Privacy Policy GD9 — Your Personal Data Protection

1 Introduction and Scope of This Policy

GD9 ("we", "our platform") values the privacy of every individual who uses our services. This Privacy Policy is drafted to transparently and clearly explain how we handle your personal data — from the moment you first visit the GD9 website through every interaction that takes place during your time as an active member of our platform.

This document covers all GD9 services, including the web platform at https://gd9.vin, the GD9 mobile app for Android and iOS, and all official GD9 communication channels. If you use any GD9 service, this Privacy Policy applies to you in full.

We encourage you to read this document carefully. If anything is unclear or you have any questions, our team is always ready to assist via live chat on the gd9 platform.

2 Personal Data We Collect

GD9 only collects personal data necessary to provide you with a safe, fair, and quality service. The following are the types of data we collect:

Data Categories	Example Information	Purpose of Collection
Identity Information	Full name, date of birth, IC / passport number	Identity verification (KYC), fraud prevention
Contact Information	Email address, phone number, residential address	Account communications, transaction verification
Financial Data	Bank account number, e-wallet details	Deposit and withdrawal processing
Platform Activity Data	Game history, betting records, bonus usage	Fair auditing, fraud prevention, service improvement
Technical Data	IP address, device type, browser, operating system	Account security, unusual login detection
Cookie Data	Language preferences, login sessions, display settings	Enhanced and personalised user experience

We do not collect sensitive data such as your health information, religious beliefs or political views. Data collected is limited strictly to what is necessary for the operation of the gd9 platform.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. gd9 uses your personal data for the following purposes:

• Account management: Creating, verifying and maintaining your gd9 account securely.
• Transaction processing: Processing your deposits and withdrawals accurately and swiftly using your preferred payment method.
• KYC verification: Meeting legal requirements to verify player identity in order to prevent money laundering and fraud.
• Service communications: Sending important notifications regarding your account, transactions and security updates.
• Fraud prevention: Detecting and blocking suspicious activity to protect your account and funds.
• Platform improvements: Analysing usage patterns in aggregate (not individually) to improve the gd9 user experience.
• Promotional communications: Sending relevant offers, bonuses and promotions — you may unsubscribe at any time.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities when required by law.

4 Data Sharing with Third Parties

GD9 does not sell your personal data. Full stop. However, in certain limited circumstances, we may need to share data with the following parties:

• Payment providers: Required transaction information is shared with payment providers (such as banks, FPX, TNG eWallet) solely to process your deposits and withdrawals.
• Technology providers: Technology companies that assist us in operating the gd9 platform may access certain data for technical purposes, subject to strict confidentiality agreements.
• Legal authority: GD9 will disclose data when required by Malaysian law, court order, or directive from a competent authority.
• KYC providers: Identity information is shared with approved third-party identity verification services for anti-money laundering compliance purposes.

All third parties handling gd9 data are required to sign binding data processing agreements and comply with data protection standards no less stringent than those of gd9 itself.

5 Cookies and Tracking Technology

The gd9 platform uses cookies and similar technologies such as local storage to enhance your experience. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session tracking and security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, time zone and display settings so you do not need to reconfigure them each time.
• Performance Cookies: Helping us understand how players use the gd9 platform in aggregate for improvement purposes — this data is anonymised.
• Session Cookies: Used to maintain your login status during an active session and automatically deleted when you close your browser.

6 Data Retention Period & Security

GD9 retains your personal data for as long as necessary to fulfil the purpose of collection and to meet applicable legal obligations. In general:

• Active account data is retained for as long as your account is active, plus any additional period required by law.
• KYC data and transaction records are retained for a minimum of 5 years after account closure to comply with Malaysia's anti-money laundering legal requirements.
• Technical log data is retained for 90 days before being automatically deleted.
• Customer support communication data is retained for 2 years for reference purposes.

On the technical security front, GD9 implements the following measures to protect your data:

• 256-bit SSL/TLS encryption for all data in transit.
• Encryption of sensitive data at rest using industry-recognised algorithms.
• 24/7 security monitoring with automated intrusion detection systems.
• Role-based access control — staff can only access data relevant to their responsibilities.
• Regular security audits by independent parties to identify and address system vulnerabilities.

7 Your Privacy Rights as a gd9 Player

As a gd9 platform user, you have the following rights regarding your personal data. All requests will be processed within 14 working days:

8 Children's Data Protection

The gd9 platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we discover that personal data of an underage child has been collected without our knowledge, we will take immediate action to delete that data and close the account in question. Parents or guardians who find that their child has registered on the gd9 platform are encouraged to contact us immediately.

9 Amendments to This Privacy Policy

GD9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. Whenever an amendment is made:

• The "Last Updated" date at the top of this document will be revised accordingly.
• For significant amendments, we will notify members via email or an in-platform notice on gd9.
• Continued use of the gd9 platform after amendments are published constitutes your acceptance of the updated policy.

We encourage you to check this page regularly to stay informed about how we handle your personal data.

10 How to Contact Us

If you have any questions, concerns or complaints regarding gd9's Privacy Policy or how we handle your personal data, there are several ways to reach us:

• Live Chat: Available 24/7 directly within the gd9 platform — the fastest way to get a response.
• Email: [email protected] — we will respond within 1–2 business days.
• FAQ Page: Visit GD9 FAQ for answers to frequently asked questions on privacy and account security.

For formal privacy rights requests, please clearly state the type of request, your full name, and your gd9 account number so we can process your request accurately and efficiently.