O9win Privacy Policy – Personal Data Protection for Malaysia Members

1. Introduction – o9win's Privacy Commitment

O9win ("we", "platform") is committed to protecting the privacy and security of the personal data of all members using our services in Malaysia. This Privacy Policy ("Policy") outlines our practices regarding the collection, use, storage, protection, and sharing of member personal information obtained through the use of the o9win.xyz website and application.

This policy applies to all users of the o9win platform, including registered members who use Live Casino services, blackjack, roulette, Sports Betting covering football and cricket, and E-Sports. It also applies to visitors who access the o9win website without registering.

O9win complies with applicable data protection laws and internationally recognised privacy principles. We collect only the data we need, store it securely, and never sell it to third parties for marketing purposes without your explicit consent.

2. Personal Data We Collect

O9win collects various types of information from members depending on how you interact with our platform. The following are the categories of data we may collect:

Registration & Identity Data:

• Full name as shown on a valid identification document.
• An active mobile phone number (used for OTP verification).
• Email address (if provided during registration).
• Date of birth (for verification of the 18-year age requirement).
• Account password (stored in hashed form and not human-readable).

KYC (Know Your Customer) Data:

• Copy of identity document (MyKad) or other valid identification.
• Proof of address (utility bill or bank statement) where required.
• Additional information for identity verification on large withdrawals.

Transaction & Payment Data:

• E-wallet account numbers (TNG, GrabPay, DuitNow, Boost, ShopeePay) used for deposits or withdrawals.
• FPX bank account number via Maybank2u or CIMB Clicks (transaction reference only).
• Deposit history, withdrawals, and betting activity on the o9win platform.
• Payment method information is not stored directly on o9win's servers.

Usage & Technical Data:

• IP address and device information (device type, operating system, web browser).
• Login session data, including the date, time, and general location of access.
• In-platform activity data, including games played and bets placed.
• Cookie data and similar tracking technologies (see Section 6).

3. Purposes of Data Collection & Use

O9win uses members' personal data solely for legitimate, clearly defined purposes as outlined below. We do not process data for any other purpose without informing you in advance.

• Registration & Account Management: Creating and managing your member account, verifying your identity, and maintaining the security of your account on the o9win platform.
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as managing your winnings withdrawals.
• Gaming Services Provision: Grants you access to all games on o9win, including live casino, blackjack, roulette, football betting, cricket, badminton, and e-sports such as Mobile Legends MPL and DOTA 2.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other illegal activities that may compromise platform security.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance to members who need it.
• Legal Compliance: Fulfilling applicable legal obligations, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Service Communications: Sending important notifications related to your account, terms updates, or security alerts. We do not send marketing emails without your consent.
• Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve the user experience, platform performance, and the range of games offered.

4. How o9win Protects Your Data

O9win invests seriously in security infrastructure to ensure members' personal data remains protected at all times. The security measures we have in place include:

• 256-bit SSL Encryption: All data communications between your device and o9win's servers are encrypted using 256-bit TLS/SSL protocols — the same security standard used by banks and major financial institutions in Malaysia.
• Secure Servers: Data is stored in data centres protected by strict physical access controls, redundant cooling systems, and safeguards against unauthorised access.
• Password Hashing: Your account password is never stored in readable form. We use modern cryptographic hashing algorithms, which ensure that even in the event of a data breach, your password cannot be recovered by unauthorised parties.
• Payment Data Segregation: Your payment method details (TNG, GrabPay, DuitNow, Boost, ShopeePay, FPX) are not stored on o9win's servers. All transactions are processed through PCI DSS-certified third-party payment processors.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any suspicious activity or unauthorised access attempts.
• Regular Security Audits: o9win conducts regular security audits and independent penetration testing to identify and address any system vulnerabilities.
• Internal Access Controls: Access to member personal data within o9win is restricted to staff who genuinely require it to perform their duties, in accordance with the "least privilege" principle.

