ucs9 Privacy Policy

1. Introduction

1.1 ucs9 ("ucs9", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the ucs9 platform at https://ucs9.app ("Platform"). This Privacy Policy ("Policy") sets out in detail the basis on which any personal data we collect from you, or that you provide to us, will be processed by ucs9.

1.2 This Policy applies to all users of the ucs9 Platform, including registered account holders, visitors who browse without registering, and individuals who contact ucs9 for support or other purposes.

1.3 By accessing the ucs9 Platform or registering a ucs9 account, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy.

2. Data Controller

2.1 ucs9 is the data controller responsible for your personal data. As data controller, ucs9 determines the purposes and means by which your personal data is processed.

2.2 For all privacy-related enquiries, including requests to exercise your data subject rights, please contact us at [email protected]. This is a plain text address — not a clickable link.

3. Personal Data We Collect

3.1 ucs9 collects personal data in several categories depending on your relationship with the Platform:

Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used for age verification — all ucs9 users must be aged 21 or above);
• National identification number (Malaysian MyKad number) or passport number where required for regulatory verification;
• Profile photograph or scanned identity document where requested for KYC purposes.

Contact Data

• Email address;
• Malaysian mobile number;
• Registered residential address (where required for regulatory compliance).

Financial Data

• Bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), and details of other payment instruments used for deposits and withdrawals on ucs9;
• Transaction history including deposit amounts, withdrawal requests, and dates;
• Source of funds documentation where required by anti-money laundering ("AML") obligations.

Usage & Gaming Data

• Game history, bet amounts, game outcomes, and session durations across all ucs9 products including live casino, slots, sportsbook, and arcade;
• Bonus and promotion usage history;
• Login timestamps and session activity logs;
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests).

Technical Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Cookie identifiers and session tokens (see Section 10 for full cookie information).

Communications Data

• Records of communications between you and ucs9 customer support via live chat, email, or any other channel;
• Records of marketing communications sent to you and your preferences.

4. How We Collect Your Data

4.1 ucs9 collects your personal data through the following means:

• Direct provision: When you register a ucs9 account, complete identity verification, make a deposit or withdrawal, contact customer support, or complete any other form or interaction on the Platform;
• Automated technical collection: Through cookies, session tokens, and server logs as you use the ucs9 Platform (see Section 10);
• Third-party sources: From payment processors (such as Touch n Go and Boost), identity verification service providers, and fraud prevention partners where necessary to fulfil our regulatory and contractual obligations;
• Publicly available sources: Where we are required to conduct enhanced due diligence under applicable AML regulations, we may supplement your data with information from publicly available registers.

5. How We Use Your Personal Data

5.1 ucs9 processes your personal data for the following purposes:

• Account management: To create, verify, operate, and maintain your ucs9 account;
• Service delivery: To provide you access to all ucs9 gaming products in MYR, process your deposits and withdrawals, and apply bonuses and promotions to your account;
• Identity and age verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years;
• Regulatory compliance: To fulfil our obligations under international gaming authority licensing requirements, including AML checks, Know Your Customer ("KYC") procedures, and responsible gaming obligations;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other prohibited activities;
• Customer support: To respond to your enquiries and resolve complaints;
• Marketing: Where you have opted in, to send you information about ucs9 promotions, new games, and platform updates. You may opt out at any time by contacting support;
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the ucs9 Platform's performance and user experience;
• Responsible gaming: To monitor gaming behaviour and identify patterns that may indicate problem gambling, and to enforce responsible gaming tools you have activated.

6. Legal Basis for Processing

6.1 ucs9 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services set out in our Terms & Conditions;
• Legal obligation: Processing required to comply with applicable regulatory requirements including AML, KYC, and responsible gaming obligations under our international gaming authority licence;
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services where such interests are not overridden by your rights;
• Consent: For optional marketing communications, where you have given explicit opt-in consent.

