Nep9 Privacy Policy – Data Protection Our Promise to Malaysian Players

This Privacy Policy ("Policy") is published by nep9 ("we", "Platform") and applies to all users of the website nep9.best, the nep9 mobile app, and all related services we offer to players in Malaysia. This document explains in detail how we collect, process, store, use, and protect your personal data.

Nep9 recognises that privacy is a fundamental right. As a platform serving hundreds of thousands of Malaysian players — from those who enjoy wagering on the Malaysia Super League and BWF badminton matches to live casino players and VIP blackjack tables — we understand the trust you place in us every time you share your personal information with this platform.

This Policy has been drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and any other applicable data protection legislation. In the event of any conflict between a version of this Policy in another language and this Bahasa Malaysia version, the Bahasa Malaysia version shall prevail for players in Malaysia.

Nep9 collects your personal data through several means: directly when you register or use the platform, automatically through tracking technologies as you browse our website, and occasionally from legitimate third-party sources for identity verification purposes. The main categories of data we collect are as follows:

We do not collect sensitive data categories such as health information, criminal records or biometric data unless specifically required by law or applicable regulatory compliance obligations, and only after providing you with prior specific notice.

Nep9 uses the personal data collected for the following purposes, all within the scope permitted by applicable Malaysian data protection law and, where required, based on the consent you have provided:

Service Provision & Management — Your data is used to create and manage your nep9 account, process deposits and withdrawals in MYR, verify your identity and age, ensure an accurate betting history is recorded, and send you important account-related communications such as transaction confirmations, security alerts and platform update notices.

Platform Security and Fraud Prevention — nep9 uses technical and gaming data to detect suspicious activity, prevent unauthorised access, identify attempted fraud or money laundering, and ensure the overall integrity of the platform. This is a legal obligation we hold under applicable anti-money laundering legislation.

Responsible Gambling & Player Protection — Your gaming history and transaction data are used by nep9's systems to identify patterns that may indicate problem gambling, enabling our team to intervene appropriately where needed and to enforce limits you have set yourself, such as deposit limits, loss limits and session time limits.

Platform Improvement and User Experience — Aggregated and anonymised usage data is used to understand platform usage patterns, identify areas for improvement, optimise platform performance and interface, and develop new features that are more relevant to Malaysian players.

Marketing Communications — With your consent, we may use your email address or phone number to send you information about nep9 promotions, special offers, new bonuses and platform news. You may withdraw this consent at any time via your account settings or by contacting us.

Legal Compliance & Regulatory Obligations — nep9 may need to use or disclose your data to fulfil legal obligations, including reporting requirements under anti-money laundering legislation, tax compliance requirements, or directives from the relevant authorities.

Nep9 does not sell or trade players' personal data to third parties under any circumstances. However, there are limited situations where we need to share your personal data with other parties in order to deliver the platform's full services. Such sharing occurs only in the following circumstances:

• Trusted Service Providers: nep9 works with a number of third-party service providers that help us operate the platform — including payment gateway providers for processing Touch 'n Go, GrabPay, DuitNow and FPX transactions, cloud service providers for secure data storage, live casino game software providers, and anonymised analytics service providers. All of these providers are bound by strict data protection agreements and may only use your data for purposes directly related to the services they provide to nep9;
• Legal Requirements: nep9 will disclose personal data if required to do so by law, court order, direction from a lawful regulatory authority, or in the context of a criminal investigation that requires our cooperation with Malaysian authorities;
• Fraud Prevention & Security: In limited cases, nep9 may share necessary information with relevant authorities or industry bodies for the purpose of preventing fraud, money laundering, or other criminal activity involving our platform;
• Business Transfers: If nep9 is involved in a merger, acquisition, or asset transfer, personal data may be transferred as part of that transaction — however, the receiving party will be bound by data protection obligations equivalent to or stricter than those applicable to us.