5. Data Sharing with Third Parties

O9win does not sell, rent, or trade members' personal data to third parties for marketing or commercial purposes. We only share data under limited and necessary circumstances as outlined below:

• Payment Processors: Minimal transaction data is shared with our payment processors (such as TNG, GrabPay, DuitNow, Boost, ShopeePay, and FPX service providers) solely for the purpose of processing your deposits and withdrawals. All payment processors are bound by strict data protection agreements.
• Game Providers: Minimal information required to enable access to games (such as account ID) may be shared with third-party game providers that supply casino games or betting on the o9win platform. No full personal identity information is shared.
• Legal Requirements: o9win may be required to disclose personal information to the relevant authorities in Malaysia when mandated by law, court order, or to fulfil legal compliance obligations such as AML (Anti-Money Laundering) and KYC requirements.
• Security Safeguards: In cases of suspected fraud, money laundering, or other illegal activity, o9win may share relevant information with law enforcement authorities for investigation purposes.
• Business Transfer: If o9win is involved in any acquisition, merger, or significant asset transfer, user data may be transferred to the successor entity, subject to appropriate notice being given to members and continued compliance with this privacy policy.

In all instances where we share data with third parties, we ensure that appropriate data protection agreements are in place to safeguard the privacy of o9win members.

6. Cookies & Tracking Technologies

O9win uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small text files stored on your device when you access our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance & Analytics Cookies: Helps us understand how members use the o9win platform — for example, which pages are visited most frequently and how long members spend on particular games. This data is used in aggregate form and does not identify individuals.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details (if you choose to stay logged in) to provide a smoother experience.
• Security Cookies: Used to detect and prevent fraudulent activity, ensure each session is legitimate, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser. However, disabling essential cookies may prevent you from using certain features of the o9win platform properly. For more information on managing cookies in your browser, please refer to your browser's documentation.

7. Data Retention & Deletion

O9win retains members' personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law.

General data retention periods:

• Active account data: Retained for as long as your o9win account remains active. If your account has been inactive for 3 years or more with no transactions, we may contact you to confirm whether you wish to keep the account.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date, in accordance with applicable legal and financial compliance requirements.
• KYC Data: Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering legislation.
• Security log data: Retained for 2 years for security investigation and compliance purposes.
• Customer support communication data: Retained for 2 years from the date of your last interaction.

When data is no longer needed and there is no legal obligation to retain it, o9win will securely delete or anonymise it using appropriate procedures.

In the event of a member's data deletion request (see Section 8), we will assess the request against our applicable legal obligations and notify you of the outcome within 30 business days.

8. Your Rights as an o9win Member

As an o9win member, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team via live chat or email at support@o9win.xyz.

9. Protection of Children's Data

O9win services are intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data belonging to anyone under the age of 18.

Should we become aware of, or have reason to believe that, personal data of a minor has been collected without valid parental or guardian consent, we will take the following steps:

• Immediately closes the associated account.
• Delete all personal data belonging to the underage individual from our records as promptly as possible, subject to any applicable legal obligations.
• Reporting the incident to the relevant authorities where required.

If you are a parent or guardian who believes your child has provided personal information to o9win without your consent, please contact us immediately at support@o9win.xyz so we can take the appropriate action.

10. Contact Us & Privacy Policy Amendments

If you have any questions, concerns, or requests regarding this Privacy Policy or how o9win handles your personal data, please reach us through the following channels:

• Email: support@o9win.xyz – for privacy enquiries and data rights requests
• Live Chat: Available 24 hours a day, 7 days a week on the o9win platform
• Response Time: We will respond to all privacy-related enquiries within 14 business days

O9win reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, technological requirements, or applicable legislation. Members will be notified of material changes via in-platform notifications or email at least 7 days before the changes take effect.

Your continued use of the o9win platform after any amendments to the Privacy Policy take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically to stay informed of the latest version of our Privacy Policy.

For more information on how we regulate the use of our platform, please also read Terms & Conditions us. For information on self-exclusion tools and responsible gaming, visit the Responsible Gaming us.