Privacy Policy — 9kelab

Section 1 Introduction

9kelab ("we", "us", "our", "the Platform") is committed to safeguarding the privacy and personal data of all individuals who interact with our platform at https://9kelab.cam. This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared, and the rights available to data subjects with respect to their personal information.

This Policy applies to all persons who access or use the 9kelab website, create a Member Account, interact with our customer support channels, or otherwise engage with any service provided by 9kelab. It applies regardless of the device or browser used to access the platform, and regardless of whether the user is accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location.

By registering an account on 9kelab or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.

Section 2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, either alone or in combination with other available data — including name, email address, phone number, payment details, device identifiers, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, storage, organisation, structuring, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Subject" means the identifiable natural person to whom Personal Data relates — in the context of this Policy, this primarily refers to registered players and visitors to the 9kelab platform.
• "Data Controller" means 9kelab in its capacity as the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of 9kelab pursuant to a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for one or more specific purposes.
• "KYC" means Know Your Customer — the identity and document verification process required to confirm that players meet the eligibility requirements of the platform.

Section 3 Personal Data We Collect

9kelab collects several categories of personal data depending on how you interact with the platform. The following table summarises the main data categories and the context in which they are collected:

We do not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs, or health data unless specifically required for responsible gambling intervention purposes and with your explicit consent.

Section 4 How We Collect Your Data

9kelab collects personal data through a combination of direct collection, automated technical collection, and data received from trusted third-party sources. The primary collection methods are as follows:

• Direct Collection: Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or adjust your account preferences.
• Automated Technical Collection: Data collected automatically when you visit or interact with the 9kelab platform, including through cookies, server logs, device fingerprinting, and analytics tools. This includes IP addresses, session data, and browser behaviour patterns used for security and fraud detection purposes.
• Payment Processors: Limited financial verification data received from our payment processing partners (including Malaysian providers such as Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, and CIMB) in connection with deposit and withdrawal transaction processing.
• Identity Verification Services: Data returned from third-party KYC and identity verification providers in connection with the confirmation of account eligibility and document authenticity.
• Fraud Prevention Services: Risk signals and device reputation data from licensed third-party fraud detection services used to protect the platform and its players from fraudulent activity.

Section 5 Legal Basis for Processing

9kelab processes personal data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual Necessity: Processing required to perform the contract between 9kelab and the Data Subject — including account creation, game access, payment processing, bonus administration, and withdrawal fulfilment.
2. Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, KYC mandates, and reporting obligations under the platform's operating licence framework.
3. Legitimate Interests: Processing necessary for the pursuit of 9kelab's legitimate business interests where those interests are not overridden by the Data Subject's fundamental rights — including fraud prevention, platform security, system performance monitoring, and responsible gambling monitoring.
4. Consent: Processing based on your freely given and specific consent, including for the delivery of promotional communications where applicable. You may withdraw consent at any time by contacting our support team without prejudice to the lawfulness of processing prior to withdrawal.

Section 6 How We Use Your Personal Data

9kelab uses the personal data we collect for the following specific purposes:

• Account Management: Creating and maintaining your Member Account, verifying your identity and eligibility, and managing your account settings and preferences.
• Payment Processing: Facilitating deposits via Touch 'n Go eWallet, DuitNow, FPX, and other supported Malaysian payment channels, and processing withdrawal requests to your registered payment method.
• Game Delivery and Platform Operation: Providing access to our casino games, sportsbook, and betting products, and maintaining the technical infrastructure that supports platform performance.
• Bonus and Promotion Administration: Calculating wagering requirements, verifying eligibility for promotions such as welcome bonuses and birthday rewards, and administering the VIP loyalty programme.
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct that would undermine the integrity of the platform.
• Responsible Gambling Monitoring: Monitoring gaming behaviour patterns for signs of problem gambling, enforcing self-exclusion and deposit limit requests, and ensuring compliance with responsible gambling obligations.
• Customer Support: Responding to player queries, resolving disputes, and maintaining records of support interactions for quality assurance and regulatory purposes.
• Regulatory Compliance: Fulfilling reporting and record-keeping obligations required under the platform's operating licence, including transaction monitoring and KYC record retention.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify performance improvements, user experience enhancements, and new feature development opportunities.
• Marketing Communications: Sending you information about promotions, bonuses, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