7. Data Sharing & Disclosure

7.1 ucs9 does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Payment processors: To process your deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other accepted methods;
• Identity verification providers: Third-party KYC service providers used to verify your identity and age;
• Fraud prevention and AML services: Where required to detect and prevent financial crime;
• Gaming platform technology providers: Game studios, live dealer operators, and sportsbook data providers who supply content to the ucs9 Platform under contractual data processing agreements;
• Regulatory and law enforcement authorities: Where we are legally required to disclose data to government regulators, law enforcement, or courts of competent jurisdiction;
• Professional advisers: Including legal counsel and auditors under obligations of confidentiality.

7.2 All third parties who process data on ucs9's behalf are required to maintain appropriate technical and organisational security measures and to process data only as instructed by ucs9.

8. International Data Transfers

8.1 As an internationally licensed gaming operator, ucs9 may transfer your personal data to countries outside of Malaysia, including to the jurisdiction in which ucs9 holds its gaming licence. Where such transfers occur, ucs9 ensures that appropriate safeguards are in place — including contractual protections and data processing agreements — to maintain a standard of data protection equivalent to that applicable in Malaysia.

8.2 By using the ucs9 Platform, you consent to the transfer of your personal data as described in this section.

9. Data Retention

9.1 ucs9 retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, and in accordance with applicable regulatory requirements.

9.2 In practice, this means:

• Account and identity data is retained for the duration of your account and for a minimum of five years following account closure, as required under AML and KYC regulatory obligations;
• Financial transaction records are retained for a minimum of five years from the date of each transaction;
• Communication records are retained for three years from the date of the last communication;
• Technical and usage data collected via cookies and logs is retained for periods ranging from session-end to 24 months, depending on data type.

9.3 Where ucs9 has no ongoing legitimate purpose or legal obligation to retain your data, it will be securely deleted or anonymised.

10. Cookies & Tracking Technologies

10.1 ucs9 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, detect fraud, and understand how users interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functionality including authentication, session management, and security. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and display options;
• Analytics cookies: Collect anonymised usage data to help us understand how the ucs9 Platform is used and where we can improve it. Data is aggregated and not linked to individual users;
• Marketing cookies: Used only where you have opted into marketing communications to measure the effectiveness of promotions. These may be disabled via your browser settings.

10.2 You may disable non-essential cookies via your browser settings at any time. Note that disabling cookies may affect the functionality of the ucs9 Platform.

11. Your Data Subject Rights

11.1 Subject to applicable law, you have the following rights in relation to your personal data held by ucs9:

• Right of access: To request a copy of the personal data ucs9 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where there is no longer a legitimate or legal basis for processing it. Note that data subject to regulatory retention obligations cannot be erased;
• Right to restriction: To request that we restrict processing of your data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: To object to processing based on our legitimate interests, including profiling for direct marketing purposes;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

11.2 To exercise any of the above rights, please contact ucs9 at [email protected]. We will respond within 30 calendar days of receiving your verified request. We may need to verify your identity before processing a rights request.

12. Data Security

12.1 ucs9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption of all data in transit between your browser and the ucs9 Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Strict access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the ucs9 Platform infrastructure;
• Multi-factor authentication requirements for privileged system access.

12.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ucs9 will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

13. Children's Privacy

13.1 The ucs9 Platform is strictly for adults aged 21 and above. ucs9 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered a ucs9 account or provided us with personal data, we will immediately suspend the account, delete the associated personal data, and refund any deposits subject to identity verification.

13.2 If you believe a minor has accessed or registered on the ucs9 Platform, please contact us immediately at [email protected].

14. Changes to This Privacy Policy

14.1 ucs9 reserves the right to update this Privacy Policy at any time. The "Last updated" date at the top of this Policy will reflect the most recent revision. Where changes are material, ucs9 will notify registered users via email or an in-platform notification.

14.2 Your continued use of the ucs9 Platform following any update to this Policy constitutes your acknowledgement of the revised Policy. If you do not accept the updated Policy, you must cease use of the Platform and contact us to request account closure.

15. Contact & Complaints

15.1 For all data privacy enquiries, subject access requests, or complaints relating to how ucs9 handles your personal data, please contact:

• Email: [email protected]
• Live Chat: Available 24/7 within the ucs9 Platform

15.2 ucs9 will acknowledge your enquiry within 3 business days and will provide a substantive response within 30 calendar days. If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction or with the supervisory authority of ucs9's licensing jurisdiction.