Privacy Policy 9win Malaysia – Data Protection & User Privacy on the Online Casino Platform

9win ("we", "our platform") is an online entertainment casino platform operating in Malaysia. We understand that trust is the foundation of our relationship with every member, and that trust begins with complete transparency about how we handle your personal data.

This Privacy Policy clearly and comprehensively describes how 9win collects, processes, stores, protects, and — in certain circumstances — shares the personal data you provide to us when using this platform, whether through account registration, gameplay activity, financial transactions, or communications with our support team.

This Privacy Policy applies to all users of the 9win platform, including registered members, website visitors, and anyone who interacts with the 9win platform or its services in any capacity. By accessing or using the 9win platform, you agree to the terms of this Privacy Policy.

9win collects several categories of personal data from members and users of our platform. This data is collected either directly from you or automatically as you use the 9win platform.

Data you provide directly to 9win:

• Full name as shown on official identification documents
• An active Malaysian mobile phone number
• A valid email address
• Payment method details (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks)
• Identity verification documents when required for the KYC (Know Your Customer) process
• Information you provide when communicating with the 9win support team

Data collected automatically during platform use:

• IP address and device information (device type, operating system, web browser)
• Usage log data — login times, pages visited, session duration
• Gaming activity records — games played, bets placed, wins and losses
• Transaction records — deposits, withdrawals, bonuses claimed
• Cookie data and similar tracking technologies (see Section 6)

Personal data collected by 9win is used for the following purposes, which are necessary for the provision of our platform services to members in Malaysia:

• Verifying identity and processing new account registrations
• Processing fund deposits and withdrawals via accepted Malaysian payment methods
• Providing customer support and responding to your enquiries in English
• Sending important notifications related to your account, transactions, and 9win promotions
• Detecting and preventing fraud, money laundering, and platform abuse
• Complying with legal and regulatory obligations under Malaysian law
• Enhancing the user experience and developing new features for the 9win platform
• Implementing responsible gambling programmes and monitoring usage patterns that may be cause for concern

9win does not use members' personal data for third-party marketing purposes. If you receive marketing communications from 9win via email or SMS, these are based on the consent you provided during registration, and you may opt out at any time by contacting our support team.

9win takes a highly cautious and limited approach to sharing members' personal data with third parties. We do not sell or disclose members' personal data to third parties except in the following limited circumstances:

Trusted Third-Party Service Providers:

• Payment processors and financial institutions that handle deposit and withdrawal transactions for 9win members — including providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and other Malaysian e-wallets
• Technology service providers that maintain 9win's server infrastructure and security systems
• Game software providers that supply titles in the 9win catalogue, who may require minimal technical data for game operation purposes
• Independent audit firms that verify 9win's game fairness and RTP compliance

Legally Required Disclosures:

• To Malaysian authorities where required by a court order, warrant or valid legal requirement
• To the Malaysia Financial Intelligence Unit (UFIU) or relevant law enforcement agencies in cases involving suspected money laundering or terrorism financing

All third parties that receive personal data of 9win members are bound by strict confidentiality agreements and are required to protect such data to security standards equal to or exceeding those of 9win itself.

Protecting members' personal data is the highest technical and operational priority at 9win. We continually invest in the latest security technologies and procedures to ensure your data remains safe and protected at all times.

The technical security measures implemented by 9win include:

• 256-bit SSL encryption for all communications between your browser and 9win's servers — ensuring that data transmitted cannot be intercepted by unauthorised parties
• Data-at-rest encryption for all sensitive data stored in 9win's databases
• Two-factor authentication (2FA) is available for all member accounts
• Round-the-clock security monitoring by automated systems that detect suspicious activity in real time
• Role-based access control — only staff with a legitimate operational need are permitted to access members' personal data
• Regular security audits by independent third parties to identify and address security vulnerabilities
• Secure data backup systems with regularly tested disaster recovery procedures

While 9win takes all reasonable steps to protect your personal data, no security system can be guaranteed to be 100% secure. We encourage members to take their own precautions — particularly by using strong passwords, enabling 2FA, and staying vigilant against phishing attempts.

The 9win platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand how members use our services. Cookies are small text files stored on your device by your web browser when you visit the 9win platform.

Types of cookies used by 9win:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled without affecting the basic functionality of the 9win platform.
• Performance & Analytics Cookies: Helps 9win understand how members interact with the platform — which pages are visited most, how long sessions last, and where members encounter difficulties. This data is used for ongoing platform improvements.
• Functional Cookies: Storing your personal preferences such as preferred language, display settings and saved login details for your convenience in future visits.
• Security Cookies: Used to detect suspicious login activity, prevent unauthorised access and protect your 9win account from security threats.

You can manage cookie settings through your web browser's preferences. However, disabling certain cookies may affect the functionality or security of your experience on the 9win platform. For more information on managing cookies, please refer to the help guide of your web browser.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as the data subject have the following rights with respect to your personal data held by 9win:

• Right of Access: You have the right to request a copy of the personal data held by 9win about you. Requests will be processed within 21 business days.
• Right to Rectification: You have the right to request the correction of any personal data we hold about you that is inaccurate, incomplete, or out of date.
• Right to Withdraw Consent: You have the right to withdraw your consent to the processing of personal data based on consent at any time, without affecting the validity of any processing carried out prior to the withdrawal.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Notification: You have the right to be informed about what personal data is collected, the purpose of collection and the parties to whom that data may be disclosed.

To exercise any of the rights above, please contact the 9win Privacy Officer by email at [email protected] stating the specific right you wish to exercise along with sufficient identity verification information. 9win will acknowledge receipt of your request within 3 working days and resolve it within the timeframe prescribed by Malaysian law.

9win retains members' personal data only for as long as it is needed for the purposes described in this Privacy Policy, or as required by applicable Malaysian law.

Data retention guidelines at 9win:

• Active account data: Retained for as long as the account remains active and throughout the period required to provide 9win's services to you
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements
• Customer support communication records: Retained for 2 years after the last interaction
• Security log data: Retained for 1 year for security investigation and audit purposes
• Game records: Retained for 2 years for dispute resolution and compliance audit purposes

Once a specified retention period has expired or data is no longer required for a legitimate purpose, 9win will securely delete or anonymise it using methods that ensure the data cannot be recovered by any party.

Closing an account does not necessarily result in the immediate deletion of all associated data — certain records will continue to be retained for the period required under Malaysian law even after the account is closed, particularly financial transaction records that are legally required to be kept.

9win reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, legislative changes in Malaysia, or changes to the services we offer members.

When 9win makes material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a prominent notice on the 9win platform's main page for a minimum of 14 days
• Sending email or SMS notifications to registered members regarding changes that materially affect their privacy rights

Your continued use of the 9win platform following any changes to this Privacy Policy constitutes your acceptance of the updated version. If you do not agree with any changes, please discontinue use of the 9win platform and contact our support team to close your account.

We encourage all 9win members to review this Privacy Policy periodically — not too frequently, but at least once every six months — to stay informed about how we handle your personal data.

If you have any questions, concerns or complaints regarding this Privacy Policy or how 9win handles your personal data, please do not hesitate to contact our Privacy Officer. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

You may reach 9win's Privacy Officer through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in your email subject line
• Live Chat: Available on the 9win platform 24 hours a day, 7 days a week — simply indicate that you wish to speak with the privacy team

9win will acknowledge receipt of your complaint or enquiry within 3 business days and provide a substantive response within 21 business days. For more complex cases requiring further investigation, we will notify you of an extended timeline if necessary.

If you believe that 9win has failed to address your complaint satisfactorily, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels of the Ministry of Communications and Digital Malaysia.