Section 7 Data Sharing & Disclosure

9kelab does not sell, rent, or trade your personal data to any third party for their independent commercial or marketing use. Personal data is shared only in the following limited circumstances:

• Payment Service Providers: We share necessary financial and identity data with our payment processing partners — including providers facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong) — solely to process your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: We share identity documents and related data with licensed third-party verification services for the purpose of confirming your account eligibility and document authenticity.
• Game Content Providers: We share session identifiers and relevant account data with our certified third-party game studios to facilitate gameplay and resolve any technical disputes regarding game outcomes.
• Fraud Prevention Services: We share technical and behavioural data with licensed fraud detection providers to identify and prevent unauthorised or fraudulent platform activity.
• Regulatory and Legal Authorities: We may disclose personal data to regulatory bodies, law enforcement authorities, or courts of competent jurisdiction where we are legally obliged to do so, or where disclosure is necessary to protect the rights, property, or safety of 9kelab, its players, or third parties.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of 9kelab, personal data held by the platform may be transferred to the acquiring entity, subject to continued compliance with this Privacy Policy and all applicable privacy obligations.

All third-party data processors engaged by 9kelab are required to enter into binding data processing agreements that restrict their use of player data to the specific purpose for which it was shared, and obligate them to implement appropriate technical and organisational security measures.

Section 8 Cookies & Tracking Technologies

9kelab uses cookies and similar technologies (including local storage, session tokens, and device fingerprinting) when you access the platform. These technologies serve several distinct purposes:

• Essential Cookies: Required for the platform to function. These maintain your login session, remember your account preferences, and enable core features such as the game lobby, wallet display, and deposit flow. These cookies cannot be disabled without affecting your ability to use the platform.
• Security Cookies: Used to detect and prevent fraudulent access, including device recognition for two-factor authentication and session hijacking detection.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players navigate and use the platform. This data is used exclusively to improve the platform experience — it is not shared with advertising networks.
• Preference Cookies: Store your language settings, game display preferences, and responsible gambling configuration choices so that they persist across sessions.

9kelab does not use advertising cookies, retargeting pixels, or any tracking technology designed to build a profile of your browsing behaviour across third-party websites.

Section 9 Data Security

9kelab implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 9kelab platform.
• Encryption at rest for all sensitive personal data stored on our servers, including financial and identity documentation.
• Strict access controls limiting database access to authorised personnel, enforced through role-based access management and multi-factor authentication for all administrative systems.
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure.
• Automated intrusion detection and anomaly monitoring systems that flag unusual access patterns in real time.
• Incident response procedures that enable rapid containment and notification in the event of a confirmed data breach.

Despite these measures, no data transmission over the internet or electronic storage system is entirely infallible. 9kelab cannot guarantee the absolute security of data transmitted to or from the platform. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately of any suspected unauthorised access to your Account.

Section 10 Data Retention

9kelab retains personal data only for as long as necessary to fulfil the specific purpose for which it was collected, or as required by applicable regulatory, legal, or anti-money-laundering obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the Member Account relationship plus a minimum of five years following account closure, as required for AML and regulatory audit purposes.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven years in compliance with applicable financial record-keeping requirements.
• KYC Documentation: Identity documents and verification records are retained for a minimum of five years following account closure or the completion of the relevant KYC review.
• Customer Support Records: Live chat transcripts and email correspondence are retained for three years from the date of the interaction.
• Technical and Security Logs: Server logs, IP address records, and device session data are retained for a maximum of 24 months for security monitoring and fraud investigation purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out preference are retained for the duration of the account relationship and for three years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

