Privacy Policy

Introduction

This Privacy Policy is published by 9king, the operator of the online gaming and sports betting platform accessible at https://9king.cam. It governs the collection, processing, storage, and disclosure of personal data belonging to all registered members, prospective members, and visitors who interact with the9king platform and its associated services.

9king is committed to handling all personal data in a manner that is lawful, transparent, fair, and consistent with recognised data protection principles. We serve a predominantly Malaysian user base, and our data practices are designed to align with the expectations of players banking through Malaysian financial infrastructure — including FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank Online, Touch 'n Go eWallet, Boost, and GrabPay — all of which involve the exchange of financial and identity information that we are obligated to protect.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, which together form the complete framework governing your relationship with 9king.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a living individual, including name, identification number, contact details, financial information, device identifiers, and usage data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means 9king, as the entity that determines the purposes and means of processing personal data collected via the platform.
• "Data Subject" means the individual to whom personal data relates — this context, a registered 9king member or platform visitor.
• "Third-Party Processor" means any external entity engaged by 9king to process personal data on its behalf, such as payment gateway operators, KYC verification providers, or analytics services.
• "KYC" means Know Your Customer — the identity verification process required to confirm a member's identity and age before full account functionality is unlocked.
• "Cookies" means small data files placed on a user's device by the9king platform for the purpose of session management, analytics, and personalisation.
• "Platform" means the 9king website at https://9king.cam and all services, pages, and features accessible through it.

Data We Collect

9king collects personal data through several channels: directly from you during account registration, KYC submission, and customer support interactions; automatically through your use of the platform; and from third-party sources such as payment processors and identity verification services. The categories of data collected are set out below.

3.1 Registration Data

When you create a 9king account, we collect:

• Full legal name
• Date of birth (used to verify you are aged 21 or above)
• Email address
• Malaysian mobile phone number
• Username and encrypted password
• Preferred currency (MYR)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and verify member age, we collect:

• Copy of government-issued photo identification (Malaysian MyKad — both sides, Passport photo page, or Driver's Licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 3 months)
• Selfie photograph holding the submitted identification document

3.3 Financial Data

In connection with deposits and withdrawals via Malaysian payment systems, we collect:

• Bank account name and number (for withdrawal verification)
• Payment method used (FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency wallet address)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history

3.4 Gameplay Data

• Betting and wagering history across sports, casino, slots, and esports markets
• Game session duration, frequency, and outcomes
• Bonus claims, usage, and wagering progress
• VIP tier status and loyalty point accumulation

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session cookies and authentication tokens
• Platform access timestamps and navigation patterns
• Referal URL and traffic source where applicable

3.6 Communication Data

• Live chat transcripts and support ticket content
• Email correspondence with 9king support
• Survey responses or feedback submissions

How We Use Your Data

9king uses the personal data it collects for the following purposes:

9king does not use personal data for automated decision-making that produces significant legal effects on members, except where such processing is expressly required for fraud prevention, AML compliance, or responsible gambling intervention.

Legal Basis for Processing

9king processes personal data on the following legal grounds, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions — including account management, payment processing, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and tax reporting obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gambling monitoring — where such interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and non-essential cookies — which you may withdraw at any time without affecting your account or access to the platform.

Data Sharing & Disclosure

9king does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the limited circumstances described below.

6.1 Third-Party Service Providers

We engage trusted third-party processors who assist with platform operations. These include KYC and identity verification service providers, payment gateway operators (including FPX network participants, DuitNow-connected banks, and e-wallet platforms), fraud detection and AML screening services, cloud hosting and data storage providers, and customer support platform operators. All third-party processors are contractually bound to process personal data only as instructed by 9king and to maintain appropriate security standards.

6.2 Regulatory and Legal Disclosure

9king may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law — including in response to lawful orders related to fraud investigations, AML inquiries, or judicial proceedings. Such disclosures are made strictly to the extent required and are not voluntary.

6.3 Business Transfers

In the event of a merger, acquisition, or restructuring of 9king's business, personal data held by 9king may be transferred to the successor entity as part of that transaction. Members will be notified of any such transfer and the privacy implications prior to data being transferred to a new controller.

Payment Data & Malaysian Banking Integration

Because 9king is purpose-built around the Malaysian financial ecosystem, our payment processing infrastructure involves integration with multiple regulated financial entities. This section specifically addresses how payment-related data is handled within those integrations.

When you make a deposit via Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, or any other FPX-connected bank, the transaction is processed through the FPX gateway operated under the oversight of Payments Network Malaysia Sdn Bhd (PayNet), which is regulated by Bank Negara Malaysia.9king receives a transaction confirmation and reference number from this process. Your banking credentials — including your online banking username and password — are entered directly on your bank's secure portal and are never transmitted to or accessible by 9king.

