Privacy Policy — 9kmy

1Introduction

This Privacy Policy (the "Policy") sets out the manner in which 9kmy (referred to herein as "9kmy", "we", "us", or "the Platform"), the operator of the online gaming platform accessible at https://9kmy.cam, collects, uses, stores, shares, and protects the personal data of its users, visitors, and prospective members.

9kmy is committed to handling personal data with transparency, integrity, and care. We recognise that Malaysian players entrust us with sensitive information when they register an account, submit identity documents for KYC verification, and conduct financial transactions on our platform. This Policy explains exactly what we do with that information, and what rights you have over it.

This Policy applies to all users of the 9kmy Platform, including registered account holders, visitors who browse the Platform without registering, and individuals who contact our customer support team. By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to arrange account closure if applicable.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, alteration, and deletion.
• "Data Controller" means 9kmy, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by 9kmy to process Personal Data on its behalf, subject to contractual data protection obligations.
• "User" or "You" means any individual who accesses, visits, registers with, or uses the 9kmy Platform.
• "KYC Data" means identity verification documents and associated information submitted by Users as part of the Know Your Customer process, including government-issued identification, proof of address, and selfie photographs.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 10 of this Policy.
• "Platform" means the 9kmy website, mobile-optimised interface, and all associated services at https://9kmy.cam.

3Personal Data We Collect

9kmy collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration and Account Data

When you create a 9kmy account, we collect:

3.2 KYC and Identity Verification Data

To comply with international licensing requirements and to verify your age (minimum 21 years), we collect:

3.3 Financial and Transaction Data

We collect data associated with deposits and withdrawals processed on the Platform, including:

Accepted payment methods on 9kmy include Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, USDT TRC20, Visa/Mastercard, and 7-Eleven Cliqq. Transaction data for all these methods is retained as required by applicable law and our licensing obligations.

3.4 Technical and Device Data

We automatically collect the following when you access the Platform:

3.5 Customer Support Communications

Any communications you send to 9kmy through live chat, email, or other support channels — including queries, complaints, dispute submissions, and feedback — are recorded and retained to support ongoing customer service delivery, quality assurance, and dispute resolution.

3.6 Responsible Gambling Data

Where you use self-exclusion tools, deposit limits, or other responsible gambling features, we record your preferences and usage of those tools. This data is used solely to enforce your self-imposed restrictions and to comply with our responsible gambling obligations.

4How We Collect Personal Data

9kmy collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform.
• Automatically — through the use of cookies, web beacons, and server log files when you visit or use the Platform. See Section 10 for details on our cookie practices.
• From third-party service providers — including payment processors handling transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and banking partners such as Maybank, CIMB, and Public Bank, who may confirm transaction completion or flag suspicious activity.
• From identity verification partners — third-party KYC service providers who assist in verifying the authenticity of identity documents and performing liveness checks, operating under strict data processing agreements with 9kmy.
• From fraud detection systems — automated systems that analyse device fingerprints, IP addresses, and behavioural patterns to detect multiple accounts or fraudulent activity.

5Purpose of Data Processing

9kmy processes your personal data for the following specific purposes:

5.1 Account Management

To create, maintain, and administer your 9kmy account, including processing logins, updating account preferences, and managing account security.

5.2 Identity Verification and Age Compliance

To verify your identity and confirm that you meet the minimum age requirement of 21 years, in compliance with our international licensing obligations. This is a mandatory processing purpose — the Platform cannot be made available to you without it.

5.3 Payment Processing

To process deposits and withdrawals via your chosen Malaysian payment method, including e-wallets, bank transfers, and cryptocurrency, and to maintain accurate financial records of all transactions.

5.4 Legal and Regulatory Compliance

To comply with applicable anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations imposed under our international gaming licence, and any court orders or regulatory instructions requiring disclosure of user information.

5.5 Fraud Prevention and Platform Security

To detect and prevent fraudulent activity, multiple account creation, bonus abuse, money laundering, and other violations of our Terms & Conditions that may harm the integrity of the Platform or other users.

5.6 Customer Support

To respond to your enquiries, resolve disputes, investigate complaints, and deliver an effective after-care service including the handling of responsible gambling requests such as self-exclusion.

5.7 Platform Improvement and Analytics

To analyse aggregated, anonymised usage data for the purposes of improving the Platform's functionality, user experience, and game offerings. Individual users are not profiled for commercial targeting through this process.

5.8 Communications

To send you transactional communications (account confirmations, withdrawal notifications, security alerts) and, where you have given consent, promotional communications about bonuses and new features. You may opt out of promotional communications at any time by contacting our support team.

6Legal Basis for Processing

9kmy processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including KYC, payment processing, and account management.
• Legal obligation: Processing required to comply with AML regulations, gaming licence conditions, and any applicable court or regulatory orders.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gambling enforcement, and the improvement of our services, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as promotional communications, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

7Data Sharing and Disclosure

9kmy does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

• Payment processors and financial institutions: We share necessary transaction data with payment service providers handling your deposits and withdrawals — including operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency networks. These parties are contractually bound to use your data only for the purpose of processing your transaction.
• KYC and identity verification providers: We share identity documents and verification requests with authorised third-party KYC service providers who assist in document authentication and liveness checks, under strict data processing agreements.
• Fraud prevention services: Anonymised or pseudonymised device and behavioural data may be shared with third-party fraud detection systems to protect the integrity of the Platform.
• Legal authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by law, a valid legal order, or our gaming licence conditions. We will notify affected users of such disclosures where legally permitted to do so.
• Corporate restructuring: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.
• Professional advisers: We may share data with legal, accounting, or auditing professionals where strictly necessary for the conduct of their professional duties, subject to professional confidentiality obligations.

