9kme Privacy Policy

9kme ("we", "us", "our") is committed to protecting the personal data of individuals who use our online gaming and sports betting platform accessible at 9kme.app (the "Platform"). This Privacy Policy ("Policy") explains how 9kme collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the Platform.

This Policy applies to all registered and guest users of the 9kme Platform, including players based in Malaysia and all other jurisdictions from which the Platform is accessed. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

By registering an account, accessing the Platform, or otherwise interacting with 9kme's services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the 9kme Platform.

For the purposes of applicable data protection law, 9kme is the data controller responsible for your personal data processed in connection with your use of the Platform. References to "9kme" throughout this Policy refer to the entity operating the 9kme.app platform under its applicable international gaming licence.

For all privacy-related enquiries, requests, and complaints, you may contact 9kme's data protection point of contact via live chat (available 24/7 on the Platform) or by email at [email protected] (plain text — not a clickable link).

9kme collects the following categories of personal data from users of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (collected as part of KYC verification).
• Contact Data: Email address, Malaysian mobile phone number, and residential or correspondence address.
• Account Data: Username, password hash, account preferences, communication settings, and responsible gaming tool configurations.
• Financial Data: Payment method details (e.g., Touch n Go eWallet reference, FPX transaction identifiers, bank account details for withdrawal), deposit and withdrawal history, and transaction records. 9kme does not store full payment card numbers.
• Transactional Data: Details of all bets placed, games played, winnings, bonuses activated, and promotional offers redeemed through your 9kme account.
• Technical Data: IP address, browser type and version, operating system, device identifiers, time zone, session duration, pages visited, and clickstream data.
• Communications Data: Records of communications between you and 9kme's customer support team, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Information relating to deposit limits, self-exclusion elections, cooling-off periods, and any voluntary disclosures made in connection with responsible gaming requests.

9kme collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Technical data collected automatically when you access the Platform, including cookies, web beacons, server logs, and analytics tracking technologies.
• Third-party sources: Identity verification and fraud prevention data obtained from licensed KYC service providers; payment transaction data from payment processors (Touch n Go, Boost, FPX, Maybank, CIMB, Public Bank); and geolocation data from IP intelligence services.

9kme processes your personal data for the following purposes, each supported by a legal basis as described:

• Account creation and management — necessary for the performance of the contract between you and 9kme.
• Processing deposits, bets, and withdrawals — necessary for the performance of the contract.
• Identity verification (KYC) and age verification — necessary for compliance with 9kme's legal obligations under its gaming licence and applicable anti-money laundering regulations.
• Fraud detection and prevention — necessary for the purposes of 9kme's legitimate interests in protecting the integrity of the Platform.
• Responsible gaming monitoring — necessary for compliance with legal obligations under 9kme's gaming licence and for the protection of player welfare.
• Customer support communications — necessary for the performance of the contract and for 9kme's legitimate interests in resolving disputes and improving service quality.
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from 9kme. You may withdraw consent at any time.
• Platform analytics and improvement — necessary for 9kme's legitimate interests in maintaining, improving, and developing the Platform.
• Regulatory reporting and audit — necessary for compliance with legal obligations imposed by 9kme's gaming licence authority and applicable financial regulations.

9kme uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage objects) on the Platform. Cookies are small data files stored on your device when you visit a website. 9kme uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function and cannot be disabled. These include session authentication cookies that keep you logged in to your 9kme account.
• Functional cookies: Enable the Platform to remember your preferences, such as language settings and responsible gaming configurations.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, helping 9kme identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, including unusual login patterns and automated access attempts.

You can control non-essential cookies through your browser settings. However, disabling certain cookies may affect the functionality of your 9kme account. Note that strictly necessary cookies cannot be disabled without logging out of the Platform.

