Vr9 Privacy Policy – Your Personal Data Security Is Our Priority

1 Introduction and Scope of This Policy

Vr9 ("we", "Platform", "vr9.onl") is committed to protecting the privacy and security of all users' personal information. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This document details the types of information we collect, how it is used, who may access it, and your rights as a data subject. We believe transparency is the foundation of trust, and the relationship we build with our members depends entirely on that trust.

This policy covers all your interactions with vr9, including use of the website at vr9.onl, the vr9 mobile app, customer support services, and any official communications between you and our team.

2 Types of Personal Data We Collect

We only collect data that is strictly necessary to provide a safe, efficient, and legally compliant service. The categories of data we collect are as follows:

We not collect sensitive information such as biometric data, medical records, or credit card details directly — all payments are processed through third-party payment gateways with their own PCI-DSS security standards.

3 How We Collect Your Data

Your personal data is collected through the following channels:

• Account Registration: When you complete the registration form on vr9, basic information such as your name, email, and phone number is collected directly from you.
• KYC Verification: To process your first withdrawal, we require a valid identity document to meet anti-money laundering (AML) requirements.
• Platform Activity: Our systems automatically log game activity, transactions, and usage patterns to ensure account security and detect unusual activity.
• Customer Support: When you contact our support team via live chat, email, or Telegram, conversation records are retained for quality control and future reference purposes.
• Cookie Technology: The vr9 platform uses cookies and similar tracking technologies to improve user experience and analyse website performance.
• Third-Party Sources: In certain cases, we may receive additional information from licensed identity verification providers or fraud prevention agencies.

4 Purpose of Personal Data Use

Vr9 uses collected personal data solely for legitimate purposes directly related to the provision of our services:

• Account Management: Creating and managing your member account, processing deposits and withdrawals, and maintaining transaction records.
• Identity Verification: Ensuring you meet the age eligibility requirements and verifying your identity prior to processing financial transactions.
• Platform Security: Detecting and preventing fraud, account abuse, hacking attempts, and money laundering activities.
• Service Improvement: Analysing usage patterns to improve platform features, introduce new games, and optimise the user experience.
• Official Communications: Sending transaction notifications, account updates, promotional information (with your consent), and important security alerts.
• Legal Compliance: Meeting reporting obligations to relevant authorities and complying with valid court orders.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance to members who need it.

5 Data Sharing with Third Parties

Vr9 does not sell or disclose members' personal information to third parties for their commercial purposes. However, in the course of platform operations, we may share data with the following categories of third parties on a limited and controlled basis:

• Payment Providers: Payment gateways and financial institutions required to process your deposits and withdrawals. They receive only the minimum data necessary for the relevant transaction.
• Game Providers: Third-party game software companies that provide game content on the vr9 platform. Data shared is limited to game session information only.
• Identity Verification Providers: A licensed KYC service that helps us verify member identities in accordance with AML legal requirements.
• Regulatory Authority: Regulatory bodies, law enforcement agencies, or courts when we are legally required to do so by law or a valid court order.
• Technology Providers: Technology infrastructure companies such as cloud hosting services required for platform operations, subject to strict confidentiality agreements.

All third parties we work with are required to comply with data protection standards equal to or higher than those we apply ourselves.

6 Data Security Measures

We invest seriously in security infrastructure to ensure your data is always protected against cyber threats. The security measures we implement include:

• Data Encryption in Transit: All communication between your browser and vr9 servers is secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive information such as passwords and financial data is stored in encrypted format using irreversible hashing algorithms.
• Strict Access Control: Only authorised staff with a legitimate operational need may access member personal data, and all access is logged and audited.
• 24/7 Monitoring: Automated monitoring systems operate around the clock to detect and respond to security threats or suspicious access.
• Periodic Security Testing: vr9 conducts regular penetration testing and security audits by independent cybersecurity firms.
• Two-Factor Authentication (2FA): An additional security layer is available and strongly encouraged for all member accounts to prevent unauthorised access.
• Incident Response Plan: We have established procedures to respond swiftly in the event of any data breach, including notifying affected parties within the required timeframe.

7 Data Retention Period

Vr9 retains members' personal data only for as long as necessary for the purposes stated in this policy or as required by applicable law:

• Active Account Data: Retained for the duration your account is active, plus a 90-day cooling-off period after account closure to facilitate account reopening if needed.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial and AML regulatory requirements.
• KYC Records: Retained for a minimum of 5 years after the termination of the business relationship, in accordance with anti-money laundering requirements.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: Anonymised usage data may be retained indefinitely as it cannot be attributed to any specific individual.

Once the applicable retention period has expired, your data will be securely deleted or anonymised in accordance with established procedures.

8 Cookies and Tracking Technologies

The vr9 platform uses cookies and similar technologies to enhance functionality and user experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how visitors use our website to help us improve performance and navigation.
• Functional Cookies: Storing your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytical Cookies: Helping us understand traffic and usage patterns for the purpose of continuous platform improvement.

You can manage cookie settings through your internet browser. However, disabling certain cookies may affect the functionality and user experience of the vr9 platform.

9 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, contact our privacy team by email at [email protected]. Requests will be processed within 14 working days and we do not charge any fees for reasonable requests.

10 Child Data Protection

The vr9 platform is exclusively for users aged 18 years and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we become aware that we have collected personal data from underage individuals, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child may have registered on our platform are urged to contact us immediately.

11 Amendments to the Privacy Policy

Vr9 reserves the right to update or amend this Privacy Policy from time to time in response to changes in legislation, regulatory requirements, or improvements to our platform operations.

When significant changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to all active members via their registered email address.
• Displaying a clear update notice on the platform's home page for a minimum of 14 days.

Continued use of the vr9 platform after any changes take effect constitutes your acceptance of the updated policy. If you disagree with any amendment, you may close your account before the effective date of the change.

12 Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your data privacy rights, our team is ready to assist through the following channels:

• Privacy Email: [email protected] — mark the email subject as "Privacy Inquiry"
• Live Chat: Available 24/7 on the vr9 platform — select the "Privacy & Data" category when starting a session
• Telegram: Reach us via vr9's official support channels for a prompt response

We are committed to responding to all privacy-related enquiries within 2 working days. For more complex issues requiring thorough investigation, the maximum response period is 14 working days.