Privacy Policy me9 — Malaysian User Data Protection

1 Privacy Policy Introduction & Scope

Me9 takes the responsibility of protecting user personal data seriously. This Privacy Policy explains in detail how we collect, process, store, and safeguard your personal information while you use the me9 platform at me9.bio, including all sites, services, and applications operating under the me9 brand.

By registering or continuing to use the me9 platform, you are deemed to have read, understood, and agreed to all terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

2 Types of Personal Data Collected

Me9 collects your personal information through two primary means — information you provide directly during registration and platform use, and information collected automatically through industry-standard tracking technologies.

Information you provide directly:

• Full name as shown on official identification documents
• Active mobile number for account verification
• Email address (where applicable) for account communications
• Malaysian bank account information for processing deposits and withdrawals
• Copy of identification document (MyKad/Passport) for KYC verification
• Date of birth for age verification (must be 18 years or above)

Information collected automatically:

• IP address and general location information (state/country)
• Browser type and version, and device operating system
• Session data and in-platform activity logs (games played, transactions made)
• Cookies and similar tracking technologies for an improved user experience
• Platform usage data including access times and session duration

3 Purpose of Personal Data Use

Every piece of personal data collected by me9 has a clear and legitimate purpose. We do not use your data for any purpose other than those stated in the following table:

Me9 may also use your personal data to send important account notifications, security updates, and relevant promotional information. You may opt out of marketing communications at any time through your account settings.

4 Data Sharing with Third Parties

Me9 understands the importance of user trust and has never sold or rented your personal data to any third party. However, in certain limited situations, me9 may share data with the following parties:

• Payment Service Provider: Transaction information required to process deposits and withdrawals via FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, GrabPay, and Boost Wallet.
• KYC Verification Provider: Identity documents are shared with licensed identity verification services used by me9 solely for verification purposes.
• Regulatory Authority: me9 will disclose user information to competent authorities when required by Malaysian law or a valid court order.
• Third-Party Marketing Partners: me9 does NOT share user data with advertisers or third-party marketing companies for any commercial purpose.

All third-party service providers working with me9 are bound by strict data protection agreements and are required to uphold the same data security standards as me9.

5 Security & Data Protection

Me9 continuously invests in cybersecurity infrastructure to protect your personal data. The following are the key security measures we implement:

• High-grade data encryption using 256-bit SSL/TLS for all data communications
• AES-256 encryption for sensitive data stored in the me9 database
• Active 24/7 intrusion detection system (IDS) and intrusion prevention system (IPS)
• Continuous security monitoring by me9's expert cybersecurity team
• Regular penetration testing by independent third parties
• Role-based access control (RBAC) — only authorised personnel can access user data
• Full audit logs for all access and actions on user data
• Regular secure data backups with tested disaster recovery procedures

While me9 takes comprehensive precautionary measures, no security system can guarantee absolute 100% protection. We therefore encourage users to also take personal security steps, such as using strong passwords and never sharing login credentials with anyone.

6 Data Retention Period

Me9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data — retained for as long as your account remains active and in use
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian financial law requirements
• KYC Documents — retained for a minimum of 5 years after account termination in accordance with AML/CFT requirements
• Activity & security logs — retained for 12 months for fraud detection and investigation purposes
• Cookies & session data — expires automatically between 30 minutes and 12 months depending on the cookie type

Once the designated retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

7 User Rights Over Personal Data

As a me9 user, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA) 2010. me9 fully respects and facilitates the exercise of these rights:

To exercise any of the rights above, please contact the me9 support team via the platform's live chat. Your request will be processed within 7 business days. me9 does not charge any fee for requests related to user privacy rights.

8 Cookie Policy

Me9 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyse platform usage patterns. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous usage data to help us understand how users interact with the platform and identify areas for improvement.
• Functional Cookies: Storing your personal preferences such as display settings and game choices to deliver a more personalised experience.
• Third-Party Cookies: me9 does not use third-party tracking cookies for advertising or retargeting purposes.

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect the functionality of the me9 platform.

9 Children's Privacy

The me9 platform is strictly for individuals aged 18 and above. me9 does not knowingly collect or process personal data from individuals under the age of 18.

10 Policy Amendments & Contact Us

Me9 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to users via in-platform notifications at least 14 days before taking effect.

Your continued use of the me9 platform after any amendments to this Privacy Policy take effect constitutes your acceptance of the latest version of the policy. We encourage you to review this page periodically.