409 Privacy Policy — Malaysian User Data Protection
This policy explains how 409 collects, uses, stores, and protects your personal information. Your privacy is our priority, and we are committed to handling your data responsibly.
Last updated: 2026
1 Information We Collect
When you register and use the 409 platform, we collect several categories of information to ensure our services run smoothly and securely for users in Malaysia.
Account Information
During registration, we collect your full name, email address, phone number, date of birth, and any identity verification details required. This information is used to create and verify your account and to meet applicable legal compliance requirements.
Payment Information
To process deposits and withdrawals in MYR, we collect transaction-related information including the payment method used — such as DuitNow or FPX — and your registered bank account number. We do not store credit or debit card details directly; all transactions are processed through secure payment gateways.
Device & Browser Information
We automatically collect technical information including device type, operating system, browser type, IP address, time zone, and usage data such as pages visited and time spent on the platform. This information helps us identify technical issues and improve the overall user experience.
Cookies & Tracking
The 409 platform uses cookies and similar tracking technologies to maintain your login session, remember your language preferences and display settings, and analyse overall usage patterns. You can manage cookie settings through your browser, though some platform features may be affected if cookies are fully disabled.
2 How Your Data Is Used
The information we collect is used for specific, limited purposes. 409 does not use user data for any purpose unrelated to the provision of platform services.
- Account management: Creating, verifying, and maintaining user accounts, including processing password reset requests.
- Transaction processing: Processing deposits and withdrawals in MYR, verifying identities for financial transactions, and maintaining the required transaction records.
- Platform security: Detecting suspicious activity, preventing fraud, and ensuring each account is accessed only by its rightful owner.
- Service improvement: Analysing aggregated usage data (without identifying individuals) to improve platform quality, loading speed, and overall user experience.
- Communications: Sending account-related notifications, transaction confirmations, and important updates regarding policy or service changes.
- Legal compliance: Compliant with all legal obligations governing platform operations in Malaysia.
3 Data Storage & Security
The security of your personal data is a top priority at 409. We employ appropriate technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction.
All data transmitted between your device and 409's servers is protected by SSL (Secure Socket Layer) encryption, ensuring your information cannot be intercepted in transit. Account passwords are stored in hashed form and cannot be read even by our internal staff.
Account and transaction data is retained for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations. Once the data is no longer needed and there is no obligation to retain it, 409 will delete or anonymise it in accordance with established procedures.
While we take reasonable steps to protect your data, no system can guarantee absolute security. You are also responsible for keeping your 409 account password secure and not sharing your login credentials with anyone.
4 Sharing Information with Third Parties
409 does not sell, rent, or disclose your personal information to third parties for marketing purposes without your consent. However, there are limited situations where sharing information is necessary for platform operations:
- Service providers: We share the necessary information with service providers such as payment gateways, server infrastructure providers, and gaming software vendors. All providers are bound by strict confidentiality agreements and may only use the data for the specified purposes.
- Legal compliance: We may disclose information to the relevant authorities when required by law, court order, or to protect the legal rights of 409 and its users.
- Fraud prevention: In cases involving suspected fraud or unlawful activity, relevant information may be shared with the appropriate authorities for investigation purposes.
Outside of the situations above, your personal information remains under 409's control and is not shared with any party without your consent.
5 Your Rights as a User
As a 409 user in Malaysia, you have specific rights regarding the personal data we hold about you. We are committed to making it easy for you to exercise those rights.
You have the right to request a copy of the personal data we hold about you. Requests can be submitted via our support email.
If your data is inaccurate or out of date, you may request a correction. Some information can be updated directly in your account settings.
You may request the deletion of your account and associated data, subject to any applicable legal record-keeping obligations.
To submit any request relating to your privacy rights, please contact the 409 support team at [email protected]. We will process your request within a reasonable timeframe and keep you informed of the actions taken.
6 Policy Updates & Contact Us
409 reserves the right to update this Privacy Policy at any time. Users will be notified of any material changes via in-platform notifications or to their registered email address. The date of the latest update will always be displayed at the top of this page.
Continued use of the 409 platform after any changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we handle your data.
If you have any questions, concerns, or requests regarding this Privacy Policy, please get in touch with us:
- Email: [email protected]
- FAQ: Refer to the section FAQ for answers to common questions
Our support team will endeavour to address privacy-related enquiries within a reasonable timeframe and provide clear, helpful responses.