8Data Retention

9kmy retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

• Account data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, to satisfy AML and KYC record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 2 years from the date of the communication, unless the communication forms part of an ongoing dispute or legal matter, in which case it is retained until resolution.
• Technical and device data (logs): Retained for up to 12 months from collection for security and fraud detection purposes, after which they are deleted or anonymised.
• Responsible gambling records: Self-exclusion and deposit limit records are retained for the full duration of the relevant restriction plus 5 years to prevent circumvention.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9International Data Transfers

9kmy operates under an international gaming licence, and some of our data processing infrastructure and third-party service providers may be located outside Malaysia. When personal data is transferred internationally, 9kmy takes steps to ensure that adequate safeguards are in place to protect your data, including:

• Contractual clauses in data processing agreements that impose data protection standards equivalent to those applicable under our licensing framework.
• Requiring third-party processors to implement technical and organisational security measures appropriate to the sensitivity of the data being processed.
• Restricting the use of transferred data to the specific purposes for which the transfer was made.

By using the 9kmy Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia. We take this responsibility seriously and maintain ongoing oversight of our data processor relationships.

10Cookies and Tracking Technologies

9kmy uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and support our security and fraud detection systems. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, anti-CSRF security tokens, and load balancing cookies. No personal information is stored in these cookies beyond what is necessary for the Platform to identify your active session.

10.2 Functional Cookies

These cookies remember your preferences — such as preferred language, display settings, and last-visited game categories — to personalise your experience on return visits. Disabling these cookies may affect the quality of your Platform experience.

10.3 Analytics Cookies

We use privacy-respecting analytics tools to understand how users navigate the Platform at an aggregate level. Data collected is anonymised and used solely to improve Platform performance and identify usability issues. Individual user behaviour is not profiled or linked to identity data through analytics cookies.

10.4 Security and Fraud Detection Cookies

These cookies assist in detecting fraudulent login attempts, multiple account creation, and abnormal betting patterns. They are a necessary component of our Platform security infrastructure.

10.5 Managing Cookies

You may control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will prevent you from accessing the Platform. For all other cookie categories, you may opt out through your browser settings without affecting your ability to use core Platform features.

11Your Data Rights

As a User of the 9kmy Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and we will respond within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Minor updates (such as address changes) can be made directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations — in particular, we are required to retain KYC and financial records for a minimum of 5 years and cannot delete these records regardless of a deletion request.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including direct marketing communications. You may opt out of promotional communications at any time by contacting our support team.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

12Children and Minors

The 9kmy Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, use, or retain personal data from individuals under 21 years of age. Age verification is a mandatory component of our KYC process — all Users are required to submit a valid government-issued identity document confirming their date of birth before any real-money activity is permitted on their account.

If 9kmy becomes aware that personal data has been collected from an individual under 21, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and return any deposited funds in accordance with our account closure procedures. If you believe that a minor has registered an account on the Platform, please contact us immediately at [email protected].

13Security Measures

9kmy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and the 9kmy Platform is protected using TLS 1.2 or higher (256-bit SSL encryption), consistent with the standard used by major Malaysian banks including Maybank and CIMB.
• Encryption at rest: Sensitive personal data — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 9kmy's systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Two-factor authentication: User accounts are protected by two-factor authentication options. We strongly encourage all users to enable 2FA for an additional layer of account security.
• Intrusion detection: Our infrastructure is monitored continuously by automated intrusion detection systems designed to identify and respond to abnormal access patterns in real time.
• Penetration testing: We conduct periodic third-party security assessments to identify and remediate vulnerabilities in the Platform's security architecture.
• Incident response: In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected Users, 9kmy will notify affected individuals and relevant authorities as promptly as practicable and in accordance with applicable obligations.

While we take all reasonable steps to protect your data, no system of data transmission or storage can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for contacting us immediately if you suspect any unauthorised access to your 9kmy account.

14Changes to This Privacy Policy

9kmy reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, Platform functionality, legal obligations, or applicable regulations. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of the Policy and in the page hero section.
• Notify registered Users via the email address on file at least 7 days before material changes take effect, where such notification is practicable.
• Display a prominent notice on the Platform for a period of not less than 7 days following publication of the updated Policy.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions. The most current version of this Policy is always accessible at https://9kmy.cam/privacy-policy.

15Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact the 9kmy data protection team through the following channels:

• Email (plain text — not a clickable link): [email protected] — use the subject line "Privacy / Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on every page of the Platform. For data-related matters, live chat agents will escalate your request to the appropriate team.

We aim to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notice to you.

For general support enquiries not related to data protection — including account issues, payment queries, and bonus questions — our support team is available 24/7 and most responsive during Malaysian peak hours of 8 AM to 2 AM MYT.