Section 11 Your Data Rights

As a Data Subject, you have the following rights in relation to the personal data held by 9kelab. These rights may be exercised at any time by submitting a written request to our Data Protection team via the contact details in Section 16:

• Right of Access: You have the right to request a copy of the personal data that 9kelab holds about you, together with information about the purposes of processing and the categories of data involved.
• Right to Rectification: You have the right to request correction of any personal data held by 9kelab that is inaccurate, incomplete, or out of date.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where processing is unlawful. Note that this right is subject to regulatory retention obligations that may prevent immediate deletion of all data categories.
• Right to Restriction of Processing: You have the right to request that 9kelab restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you oppose erasure.
• Right to Data Portability: You have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to 9kelab where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. Once you object to marketing communications, your preference will be applied immediately and permanently unless you subsequently re-consent.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9kelab will acknowledge all data rights requests within five business days and endeavour to fulfil them within 30 calendar days. In cases of complexity or high volume, this period may be extended by a further 60 days with notice to the requester. All requests from verified Account holders are handled free of charge for the first request per 12-month period.

Section 12 International Data Transfers

9kelab operates globally and may process or store your personal data on servers located outside of Malaysia. Where personal data is transferred to a third country, 9kelab takes steps to ensure that an adequate level of data protection is maintained in the receiving jurisdiction.

Such safeguards may include:

• Transfers to countries or territories that have been assessed as providing an equivalent level of data protection to the standard applied in Malaysia.
• The use of standard contractual clauses or binding corporate rules that impose enforceable data protection obligations on the receiving entity.
• Transfers to data processors who have certified compliance with internationally recognised data protection frameworks.

Where you have consented to the processing of your personal data, that consent may include consent to the transfer of your data to the third-party service providers listed in Section 7, including those operating in jurisdictions outside Malaysia, where necessary for the provision of the services described in this Policy.

Section 13 Children & Minors Under 21

The 9kelab platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to any individual under the age of 21. The platform employs age verification controls as part of the registration and KYC process to prevent access by minors.

If 9kelab becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, we will immediately suspend the relevant account, void any associated transactions or balances where applicable, and securely delete the data collected to the extent that doing so does not conflict with our legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on 9kelab, please contact our support team immediately via the channels listed in Section 16. We will investigate and take appropriate action promptly.

Section 14 Third-Party Websites & Links

The 9kelab platform may contain references or links to third-party websites, payment portals, or service providers. This Privacy Policy applies only to data collected and processed by 9kelab directly. We are not responsible for the privacy practices, data handling standards, or content of any third-party website or service accessed through or in connection with the 9kelab platform.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of 9kelab, including your chosen payment provider (such as the Touch 'n Go eWallet privacy policy or your bank's online banking privacy terms).

Section 15 Amendments to This Policy

9kelab reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where an amendment is material — such as a change to the categories of data collected, the purposes of processing, or the rights available to Data Subjects — 9kelab will endeavour to provide reasonable advance notice via a platform announcement or email notification to registered players.

Continued use of the 9kelab platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should discontinue use of the platform and may request closure of your Account and deletion of your personal data in accordance with the terms of Section 11.

Section 16 Contact & Data Rights Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 11, or want to raise a concern about how 9kelab has handled your personal data, please contact us through one of the following channels:

• 24/7 Live Chat: Available directly on the 9kelab platform — accessible from every page via the live chat icon. Fastest response for general privacy questions.
• Email (Data Protection): [email protected] — please use the subject line "Data Rights Request – [Your Username]" to ensure your message is routed to the correct team. (Email address displayed as plain text only — not a clickable link.)

We will acknowledge receipt of your request within five business days. For formal data rights requests (access, erasure, portability), please be prepared to verify your identity as described in Section 11. All correspondence relating to this Privacy Policy should be submitted in English.

For responsible gambling concerns, deposit limit requests, or self-exclusion arrangements, please visit our dedicated Responsible Gambling page, which contains specific guidance and contact pathways for these matters.