Privacy Policy for Nine Super App

Last Updated: 23/5/2025

A. Introduction

This Privacy Policy is issued by Wavpay Fintech Holding Sdn Bhd (Company No. 202101023726 (1424026-A)) (“WFHSB,” “we,” “us” and “our“) with respect to the provision of products services including the Nine Super App (“the App“), associated platforms (including the website https://nineapp.com.my/) as well as features and other services operated by WFHSB and its respective subsidiaries, affiliates, associated companies and jointly controlled entities (collectively referred to as “Services”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data (“User(s)”, “You” and “Your”) in compliance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia. By accessing and using our Services, you are deemed to have read and agreed to be bound by this Privacy Policy.

B. Notice

This Privacy Policy serves as a notice pursuant to the PDPA and we may modify, vary or update this Privacy Policy from time to time to reflect any changes to our privacy practices. You are advised to check from time to time should there be any amendments made by us towards this Privacy Policy. Any access or use of the Services by you on and after the date of the latest and amended Notice being published by us signifies your agreement to such amendments.

C. Information We Collect

We may collect and process personal data about you or someone else whom you have provided us with information of (the “third party”), that is, information that can identify you or such third party when you use our Services, which include but are not limited to the following (“Personal Data”):

  • Identity Information – Name, NRIC/Passport Number, Date of Birth, Nationality, Gender and Other identification details.
  • Contact Information – Phone Number, Email Address, Mailing Address, Residential Address and Other contact details.
  • Account Information – Username, Password and Transaction History.
  • Financial Information – Payment Details, E-Wallet Transactions and Banking Details.
  • Device & Technical Data – IP Address, Device Type, Location Data, Operating System and Browser Type.
  • Usage Data – App Interaction History, Service Preferences and Behavior.
  • Any other information that is relevant to enable us to provide you with the services you and/or the third party are, or someone else you know is seeking, which we receive from you through our Mobile App, Website, customer service centre, social media sites, walk-in or other contact or distribution channels.

You represent and warrant that you have obtained the consent of such Third Party or are otherwise entitled to provide us with their Personal Information and to view or change their information. You agree to indemnify us in the event we suffer any loss or damage as a result of your failure to comply with the same. The list of Personal Information stated above is not exhaustive and may include other personal information depending on the nature of the services or transactions.

Should you decline to provide any of the abovementioned personal data, we may not be able to grant you access and use of the Services.

D. How We Use Your Information

We may use your personal data for one or more of the following purposes:

  • Providing and Managing App Services – This includes registering your account, managing your profile and processing your transactions.
  • Security and Fraud Prevention – This includes verifying your identity (for authentication purposes), conducting risk assessments and monitoring suspicious behaviour (Risk Assessment).
  • Personalization & Service Enhancement – This includes customizing the App to your preferences, providing relevant content or recommendations and analysing usage trends to improve our services.
  • Regulatory Compliance – This includes ensuring compliance with applicable laws, responding to audits or investigations and handling requests from regulators or enforcement authorities.
  • Third-Party Partner Services – This includes sharing relevant personal data with our partners (with your consent, where required) to facilitate transactions or services made available through the Platform.
E. Disclosure of Personal Data

Your personal data provided to us shall be kept confidential. However, in order to provide you with effective and continuous Services, your personal data may be disclosed by us to the following third-party partners, for the purposes set our below:

  • Authorized Service Providers & Partners – To facilitate transactions, Services provided and support the functionality of services offered through the App.
  • Regulatory Authorities & Law Enforcement – Where disclosure is required by applicable laws or regulations.
  • Business Partners & Affiliates – To enable integration and coordination within the broader App ecosystem.
  • Third-Party Security & Analytics Providers – To improve App security, monitor usage and enhance performance of the App.

We do not sell, rent, or trade your personal data. Only anonymised and aggregated data may be shared for analytical purposes.

F. Data Protection and Security Measures

We will take all reasonable steps when processing the personal data provided to us. Our data protection measures may include, but are not limited to, the following:

  • Encryption & Secure Transmission – Protecting data both in transit and at rest using encryption protocols.
  • Access Control & Authentication – Restricting access to personal data to authorised personnel only.
  • Firewall & Intrusion Prevention – Monitoring and preventing unauthorised access attempts.
  • Regular Security Audits – Conducting periodic reviews to ensure compliance with recognised industry standards.

Nonetheless, as our Services is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of personal data you communicate to us and you do so at your own risk.

G. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This includes retaining data to:

  • a. Fulfill service delivery obligations.
  • b. Comply with legal, regulatory and audit requirements.
  • c. Resolve disputes and enforce agreements.

Once your personal data is no longer necessary for the Services or we no longer have a legal or business purpose for retaining your personal data, we shall take steps to erase, destroy, anonymise or prevent access or use of such personal data for any purpose other than compliance with this Privacy Policy or for purposes of safety, security, fraud prevention and detention in accordance with the requirements of applicable laws.

H. Access and Correction

You may, to the extent as permitted by the PDPA:

  • request for access to personal data provided by you; or
  • request for personal data provided by you to be corrected where the personal data is inaccurate, incomplete, misleading or not up-to-date.

Should:

  • you have any enquiries regarding this Privacy Policy or complaints in respect of the personal data provided by you;
  • you wish to access the personal data provided by you;
  • you wish to correct the personal data provided by you; or
  • you wish to withdraw your consent to us processing the Personal Data for any of the purposes as set out in this Privacy Policy.

Please send your request in writing to the contact information as provided in Clause L below.

We reserve our right to refuse to comply with your request for access and/or request for correction as stated above in circumstances permitted by the PDPA, in which case we will notify you of the same by notice in writing.

I. Cookies and Tracking Technologies

We may use cookies, tracking pixels and analytic tools in our App and website to improve user experience, analyse app performance and usage trends and strengthen security features.

You may instruct your browser or application, by changing its setting, to stop accepting cookies or to prompt you before accepting a cookie from our App and website. However, please note that disabling cookies may affect the functionality and performance of the App and website.

J. Third-Party Links & Services

The App may contain links to external websites or third-party services. WFHSB is not responsible for the privacy practices of these third parties. Users should review the respective privacy policies before sharing data.

K. Updates to the Privacy Policy

WFHSB reserves the right to modify this Privacy Policy at any time. Material changes will be communicated via the App or official website. Continued use of the App constitutes acceptance of the revised policy.

L. Contact Information

For inquiries, requests, or complaints regarding this Privacy Policy, please contact:

Nine Super App Support Team
Email: [email protected]
Phone: +6016 435 4199 / +6016 253 4199 / +6016 447 4199
Address: G-07-01, Level 7, Tower 1, Block G,
Mercu Mustapha Kamal, Neo Damansara,
No. 1 Jalan PJU 8/1, Bandar Damansara Perdana,
47820 Petaling Jaya, Selangor, Malaysia

By using the Nine Super App, you confirm that you have read, understood, and agree to this Privacy Policy. For additional terms related to website use, please refer to our Terms of Use.

M. Miscellaneous

In the event of any inconsistency between the English version and other language versions of this Privacy Policy, the terms of this English version shall prevail.