Privacy Policy
This Privacy Policy explains how mas9 collects, uses, stores, and protects your personal data when you access or use the Platform at https://mas9.cam. We are committed to handling your information transparently and responsibly.
How We Protect Your Privacy
These six principles guide every data decision at mas9. They summarise our approach — the full legal detail is set out in the policy below.
Data Minimisation
We only collect personal data that is strictly necessary for operating your Account, processing payments, and complying with KYC and anti-money-laundering obligations.
No Third-Party Sale
mas9 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is not a product we monetise.
Encryption at Every Layer
All data transmitted between your device and our servers is protected by 256-bit TLS/SSL encryption. Sensitive stored data — including payment records — is encrypted at rest.
Defined Retention Periods
We keep your data only for as long as legally required or operationally necessary. Personal data associated with closed accounts is deleted or anonymised within the retention schedule set out in this Policy.
Your Rights Are Respected
You have the right to access, correct, and request deletion of your personal data. You may also object to certain processing or request data portability. These rights are described in full in Section 8.
Transparent Purpose Specification
Every category of data we collect is mapped to a specific, clearly stated processing purpose. We do not collect data "just in case" — each data point has a justified reason for existing.
1. Introduction
This Privacy Policy ("Policy") is issued by mas9, the operator of the online gaming platform accessible at https://mas9.cam ("Platform", "we", "us", "our"). This Policy applies to all individuals who visit, register on, or otherwise interact with the Platform ("User", "you", "your").
We understand that the privacy of your personal data matters. This Policy is designed to give you clear, complete information about the categories of data we collect, the specific purposes for which we process that data, the parties with whom we may share it, the security measures we apply, and the rights you have in relation to your personal data.
By registering an Account or continuing to access the Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of the broader contractual relationship between you and mas9, and should be read in conjunction with our Terms & Conditions.
2. Definitions
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a natural person, including name, identification number, contact details, IP address, and financial data. |
| "Processing" | Any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or any other handling of that data. |
| "Data Controller" | mas9, as the entity that determines the purposes and means of processing Personal Data collected via the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of mas9 in accordance with our instructions (e.g., payment processors, KYC verification providers). |
| "KYC" | Know Your Customer — the identity and age verification process applied to all registered Accounts, including document submission and review. |
| "Cookies" | Small data files placed on your device by the Platform for the purpose of session management, preference storage, and analytics. |
| "Account" | A personal registered user account created on the mas9 Platform. |
3. Categories of Personal Data We Collect
mas9 collects the following categories of Personal Data from Users:
3.1 Identity & Registration Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (for age verification — must confirm 21 years or above)
- Gender (where provided voluntarily)
- Nationality and country of residence
- MyKad number or passport number (for Malaysian users and international players respectively)
- A photograph or scan of your identity document (submitted during KYC verification)
3.2 Contact Data
- Email address (used for account communications and support)
- Malaysian mobile phone number or international contact number
- Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam) and postcode
3.3 Financial & Payment Data
- Payment method identifiers — e-wallet account references (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank), DuitNow IDs, FPX reference numbers
- Deposit and withdrawal transaction records, including amounts in MYR and timestamps
- Source of funds documentation submitted for enhanced due diligence
- Cryptocurrency wallet addresses where applicable (USDT, BTC)
3.4 Technical & Usage Data
- IP address and approximate geolocation at time of login
- Device type, operating system, and browser version
- Session timestamps (login, logout, duration)
- Pages visited, games played, bets placed, and in-platform navigation path
- Cookies and similar tracking technology data (see Section 10)
3.5 Communications Data
- Live chat transcripts between you and our support team
- Email correspondence relating to your Account or any complaint
- Voluntary survey or feedback responses submitted through the Platform
4. How We Collect Personal Data
mas9 collects Personal Data through the following channels and mechanisms:
- Account Registration: Data you provide directly when creating a new Account on the Platform, including name, email, phone number, and date of birth.
- KYC Verification Process: Identity documents, photographs, and source of funds documentation submitted in response to our verification requirements.
- Deposit and Withdrawal Transactions: Payment method data and transaction records generated when you make deposits or request withdrawals using Malaysian payment channels.
- Platform Usage: Technical and behavioural data collected automatically as you navigate the Platform, including through cookies, server logs, and session tracking.
