Privacy Policy 1b9 —
Protection of Your Personal Data

Welcome to the Privacy Policy 1b9. This document explains in detail how we handle your personal data when you use our online gaming platform at 1b9.vin.

This policy applies to all users of the 1b9 platform — including website visitors, registered members, active players, and anyone who interacts with our services via the official website, mobile app, or any other digital channel we operate.

We take our responsibilities under Malaysia Personal Data Protection Act 2010 (PDPA). All personal data processing we carry out is based on a lawful basis — whether your consent, contractual necessity, legal obligation, or legitimate interests we hold as the platform operator.

If you have any questions about how we handle your data, our Data Protection Officer (DPO) team is ready to assist through the channels listed at the end of this document.

We collect various types of personal information depending on how you interact with the 1b9 platform. Below are the main categories of data we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, religious beliefs, or political views unless you voluntarily disclose them in specific contexts, such as a responsible gaming self-exclusion programme.

The personal data we collect is used responsibly for the following purposes:

• Account Management: Creating, verifying, and maintaining your user account, including processing password change requests and updating profile information.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions on the 1b9 platform securely and accurately.
• Identity Verification (KYC): Verifying your identity to ensure compliance with anti-money laundering (AML) legal requirements and financial compliance obligations.
• Platform Security: Detecting and preventing fraudulent activity, hacking, account abuse, and other security threats that could affect the platform or other users.
• Service Improvement: Analysing how users interact with the platform to improve design, performance, and the overall experience.
• Service Communications: Sending important notices related to your account, transactions, policy updates, and critical security information.
• Opted-In Marketing: Sending promotional offers, bonus information, and platform news — only to users who have given explicit consent.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate intervention or support.

1b9 does not sell your personal data to any third party. However, in the course of operating the platform, we share necessary data with selected parties under limited and controlled circumstances:

• Payment Processors: Approved payment providers such as local banks, e-wallet operators, and card processors receive only the minimum transaction data required to process your payment securely.
• Identity Verification Providers: Trusted third-party KYC partners assist us in verifying your identity documents. All such partners are bound by strict data protection agreements.
• Technology Providers: Companies that provide the technical infrastructure, cloud services, and analytics tools we use to operate the platform — all bound by data processing agreements.
• Statutory Authority: Where required by law, court order, or direction from a legitimate regulatory authority, we will disclose the necessary data to the relevant government body.
• Fraud Management: In cases of confirmed fraud, we may share relevant information with financial institutions or law enforcement authorities for investigation purposes.

All third parties we work with are required to uphold data protection standards equivalent to our own, and are prohibited from using your data for any purpose beyond what is specified in our agreements with them.

The 1b9 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting information about how visitors use the platform — pages visited, time spent, and errors encountered — to help us improve performance.
• Functional Cookies: Remembering your preferences and settings such as preferred language, currency denomination, and display settings to provide a more personalised experience.
• Analytics Cookies: Helping us understand aggregate, anonymised usage patterns to make better-informed platform improvement decisions.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of the 1b9 platform. For detailed guidance on managing cookies, please refer to your web browser's help documentation.

We invest seriously in security infrastructure to ensure your personal data is protected at every stage — during transmission, during processing, and during storage:

• Transmission Encryption: All communications between your browser and the 1b9 servers are secured with TLS 1.3 protocol — the latest available encryption standard.
• Storage Encryption: Sensitive data such as financial information and identity documents is stored in encrypted format using AES-256 on our servers.
• Layered Access Control: A role-based access control (RBAC) system ensures that only specifically authorised staff can access particular data categories, and all access is logged for audit purposes.
• Two-Factor Authentication: All 1b9 internal admin accounts are required to use two-factor authentication (2FA), and we encourage players to do the same.
• Penetration Testing: Our platform undergoes regular security testing and vulnerability scanning by independent cybersecurity experts.
• Incident Response Plan: We have a comprehensive security incident response procedure in place. Should a data breach occur that affects you, we will notify you within the timeframe required by law.

We retain your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal and regulatory requirements. Our general principles are as follows:

• Active Account Data: Retained for the duration your account is active and for a specified period after account closure to facilitate account reinstatement requests if needed.
• Financial Transaction Records: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in line with AML compliance requirements.
• Security Logs: Technical log data is retained for 12 to 24 months for fraud detection and security incident investigation purposes.
• Marketing Data: Retained until you withdraw your consent, after which it will be deleted within 30 days.

When data is no longer needed and there is no legal requirement to retain it, we will securely delete or anonymise it using industry-recognised methods.

Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding the personal data we hold about you:

The 1b9 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge — whether through identity misrepresentation or other means — we will take immediate action to delete that data and terminate the associated account. Parents or guardians who believe their child may have registered on our platform are encouraged to contact us promptly.

We may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Each new version will carry a clear "Updated" date at the top of this document.

For material amendments that significantly affect your privacy rights, we will notify you via registered email or a prominent in-platform notice at least 14 days before the amendment takes effect. Continued use of the platform after the effective date constitutes your acceptance of the revised policy.

If you have any questions, concerns, or wish to exercise your personal data rights, please contact the 1b9 Data Protection Officer (DPO) through the following channels:

We are committed to resolving any privacy concerns you may have in a fair and transparent manner. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Department of Malaysia or the relevant regulatory body in your country.