Nep9 implements multiple layers of technical and organisational safeguards to protect your personal data against unauthorised access, loss, alteration or unintended disclosure. The key measures we have in place are as follows:

• Encryption of Data in Transit: All communications between your device and nep9's servers are secured with TLS 1.3 protocol using AES-256 encryption — the same security standard used by Malaysia's major banks, including Maybank and CIMB;
• Encryption of Stored Data: Sensitive data stored in nep9's databases is encrypted using industry-recognised cryptographic algorithms. Passwords are never stored in plain text;
• Strict Access Controls: Access to players' personal data within nep9's internal systems is restricted to staff with a legitimate operational need only. All access is logged and monitored;
• Two-Factor Authentication: nep9 offers and encourages the use of two-factor authentication (2FA) on all player accounts for an added layer of protection;
• Regular Security Audits: The nep9 platform undergoes regular penetration testing and security audits conducted by independent third parties to identify and address any vulnerabilities before they can be exploited;
• Real-Time Monitoring: nep9's fraud detection and cybersecurity systems operate 24 hours a day to detect and respond to any potential security threats.

While we invest significantly in our security infrastructure, no system can be guaranteed 100% secure against all threats. We encourage players to play their part in keeping their accounts safe by using strong passwords, enabling 2FA, and promptly reporting any suspicious activity to the nep9 support team.

Nep9 uses cookies and related tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Strictly Necessary Cookies: These cookies are required for core platform functions such as maintaining your login session, remembering your language preference, and basic security. They cannot be disabled without affecting platform functionality;
• Performance & Analytics Cookies: We use these cookies to understand how players interact with the platform, which pages are visited most frequently, and where players may encounter issues. All data collected is anonymised and aggregated — no individual player is identified;
• Functional Cookies: These cookies allow the platform to remember your preferences — such as your favourite game type, blackjack table display settings, or limits you have set — to deliver a more personalised experience;
• Marketing Cookies: With your consent, these cookies are used to display relevant nep9 advertisements and promotions. You can manage your marketing cookie preferences through your web browser settings.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and your overall experience on the nep9 platform.

Nep9 retains your personal data for as long as your account is active or as long as necessary to provide the services you have requested. The following are general data retention guidelines by data category:

• Active Account Data: Retained for as long as your account remains active on nep9 and for any required period following account closure to fulfil our legal obligations;
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with applicable Malaysian financial and tax legislation;
• KYC (Identity Verification) Data: Retained for a minimum of 5 years from the date of submission or from the account closure date, whichever is later, in line with anti-money laundering legal requirements;
• Support Communication Logs: Retained for 2 years from the date of last communication for reference and dispute resolution purposes;
• Anonymised Analytics Data: May be retained indefinitely as it no longer contains any personally identifiable information.

Regarding cross-border data transfers, nep9 may store or process data on servers located outside Malaysia for operational and backup purposes. In all such cases, transfers are made only to destinations that provide data protection standards equivalent to or higher than Malaysian legal requirements, and with appropriate contractual safeguards in place.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and this Privacy Policy, you have the following rights regarding the personal data we hold about you:

Nep9 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

All account registrations on nep9 require confirmation that the player is at least 18 years of age. The age verification (KYC) process we conduct is designed to detect and prevent registrations by underage individuals. Any account found to belong to a minor will be closed immediately and all funds returned in accordance with established procedures.

The nep9 platform may from time to time contain links or references to third-party websites or services, such as links to sports information sources or related esports news. This Privacy Policy does not apply to those third-party websites or services.

Nep9 is not responsible for the privacy practices or content of any third-party websites you may visit through links on our platform. We encourage you to read the privacy policy of any third-party website before providing them with any personal information.

Nep9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. The last updated date is always displayed at the top of this page.

For amendments considered material — such as changes to how we use data for new purposes that differ significantly from the original — we will notify you via your registered email or an in-platform notification at least 14 days before the amendment takes effect. Continued use of the nep9 platform after the effective date of any amendment will be considered acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how we handle your personal data. If you disagree with any changes made, you have the right to close your account and request deletion of your data in accordance with Section 8 above.

If you have any questions, concerns or complaints regarding how nep9 handles your personal data, or wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: privacy@nep9.best — for all privacy policy enquiries and data rights requests;
• General Support Email: support@nep9.best — for account enquiries and general platform support;
• 24/7 Live Chat: Available directly on the nep9 platform — support in both Bahasa Malaysia and English, around the clock including Malaysian public holidays.

Nep9 is committed to addressing all privacy-related queries thoroughly and within a reasonable timeframe. If you are not satisfied with our response, you have the right to refer your complaint to the Malaysian Communications and Multimedia Commission (MCMC) or any other relevant regulatory body with jurisdiction.