For DuitNow instant transfers, transaction initiation data including the recipient reference and amount are processed through the Real-Time Retail Payments Platform (RENTAS) infrastructure. Similarly, e-wallet transactions via Touch 'n Go eWallet, Boost, and GrabPay are processed on the respective e-wallet operator's platform. 9king receives confirmation of successful transactions without accessing your e-wallet account credentials or stored card details.

Cookies & Tracking Technologies

9king uses cookies and similar tracking technologies to operate essential platform functions, maintain login sessions, prevent fraud, and — with your consent — improve the user experience through analytics and personalisation.

8.1 Essential Cookies

These cookies are necessary for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection identifiers, and load-balancing cookies. No consent is required for essential cookies.

8.2 Analytics Cookies

With your consent, 9king uses analytics tools to understand how members interact with the platform — including page visit patterns, feature usage, and error reporting. This data is aggregated and anonymised where possible. Analytics cookies can be declined without affecting core platform functionality.

8.3 Preference Cookies

These cookies remember your settings such as language preference, display options, and odds format. They improve your experience by reducing the need to re-enter preferences on each visit.

8.4 Managing Cookies

You may manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using 9king, but may affect certain personalisation features. Note that disabling all cookies may impair your ability to stay logged in during a session.

Data Retention

9king retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active Account Data: Retained throughout the lifetime of your active account and for a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later, in accordance with financial compliance requirements.
• Transaction Records: Retained for a minimum of seven (7) years following each transaction, consistent with standard financial record-keeping practice.
• Support Communications: Retained for three (3) years from the date of resolution, or longer where a dispute remains unresolved.
• Marketing Consent Records: Retained until consent is withdrawn, plus two (2) years for audit trail purposes.
• Analytics and Technical Data: Retained for a maximum of twenty-six (26) months in aggregated or anonymised form.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that makes re-identification impossible.

Data Security

9king implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers
• Encryption of sensitive data at rest, including KYC documents and financial records
• Two-factor authentication (2FA) available for all member accounts
• Role-based access controls restricting staff access to personal data on a need-to-know basis
• Regular independent security audits and vulnerability assessments
• Intrusion detection systems and real-time fraud monitoring
• Secure data centre facilities with physical access controls

In the event of a personal data breach that poses a risk to your rights and freedoms, 9king will notify affected members and relevant authorities in accordance with applicable data breach notification obligations, within the timeframes required by law.

International Data Transfers

Some of 9king's third-party service providers — including cloud infrastructure, KYC verification, and analytics vendors — may process personal data in jurisdictions outside Malaysia. Where such transfers occur, 9king takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Malaysian data protection law.

These safeguards may include contractual clauses with the receiving entity, reliance on adequacy decisions where applicable, or other legally recognised transfer mechanisms. By using the9king platform, you acknowledge and consent to the transfer of your personal data to such third-party processors operating outside Malaysia where necessary for the provision of the services described in this policy.

Your Rights as a Data Subject

As a 9king member and data subject, you hold the following rights with respect to your personal data. These rights are subject to applicable legal restrictions, including our compliance obligations under AML and KYC regulations.

• Right of Access: You may request a copy of the personal data 9king holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing of your personal data where it is carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, submit a written request to 9king via the contact details listed in Section 15. We will acknowledge your request within 3 business days and aim to fulfil it within 30 days, except where an extension is required under applicable law.

Minors & Age Restriction

9king's platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals below this age threshold. Age verification is a mandatory component of the KYC process, and any account found to belong to a person under 21 will be immediately suspended.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data from our records. If you have reason to believe that a minor has accessed or registered on 9king, please contact us immediately at [email protected].

Changes to This Privacy Policy

9king reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where material changes are made, we will notify registered members via email or a prominent notice on the platform prior to the changes taking effect.

The most current version of this Privacy Policy will always be published athttps://9king.cam/privacy-policy and will bear the effective date at the top of the document. Your continued use of the platform following any update constitutes your acceptance of the revised policy. We recommend reviewing this page periodically to stay informed of any changes.

Contact & Data Enquiries

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a data security concern, please contact the 9king Data Protection team using the details below. All privacy-related correspondence should reference "Privacy Enquiry" in the subject line to ensure prompt routing to the appropriate team.

Please include your registered username, a clear description of your enquiry or rights request, and sufficient identifying information to allow us to locate your account records. For data erasure requests, we may be required to conduct additional identity verification before processing the request to protect against fraudulent deletion attempts.