At 9winbox, we take the privacy and security of your personal information seriously. This Privacy Policy explains exactly what data we collect from Malaysian players, why we collect it, how we use it, and the rights you hold over your own information.
This Privacy Policy ("Policy") describes how 9winbox ("we", "us", "the Platform", "9winbox") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the 9winbox website at 9winbox.cam and all associated services, including the sportsbook, live casino, slot games, and poker products.
9winbox operates under international gaming licensing standards and is committed to responsible data stewardship. We process personal data only for defined, lawful purposes and apply appropriate technical and organisational safeguards to protect the information entrusted to us by Malaysian players and users across all other eligible jurisdictions.
By registering a 9winbox account or continuing to use the platform, you acknowledge that you have read and understood this Policy. Where we rely on your consent as the legal basis for a particular type of processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing already carried out.
This Policy should be read alongside our Terms & Conditions, which govern the overall use of the 9winbox platform, and our Responsible Gambling page, which explains how we use certain player data to support safer gambling obligations.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, email address, date of birth, payment details, and device identifiers. |
| "Processing" | Any operation performed on personal data — including collection, storage, use, disclosure, transfer, or deletion. |
| "Data Controller" | 9winbox — the entity that determines the purposes and means of processing your personal data. |
| "Data Processor" | A third party that processes personal data on behalf of 9winbox under contract and in accordance with our instructions. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "Cookie" | A small text file placed on your device by the 9winbox platform to enable session management, analytics, and personalisation features. |
| "KYC" | Know Your Customer — the identity and age verification procedure required under our licensing obligations before withdrawals are processed. |
9winbox collects personal data through several channels — directly from you during registration and account use, automatically through platform interaction, and from trusted third-party sources for verification purposes. The categories of personal data we collect are set out below:
Full legal name, date of birth, gender, residential address, email address, and mobile phone number — provided when you create a 9winbox account. For KYC purposes, this may be supplemented by government-issued identification documents such as your MyKad or passport, and proof of residential address.
Deposit and withdrawal transaction records, payment method details (e.g., bank account identifiers associated with DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, or GrabPay), transaction amounts in Malaysian Ringgit (MYR), and the history of bonus credits applied to your account.
Bet history, game session records, login timestamps, IP address, device type and operating system, browser type, and clickstream data generated during your use of the 9winbox platform. This data is used for fraud prevention, responsible gambling monitoring, and platform performance optimisation.
Records of communications between you and the 9winbox support team — including live chat transcripts, email correspondence, and any feedback or complaint submissions. These records are retained to ensure service continuity and to support dispute resolution.
Where you interact with our responsible gambling tools — including setting deposit limits, requesting self-exclusion, or completing responsible gambling assessments — we record and retain this data to enforce your instructions and to monitor compliance with your stated preferences over time.
9winbox processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account creation and management, processing deposits and withdrawals, settling bets, and delivering platform services you have requested. |
| Legal Obligation | KYC identity verification, AML transaction monitoring, age verification (21+ enforcement), and mandatory record-keeping under our licensing terms. |
| Legitimate Interests | Fraud detection and prevention, platform security, responsible gambling monitoring, improving service quality, and internal analytics — where our legitimate interests do not override your fundamental rights. |
| Consent | Sending you promotional emails, personalised marketing offers, and non-essential cookies. You may withdraw consent at any time via your account settings or by contacting support. |
Personal data collected by 9winbox is used exclusively for the purposes described in this Policy. We do not use your data for automated decision-making that produces significant legal effects without human oversight. Specific uses include:
9winbox does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Disclosure of personal data to external parties occurs only in the limited circumstances described below:
Transaction data is shared with licensed payment service providers — including operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency gateway providers — strictly to the extent necessary to process your deposits and withdrawals.
Where automated or third-party KYC services are used, relevant identity data (name, date of birth, document details) may be shared with licensed identity verification providers for the purpose of confirming your eligibility to hold a 9winbox account.
9winbox works with specialist fraud detection and AML compliance services. Transactional and behavioural data may be processed by these services to identify suspicious activity. All such providers operate under confidentiality agreements and are prohibited from using your data for any purpose other than the contracted service.
Where required by law, court order, or a directive from a relevant regulatory body, 9winbox may disclose personal data to competent authorities. We will notify you of such disclosures where legally permissible to do so.
All third-party data processors engaged by 9winbox are contractually bound to process your personal data solely for the purpose for which it was shared, to apply appropriate security measures, and to delete or return data upon termination of the service relationship.
