9winbox Privacy Policy – Protection of Your Personal Data

1 Introduction

9winbox ("we", "Platform", or "9winbox") is committed to protecting the privacy of every user who entrusts us with their personal information. This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

We understand that in today's digital world, privacy is not merely a choice — it is a fundamental necessity. We therefore approach data management with full transparency: you have the right to know what we collect, why we collect it, and how it is used. No hidden agendas, no silent data selling.

This document is an integral part of Terms and Conditions 9winbox and should be read together for a full understanding of your rights and responsibilities as a user of our platform.

2 Types of Personal Data We Collect

Depending on how you interact with the 9winbox platform, we may collect the following categories of data:

Personal Identification Data:

• Full name as stated on your identification card
• National identification number (MyKad) or passport number
• Date of birth and gender
• Selfie with identification document (for KYC process)

Contact Information:

• Registered email address
• Mobile phone number
• Residential address (if required for verification)

Financial Information:

• Bank account number and bank name
• E-wallet details (Touch 'n Go eWallet, GrabPay, and others)
• Deposit and withdrawal transaction history

Technical & Usage Data:

• IP address and device information
• Browser or app type and version used
• General location data (state/city)
• Game history and betting activity
• Login and logout timestamps

3 Data Collection Methods

We collect your personal data through the following channels:

• Account registration: Information you provide when completing the registration form
• Identity verification (KYC): Documents uploaded for account verification purposes
• Financial transactions: Data collected during the deposit and withdrawal process
• Platform interactions: Activity data collected automatically while you use the platform
• Customer support: Information you share when contacting our support team
• Cookies and tracking technologies: Data collected via cookies, pixels, and similar technologies
• Trusted third parties: Information from payment service providers for transaction verification

4 Purpose of Personal Data Use

The personal data we collect is used solely for legitimate purposes directly related to platform operations, namely:

• Creating and managing your user account
• Processing deposits, withdrawals, and other financial transactions securely
• Conducting identity verification (KYC) as required by law
• Providing effective and responsive customer support
• Detecting and preventing fraud, money laundering, and other illegal activities
• Sending important notifications related to your account, transactions, and security
• Improving the user experience based on platform usage patterns
• Complying with applicable legal and regulatory obligations
• Sending promotional information and special offers (with your consent)

We will not use your data for any purpose beyond what is stated here without first obtaining your explicit consent.

5 Data Sharing with Third Parties

9winbox does not sell or disclose your personal data to third parties for marketing purposes. However, in the following limited situations, data sharing may occur:

• Payment service providers: Minimum data required to securely process your financial transactions
• Technology service providers: Companies that help us operate the platform, subject to strict confidentiality agreements
• Regulatory bodies and legal authorities: When required by law or a valid court order
• Fraud prevention services: To verify identity and prevent platform misuse

Every third party that receives your data is required to sign a strict data protection agreement and may only use the data for the specified purpose. They are not permitted to process your data for their own interests.

6 Data Storage & Security Measures

The security of your personal data is our highest priority. The following are the technical and organisational measures we have implemented:

• 256-bit SSL encryption for all data transmitted between your device and our servers
• Data encryption at rest for all sensitive information stored in our database
• Tiered access control — Only authorised staff with a legitimate job requirement may access user data
• Periodic security audits by internal security teams and independent third parties
• 24/7 threat monitoring via automated intrusion detection systems
• Secure data backup stored in physically and digitally secured data centres

Data retention period:

• Active account data: Retained for as long as your account remains active
• Financial transaction data: Retained for 7 years for legal compliance
• Activity log data: Retained for 12 months
• Closed account data: Deleted within 90 days after the compliance retention period ends

7 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our support team via 24/7 live chat or our support email. No charges apply for reasonable requests.

8 Cookie Policy

9winbox uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Mandatory Essential Cookies — Required for the platform to function properly, including login session verification and security. These cookies cannot be disabled.
• Optional Functional Cookies — Saves your preferences such as language, theme, and other settings for a smoother return experience.
• Analytics Analytics Cookies — Helps us understand how users interact with the platform so we can make meaningful improvements.

You can manage your cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of some features on our platform.

9 Children's Privacy

9winbox is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If you discover that a child has provided us with personal information without valid parental or guardian consent, please contact us immediately. We will take steps to delete that information as quickly as possible and close the account in question.

Parents and guardians concerned about their children's online activities are encouraged to use available parental control tools and have open conversations with their children about online safety.

10 Amendments to This Privacy Policy

9winbox reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology used. When significant amendments are made, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear notice on the platform's home page for at least 7 days
• Sending email notifications to all registered users for material amendments

Continued use of the 9winbox platform after amendments take effect will be considered your acceptance of the revised policy. If you do not agree with the amendments, you may close your account in accordance with the procedures set out in Terms and Conditions us.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the 9winbox platform — the fastest way to get a response
• Support Email: [email protected] — response within 1–2 business days
• FAQ Page: Visit FAQ page for answers to frequently asked questions