Privacy Policy a9pay –
Your Data Security is Our Priority

This Privacy Policy ("Policy") describes how a9pay ("we", "Platform") collects, uses, discloses, and protects your personal information when you use the website, mobile app, and services provided by a9pay.

This Policy applies to all users who register an account, visit our website, use the a9pay mobile app, or interact with any of our services. By using the a9pay platform, you agree to the collection and use of information as described in this Policy.

A9pay collects the information needed to provide a secure, seamless, and responsible service. The data we collect falls into several categories:

Every piece of information we collect is used for a specific and legitimate purpose. Here are the key purposes for which your data is used at a9pay:

• Account Management: Create and maintain your account, process registration, and manage your profile information.
• Financial Transaction Processing: Process deposits, withdrawals, and all financial activity on the platform securely and accurately.
• Identity Verification: Carries out mandatory KYC processes to keep the platform free from fraud and money laundering.
• Service Communications: Send account notifications, transaction updates, security alerts, and relevant promotional information.
• Platform Improvements: Analyse usage patterns to improve the user experience, enhance platform performance, and develop new features.
• Legal Compliance: Fulfil legal obligations, compliance regulations, and reporting requirements to the relevant authorities.
• Fraud Prevention: Detect and prevent suspicious activity, system abuse, and any form of fraud on the platform.

A9pay does not sell or rent your personal data to any third party. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: Transaction details required to process your deposits and withdrawals are securely shared with our payment gateway providers.
• Technical Service Providers: Third parties that help us operate the platform, such as cloud infrastructure providers, are bound by strict confidentiality agreements.
• Relevant Authorities: a9pay will disclose required information to the authorities when mandated by law, court order, or official investigation.
• Independent Identity Verification: Third-party identity verification service providers used in the KYC process are bound by strict data protection agreements.

Your data security is a responsibility we take seriously. a9pay implements multiple layers of technical and organisational protection to keep your data safe at all times:

• 256-bit SSL Encryption: All communications between your device and a9pay's servers are protected by military-grade encryption that cannot be broken.
• Two-Factor Authentication (2FA): An extra layer of security for your account through OTP verification sent to your mobile phone.
• 24/7 Security Monitoring: Our security team monitors suspicious activity around the clock and responds promptly to any threats.
• Internal Access Controls: Only staff with specific authorisation may access user data, and every access is recorded in an audit log.
• Regular Security Testing: Our platform undergoes regular penetration testing and independent security audits.

A9pay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use three main types of cookies:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Store your preferences such as language, preferred currency, and display theme for a more convenient experience.
• Analytics Cookies: Helps us understand how users interact with the platform for improvement purposes. This data is collected in aggregate and does not identify individuals.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the platform.

As an a9pay user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

A9pay does not retain your personal data longer than necessary. Our data retention periods are determined based on operational requirements and legal obligations:

• Active Account Data: Retained for the duration your account is active and for 5 years after account closure for audit and compliance purposes.
• Financial Transaction Records: Retained for 7 years in accordance with accounting legislation and anti-money laundering requirements.
• Security Logs: Retained for 12 months for security incident investigation purposes if needed.
• Session Cookie Data: Automatically deleted when you close your session or log out.
• KYC Documents: Retained for the duration of the active account period and 5 years after account closure in accordance with compliance requirements.

Once the retention period expires, your data will be securely deleted or converted into an anonymised format that cannot identify any individual.

A9pay reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When significant changes occur:

• You will receive a notification via the email registered to your account.
• In-app notifications will be displayed when you log in to the platform.
• The "Last Updated" date at the top of this document will be revised accordingly.

Continued use of the a9pay platform after any policy changes take effect will be considered your acceptance of the latest version of this Privacy Policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints about how we handle your personal data, our team is ready to help. We take all privacy-related feedback seriously and strive to provide thorough and timely responses.

• Email: [email protected] (response within 24 hours on business days)
• Live Chat: Available on the platform 24 hours a day, 7 days a week
• Response Time: Data rights requests are processed within 30 business days