, and proof of residential address.
  • Financial Information: Bank account details for withdrawals, digital wallet phone numbers (TNG eWallet, GrabPay), and a full record of all deposit and withdrawal transactions.
  • Communications: Any messages, complaints, feedback or enquiries you send to the ufo9 customer support team via Live Chat, email or any other communication channel provided.

B. Information Collected Automatically

  • Device & Connection Data: IP address, browser type, operating system, device model, screen resolution, and unique device identifiers.
  • Gaming Activity Data: Game session records, login/logout dates and times, games played, total wagering amount, wins and losses.
  • Navigation Data: Pages visited within the ufo9 platform, time spent, referral source (how you discovered ufo9), and platform usage patterns.
  • Cookie Data: Session cookies, preference cookies, and analytics cookies that help us understand how members use the platform for continuous improvement purposes.

Data Minimisation Principle: ufo9 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data or health information unless required by law.

2

How ufo9 Uses Your Personal Data

Collected data is used solely for legitimate, stated purposes. ufo9 will not use your data for any other purpose without first obtaining your consent.

Purpose of Use Data Type Legal Basis
Service Provision
Managing accounts, processing deposits & withdrawals
Registration information, financial data Contractual compliance
Identity Verification (KYC)
Verifying member identity in accordance with the law
Identity documents, KYC data Legal obligation
Fraud Prevention & AML
Detecting and preventing illegal activity
Transaction records, activity data Legitimate interests & legal obligations
Customer Support
Resolving member complaints and enquiries
Communication data, account records Contractual compliance
Platform Improvement
Usage analytics to improve your experience
Navigation data, device data Legitimate interests
Marketing Communications
Promotional information and exclusive offers (with consent)
Email, phone number Member consent

Right to Withdraw Consent: For marketing communications, you have the right to withdraw your consent at any time by contacting our support team or using the unsubscribe link in any email we send.

3

Disclosure of Data to Third Parties

Ufo9 does not sell, rent or disclose member personal data to third parties for commercial purposes. However, in the course of our business operations, there are specific situations where we need to share data with selected and trusted parties.

  • Payment Service Providers: FPX, DuitNow, TNG eWallet, GrabPay, and the banks involved in processing your deposit and withdrawal transactions. This data sharing is necessary to complete your financial transactions.
  • Identity Verification Service Providers: Certified companies that perform KYC checks and document verification on our behalf in accordance with legal requirements.
  • Game Providers: Third-party game developers providing game content on the ufo9 platform may receive the minimum data required to run the games, such as anonymised member identifiers.
  • Statutory Authority: ufo9 will disclose data when required by Malaysian law, court order, or a request from a competent authority such as PDRM, BNM or other relevant agencies.
  • Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations may access certain data in the context of legal or financial advisory services.

All third parties granted access to ufo9 member data are required to comply with data protection standards equivalent to or higher than our own. Binding data protection agreements are signed with every third-party partner.

4

Data Security Measures

Ufo9 continually invests in the latest security infrastructure to ensure member personal data is protected at all times. Our security systems are designed with multiple layers to provide comprehensive protection.

  • 256-bit SSL Encryption: All communications between your browser/app and ufo9 servers are encrypted using TLS 1.3 protocol with 256-bit encryption keys — the highest standard in the financial and gaming industry.
  • Encryption of Stored Data: Sensitive data such as banking information and identity documents is encrypted at rest in our database using AES-256 encryption.
  • Two-Factor Authentication (2FA): ufo9 supports two-factor authentication for member accounts to add an extra layer of security during login.
  • 24/7 Security Monitoring: The ufo9 IT security team monitors our systems around the clock to detect any suspicious activity or unauthorised access attempts in real time.
  • Regular Security Audits: Comprehensive security assessments are conducted periodically by independent third-party auditors to identify and address any system vulnerabilities.
  • Network Isolation: Database servers are isolated from public networks using multi-layered firewalls and strict role-based access controls.

Shared Responsibility: While ufo9 takes all reasonable security measures, you also play an important role in protecting your account. Ensure your password is strong, unique and not shared with anyone.

5

Cookies & Tracking Technologies

Ufo9 uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns, and ensure the security of your login session. The use of cookies is standard practice across websites and online platforms.

