o9win Privacy Policy

1. Introduction

1.1 o9win operates the online betting and casino platform available at https://o9win.win (the "Platform"). For the purposes of this Privacy Policy, o9win acts as the data controller in respect of your personal data.

1.2 This Privacy Policy applies to all individuals who visit the o9win website, register an account, or use any service offered on the Platform. It should be read alongside o9win's Terms & Conditions and Responsible Gaming Policy.

1.3 o9win is committed to complying with applicable data protection legislation, including principles aligned with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised privacy frameworks.

2. Data We Collect

2.1 Account Registration Data. When you create an o9win account, we collect: full legal name, date of birth, email address, Malaysian mobile phone number, and a chosen username and password.

2.2 Identity Verification (KYC) Data. To comply with anti-money laundering obligations and to verify your age, o9win may collect copies of your Malaysian National Identity Card (MyKad) or passport, proof of residential address, and proof of ownership of your payment methods.

2.3 Financial Transaction Data. We record details of all deposits, withdrawals, bets, and gaming transactions made through your o9win account, including payment method identifiers (e.g., masked bank account numbers, e-wallet identifiers), transaction amounts in MYR, and timestamps.

2.4 Usage and Technical Data. When you visit or use the o9win Platform, we automatically collect: IP address, browser type and version, device type and operating system, pages visited and time spent, referring URLs, and session identifiers.

2.5 Communications Data. If you contact o9win's customer support team via live chat or email, we retain records of those communications, including the content of messages and any attachments provided.

2.6 Voluntary Data. We may collect additional information you choose to provide, such as your preferred language (English, Bahasa Melayu, or 中文), player feedback, or survey responses.

3. How We Use Your Data

3.1 o9win uses your personal data for the following purposes:

• Account management: creating, maintaining, and securing your o9win account;
• Service delivery: processing bets, deposits, and withdrawals in MYR; operating live casino and slots services;
• Identity verification: fulfilling KYC and age verification obligations (you must be 21 or older);
• Fraud prevention and security: detecting and preventing money laundering, fraud, collusion, and unauthorised account access;
• Regulatory compliance: meeting o9win's obligations under applicable licensing conditions and anti-money laundering legislation;
• Customer support: responding to your inquiries and resolving disputes;
• Platform improvement: analysing usage patterns to improve the o9win platform, game selection, and user experience;
• Responsible gaming: monitoring account activity for signs of problem gambling and operating self-exclusion and limit tools;
• Marketing communications: sending you promotional offers and platform updates, where you have given consent or where permitted by applicable law. You may opt out at any time.

4. Legal Basis for Processing

4.1 o9win processes your personal data on the following legal bases:

• Contract performance: processing necessary to fulfil our contractual obligations to you as an o9win account holder;
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering, KYC, and gaming licensing requirements;
• Legitimate interests: fraud prevention, platform security, and improving o9win's services — where these interests are not overridden by your data protection rights;
• Consent: for marketing communications and non-essential cookies, where your explicit consent has been obtained.

5. Data Sharing & Disclosure

5.1 o9win does not sell your personal data to any third party.

5.2 o9win may share your personal data with the following categories of recipients, strictly as necessary:

• Payment processors: banks, e-wallet providers (including Touch 'n Go eWallet, Boost, DuitNow), and FPX intermediaries, to process MYR transactions;
• Identity verification providers: third-party KYC and fraud screening services that assist in verifying player identities and preventing financial crime;
• Game content providers: licensed game studios and live casino operators whose software powers games on the o9win Platform, to the extent necessary for game functionality;
• IT and infrastructure providers: cloud hosting, security monitoring, and analytics service providers operating on o9win's behalf under binding data processing agreements;
• Regulatory and law enforcement authorities: where o9win is required to disclose data by law, court order, or regulatory direction, or where disclosure is necessary to prevent or investigate fraud or criminal activity.

5.3 All third-party service providers with access to your personal data are contractually bound to maintain confidentiality and to use your data only for the purposes for which it was disclosed.

6. Cookies & Tracking Technologies

6.1 o9win uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure experience.

6.2 o9win uses the following types of cookies:

• Strictly necessary cookies: required for the Platform to function, including login session management and security features. These cannot be disabled.
• Performance and analytics cookies: help o9win understand how players use the Platform so we can improve it.
• Functional cookies: remember your preferences, such as language selection (English/BM/中文) and display settings.
• Marketing cookies: used with your consent to deliver relevant promotional content. You may opt out of these at any time via your browser settings.

6.3 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the o9win Platform.

7. Data Retention

7.1 o9win retains your personal data for as long as your account is active and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations and gaming licensing requirements.

7.2 Transaction records and betting history are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.

7.3 Where personal data is no longer required for its original purpose and there is no legal obligation to retain it, o9win will securely delete or anonymise that data.

8. Security Measures

8.1 o9win implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and the o9win Platform;
• Encryption of sensitive data at rest, including passwords (stored as salted cryptographic hashes) and payment identifiers;
• Multi-factor authentication (SMS OTP) for account logins from new or unrecognised devices;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Continuous security monitoring, intrusion detection, and automated threat alerting;
• Regular security assessments and penetration testing of o9win's infrastructure.

8.2 While o9win takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your o9win login credentials.

9. Your Data Rights

9.1 Subject to applicable law, you have the following rights in relation to your personal data held by o9win:

• Right of access: you may request a copy of the personal data o9win holds about you;
• Right to rectification: you may ask o9win to correct inaccurate or incomplete personal data;
• Right to erasure: in certain circumstances, you may request that o9win delete your personal data, subject to legal retention obligations;
• Right to restrict processing: you may request that o9win limit how it processes your data in certain circumstances;
• Right to object: you may object to processing based on o9win's legitimate interests or for direct marketing purposes;
• Right to withdraw consent: where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 To exercise any of the above rights, please contact o9win's support team using the contact details in Section 13. o9win will respond to your request within 30 days. We may require identity verification before processing your request.

10. Children's Privacy

10.1 The o9win Platform is strictly intended for adults aged 21 years and over. o9win does not knowingly collect personal data from individuals under the age of 21. If o9win becomes aware that personal data has been collected from a person under 21, that account will be immediately closed and all associated data deleted.

10.2 If you believe a minor has registered an o9win account, please contact our support team immediately at the address in Section 13.

11. International Data Transfers

11.1 o9win may transfer your personal data to servers or service providers located outside of Malaysia in connection with platform operations, IT infrastructure, and game content delivery. Where such transfers occur, o9win ensures that appropriate safeguards are in place — including data processing agreements incorporating standard contractual clauses — to protect your data to a standard equivalent to that required under applicable Malaysian law.

12. Changes to This Privacy Policy

12.1 o9win reserves the right to update this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Where changes are material, o9win may notify registered players by email or via an in-platform notification.

12.2 Your continued use of the o9win Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you should close your o9win account and cease using the Platform.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by o9win, please contact our Data Privacy team:

Support email: [email protected]

o9win support is available 24/7 in English, Bahasa Melayu, and 中文. We aim to respond to all privacy-related enquiries within 5 business days.