Inz9 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy describes how inz9 ("we", "the platform") collects, uses, stores, and protects your personal information when you use the inz9.asia website and all related services.

Inz9 operates as an online Sports Betting and casino platform designed for Malaysian players. We take the privacy of every member seriously and are committed to ensuring your personal data is handled in a fair, secure manner that complies with applicable data protection laws in Malaysia, including Personal Data Protection Act 2010 (PDPA).

This policy applies to all users of the inz9 platform, including visitors browsing the website without registering, registered members with active accounts, and former members whose accounts have been closed (until the relevant data retention period expires).

Inz9 collects your personal data in several ways — directly from you during registration or platform use, and automatically through the technologies that power the platform. Below are the categories of data we collect:

Data You Provide Directly

• Identity Information: Full name, date of birth, and identity card or passport number (for KYC verification purposes where required).
• Contact Information: Malaysian mobile number, email address.
• Account Information: Username, password (stored as a non-reversible hash), and security questions.
• Financial Information: Details of the payment methods (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) used for deposits and withdrawals. We do not store full credit or debit card numbers — only the information necessary to process transactions.
• Verification Documents: A copy of your identity document if requested as part of the KYC process for withdrawals exceeding a specified limit.

Automatically Collected Data

• Platform Usage Data: Betting records, game history, deposits, withdrawals, and other account activity.
• Technical Data: IP address, web browser type, operating system, device type, screen resolution, language settings.
• Location Data: Approximate location based on IP address for the purpose of verifying permitted geographic regions.
• Cookie Data: Information collected through cookies and similar tracking technologies — explained in further detail in Section 6.

Inz9 uses the personal data we collect solely for the purposes set out below. We will not use your data for any other purpose not stated here without first obtaining your consent:

Platform Operations

• Creating and managing your inz9 account — including identity verification, login, and account security settings.
• Processing deposits and withdrawals through your preferred payment method securely and accurately.
• Managing sports bets, casino games, and all activities you carry out on the platform as an inz9 member.
• Crediting bonuses, cashback, rebates, and other promotional benefits to your account in accordance with the applicable terms.

Security & Compliance

• Detecting and preventing fraud, duplicate accounts, money laundering, and any activity that violates inz9's Terms and Conditions.
• Fulfilling legal compliance obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Responding to valid requests or directives from the relevant authorities.

Platform Improvements

• Analysing usage patterns in aggregate and anonymised form to improve the user experience, platform speed, and interface design.
• Identifying and resolving technical issues more quickly based on real usage data.

Communications

• Sending account-related notifications — such as deposit confirmations, withdrawal alerts, and security notices — which are essential communications and cannot be opted out of.
• Sending information about inz9 platform promotions, offers, and updates to members who have opted in to receive marketing communications. You may opt out at any time.

Inz9 does not sell members' personal data to any third party. However, in the normal course of platform operations, there are limited situations where data may be shared with certain parties. All data sharing is subject to strict safeguards:

Platform Service Providers

Inz9 works with select third-party service providers to operate specific aspects of the platform — including payment processing (Touch 'n Go, GrabPay, DuitNow, and other gateways), cloud hosting providers, and casino game software providers. All providers are bound by strict data confidentiality agreements and are only permitted to process the data necessary for their specific functions.

Legal Requirements

Inz9 will disclose personal data to government authorities or law enforcement bodies where:

• Required by a court order or valid legal process.
• Required to comply with legal obligations such as AML (Anti-Money Laundering) requirements or suspicious activity reporting.
• Required to protect the rights, property, or safety of inz9, its members, or the general public.

Business Transfer

If inz9 is involved in a merger, acquisition, or transfer of business assets, members' personal data may be transferred as part of that transaction. In such circumstances, we will notify members in advance and ensure that data continues to be protected under an equivalent or stricter privacy policy.

Protecting members' personal data is our core technical priority. The security measures we employ encompass multiple layers of protection:

• 256-bit SSL Encryption: All communications between your device and inz9's servers are fully encrypted using the latest TLS protocols, protecting your data in transit from interception by third parties.
• Secure Password Storage: Account passwords are never stored in plain text. We use strong hashing algorithms with a unique salt for each password, meaning that even in the event of a server breach, actual passwords cannot be recovered.
• Internal Access Controls: Member data is only accessible to staff who require it for specific duties. All access is logged and audited on a regular basis.
• Intrusion Detection: Our security monitoring system operates 24/7 to detect unauthorised access attempts, brute force attacks, and other suspicious activity.
• Regular Security Audits: inz9's systems undergo regular security assessments to identify and address any vulnerabilities before they can be exploited.
• Separate Data Storage: Player funds are held in accounts separate from company operating funds. This ensures member funds remain available at all times, even in the event of operational financial difficulties.

While we take all reasonable steps to protect your data, no system is 100% immune to all cyber threats. We encourage you to also protect your account by using a strong password, keeping your login details confidential, and enabling two-factor authentication where available.

Inz9 uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance your user experience. The following are the types of cookies we use:

Essential Cookies (Required)

These cookies are required for the platform to function and cannot be disabled. They store information such as your login session, language preferences, and items in your bet slip. Without them, you will not be able to use the inz9 platform properly.

Performance & Analytics Cookies

These cookies help us understand how members use the platform — which pages are visited most, where users encounter issues, and how to improve navigation flow. Data is collected in aggregate and anonymised form — we cannot identify you individually from this analytics data.

Functional Cookies

Functional cookies store your preferences such as your preferred odds format, favourite football markets, and other display settings. This allows inz9 to personalise your experience without requiring you to reconfigure these settings each time.

Managing Cookies

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies will affect the functionality of the inz9 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Inz9 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable Malaysian law. The following are our general data retention guidelines:

• Active Account Data: Retained for as long as your inz9 account remains active.
• Financial Transaction Data: Retained for a minimum of 7 years following the transaction for legal compliance and financial audit requirements.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends to comply with anti-money laundering requirements.
• Support Communication Data: Retained for 3 years for reference and dispute resolution purposes.
• Technical Log Data: Typically deleted after 90 days unless required for an ongoing security investigation.

When your data is no longer needed and there is no legal obligation to retain it, inz9 will securely delete it or permanently anonymise it so that it can no longer be linked back to you.

If you close your inz9 account, most of your personal data will be deleted or anonymised within 30 days. However, certain data (such as transaction records) may be retained for longer to fulfil the legal obligations outlined above.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and inz9's privacy commitments, you have the following rights regarding the personal data we hold about you: