This Privacy Policy explains how 9kmy collects, uses, stores, and protects the personal data of players using the platform from Malaysia and other applicable jurisdictions.
How 9kmy approaches data protection — before you read the full policy
9kmy collects only the personal data required for account operation, regulatory compliance, and the delivery of gaming services. Data is never collected speculatively.
We request the minimum data necessary for each processing purpose. We do not require data fields that are not operationally or legally necessary for your account type.
All personal data held by 9kmy is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access controls limit internal data access to authorised personnel only.
You retain meaningful rights over your personal data held by 9kmy, including the right to access, correct, and request deletion, subject to regulatory retention obligations.
9kmy does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing organisations under any circumstances.
This Privacy Policy is written in plain, accessible English. 9kmy will notify registered players of any material changes to this policy before they take effect.
This Privacy Policy applies to all personal data collected and processed by 9kmy in connection with the operation of the online gaming platform available at 9kmy.net (the "Platform"). It covers all interactions you have with 9kmy, including account registration, identity verification, deposits and withdrawals, gameplay, customer support communications, and marketing communications where you have provided consent.
By registering an account on the 9kmy platform or by continuing to use the platform following any update to this policy, you acknowledge that you have read, understood, and accepted the data processing practices described herein.
This Policy is to be read alongside the 9kmy Terms & Conditions and Responsible Gaming Policy, which together constitute the full regulatory and operational framework governing your use of the platform.
9kmy is the data controller in respect of all personal data collected and processed through the 9kmy.net platform. As data controller, 9kmy determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection legislation and the terms of this Privacy Policy.
For all privacy-related enquiries, data subject requests, and formal complaints, the designated Data Protection contact at 9kmy can be reached via the contact details set out in Section 14 of this Policy.
9kmy collects personal data in the following categories, depending on your level of engagement with the platform:
| Category | Data Types | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number, nationality | Registration form; KYC submission |
| Contact Data | Email address, Malaysian mobile number (+60), residential address | Registration form; account settings |
| Financial Data | Bank account details, e-wallet identifiers (TnG, Boost), transaction history | Payment processing; KYC verification |
| Technical Data | IP address, device type, browser type, operating system, session logs | Automated collection on platform access |
| Usage Data | Game history, betting activity, session duration, feature interactions | Platform activity logging |
| Communications Data | Live chat transcripts, support ticket content, email correspondence | Customer support interactions |
| KYC Documentation | Identity document images, proof of address documents, selfie verification | Voluntary submission for account verification |
9kmy does not collect special category data (such as biometric data beyond facial verification for KYC purposes, health data, or political opinions) except where strictly required for regulatory compliance and with your explicit consent.
4.1 Account Operation. 9kmy processes your identity, contact, and financial data to create and maintain your player account, authenticate your login sessions, process deposits and withdrawals in MYR, and operate the gaming services you have requested.
4.2 Regulatory Compliance. 9kmy is required by applicable gaming regulations and anti-money laundering legislation to collect, verify, and retain identity and financial transaction data. This processing is mandatory and cannot be opted out of while maintaining an active account.
4.3 Responsible Gaming. 9kmy uses account activity data — including session length, deposit frequency, and wagering patterns — to identify indicators of problem gambling and to provide proactive responsible gaming communications where appropriate. This processing is conducted in the interests of player welfare and platform integrity.
4.4 Fraud Prevention and Security. Technical data and usage data are processed to detect and prevent fraudulent activity, account takeover attempts, and platform abuse. This processing is necessary for the legitimate interests of 9kmy and its players.
4.5 Customer Support. Communications data is processed to provide customer support services, resolve disputes, and improve the quality of support delivered to 9kmy players.
4.6 Marketing (With Consent). Where you have provided explicit consent, 9kmy may use your contact data to send promotional communications about offers, games, and platform updates. You may withdraw consent at any time via the marketing preferences section of your account settings or by contacting support.
4.7 Platform Improvement. Aggregated and anonymised usage data may be used by 9kmy's product team to analyse platform performance, optimise the game lobby, and improve the overall player experience. This data cannot be used to identify individual players.
9kmy processes personal data under the following legal bases, as applicable to each processing activity:
9kmy does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:
No data sales, ever. 9kmy will never sell, rent, or exchange your personal data with advertisers, data brokers, or any commercial third party for marketing or profiling purposes.
9kmy uses cookies and similar tracking technologies to operate the platform, maintain your login session, and analyse aggregate usage patterns. The categories of cookies used on the 9kmy platform are as follows:
9kmy does not use third-party advertising or targeting cookies. You may manage your cookie preferences via your browser settings at any time. Disabling strictly necessary cookies will affect your ability to access the platform.
8.1 Active Accounts. Personal data associated with active 9kmy accounts is retained for as long as the account remains active and for a minimum period required by applicable gaming and anti-money laundering regulations following account closure.
8.2 Closed Accounts. Following account closure, 9kmy retains identity, financial, and transaction data for a period of five (5) years to comply with regulatory record-keeping obligations. After this period, data is securely deleted or anonymised.
8.3 Marketing Data. Contact data held solely for marketing purposes is retained until you withdraw consent or request deletion, whichever is sooner.
8.4 Support Records. Customer support communications are retained for a period of three (3) years from the date of last interaction for dispute resolution and quality assurance purposes.
Subject to applicable law and regulatory retention requirements, you have the following rights in respect of your personal data held by 9kmy. To exercise any of these rights, contact 9kmy's Data Protection contact via the details in Section 14.
Meaningful rights you can exercise over your personal data at any time
Request a copy of all personal data 9kmy holds about you. We will respond within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data held on your 9kmy account. Most corrections can be made directly via account settings.
Request deletion of personal data where there is no legal basis for continued retention. Note: regulatory obligations may require us to retain certain data for a defined period.
Request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of the data or the legitimacy of our processing.
Receive a structured, machine-readable copy of personal data you have provided to 9kmy where processing is based on your consent or a contract.
Object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately upon request.
Where processing is based on your consent (e.g., marketing), you may withdraw consent at any time via account settings or by contacting 9kmy support.
Lodge a complaint with the relevant data protection supervisory authority if you believe 9kmy has processed your data in violation of applicable law.
Some of 9kmy's service providers and infrastructure partners are located outside Malaysia. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, 9kmy implements appropriate safeguards — including contractual clauses and technical controls — to ensure that your data receives a standard of protection consistent with this Policy.
9kmy will not transfer personal data to jurisdictions or recipients that cannot provide adequate data protection assurances, and will not transfer data to any entity on applicable sanctions lists.
The 9kmy platform is strictly restricted to individuals aged 21 and above. 9kmy does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, the associated account will be closed immediately and any personal data collected will be deleted, subject to any legal obligation to retain evidence of the violation for regulatory reporting purposes.
If you are a parent or guardian and believe that an underage person has registered an account on 9kmy, please contact our support team immediately with the relevant account details.
9kmy implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Notwithstanding the above, no data transmission over the internet or electronic storage method is entirely secure. Players are responsible for maintaining the security of their own login credentials and devices.
Security incident: If you suspect that your 9kmy account has been compromised or that your personal data has been accessed without authorisation, contact 9kmy support immediately via live chat.
9kmy reserves the right to amend this Privacy Policy at any time. Material changes — those which affect how your personal data is collected, used, or shared in a substantive way — will be communicated to registered players via the account dashboard notification system and/or by email to the registered address, with a minimum of seven (7) days' notice before the changes take effect where practicable.
Non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the Policy) may be made without prior notice, and the updated effective date will be reflected at the top of this page. We encourage you to review this Policy periodically to stay informed about how 9kmy protects your personal data.
For all privacy-related enquiries, data subject access requests, and formal complaints regarding 9kmy's data processing practices, please contact the 9kmy Data Protection team using the following:
If you are dissatisfied with 9kmy's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
Your data is protected, your identity is secure, and your account is yours. Join thousands of Malaysian players who trust 9kmy every day.
Create Your 9kmy Account21+ only. Data handled responsibly. Full privacy policy applies.