  • Session Cookies (Required): Required to maintain your login status during an active session and ensure transaction security. These cookies cannot be disabled without affecting the platform's core functionality.
  • Preference Cookies: Saves your preferences such as language, display settings, and game preferences so you do not need to reset them every time you log in.
  • Analytics Cookies: Helps us understand how members use the platform — which pages are most popular, how long sessions last, and where members encounter difficulties — for continuous improvement purposes.
  • Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect your account from cyberattacks such as CSRF (Cross-Site Request Forgery).

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality and user experience of the ufo9 platform. For more information on managing cookies, refer to your browser's documentation.

6

Cross-Border Data Transfers

In certain situations, your personal data may be processed or stored outside Malaysia — for example, when we use cloud computing services or international technology providers. ufo9 ensures that any such data transfer is carried out in compliance with Malaysia's PDPA requirements.

  • Equivalent Protection: Data is only transferred to countries or parties that provide a level of data protection equivalent to or higher than that required under Malaysia's PDPA.
  • Data Transfer Agreements: A binding contract is signed with every party that receives cross-border data transfers, protecting your rights.
  • Data Minimisation: Only data genuinely required for the specific service purpose will be transferred — not your entire data profile.

Your Rights: You have the right to request further details about any cross-border transfer of your data by contacting our data protection officer.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by ufo9. We are committed to facilitating the exercise of these rights.

Right of Access
Request a copy of the personal data we hold about you in a readable format.
Right to Rectification
Request correction of any inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Object to Processing
Object to the processing of your data for specific purposes such as direct marketing.
Right to Data Portability
Request your data in a structured format that can be transferred to another platform.
Right to Restriction of Processing
Request a temporary restriction on data processing in certain situations while a dispute is being resolved.

To exercise any of the above rights, please contact the ufo9 customer support team via Live Chat or email. We will process your request within 21 business days. In some cases, we may require additional identity verification before processing your request to safeguard data security.

8

Data Retention & Deletion Period

Ufo9 does not retain personal data longer than necessary for the purpose it was collected, or beyond the period stipulated by applicable Malaysian law.

  • Active Account Data: Retained throughout the active membership period and continuously used to deliver our services.
  • KYC & Financial Transaction Data: Retained for a minimum of seven (7) years after account termination in accordance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
  • Communication Records: Customer support chat logs are retained for three (3) years for reference and dispute resolution purposes.
  • Log & Security Data: System and security logs are retained for twelve (12) months for security incident investigation and threat monitoring purposes.
  • After Account Termination: Personal data no longer required to be retained by law will be securely deleted or anonymised once the minimum retention period has expired.

Important Note: Even after you close your ufo9 account, certain data may need to be retained for a specified period in accordance with legal obligations. ufo9 will inform you of the applicable retention period when you request account closure.

9

Children's Privacy

The ufo9 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store or process any personal data from minors.

If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered on our platform are encouraged to contact us immediately.

Minor Protection: ufo9 employs an age verification system during the KYC process. Any account confirmed to have been registered by a minor will be terminated immediately and reported to the relevant authorities.

10

Changes to This Privacy Policy

Ufo9 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

Any material changes to this Privacy Policy will be communicated to you via in-platform notifications, an email to your registered address, or a prominent notice on the ufo9 website at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last revised. Your continued use of the ufo9 platform after changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account.

11

Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding how ufo9 handles your personal data, or to exercise your rights as a data subject, please contact us through the following channels:

  • Customer Support: Live Chat 24/7 is available directly within the ufo9 platform.
  • Official Email: [email protected]
  • Response Time: We aim to respond to all privacy-related enquiries within 3 business days.

Official Complaints: If you are not satisfied with our response, you have the right to lodge a formal complaint with the Department of Personal Data Protection (JPDP) Malaysia through their official website.


Your Data Secure — Enjoy the Ultimate Gaming Experience

Ufo9 ensures your privacy and security are always protected. Register now and experience a gaming platform trusted by thousands of members across Malaysia.

PDPA-Protected Data SSL 256-bit Trusted Platform 24/7 Support
Bahasa Melayu