Privacy Policy & Data Protection 9win Privacy

1. Introduction

9win deeply respects the privacy of every user who trusts our platform. This Privacy Policy is designed to provide full transparency on how we collect, process, store, and protect your personal information when you use 9win's services.

As an online betting platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and international data protection standards. We take this responsibility seriously — not merely to comply with the law, but because we believe your trust is the foundation of our long-term relationship.

If you have any questions after reading this policy, our team is ready to help. Contact information is available at the end of this document.

2. Information We Collect

We collect various types of information depending on how you interact with the 9win platform. This information is divided into several categories:

2.1 Information You Provide Directly

• Full name as per identification document;
• Date of birth for age verification;
• Email address and mobile phone number;
• Residential address;
• Bank account or e-wallet details for deposit and withdrawal purposes;
• Copies of identification documents (MyKad, passport) during the KYC process.

2.2 Information Collected Automatically

• IP address and device location (city level);
• Device type, operating system, and browser version;
• Login session data including time and duration;
• Betting activity records and transaction history;
• Cookie data and unique device identifiers.

2.3 Information From Third Parties

In certain situations, we may receive additional information from identity verification service providers, payment providers, or fraud prevention agencies working with us — all solely for security and legal compliance purposes.

Data Category	Primary Purpose	Retention Period
Identity & KYC	Account verification, AML compliance	5 years after account closure
Financial Information	Deposit & withdrawal processing	7 years (audit requirement)
Activity Data	Security, fraud detection	2 years from the date of activity
Technical Data	Platform improvement, debugging	90 rolling days
Cookie Preferences	Personalized user experience	Until consent is withdrawn

3. How We Use Your Data

The information we collect is used for the following purposes, and no more:

• Service provision: Processing registrations, managing accounts, and enabling you to use all features of the 9win platform;
• Identity verification: Meeting KYC requirements and anti-money laundering (AML) legal compliance;
• Financial transaction processing: Processing deposits, withdrawals, and any bonus payments or wins;
• Account security: Detecting suspicious activity, preventing fraud, and protecting the integrity of the platform;
• Customer support: Responding to inquiries, resolving complaints, and providing technical support;
• Platform improvement: Analyzing usage patterns to improve the interface, performance, and overall user experience;
• Marketing communications: Sending promotional offers and platform notices — only to users who have given consent to receive such communications.

4. Data Sharing With Third Parties

9win does not sell or rent your personal data. However, in the course of operating the platform, we work with the following parties who may require limited access to your data:

• Payment providers: Banks, e-wallets, and payment processors that handle your financial transactions — they receive only the minimum information required to process payments;
• Game software providers: Companies that supply casino and sports games to our platform, which require session data to ensure smooth gameplay;
• Identity verification services: Third-party agencies that assist us in verifying KYC documents securely and efficiently;
• Statutory authority: When required by Malaysian law or a valid court order, we will disclose the necessary information to the relevant authorities.

All third-party partners we work with are bound by strict data protection agreements, ensuring they handle your information to the same high privacy standards we uphold.

5. Information Security

9win invests seriously in cybersecurity infrastructure to ensure your data is always protected. The security measures we employ include:

• Data encryption in transit using TLS 1.3 protocol;
• Data encryption at rest using AES-256 algorithm;
• Two-factor authentication (2FA) for user account and internal system access;
• Regular security audits by independent cybersecurity firms;
• 24-hour real-time threat monitoring by the internal security team;
• Strict role-based access controls for internal staff;
• Penetration testing conducted on a regular basis.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to also take protective measures such as using a strong password and not sharing your login details with anyone.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the 9win platform. They allow us to recognize your device, save your preferences, and deliver a more personalized and seamless experience on every visit.

6.2 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled;
• Performance Cookies: Collecting information on how you use the platform to help us improve our services;
• Functional Cookies: Saving your preferences such as language and display settings;
• Marketing Cookies: Used with your consent to display more relevant promotional content.

You can manage your cookie settings through your web browser at any time. Disabling certain cookies may affect the functionality of some areas of the platform.

7. Your Rights as a User

Under Malaysia's PDPA and our own policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the 9win customer support team. We will process your request within 14 business days. For more complex cases, this period may be extended to up to 30 days, and we will notify you accordingly.

8. Data Retention Period

9win does not retain your personal data longer than necessary for the original purpose of collection, or any minimum retention period required under applicable Malaysian law.

After your account is closed — whether at your request or by platform decision — core identity and financial records will be retained for the period required by applicable AML and financial audit regulations. Data that is no longer needed will be securely deleted using methods that ensure it cannot be recovered.

9. Children's Privacy

The 9win platform is strictly for individuals who are of age 18 years and above. We do not intentionally collect or process personal data of minors. Should we discover that a child's data has been collected inadvertently, we will immediately take steps to delete the information and close the relevant account.

If you suspect that a minor is using this platform, please contact us immediately so that appropriate action can be taken.

10. Changes to the Privacy Policy

9win reserves the right to update this Privacy Policy from time to time in response to changes in legislation, industry practices, or improvements to how we operate. Any significant changes will be communicated to you via your registered email or a clear notice within the platform, at least 14 days before the changes take effect.

The "Updated" date at the top of this document always reflects the latest effective version of the Privacy Policy. We encourage you to review this page periodically.

11. Contact Us

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly on the 9win platform
• Email: [email protected]
• FAQ: Browse the page FAQ for an immediate response

We are committed to responding to all privacy-related inquiries within 3 business days and resolve more complex cases within 14 to 30 days.