Privacy Policy

1Introduction

This Privacy Policy ("Policy") sets out the practices of apg9 ("the Platform", "we", "us", "our") with respect to the collection, storage, use, and disclosure of personal information provided by or collected about individuals ("User", "Player", "you", "your") who access or use the services available at apg9.click and associated digital properties.

apg9 operates as an online gaming platform serving players in Malaysia, including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations throughout the country. In providing our services — which include sports betting, live casino, slot games, fishing games, crash games, and instant win products — we necessarily collect and process certain categories of personal data to deliver a safe, secure, and compliant experience.

By accessing the Platform, registering an account, or making use of any service offered by apg9, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

2Definitions

For the purposes of this Policy, the following terms carry the meanings defined below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, restriction, or deletion.
• "Data Controller" means apg9, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of apg9 under a data processing agreement.
• "KYC Data" means identity verification documents and related information collected as part of the Know Your Customer process, including copies of Malaysian MyKad, passports, driver's licences, and proof of address documents.
• "Transaction Data" means records of deposits, withdrawals, and associated financial activity conducted through Approved Payment Methods including Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and supported cryptocurrencies.
• "Sensitive Personal Data" means categories of data warranting heightened protection, including financial account details, government-issued identity numbers, and biometric data where applicable.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data.

3Data We Collect

apg9 collects Personal Data through several channels and at various stages of the player lifecycle. The categories and specific data points collected are described in the table below:

3.1 Information Provided Directly by You

Most Personal Data is supplied directly when you register with apg9, complete identity verification, fund your account, withdraw MYR, contact support, or configure account controls. You are responsible for ensuring that this information is accurate, current, and complete. If your address, phone number, payment details, or other information changes, you should update your account or notify apg9 support promptly.

3.2 Information Collected Automatically

When you use apg9, technical information is collected automatically to authenticate sessions, maintain security, diagnose faults, measure platform performance, and prevent fraud. This may include approximate location derived from an IP address, device characteristics, access times, pages viewed, and interactions with games or account tools. apg9 does not use automatic collection to access unrelated files, photographs, contacts, or messages stored on your device.

3.3 Information from Payment and Verification Providers

apg9 may receive confirmation data from payment institutions, e-wallet operators, banks, identity verification services, fraud prevention providers, and game suppliers. For example, when you use Touch 'n Go eWallet, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong Bank, apg9 may receive a transaction reference, account-holder confirmation, payment status, and limited risk information. We do not require or store your online banking password or e-wallet security PIN.

4How We Use Your Data

apg9 processes Personal Data only where the processing is relevant to operating the Platform, meeting compliance obligations, protecting Players, or improving the service. The principal purposes are:

• Creating, maintaining, authenticating, and securing your apg9 account;
• Confirming that you are aged 21 or above and eligible to use the Platform;
• Completing KYC, anti-money laundering, fraud prevention, and sanctions screening checks;
• Processing MYR deposits and withdrawals through approved Malaysian payment methods;
• Recording and settling casino games, slot sessions, EPL and Liga Super Malaysia bets, and other wagers;
• Administering bonuses, cashback, loyalty benefits, and VIP membership entitlements;
• Providing customer support, investigating complaints, and resolving account disputes;
• Detecting account takeover, collusion, chargeback abuse, duplicate accounts, and technical misuse;
• Applying deposit limits, cool-off periods, self-exclusion, and other responsible gambling safeguards;
• Monitoring reliability, correcting errors, and improving the accessibility and performance of apg9;
• Sending service notices concerning account security, transactions, policy changes, or maintenance;
• Sending promotional communications only where permitted and according to your communication preferences.

apg9 does not use KYC documents or financial information for unrelated advertising. Marketing preferences may be changed through your account settings or by asking support to stop promotional communications. Essential notices concerning security, withdrawals, legal changes, or responsible gambling controls may still be delivered because they are necessary for account administration.

5Legal Basis for Processing

Depending on the nature of the information and the purpose for which it is used, apg9 relies on one or more recognised grounds for processing:

• Performance of a contract: Processing required to create your account, accept wagers, settle games, process payments, and provide support under the Terms & Conditions.
• Legal and compliance obligations: Processing required for identity verification, anti-money laundering controls, transaction records, fraud investigations, and regulatory reporting.
• Legitimate interests: Processing reasonably necessary to protect apg9 and its Players, prevent misuse, maintain platform security, improve services, and establish or defend legal claims.
• Consent: Processing based on a clear choice, including selected marketing communications or non-essential cookies where applicable. Consent may be withdrawn without affecting earlier lawful processing.
• Protection of Players: Processing required to identify potentially harmful gambling patterns and implement responsible gambling restrictions or support measures.

Where apg9 relies on legitimate interests, we consider whether the processing is necessary, proportionate, and compatible with your reasonable expectations. Where consent is required, declining or withdrawing consent will not prevent access to core services unless the relevant processing is technically necessary to provide those services.

6Data Sharing & Disclosure

apg9 limits access to Personal Data to authorised personnel and service providers that require it for a defined purpose. Information may be disclosed to:

• Payment providers and banks that process deposits, withdrawals, reversals, and payment verification;
• Identity and fraud prevention providers that perform KYC, age verification, sanctions screening, and account risk checks;
• Game and platform suppliers where limited identifiers and session details are required to deliver, audit, or settle games;
• Cloud, cybersecurity, and technical providers that host data, monitor threats, maintain backups, or support apg9 infrastructure;
• Professional advisers such as auditors and legal representatives who are subject to confidentiality obligations;
• Competent authorities where disclosure is required by valid law, court order, regulatory instruction, or an investigation into suspected unlawful activity.