- Customer Support Interactions: Data provided when you contact our support team via live chat or email, including the content of those communications.
- Responsible Gambling Tools: Data generated when you set deposit limits, self-exclusion preferences, or access responsible gambling resources on the Platform.
- Third-Party Data Processors: Identity verification and fraud screening data received from our KYC and AML compliance service providers, acting as Data Processors under contract.
5. Purposes of Processing
mas9 processes your Personal Data for the following specific and documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation & management | Identity, contact, login credential data |
| Age & identity verification (KYC) | Identity documents, date of birth, facial image |
| Payment processing (deposits & withdrawals) | Financial data, payment method identifiers, transaction records |
| Anti-money-laundering (AML) compliance | Financial data, source of funds documentation, transaction patterns |
| Fraud detection & prevention | Technical data, IP address, transaction patterns, device fingerprint |
| Customer support & complaint resolution | Communications data, account history, transaction records |
| Responsible gambling program delivery | Usage data, wagering history, self-exclusion preferences |
| Platform improvement & analytics | Anonymised or aggregated technical and usage data |
| Legal and regulatory compliance | Identity data, financial records, communications (as required by law) |
| Marketing communications (with consent) | Contact data, preference data — only where you have opted in |
6. Legal Basis for Processing
mas9 processes Personal Data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are:
- Contractual Necessity: Processing required to fulfil the contract between you and mas9 — including Account creation, payment processing, KYC verification, and customer support. Without this processing, we cannot provide the Platform Service.
- Legal Obligation: Processing necessary to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, tax reporting, and regulatory licence conditions imposed by our international licensing authority.
- Legitimate Interests: Processing necessary for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, Platform security, responsible gambling monitoring, and internal analytics to improve the service.
- Consent: Where you have given explicit consent, such as opting into marketing communications. You may withdraw consent at any time by contacting us.
7. Data Sharing & Third-Party Disclosure
7.1 Contracted Data Processors
mas9 engages a limited number of carefully selected third-party service providers who process Personal Data on our behalf as Data Processors, bound by contractual data protection obligations. These include:
- KYC / Identity Verification Providers: Process identity documents and perform age and identity checks on our behalf.
- Payment Processing Partners: Malaysian payment channel operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank) process transaction data necessary to complete deposits and withdrawals.
- Cloud Infrastructure Providers: Host Platform data on secure, encrypted servers with contractual data protection obligations in place.
- Customer Support Technology Providers: Operate the live chat system used to deliver 24/7 player support.
- Fraud & AML Screening Providers: Screen transactions and account behaviour against global fraud and money laundering risk databases.
7.2 Legal Disclosure
mas9 may disclose Personal Data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. Where practicable and legally permitted, we will notify affected users of such disclosures.
7.3 What We Do Not Do
mas9 does not sell, rent, lease, or otherwise transfer your Personal Data to any third party for their own independent commercial purposes. Your data is not used to build third-party marketing profiles, and we do not participate in data broker networks.
8. Your Data Rights
Subject to applicable data protection law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your Personal Data held by mas9:
Right of Access
Request a copy of all Personal Data mas9 holds about you, along with information about how it is processed.
Right of Rectification
Request correction of any inaccurate or incomplete Personal Data we hold about you.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and no legal obligation requires retention.
Right to Restriction
Request that we limit processing of your data in specific circumstances, such as while you contest the accuracy of the data.
Right to Portability
Request that we provide your Personal Data in a structured, machine-readable format where technically practicable.
Right to Object
Object to processing based on legitimate interests, including the right to opt out of direct marketing communications at any time.
To exercise any of the above rights, please submit a written request to our support team via live chat or email at . We will acknowledge your request within five (5) business days and aim to respond substantively within thirty (30) days.
9. Data Retention
mas9 retains Personal Data for the minimum period necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. Key retention periods are as follows:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | AML and regulatory compliance |
| Financial transaction records | 7 years from transaction date | Legal and tax record-keeping obligations |
| KYC documents | Duration of account + 5 years post-closure | Anti-money-laundering regulatory requirement |
| Customer support communications | 3 years from last interaction | Dispute resolution and service quality |
| Marketing consent records | Until consent withdrawn + 3 years | Evidence of lawful processing basis |
| Technical / usage logs | 13 months rolling | Security monitoring and fraud detection |
Following the expiry of the applicable retention period, Personal Data is either securely deleted or irreversibly anonymised such that it can no longer be associated with any identifiable individual.
