Privacy Policy

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is issued by 9klub (hereinafter referred to as "9klub", "we", "our", or "the Platform") and applies to all personal data collected, processed, stored, and used in connection with the operation of the 9klub online casino and sports betting platform, accessible at https://9klub.cam, and all associated services, features, and communications.

9klub recognises that privacy is a fundamental right of every individual, including all players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam. This Policy is written to be transparent, readable, and honest about our data practices. We do not obscure information in impenetrable legal language where clarity is possible.

By registering an account and using the 9klub platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the platform.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, contact information, identification documents, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" refers to 9klub as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" refers to any third party that processes personal data on behalf of 9klub in accordance with documented instructions and data processing agreements.
• "User" or "Player" means any individual who registers or interacts with the 9klub platform.
• "KYC" means Know Your Customer — the identity verification process required prior to real-money transactions.
• "Cookies" means small data files stored on a User's device by the Platform to maintain session state, preferences, and analytics.

3. Personal Data We Collect

3.1 Registration Data

When you create a 9klub account, we collect the information you provide during registration, including: full legal name, date of birth, email address, mobile phone number, and chosen username. This information is necessary to create and administer your account and to verify that you meet the minimum age requirement of 21 years.

3.2 Identity Verification (KYC) Data

To comply with applicable requirements and to protect our players from fraud and identity theft, 9klub collects KYC documentation which may include: a copy of your Malaysian National Identity Card (MyKad), Driver's Licence, or Passport; proof of residential address (utility bill or bank statement dated within three months); and a selfie photograph holding your identity document. This data is handled with heightened care given its sensitive nature.

3.3 Financial and Transaction Data

We collect data related to deposits and withdrawals processed through your account, including: payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, FPX, DuitNow, USDT TRC20), transaction amounts, transaction reference numbers, and timestamps. We do not store full payment card numbers or full e-wallet login credentials on our servers.

3.4 Gameplay and Platform Usage Data

We record data about your activity on the Platform, including: games played, bet amounts, win and loss records, session duration, and feature usage. This data is used for account management, responsible gambling monitoring, fraud detection, and to improve our product.

3.5 Technical and Device Data

When you access the Platform, our systems automatically collect certain technical information: IP address, browser type and version, operating system, device type, screen resolution, and referring URLs. This information is used for security, fraud prevention, and analytics purposes.

3.6 Communications Data

If you contact our customer support team, we retain records of those communications — including live chat transcripts, email correspondence, and any attachments you provide — for quality assurance and dispute resolution purposes.

4. How Personal Data Is Collected

9klub collects personal data through the following mechanisms:

• Direct provision: Information you actively provide during registration, KYC submission, support interactions, or when completing forms on the Platform.
• Automated collection: Technical and usage data collected automatically when you access and navigate the Platform, through server logs, cookies, and similar technologies.
• Third-party processors: Data shared with us by licensed payment processors (such as FPX gateway operators or e-wallet providers) as part of transaction processing. These processors operate under strict data processing agreements.
• Publicly available sources: Where permitted, we may supplement your data with information from publicly available sources for identity verification or fraud prevention purposes.

5. Data Processing & Use

9klub processes your personal data for the following specific purposes:

• Account creation and management: To register, maintain, and administer your 9klub account.
• Identity verification: To verify your age (21+), identity, and eligibility to use the Platform in compliance with applicable requirements.
• Transaction processing: To facilitate deposits and withdrawals through your chosen Malaysian payment method and to maintain accurate financial records.
• Responsible gambling compliance: To monitor gameplay patterns, enforce self-imposed limits, and identify indicators of problematic gambling behaviour requiring intervention.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity.
• Platform improvement: To analyse usage data and improve the performance, stability, and user experience of the 9klub platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support team.
• Legal and regulatory compliance: To meet our obligations under applicable law, including responding to lawful requests from competent authorities.
• Communications: To send you account-related notifications, transaction confirmations, and, where you have consented, promotional communications about relevant offers and bonuses.

6. Legal Basis for Processing

9klub processes your personal data on the following legal bases, depending on the specific category of data and the purpose of processing:

• Contractual necessity: Processing necessary to perform our obligations under the 9klub Terms & Conditions, including account administration and transaction processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including identity verification and anti-money laundering obligations.
• Legitimate interests: Processing that serves 9klub's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights.
• Consent: Processing for specific discretionary purposes (such as marketing communications) where we rely on your freely given, specific, and informed consent, which you may withdraw at any time.

