Your Privacy is Fully Protected
by ob9my

01 Information We Collect

ob9my collects your personal data solely for the purpose of managing accounts, processing financial transactions, and ensuring our services operate securely and in compliance with international licensing requirements. The categories of information we collect are as follows:

1.1 Account Registration Information

When you register an account at ob9my, we collect:

• Full name as shown on your MyKad or valid identification document
• Date of birth (to verify that you are 21 years of age or older)
• Active email address
• Malaysian mobile phone number
• Username and encrypted password
• Current residential address

1.2 Identity Verification Information (KYC)

As a responsible platform that complies with anti-money laundering (AML) requirements, ob9my may require a copy of an identification document such as a MyKad, passport or driving licence for account verification purposes. These documents are stored securely and used solely for compliance purposes.

1.3 Financial Transaction Information

Every deposit and withdrawal made through payment methods such as Touch 'n Go eWallet, DuitNow, Online Banking (FPX), Boost, ShopeePay and cryptocurrency (USDT, BTC, ETH) is automatically recorded in our system. These records include the amount, date and time, payment method and transaction status.

1.4 Technical and Usage Data

• IP address and network location information
• Device type, operating system and web browser used
• Session data including pages visited, time spent and clicks
• Error logs and technical reports

02 How Information Is Used

The data we collect is used for specific and defined purposes. ob9my does not use your data for any purpose beyond the scope stated below:

• Account management: creating, verifying and managing your member account, including processing minimum deposits of RM10 and minimum withdrawals of RM50.
• Transaction processing: processing all financial transactions accurately and securely, including withdrawals within 5–30 minutes.
• Customer support: enabling our 24/7 support team to assist you effectively in Bahasa Melayu and English.
• Platform security: detecting fraudulent activity, unauthorised access and protecting the accounts of all members.
• Legal compliance: meeting international licensing reporting requirements and preventing money laundering.
• Service improvement: analysing aggregated usage patterns to improve the overall user experience.
• Account-related communications: sending important notifications relating to your account, transactions and bonuses such as the 150% Welcome Bonus up to RM500.

03 Sharing with Third Parties

ob9my does not sell or rent your personal data to any third party. However, in certain circumstances, we may share necessary information with:

3.1 Payment Service Providers

Approved e-wallet and payment service providers receive the minimum transaction details required to process deposits and withdrawals. All such providers are bound by strict confidentiality agreements.

3.2 Regulatory Bodies and Authorities

As a licensed platform, ob9my is required to comply with directives from licensing authorities and relevant law enforcement agencies where there is a legitimate investigation or court order. Such disclosures are made only to the extent necessary.

3.3 Technical Service Providers

Technology partners who assist in operating the platform infrastructure, cybersecurity and analytics have limited access to the data required. They are not permitted to use that data for any purpose other than what is contracted.

04 Data Security

ob9my implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, alteration, disclosure or destruction:

• Data encryption in transit using TLS/SSL 256-bit protocols
• Data encryption at rest using AES-256 algorithm
• Role-based access control — only authorised personnel can access sensitive data
• Continuous security monitoring and regular vulnerability assessments
• Two-factor authentication (2FA) procedures available for additional account protection
• A comprehensive incident response plan in the event of a security breach

While we take reasonable steps to protect your data, no system can guarantee absolute security. We encourage you to use a strong password and not share your account details with anyone.

05 Your Rights as a User

ob9my recognises your rights regarding personal data and is committed to making it easy for you to exercise those rights:

5.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This request can be submitted via our live chat service or email.

5.2 Right of Rectification

If any of your personal data is inaccurate or incomplete, you may request that it be corrected. We will process rectification requests within a reasonable timeframe.

5.3 Right of Erasure

You may request deletion of your account and personal data, subject to legal compliance requirements. Some data may need to be retained for a certain period based on our licensing obligations.

5.4 Right to Object

You may object to the processing of your personal data for certain purposes, particularly marketing communications. We provide an option to unsubscribe from communications you do not wish to receive.

06 Cookies and Tracking Technologies

ob9my uses cookies and similar tracking technologies to improve the user experience on our website. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies Used

• Essential Cookies: required for basic website functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: collect information about how you use the website to help us improve our services.
• Functional Cookies: remember your preferences such as language and settings to provide a more personalised experience.

6.2 Cookie Controls

You can control and delete cookies through your web browser settings. Disabling certain cookies may affect the functionality and experience of using the ob9my website.

07 Data Retention

ob9my retains your personal data for as long as your account is active or as long as it is needed to provide services to you. After account closure, we will retain certain records for the period required by applicable laws and licensing regulations, particularly in relation to financial records and anti-money laundering compliance.

Data that is no longer required will be deleted or anonymised in accordance with established procedures. Specific retention periods depend on the type of data and the applicable legal requirements.

08 Changes to This Policy

ob9my reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any significant changes will be communicated to you through:

• A notification in your account upon your next login
• An email to the address registered in your account
• A prominent notice on the ob9my homepage

The "Updated" date at the top of this document indicates when this policy was last reviewed. Your continued use of ob9my services after changes take effect means you accept the updated Privacy Policy.

09 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Privacy Officer through the following channels:

• Live Chat: available 24/7 directly on the ob9my website in Malay and English
• Email: [email protected]

We aim to respond to all privacy-related enquiries promptly. Our team is ready to help you understand your rights and ensure your data is managed in accordance with this policy.