o9win Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data processed by o9win in connection with the operation of the o9win online gaming platform accessible at o9win.club, including all associated subdomains, mobile interfaces, and support channels. It applies to registered players, prospective players who visit the website, and any individual who contacts o9win via support channels.

o9win is committed to protecting the privacy and personal data of all individuals whose information we process. This Privacy Policy is intended to provide clear, comprehensive, and transparent information about our data practices in a manner that is accessible to our Malaysian and international player base. If you have questions about any aspect of this policy, you are encouraged to contact the o9win data protection contact before submitting personal information to the platform.

By accessing the o9win platform, registering an account, or otherwise providing personal information to o9win, you acknowledge that you have read and understood this Privacy Policy. This policy should be read in conjunction with the o9win Terms & Conditions.

2. Data Controller Information

For the purposes of applicable data protection legislation, o9win is the data controller responsible for the personal data collected through the o9win platform. o9win operates under international gaming licensing and is subject to the data protection and KYC/AML requirements imposed by its licensing authority.

All data protection enquiries, subject access requests, and complaints may be directed to the o9win data protection contact via the support channels described in Section 14 of this policy. o9win aims to acknowledge all data protection enquiries within 5 business days and to provide substantive responses within 30 calendar days of receipt.

3. Personal Data We Collect

o9win collects the following categories of personal data:

3.1 Registration Data. When you create an o9win account, we collect your full name, date of birth, residential address (including city, state, and postcode), email address, mobile phone number, and the username and password you select. For Malaysian players, this typically includes your Malaysian IC number (MyKad number) for KYC verification purposes.

3.2 Identity Verification Data. To comply with our KYC and anti-money laundering obligations, we may collect copies of government-issued identification documents (Malaysian MyKad, passport, or equivalent), proof of residential address documents (utility bills, bank statements), and proof of payment method ownership (bank card images, eWallet screenshots).

3.3 Financial Transaction Data. We collect records of all deposits, withdrawals, wagers, and bonuses associated with your o9win account, including transaction amounts, timestamps, payment method references, and transaction outcomes.

3.4 Gaming Activity Data. We collect data about your gaming behaviour on the platform, including games played, bet amounts, session duration, win/loss records, and responsible gaming tool usage (e.g., deposit limit settings, self-exclusion requests).

3.5 Technical & Device Data. We automatically collect IP address, device type and operating system, browser type and version, session identifiers, login timestamps, and geolocation data (country/region level) when you access the o9win platform.

3.6 Communications Data. We retain records of communications between you and o9win support, including live chat transcripts, email correspondence, and any other written communications submitted to us.

4. How We Collect Your Data

o9win collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawal requests, contact support, or participate in promotions
• Automatically — through the operation of the platform, including session logging, device fingerprinting for fraud prevention, and cookie collection as described in Section 8
• From third-party verification services — identity verification and fraud screening data from KYC/AML compliance service providers engaged by o9win
• From payment processors — transaction confirmation data from FPX, Touch 'n Go eWallet, Boost, and other integrated Malaysian payment channels

5. Purposes & Legal Bases for Processing

o9win processes personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of the contract between you and o9win
• Identity verification (KYC) — necessary for compliance with legal obligations under applicable anti-money laundering and gaming licensing requirements
• Payment processing — necessary for the performance of contract and compliance with financial crime prevention obligations
• Fraud prevention and platform security — legitimate interest of o9win and its players in maintaining a secure gaming environment
• Responsible gaming monitoring — legitimate interest and legal obligation to protect players from gambling-related harm
• Customer support — necessary for the performance of contract and legitimate interest in resolving player issues effectively
• Platform analytics and improvement — legitimate interest in improving the o9win platform and player experience
• Direct marketing communications — consent (where obtained) or legitimate interest for existing players, with opt-out rights respected at all times
• Legal compliance and regulatory reporting — necessary for compliance with applicable laws and regulatory obligations

6. How We Share Your Data

o9win does not sell personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

6.1 Service Providers. o9win engages third-party service providers to assist in operating the platform, including payment processors (FPX, Touch 'n Go, Boost, and banking integrations), KYC/identity verification services, fraud detection and security providers, customer support platform providers, and cloud infrastructure providers. These providers process personal data only on o9win's instructions and are contractually bound to appropriate data protection standards.

6.2 Game Providers. Certain personal data (including account identifiers and gaming session data) is shared with third-party game studios (such as Evolution Gaming, SA Gaming, Pragmatic Play, PG Soft) to facilitate the provision of live casino and slot game services within the o9win platform. These providers are subject to their own privacy frameworks and gaming licensing data protection requirements.

6.3 Regulatory and Law Enforcement Bodies. o9win will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of law where required or permitted by applicable law, including for AML reporting, fraud investigation, or compliance with court orders or regulatory directives.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of o9win's business, personal data held by o9win may be transferred to the successor entity, subject to that entity maintaining at least equivalent data protection standards as described in this policy.

