This Privacy Policy explains how the 409 platform collects, uses, stores, and protects the personal information of users in Malaysia. We are committed to handling your data transparently and responsibly.
Effective Date: 1 January 2026. This policy applies to all registered users of the 409 platform.
When you register and use the 409 platform, we collect various categories of information to ensure our services run smoothly and securely. The information collected includes:
Full name, email address, phone number, date of birth, and identification details such as your IC number submitted during the identity verification process. This information is required to create a valid account and meet compliance requirements.
Transaction details in Malaysian Ringgit (RM), bank account holder name, and records of deposits and withdrawals. We do not store your credit card numbers or online banking passwords directly—all payments are processed through encrypted channels.
IP address, device type, operating system, browser version, and usage data such as pages visited, session duration, and in-platform actions. This information helps us identify technical issues and improve the user experience.
Information collected by 409 is used for specific and legitimate purposes. We do not sell or rent your personal data to any third party for marketing purposes.
The 409 platform uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small files stored on your device when you visit our platform.
You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality of some parts of the platform.
409 user data is stored on servers protected by industry-standard security measures. Retention periods vary depending on the type of information and operational or legal compliance requirements. Active account data is retained for as long as the account exists, while transaction data is kept for the period required by accounting and compliance obligations.
All data transmitted between your device and the 409 platform is protected with SSL encryption. We enforce strict internal access controls, ensuring only authorised personnel can access sensitive user data. Our systems are also continuously monitored to detect any security threats.
409 does not share users’ personal information with third parties for marketing purposes. However, we may share necessary data with authorized payment processors to facilitate MYR transactions, or with relevant authorities when required by law. All third-party partners must comply with equivalent data security standards.
As a 409 platform user, you have the following rights regarding the personal data we hold:
To exercise any of the rights above, please contact the 409 support team or visit FAQ page for further guidance.
409 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any changes will be published on this page along with a new effective date. We encourage you to review this page periodically.
For material and significant changes, we will make reasonable efforts to notify users via in-platform notifications or an email to the address registered on your account.
If you have any questions or concerns, or wish to exercise your data privacy rights, please contact us via:
We are committed to responding to all privacy enquiries within a reasonable timeframe. Your security and trust are 409's top priority.
The 409 team is here to help. Register an account, log in, or browse our FAQ for more information.