Privacy Policy ivip9 – Personal Data Protection for Malaysia Members

This Privacy Policy explains how ivip9 (referred to as "we", "our platform", or "ivip9") manages the personal data of members who register and use our services at https://ivip9.wine. This document has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

This Privacy Policy applies to all registered members, guest users, and any individual who interacts with the ivip9 platform through our website, mobile app, or any official communication channel. By registering an account or using ivip9's services, you agree to the collection and use of your personal data as described in this document.

We encourage you to read this Privacy Policy in full and carefully. If you do not agree with any part of this policy, please stop using the ivip9 platform and contact us to close your account.

Ivip9 collects your personal data through various means when you register, use the platform, or interact with our services. Below is a summary of the types of data we collect and the purposes for which they are collected:

Ivip9 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive data such as your health information, religious beliefs, or political views.

Ivip9 uses collected personal data for lawful and clearly stated purposes. We do not use your data for any other purpose without first obtaining your additional consent.

• Account Management: Creating, verifying, and managing your member account on the ivip9 platform, including the KYC process required for your account security.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently using high-level encryption.
• Essential Communications: Sending account notifications, security alerts, service updates, and important information related to your account activity.
• Fraud Prevention: Detecting and preventing any suspicious activity, fraud, money laundering, or platform abuse that could compromise the safety of the ivip9 community.
• Service Improvement: Analyzing usage patterns in aggregate (not individually) to improve user experience, introduce new features, and optimize platform performance.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including cooperating with lawful authorities when required by court order or law.
• Marketing Programs (with consent): Sending promotional offers, exclusive bonuses, and the latest updates on new games – only to members who have consented to receive marketing communications.

Ivip9 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Providers: Payment gateway providers and financial institutions that assist in processing your deposit and withdrawal transactions. They are bound by strict confidentiality agreements.
• KYC Service Providers: A third-party identity verification platform used to verify your identity documents during the KYC process. This data sharing is limited and secure.
• Cloud Service Providers: Technology infrastructure providers that host and maintain the ivip9 system. All providers are bound by strict data security terms.
• Lawful Authorities: Law enforcement agencies, courts, or government authorities when required by law or a valid court order. ivip9 will notify you of any such request unless prohibited by law.
• Business Partners: In the event of a merger, acquisition, or sale of business assets, your data may be transferred to the new entity. You will be notified in advance and will have the option to opt out.

All third parties receiving data from ivip9 are required to protect that data to a standard at least equivalent to ivip9's own data protection standards.

Ivip9 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, navigation, and session security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform (e.g., frequently visited pages) to help us improve the user experience. This data is collected in aggregate and does not identify you personally.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences to provide a more personalized experience.
• Analytics Cookies: Helping us understand overall platform usage patterns to make better business decisions that benefit all members.

You can manage your cookie settings through your web browser options. However, disabling certain cookies may affect the functionality and user experience of the ivip9 platform.

Ivip9 retains your personal data only for as long as it is needed for the purposes for which it was collected, or as required by applicable law. Our data retention policy is as follows:

• Active Account Data: Retained for the duration your account remains active on the ivip9 platform and for the required period following account closure to fulfill legal obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years after a transaction occurs, in accordance with Malaysia's accounting and financial legal requirements.
• KYC Records: Retained for a minimum of five (5) years after the business relationship ends, in accordance with anti-money laundering (AML) requirements.
• System & Security Logs: Retained for 12 months for security investigation and fraud prevention purposes before being automatically deleted.
• Marketing Data: Retained until you withdraw consent. Following withdrawal of consent, marketing data will be deleted within 30 business days.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party.

As an ivip9 member and data subject under applicable data protection laws, you have the following rights regarding your personal data:

Ivip9 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

• 256-bit SSL Encryption: All communications between your device and ivip9 servers are encrypted using the latest TLS protocol, ensuring your data cannot be intercepted during transmission.
• Two-Factor Authentication (2FA): ivip9 provides and encourages the use of 2FA for all member accounts as an added layer of protection against unauthorised access.
• 24/7 Security Monitoring: Our cyber threat monitoring system operates around the clock to detect and respond to any suspicious activity promptly.
• Regular Security Testing: The ivip9 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts.
• Internal Access Controls: Employee access to members' personal data is strictly limited on a need-to-know basis, with full audit logs maintained for every access event.
• Staff Security Training: All ivip9 staff undergo regular data protection and information security training to ensure best practices are upheld at all times.

While we take all reasonable precautions, no security system is entirely foolproof. We therefore encourage members to also take protective measures such as using strong passwords, enabling 2FA, and not sharing login credentials with anyone.

The ivip9 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under 18. Should we discover that personal data of a minor has been inadvertently collected, we will take immediate steps to delete that data and close the associated account.

Parents or guardians who discover their child has registered on the ivip9 platform without consent are urged to contact our customer support team immediately so that appropriate action can be taken without delay.

Ivip9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Any amendments made will be published on this page along with the latest revision date.

For material amendments that substantially affect your rights, ivip9 will notify members via their registered email or in-account notification before the changes take effect. Continued use of the ivip9 platform after the effective date of any amendment constitutes acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding how ivip9 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our privacy team through the following channels:

• Live Chat: Available 24/7 via the ivip9 platform for immediate responses from our trained support team.
• Email: Send your privacy enquiries to [email protected] and we will respond within 2 business days.
• Account Section: You can update your privacy preferences and marketing consent directly through your account settings on the ivip9 platform.

Ivip9 is committed to addressing every privacy-related inquiry and complaint seriously and within a reasonable timeframe. Your satisfaction and trust are our top priority.