7. Data Sharing with Third Parties

9klub does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: Licensed payment service providers (including FPX operators, e-wallet platforms such as Touch 'n Go, Boost, and GrabPay, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong Bank) receive transaction data necessary to process deposits and withdrawals. All processors operate under data processing agreements that restrict their use of your data.
• Identity verification providers: Third-party KYC verification services that assist in processing and validating identity documents submitted by Users. These providers are bound by confidentiality obligations and may not use your data for independent purposes.
• IT and hosting providers: Cloud computing and data hosting providers that store Platform data on secured infrastructure. Access is limited to technical personnel with a documented need.
• Legal and regulatory authorities: Competent governmental, regulatory, or law enforcement authorities where 9klub is required by applicable law or court order to disclose personal data, or where disclosure is necessary to protect the rights and safety of 9klub or third parties.
• Professional advisers: Lawyers, auditors, accountants, and insurers acting in a professional capacity, subject to professional duties of confidentiality.

8. International Data Transfers

In the course of operating the 9klub platform, your personal data may be transferred to and processed in jurisdictions outside Malaysia. Where such transfers occur, 9klub takes steps to ensure that appropriate safeguards are in place to protect the transferred data, including the use of contractual protections equivalent to applicable data protection standards.

You acknowledge that by using the 9klub platform, your personal data may be processed in jurisdictions that may not provide the same level of data protection as Malaysia. Where this is the case, 9klub will implement appropriate technical and contractual measures to maintain equivalent protections.

9. Data Retention

9klub retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law. The following general retention principles apply:

• Active account data: Retained for the duration of your account relationship with 9klub and for a reasonable period thereafter to address any post-closure queries or disputes.
• KYC and identity documents: Retained for a minimum period as required by applicable anti-money laundering and financial regulation. After this period, documents are securely deleted unless ongoing legal proceedings require extended retention.
• Transaction records: Retained for the period required by applicable financial record-keeping obligations, typically a minimum of five (5) years from the date of the transaction.
• Communications records: Live chat transcripts and email correspondence are retained for a period of up to two (2) years for quality assurance and dispute resolution purposes, after which they are deleted.
• Technical and log data: Server logs and technical access records are typically retained for up to twelve (12) months before automated deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

10. Security Measures

9klub implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction:

• All data transmitted between your browser and the 9klub platform is encrypted using 256-bit SSL/TLS protocols.
• Stored data is maintained on access-controlled servers with role-based permissions limiting access to authorised personnel with a documented operational need.
• Account access is protected by password authentication, and we recommend that all Users enable any additional authentication features available in their account settings.
• Our systems are subject to regular security reviews and vulnerability assessments.
• We maintain an incident response procedure for identifying, containing, and reporting data security incidents in a timely manner.

11. Cookies & Tracking Technologies

11.1 What We Use Cookies For

The 9klub platform uses cookies and similar technologies (such as session tokens and local storage) for the following purposes:

• Essential session cookies: Required for the Platform to function. These maintain your logged-in session and enable basic navigation and game functionality. They cannot be disabled without impairing Platform operation.
• Security cookies: Used to detect and prevent fraudulent activity, including CSRF (Cross-Site Request Forgery) protection tokens.
• Performance and analytics cookies: Used to understand aggregate usage patterns, identify technical issues, and improve Platform performance. Data collected through these cookies is anonymised or pseudonymised.
• Preference cookies: Store user-selected preferences (such as language settings) to provide a more consistent experience across sessions.

11.2 What We Do Not Use

9klub does not deploy third-party advertising or retargeting cookies. We do not allow third-party advertising networks to place tracking cookies through our Platform. Your browsing activity on 9klub is not shared with external advertising technology providers.

11.3 Cookie Management

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will impair the functionality of the 9klub Platform and may prevent you from logging in or accessing certain features. Refer to your browser's help documentation for instructions on managing cookies.

12. Your Rights as a Data Subject

Subject to applicable law and the terms of this Policy, you have the following rights in relation to your personal data held by 9klub. To exercise any of these rights, please contact our support team with your registered account details and a clear description of your request.

We will respond to all valid data subject requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reason for it.

13. Minors and Age Restrictions

The 9klub platform is strictly intended for persons aged 21 (twenty-one) years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and have reason to believe that a person under 21 has submitted personal data to 9klub without authorisation, please contact our support team immediately so that we may investigate and take appropriate action.

14. Amendments to This Policy

9klub reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will provide advance notice to registered Users via email or prominent in-platform notification, including the date on which the revised Policy will take effect.

We encourage you to review this Policy periodically. The date at the top of this page reflects the most recent revision. Your continued use of the 9klub platform following the effective date of any amendment constitutes acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or 9klub's handling of your personal data, you are encouraged to contact us through the following channels. We take privacy enquiries seriously and will respond promptly:

• 24/7 Live Chat Support: Available directly within the 9klub platform. Our English-language support team is on hand around the clock to assist all Malaysian players, including those from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.
• Email: [email protected] — displayed as plain text only; this address is not a clickable link. Please include your registered account username and a clear description of your privacy enquiry or request.

For requests relating to your data subject rights (Section 12 above), please submit your request in writing with sufficient detail to enable us to identify your account and fulfil your request accurately. We will acknowledge receipt within five (5) business days and provide a substantive response within thirty (30) days.