7. International Data Transfers

As an online gaming platform serving players across Malaysia and internationally, o9win may process personal data on servers and through service providers located in jurisdictions outside Malaysia. Where personal data is transferred to countries that do not provide an equivalent level of data protection to that applicable in Malaysia, o9win implements appropriate safeguards to protect the transferred data, including standard contractual clauses or equivalent mechanisms recognised by applicable data protection authorities.

By using the o9win platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside Malaysia for the purposes described in this Privacy Policy.

8. Cookies & Tracking Technologies

o9win uses the following categories of cookies and similar tracking technologies on the platform:

• Strictly Necessary Cookies — required for the operation of the platform, including session authentication, security token management, and load balancing. These cannot be disabled without preventing core platform functionality.
• Functional Cookies — store your preferences such as language settings, odds format preference, and remembered login state on trusted devices.
• Analytics Cookies — collect aggregated, anonymised data about how players navigate and use the o9win platform, used to identify technical issues and improve the user experience. o9win uses first-party analytics only.
• Fraud Prevention Cookies — support o9win's fraud detection systems by identifying unusual access patterns, device fingerprinting anomalies, and potential multiple account activity.

o9win does not use third-party advertising cookies or cross-site tracking pixels. You may manage or delete cookies through your browser settings, though disabling strictly necessary cookies will impair or prevent platform access. Most modern browsers allow you to view, manage, and delete cookies — consult your browser's help documentation for specific instructions.

9. Data Security

o9win implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the o9win platform
• Salted cryptographic hashing of all account passwords — o9win staff cannot access plaintext passwords under any circumstances
• Role-based access controls ensuring that staff access to personal data is limited to what is necessary for their specific function
• Regular security audits and penetration testing by qualified third-party security professionals
• Encrypted storage of identity verification documents and payment method data
• Automatic session timeout and secure session invalidation on logout or inactivity

While o9win takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own device and account credentials. If you suspect your account has been compromised, contact o9win support immediately and change your password.

10. Data Retention

o9win retains personal data for the following minimum periods, after which data is securely deleted or anonymised unless longer retention is required by applicable law or is necessary to resolve an ongoing dispute:

• Account and KYC data — minimum 5 years from the date of account closure, in compliance with AML and gaming licensing retention obligations
• Financial transaction records — minimum 7 years from the date of each transaction, in compliance with applicable financial crime prevention legislation
• Support communications — 3 years from the date of the relevant interaction, or longer if the matter relates to a dispute or regulatory investigation
• Technical and device data (logs) — 90 days from collection for standard access logs; up to 12 months for security-flagged events
• Marketing preferences — until you withdraw consent or update preferences, or until your account is closed

11. Your Data Subject Rights

Subject to applicable data protection law, you have the following rights in respect of personal data held by o9win about you:

• Right of Access — you may request a copy of all personal data held by o9win about you (a Subject Access Request)
• Right to Rectification — you may request correction of inaccurate or incomplete personal data
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations
• Right to Restriction of Processing — you may request that o9win restrict processing of your data in certain circumstances while a dispute about its accuracy or legality is resolved
• Right to Data Portability — you may request a machine-readable copy of personal data you have provided to o9win, where technically feasible
• Right to Object — you may object to processing of your data based on legitimate interest, including direct marketing
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact the o9win support team with your request and relevant account details. o9win will verify your identity before processing any data rights request and will respond within 30 calendar days. Requests that are manifestly unfounded or excessive may be declined or subject to a reasonable administrative fee.

12. Children's Privacy

The o9win platform is strictly restricted to individuals aged 21 and above. o9win does not knowingly collect personal data from persons under the age of 21. If o9win becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account closed in accordance with the o9win Terms & Conditions.

If you are a parent or guardian and believe that your child has provided personal information to o9win, please contact our support team immediately so that we can investigate and take appropriate action.

13. Changes to This Policy

o9win reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered players via the platform notification system or by email to the registered account address at least 14 days before the changes take effect, where practicable. The updated effective date will be shown at the top of this document.

Your continued use of the o9win platform following the effective date of any revised Privacy Policy constitutes acceptance of the revised terms. Where applicable law requires express consent to material changes in processing, o9win will seek that consent separately from continued platform use.

14. Contact & Complaints

For all data protection enquiries, Subject Access Requests, or privacy-related complaints, please contact the o9win data protection team via live chat (available 24/7 within the platform) or at the following email address:

Contact email: [email protected]

Please include your registered username, the nature of your request, and any relevant details to help us locate your personal data and respond efficiently. o9win aims to acknowledge all data protection enquiries within 5 business days and to provide a substantive response within 30 calendar days.

If you are dissatisfied with o9win's handling of a privacy complaint, you may have the right to escalate the matter to the data protection supervisory authority in your jurisdiction. o9win encourages players to contact us first to give us the opportunity to address concerns directly before escalating to a regulatory body.