9kme does not sell your personal data. 9kme shares personal data with third parties only in the following circumstances:

• Payment service providers: Transaction data is shared with payment processors (including Touch n Go, Boost, FPX, and Malaysian banks) solely to process your deposits and withdrawals.
• KYC and identity verification providers: Identity and document data is shared with licensed third-party identity verification services to fulfil 9kme's KYC obligations.
• Fraud prevention and anti-money laundering services: Technical and transactional data is processed by specialist fraud detection systems to protect the Platform and its users.
• Game content providers: Limited session and wagering data may be shared with licensed game providers (e.g., Pragmatic Play, PG Soft) to facilitate gameplay and resolve disputes.
• Regulatory and law enforcement authorities: Personal data will be disclosed to competent authorities where required by applicable law, court order, or regulatory demand under 9kme's gaming licence conditions.
• Corporate group entities: Data may be shared within 9kme's corporate group for operational and compliance purposes, subject to equivalent data protection standards.

All third-party service providers acting as data processors on 9kme's behalf are required to enter into data processing agreements obligating them to process personal data only in accordance with 9kme's instructions and applicable data protection law.

9kme operates internationally, and your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, 9kme ensures that appropriate safeguards are in place, including contractual protections (e.g., standard contractual clauses) and, where applicable, reliance on the adequacy decisions of relevant data protection authorities.

By using the 9kme Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside of Malaysia as described in this Policy.

9kme retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any overriding legal or regulatory retention requirements. The following general retention guidelines apply:

• Account data: Retained for the duration of your active account relationship with 9kme, plus a period of five (5) years following account closure.
• Transaction and financial records: Retained for a minimum of five (5) years in compliance with anti-money laundering regulations applicable to 9kme's operations.
• KYC documentation: Retained for a minimum of five (5) years following the end of the account relationship.
• Customer support communications: Retained for three (3) years from the date of the communication.
• Technical and log data: Retained for up to twelve (12) months for security and fraud prevention purposes.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with 9kme's data disposal procedures.

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by 9kme:

• Right of access: You have the right to request a copy of the personal data 9kme holds about you.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restriction: You have the right to request that 9kme restrict the processing of your personal data in certain circumstances.
• Right to portability: You have the right to receive personal data you have provided to 9kme in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time.

To exercise any of the above rights, please contact 9kme via live chat or by email at [email protected]. 9kme will respond to your request within 30 days. In some cases, 9kme may need to verify your identity before processing your request.

The 9kme Platform is strictly restricted to individuals aged 21 years of age or older. 9kme does not knowingly collect personal data from persons under the age of 21. If 9kme becomes aware that personal data has been collected from a user who is under 21, that data will be deleted immediately and the associated account will be closed.

If you believe that a minor has created an account on the 9kme Platform, please contact 9kme immediately via live chat so that appropriate action can be taken without delay.

9kme may send you promotional communications about bonuses, new games, sportsbook events (including Malaysia Super League, EPL, AFF Cup, UFC, and World Cup qualifiers), and platform updates where you have provided your consent to receive such communications during registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your 9kme account settings, or by contacting customer support. Withdrawal of consent does not affect the lawfulness of marketing communications sent prior to withdrawal.

Note that transactional and service communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC requests — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

9kme implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• TLS (Transport Layer Security) encryption for all data transmitted between your browser and 9kme's servers;
• AES encryption for sensitive data stored at rest;
• Cryptographic hashing of all account passwords — 9kme cannot retrieve your original password;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Regular security vulnerability assessments and penetration testing of the Platform;
• Two-factor authentication availability for all registered accounts;
• Automated detection of suspicious login patterns and unusual account activity.

Whilst 9kme takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying 9kme immediately of any suspected unauthorised account access.

9kme reserves the right to amend this Privacy Policy at any time. Material changes will be communicated by publishing the updated Policy on this page and, where practicable, by notifying registered users via email or an in-platform notification. The date of the most recent revision is displayed at the top of this page.

Your continued use of the 9kme Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept a material change to this Policy, you must cease using the Platform and may request account closure via customer support.

For any questions, requests, or complaints relating to this Privacy Policy or 9kme's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the Platform — average response time 3–5 minutes.
• Email: [email protected] (plain text — not a clickable link)

9kme will acknowledge privacy-related requests within 48 hours and will endeavour to resolve them within 30 calendar days. Where a complaint cannot be resolved to your satisfaction through 9kme's internal process, you may have the right to escalate the matter to the relevant gaming regulatory authority or data protection supervisory authority in the jurisdiction where 9kme holds its operational licence.