Privacy Policy fugi9 — Your Data Protection

Fugi9 ("we", "Platform", "Company") values the privacy of every individual using our services at fugi9.pro. This Privacy Policy ("Policy") is established to transparently explain how we collect, use, disclose, store, and protect your personal data when you register, log in, or use any part of the fugi9 platform.

This Policy applies to all users of the fugi9 platform, including visitors without an account, registered members, promotion participants, and fugi9 mobile app users. By continuing to use our platform, you confirm that you have read and understood this Privacy Policy and agree to the practices described herein.

This Policy should be read together with fugi9's Terms and Conditions and Responsible Gaming Policy. In the event of any inconsistency between these documents, this Privacy Policy shall prevail specifically on matters relating to personal data protection.

Fugi9 collects various categories of personal data depending on how you interact with our platform. Data collection is carried out only for legitimate and necessary purposes to deliver high-quality services to you.

Data you provide directly:

• Full name, date of birth, and gender upon account registration.
• An active email address and mobile phone number.
• Residential address including state and postcode.
• Identity card or passport details for KYC verification requirements.
• Bank account details, card numbers, or digital wallet information for processing deposits and withdrawals.
• Account password (stored in an unreadable hashed format).

Automatically collected data:

• Your IP address and network information.
• Device type, operating system, and browser version used.
• Platform activity logs including games played, bets placed, and session duration.
• Approximate geolocation data based on IP address (not GPS).
• Cookie data and session identifiers generated during platform use.
• Records of deposit and withdrawal transactions and bonus history.

All personal data collected by fugi9 is processed on a lawful basis and solely for the purposes stated below. We will not process your data for any other purpose without first notifying you and obtaining your consent.

• Account management: Securely creating, verifying, and maintaining your user account on the fugi9 platform.
• Transaction processing: Processing deposits, fund withdrawals, and all financial transactions in your account accurately and promptly.
• Identity verification (KYC): Fulfilling legal obligations related to anti-money laundering (AML) and counter-terrorism financing (CFT) as required by the relevant authorities.
• Customer Support: Handling your enquiries, complaints, and support requests promptly and effectively across all support channels.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and other cybersecurity threats.
• Platform improvements: Analysing usage patterns and feedback to continuously improve the user experience and performance of the fugi9 platform.
• Marketing communications: Sending information about promotions, bonuses, special offers, and platform updates (with your consent, and unsubscribable at any time).
• Legal compliance: Complying with all applicable legal requirements, regulations, and authority directives.

Fugi9 does not sell, rent, or transfer your personal data to third parties for marketing or purely commercial gain. However, there are specific situations where we need to share your data with the following parties for legitimate operational purposes:

All third parties that receive your data from fugi9 are bound by strict confidentiality and data protection agreements. They are only permitted to process your data in accordance with fugi9's instructions and for specified purposes.

Fugi9 continually invests in the latest security infrastructure to ensure your personal data is protected from unauthorised access, disclosure, alteration, or destruction. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and fugi9 servers.
• Sensitive data stored in our databases is encrypted using the AES-256 encryption algorithm.
• User passwords are stored as irreversible cryptographic hashes (bcrypt/Argon2).
• Two-factor authentication (2FA) is available and encouraged for all user accounts.
• 24/7 security monitoring with active intrusion detection systems (IDS/IPS).
• Regular independent security audits to identify and address vulnerabilities.
• Internal access control based on the principle of least privilege — only staff who require it may access user data.
• A comprehensive incident response plan to manage any security breaches promptly.

While we employ the strongest security measures available, no system in the world can guarantee 100% absolute security. You are also responsible for keeping your own password and device secure.

Fugi9 uses cookies and similar tracking technologies to enhance your experience on the platform, ensure certain features function correctly, and analyse how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Strictly Necessary Cookies: Required for core platform operations such as login verification, session management, and security. Cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve its functionality and performance.
• Functional Cookies: Storing your preferences such as language, display settings, and saved login details for your convenience.
• Analytics Cookies: Helping us understand aggregate and anonymised platform usage patterns for continuous improvement.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect specific features of the fugi9 platform, such as staying logged in or personalised display settings.

As a fugi9 user and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by us. fugi9 fully respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact fugi9's Privacy Officer by email at [email protected]. We will process your request within 30 calendar days from the date of receipt, in accordance with PDPA requirements.

Fugi9 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable laws and regulations. Our principle is to never retain data longer than necessary.

• Active account data: Retained for as long as your account remains active on the fugi9 platform.
• After account closure: Basic data is retained for 5 years for legal compliance, fraud prevention, and resolution of any outstanding claims.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and tax legislation.
• KYC Records: Retained for 5 years after account closure in accordance with the Anti-Money Laundering Act (AMLA) requirements.
• Security logs: Retained for 12 months for incident investigation and security audit purposes.
• Marketing data: Deleted within 30 days after you withdraw consent or unsubscribe.

Once the retention period ends, your personal data will be securely deleted or permanently anonymised so it can no longer be linked back to you.

In operating the fugi9 platform, your personal data may be processed or stored on servers located outside Malaysia. This may occur when we use technology providers, cloud infrastructure, or international payment processors.

Any transfer of personal data outside Malaysia is carried out only when we are satisfied that an adequate level of protection exists in the destination country, or when we have implemented appropriate safeguards such as:

• Standard contractual clauses approved by the relevant data protection authority.
• Data processing agreements requiring recipients to comply with security standards equivalent to or exceeding those mandated by Malaysia's PDPA.
• Data protection impact assessments (DPIA) for large-scale or high-risk data transfers.

The fugi9 platform is an online gambling service restricted to users aged 18 years and above only. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If we discover or are informed that we have collected personal data from a minor, we will take immediate steps to:

• Deleting all data related to the individual from our systems.
• Immediately closing the account in question.
• Returning any deposited funds through the appropriate channels.
• Reporting the incident to the relevant authorities if required.

Parents or guardians who discover that their child has registered an account on fugi9 without permission are required to contact us immediately at [email protected] for immediate action.

Fugi9 reserves the right to review and amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The effective date of the latest Policy is always displayed at the top of this page.

When we make material changes to this Policy — meaning changes that significantly affect how we use your personal data — we will notify you via:

• A clear notice on the fugi9 platform homepage before any changes take effect.
• Email to your registered address at least 14 days before the changes take effect.
• A pop-up notice will appear at login after an amended Policy comes into effect.

Your continued use of the fugi9 platform after the effective date of the amended Policy constitutes your acceptance of those changes. If you do not agree with the changes made, you have the right to close your account before they take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact fugi9's Privacy Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours at fugi9.pro
• Response time: Within 2 business days for general enquiries; 30 days for formal data subject rights requests.