9winbox uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the player experience. The categories of cookies we deploy are as follows:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Maintain your login session, store security tokens, and enable core platform functionality including bet placement and account navigation. | No — disabling will prevent platform use |
| Functional Cookies | Remember your language preference, odds format setting, and last-visited sports markets to personalise your experience. | Yes — via browser settings |
| Analytics Cookies | Collect anonymised data on page visits, session duration, and feature usage to support platform improvement decisions. | Yes — via browser settings |
| Marketing Cookies | Track referral sources and campaign attribution to evaluate the effectiveness of 9winbox's promotional activities. Only deployed with your consent. | Yes — withdraw consent via account settings |
You may manage or disable non-essential cookies through your browser's privacy settings. Please note that disabling essential cookies will impair your ability to log in and use core 9winbox platform features.
9winbox retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing conditions and applicable law. The general retention principles we apply are:
Once the applicable retention period has expired and no further legal obligation requires retention, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
9winbox applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Key security controls in place include:
While 9winbox takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. You play an important role in protecting your account by using a strong, unique password and enabling 2FA. Contact our support team immediately if you suspect unauthorised access to your 9winbox account.
Subject to applicable law and the conditions of our licensing obligations, you have the following rights in relation to your personal data held by 9winbox. To exercise any of these rights, contact our support team at support@9winbox.cam with appropriate identification.
Request a copy of all personal data we hold about you. We will respond within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data held on your account.
Request deletion of personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations.
Request that we limit processing of your data while accuracy is contested or an objection is pending.
Request a machine-readable export of personal data you provided to us, where technically feasible.
Object to processing carried out on the basis of legitimate interests, including direct marketing communications.
9winbox will respond to all verified data rights requests within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window.
Certain rights — particularly the right to erasure — may be limited where we are required by law to retain data (e.g., for AML compliance or under our gaming licence obligations). We will always explain any restrictions applied to your request.
The 9winbox platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and accounts found to belong to individuals under the required age will be immediately closed and any funds returned.
If you are a parent or guardian and believe a minor has registered a 9winbox account or provided personal data to the platform without your consent, please contact our support team immediately at support@9winbox.cam. We will investigate and take appropriate action, including permanent account closure and data deletion where legally permissible.
9winbox uses both document-based and automated age verification methods to enforce the 21+ requirement. Players who cannot satisfactorily verify their age will not be permitted to withdraw funds or access full platform functionality.
As an internationally operated platform, 9winbox may transfer your personal data to servers or service providers located outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within our primary operating jurisdiction.
Safeguards applied to international transfers include:
For Malaysian players, please note that data protection laws in Malaysia are governed primarily by the Personal Data Protection Act 2010 (PDPA). While 9winbox is not a registered data processor under Malaysian law, we apply data handling standards consistent with the principles of the PDPA as a matter of good practice and respect for our Malaysian player community.
9winbox reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The date of the most recent revision is displayed prominently at the top of this page.
Where changes are material — for example, a new category of data being collected, a new third-party processor being engaged, or a change to your rights — we will notify registered players via email and/or an in-platform notice prior to the changes taking effect.
Your continued use of the 9winbox platform after the effective date of any revised Policy constitutes your acknowledgement of the updated terms. The current version of this Policy is always accessible at 9winbox.cam/privacy-policy. We recommend reviewing it periodically.
If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the 9winbox data protection team through the following channels:
Write to us at support@9winbox.cam with the subject line "Privacy Enquiry" or "Data Rights Request". We acknowledge all privacy-related emails within 48 hours and aim to resolve substantive requests within 30 calendar days.
Our 24/7 live chat support team can assist with general privacy questions and can escalate formal data rights requests to the appropriate internal team. Live chat is accessible directly on the 9winbox platform.
For matters relating to responsible gambling data — including how your self-exclusion or deposit limit data is stored and enforced — please visit our Responsible Gambling page or contact support directly. Malaysian players seeking independent support may also contact Talian Kasih 15999.
All formal privacy complaints will be logged, investigated, and responded to in writing. We are committed to resolving privacy concerns fairly and transparently, and to keeping you informed of the outcome of any investigation into your complaint.
Have questions about how 9winbox handles your data? Our support team is available 24/7. Alternatively, visit our FAQ for quick answers to common privacy and account questions.
For players aged 21 and above only. Please gamble responsibly. View Responsible Gambling tools →