10. Cookies & Tracking Technologies
10.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, improve user experience, and provide analytical information to site operators.
10.2 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the Platform to operate. These include session management cookies that keep you logged in during your visit. These cannot be disabled without disrupting Platform functionality.
- Functional Cookies: Store your preferences (such as language settings or deposit limit preferences) so you do not need to re-enter them each visit.
- Analytics Cookies: Collect anonymised or aggregated data about how users navigate the Platform, helping us identify and fix usability issues. The data collected does not identify you personally.
- Security Cookies: Support fraud detection and bot-prevention measures to protect your Account and the integrity of the Platform.
10.3 Managing Cookies
You may control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. Please be aware that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in and accessing your Account balance.
11. Data Security
mas9 implements a layered technical and organisational security programme to protect your Personal Data against unauthorised access, loss, destruction, alteration, or disclosure. Key measures include:
- Transport Encryption: All data transmitted between your device and our servers is protected by TLS 1.2 or higher (256-bit SSL certificate).
- Encryption at Rest: Sensitive stored data, including payment records and identity documents, is encrypted using industry-standard encryption protocols.
- Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo regular security training and background screening.
- Multi-Factor Authentication: Internal systems handling Personal Data require multi-factor authentication for staff access.
- 24/7 Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity on our infrastructure around the clock.
- Regular Security Audits: Our systems and processes are subject to periodic independent security review and penetration testing.
Despite these measures, no internet transmission or digital storage system is completely immune from security risks. You should also take steps to protect your own Account by using a strong, unique password and enabling any available two-factor authentication on your Account.
12. Protection of Minors
The mas9 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, store, or process Personal Data belonging to individuals under 21 years of age. Age verification is a mandatory step in our Account registration and KYC process.
If mas9 becomes aware that Personal Data has been collected from an individual who is under 21 years of age, we will take immediate steps to close the associated Account and delete the relevant data. Parents or guardians who believe their child may have registered an Account on the Platform should contact us immediately at .
13. International Data Transfers
As mas9 operates under international licensing and uses globally deployed cloud infrastructure and third-party Data Processors, your Personal Data may be transferred to and stored in countries outside Malaysia. Where such transfers occur, mas9 ensures that appropriate contractual safeguards are in place with recipient entities to provide a level of protection equivalent to that which applies under applicable data protection standards.
Specifically, all international Data Processors engaged by mas9 are bound by contractual data protection clauses that require them to process Personal Data only in accordance with our documented instructions and to maintain security measures equivalent to our own standards.
14. Changes to This Privacy Policy
mas9 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Last Reviewed" date at the top of this Policy will be updated to reflect any material revision.
Where changes are material — meaning they significantly affect your rights or the way we process your data — we will provide reasonable advance notice, either by displaying a notice on the Platform homepage or by sending an email to your registered address. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.
The current version of this Privacy Policy is always available at https://mas9.cam/privacy-policy.
15. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your Personal Data, please contact the mas9 data team through the following channels:
- Email: — for formal data rights requests, data deletion enquiries, and privacy-related complaints.
- Live Chat: Available 24/7 on the Platform for general privacy questions and to initiate formal data requests. Average first response under 90 seconds.
- Terms & Conditions: For the contractual terms governing your Account, see our Terms & Conditions page.
- Responsible Gambling: For self-exclusion requests and responsible gambling tool activation, visit our Responsible Gambling page.
We will acknowledge all formal Privacy Policy requests within five (5) business days and aim to respond substantively within thirty (30) calendar days. Where a request is particularly complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension.
This Privacy Policy was last reviewed and updated in January 2026. The most current version is always available at https://mas9.cam/privacy-policy.
Have Privacy Questions?
Our support team is available 24/7 to answer any questions about how we handle your personal data. You can also read our Terms & Conditions or visit the FAQ for more information about your account.
21+ Only. Please gamble responsibly. For support resources, visit our Responsible Gambling page.