Service providers act under written contractual obligations requiring confidentiality, suitable security, and processing only on documented instructions. apg9 requires providers to use no more information than is reasonably necessary for the assigned service. We do not authorise operational providers to use Player information for their independent marketing.

If ownership or control of all or part of the apg9 business changes, relevant records may be transferred as part of that transaction, subject to confidentiality and data protection safeguards. Players will be informed where a change materially affects how their Personal Data is controlled.

7Cookies & Similar Technologies

Cookies are small data files stored by your browser. apg9 uses cookies and comparable local storage technologies to keep sessions secure, remember preferences, support navigation, and understand technical performance.

7.1 Essential Cookies

Essential cookies enable account login, session continuity, security controls, load balancing, and fraud prevention. The Platform may not function correctly if these cookies are blocked.

7.2 Preference and Performance Cookies

Preference cookies remember settings such as language, display choices, and recently viewed categories. Performance cookies provide aggregated information about loading speed, errors, and feature usage so apg9 can improve the Player experience.

7.3 Cookie Control

You may delete or block cookies through your browser settings. Doing so may sign you out, remove saved preferences, or prevent security-dependent account functions from operating. apg9 does not use cookies to read unrelated information from your device.

8Data Retention

apg9 retains Personal Data for no longer than reasonably necessary for the purposes described in this Policy. Retention periods depend on the type of record, the status of your account, dispute requirements, fraud prevention needs, and applicable financial or compliance obligations.

• Active account information is retained while your apg9 account remains open;
• KYC and transaction records may be retained after closure where required for anti-money laundering, audit, or legal obligations;
• Support and complaint records are retained for a reasonable period to document resolution and manage recurring issues;
• Security logs are retained according to operational risk and investigation requirements;
• Self-exclusion records may be retained after account closure to ensure that an exclusion remains effective and cannot be easily bypassed.

When retention is no longer justified, apg9 securely deletes, destroys, or irreversibly anonymises the relevant information. Anonymised statistical information that cannot identify a Player may be retained for service analysis and reporting.

9Data Security

apg9 applies administrative, technical, and organisational safeguards designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Measures include encrypted transmission, controlled access, account authentication, security logging, network monitoring, backup procedures, and staff confidentiality requirements.

Access to KYC and payment records is restricted according to job responsibilities. apg9 reviews access rights and security controls periodically and requires relevant providers to maintain safeguards proportionate to the sensitivity of the information they process.

No digital system can be guaranteed completely secure. Players also have an important role in account protection and should use a unique password, activate available verification controls, keep devices updated, and never disclose passwords or one-time security codes. If you suspect unauthorised access, contact apg9 through on-site Live Chat immediately.

Where a Personal Data incident creates a material risk, apg9 will investigate promptly, contain the incident, document remedial measures, and provide notifications required under applicable obligations.

10Your Rights

Subject to applicable requirements, verification of identity, and lawful exceptions, you may exercise the following rights regarding Personal Data held by apg9:

Rights requests may be submitted through 24/7 Live Chat or by writing to [email protected]. The email address is displayed as plain text and is not a clickable link. To protect your account, apg9 may ask for sufficient information to verify your identity before releasing, correcting, or deleting data.

apg9 aims to respond within a reasonable period. A request may be limited or declined where fulfilling it would conflict with anti-money laundering duties, fraud prevention, dispute preservation, self-exclusion enforcement, another person's rights, or another valid legal obligation. Where appropriate, we will explain the reason.

11Minors & Age Verification

apg9 uses registration controls and KYC documents to verify age and identity. If we reasonably suspect that an account belongs to a person under 21, access will be suspended while verification is completed. Any Personal Data collected from an underage person will be handled securely and deleted when retention is no longer necessary for investigation, safeguarding, refund, fraud prevention, or legal purposes.

Parents and guardians who believe that a person under 21 has provided information to apg9 should contact our support team promptly. They should not submit additional sensitive documents until apg9 provides secure verification instructions.

12International Data Transfers

Some technical, verification, payment, or game service providers supporting apg9 may process data outside Malaysia. Privacy standards and legal requirements may differ between jurisdictions. Where an international transfer is necessary, apg9 applies contractual, technical, and organisational safeguards intended to preserve confidentiality and restrict processing to authorised purposes.

These safeguards may include data processing agreements, confidentiality clauses, access restrictions, encryption, supplier security reviews, and limits on onward disclosure. apg9 assesses the nature of the information and the service involved before approving access from another jurisdiction.

13Policy Amendments

apg9 may revise this Privacy Policy to reflect changes in Platform functions, security practices, operational requirements, or applicable obligations. The revised version will be published on this page with an updated revision date.

Where a change materially affects the purposes for which Personal Data is used or the choices available to Players, apg9 will provide a prominent notice or direct account communication where reasonably appropriate. If consent is required for a new form of processing, apg9 will request it before that processing begins.

Players are encouraged to review this page periodically. Continued use of apg9 after a revised Policy takes effect acknowledges receipt of the updated notice, but does not replace consent where consent is legally required.

14Contact Us

Questions, privacy requests, corrections, complaints, or concerns about this Policy may be directed to the apg9 support team. Please include enough detail for us to identify the relevant account and request, but do not send passwords, banking passwords, e-wallet PINs, or one-time authentication codes.

apg9 will acknowledge a privacy enquiry and may request identity verification before acting on it. Routine requests are handled as soon as reasonably practicable, while complex requests or those involving security investigations may require additional time.