9kup Privacy Policy

1. Introduction

9kup ("we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors who use the 9kup Platform at https://9kup.net. This Privacy Policy describes how we collect, use, store, share, and protect your personal data, and explains the rights available to you in relation to that data.

This Privacy Policy applies to all processing of personal data carried out by 9kup in connection with the operation of its online casino, sportsbook, and related gaming services offered to Malaysian players and other eligible users. It applies regardless of whether you access the Platform via desktop browser, mobile browser, or any native application.

This Privacy Policy should be read alongside the 9kup Terms & Conditions and Responsible Gaming Policy, both of which are accessible on this website and incorporate this Privacy Policy by reference.

2. Data Controller

9kup is the data controller in respect of personal data collected through the Platform. As data controller, 9kup determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted in compliance with applicable data protection standards and international gaming authority licensing requirements.

If you have any questions about how 9kup processes your personal data, or wish to exercise any of your data rights, please contact us using the details provided in Section 15 of this Policy.

3. Personal Data We Collect

9kup collects the following categories of personal data from registered players and Platform visitors:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth;
• National identification number or passport number (required for KYC verification);
• Copies of identity documents submitted for KYC purposes (e.g., MyKad, passport).

3.2 Contact Data

• Registered email address;
• Residential address;
• Mobile telephone number (where provided).

3.3 Financial Data

• Bank account details or e-wallet identifiers used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods (e.g., Touch 'n Go eWallet, Boost, Maybank2u, CIMB, Public Bank, GrabPay, DuitNow, FPX);
• Account balance and bonus fund balances.

3.4 Gaming Activity Data

• Bets placed, games played, wager amounts, and outcomes;
• Session timestamps and duration;
• Bonus usage and wagering progress;
• Responsible gaming tool settings and history (e.g., deposit limits, cooling-off periods, self-exclusion events).

3.5 Technical Data

• IP address;
• Device type, operating system, and browser type;
• Cookies and similar tracking technology data (see Section 8);
• Login timestamps and session identifiers.

3.6 Communications Data

• Records of communications between you and 9kup support, including live chat transcripts and email correspondence;
• Complaint and dispute records.

4. How We Collect Your Personal Data

9kup collects personal data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, and server log files;
• Third-party sources: Identity and address verification data from KYC service providers; fraud and sanctions screening data from compliance data providers; payment processing data from payment service providers including your bank or e-wallet operator.

9kup does not purchase personal data lists from third-party data brokers for marketing purposes.

5. How We Use Your Personal Data

9kup uses your personal data for the following purposes:

• Account management: To register, maintain, and administer your 9kup Account, including processing your 9kup login and authenticating your identity;
• Contract performance: To process deposits, withdrawals, bets, and game outcomes in accordance with the Terms & Conditions;
• KYC and regulatory compliance: To verify your identity and age, conduct anti-money laundering checks, and meet obligations under applicable international gaming authority licensing standards;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, and other prohibited conduct;
• Responsible gaming: To monitor gaming behaviour, enforce responsible gaming limits set by you, and identify players who may be experiencing gambling-related difficulties;
• Customer support: To respond to enquiries, resolve complaints, and provide technical assistance;
• Platform improvement: To analyse Platform usage patterns and improve our products, user experience, and security infrastructure;
• Marketing communications: To send you promotional offers, bonus notifications, and updates about 9kup — where you have consented to receive such communications. You may opt out at any time.

6. Legal Basis for Processing

9kup processes your personal data on the following legal bases:

• Contract performance: Processing necessary to perform the contract between you and 9kup (i.e., operating your Account and delivering gaming services);
• Legal obligation: Processing required to comply with applicable regulatory, licensing, anti-money laundering, and KYC obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where your explicit consent has been obtained. Consent may be withdrawn at any time by contacting support or updating your Account preferences.

7. Sharing Your Personal Data

9kup does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary and permitted by applicable law:

• Payment service providers: Banks, e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay), and payment processors necessary to facilitate deposits and withdrawals;
• KYC and identity verification providers: Third-party services used to verify your identity, age, and address for regulatory compliance purposes;
• Fraud prevention and AML services: Providers of sanctions screening, fraud detection, and anti-money laundering monitoring tools;
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology vendors, all of whom are bound by contractual data protection obligations;
• Regulatory and licensing authorities: Where required by applicable gaming licensing standards, law enforcement authorities, or court order;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by 9kup are required to process personal data only in accordance with 9kup's instructions and applicable data protection standards. 9kup does not permit third-party processors to use your data for their own purposes.

8. Cookies & Tracking Technologies

9kup uses cookies and similar tracking technologies (including web beacons and session identifiers) on the Platform for the following purposes:

• Essential cookies: Required for core Platform functionality, including maintaining your login session and securing your Account. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to understand how visitors navigate the Platform, which pages are accessed most frequently, and where technical errors occur. Data is aggregated and anonymised.
• Preference cookies: Used to remember your Platform settings and language preferences between sessions.
• Security cookies: Used to detect and prevent fraudulent login attempts and other security threats.

9kup does not use third-party advertising cookies or share behavioural data with advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use the 9kup login and other core Platform features.

9. Data Retention

9kup retains personal data for the following periods, unless a longer retention period is required by applicable law or regulatory obligation:

• Account and KYC data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in accordance with applicable anti-money laundering and gaming licensing record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the activity;
• Support communications: Retained for two (2) years from the date of the communication, unless related to an open complaint or legal proceeding;
• Marketing consent records: Retained for the duration of your Account and for two (2) years following withdrawal of consent or Account closure.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Your Data Rights

Subject to applicable law and regulatory limitations, you have the following rights in relation to your personal data held by 9kup:

• Right of access: You may request a copy of the personal data 9kup holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal and regulatory retention obligations;
• Right to restrict processing: You may request that 9kup restrict the processing of your data in certain circumstances (e.g., where you contest the accuracy of the data);
• Right to data portability: Where processing is based on your consent or contract performance, you may request that your data be provided to you in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the 9kup support team at the address provided in Section 15. We will respond to all valid data rights requests within thirty (30) days. We may be required to verify your identity before processing your request.

11. Security Measures

9kup implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 9kup Platform;
• Encryption of sensitive personal data and financial records at rest;
• Role-based access controls limiting staff access to personal data to those with a documented operational need;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Two-factor authentication (2FA) available for all player Accounts — we strongly recommend all 9kup players enable 2FA;
• Incident response procedures providing for prompt notification of affected individuals in the event of a data breach involving their personal data.

While 9kup takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your 9kup login credentials and for notifying us promptly of any unauthorised Account access.

12. Third-Party Links

The 9kup Platform does not contain links to third-party websites. If any third-party content is integrated into the Platform (such as game content from licensed software providers), those providers process data only in accordance with their own privacy policies and contractual obligations to 9kup. 9kup is not responsible for the privacy practices of third-party game content providers beyond the contractual protections imposed on them by 9kup.

13. Children and Minors

9kup applies mandatory age verification at Account registration and KYC stages to prevent underage access. If 9kup discovers that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated Account will be closed. If you believe that a minor has registered an Account with 9kup, please notify us immediately at the contact address in Section 15.

14. Changes to this Privacy Policy

9kup reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered Players by email at least seven (7) days before the changes take effect. Minor clarifications or non-material amendments may be made without advance notice and will be indicated by an updated "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the 9kup Platform following notification of any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 9kup holds about you, please contact our Data Protection team: