9kup Privacy Policy

1. Introduction

Welcome to 9kup ("we", "our", "us"). 9kup is an internationally licensed online gaming and sports betting platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Bangsar. This Privacy Policy governs how 9kup collects, uses, stores, and protects the personal data of individuals ("you", "your", "user") who access or use our website at https://9kup.lat, our related mobile applications, and our associated services.

By registering an account, placing a bet, or otherwise using any 9kup service, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform immediately and contact us to request deletion of any data already collected.

This document has been drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the processing of personal data in commercial transactions within Malaysia. We take our obligations under the PDPA seriously and have implemented policies, procedures, and technical controls to ensure your privacy is respected at every step.

2. Information We Collect

9kup collects personal data through several channels. The specific categories of information we collect depend on how you interact with our platform:

a) Account Registration Data

When you create a 9kup account, we collect your full name, date of birth, email address, mobile phone number, residential address (including postcode and state within Malaysia), username, and password (stored in hashed form). We also collect a copy of your identity document (e.g., MyKad, passport) for the purpose of age verification and Know Your Customer (KYC) compliance.

b) Financial and Payment Data

To process deposits and withdrawals in Malaysian Ringgit (MYR), we collect banking details such as your bank name (e.g., Maybank, CIMB, Public Bank), account number, and the details associated with your preferred e-wallet such as Touch 'n Go eWallet, Boost, GrabPay, or DuitNow. Full card or account numbers are never stored on 9kup's servers — these are handled exclusively by our certified payment processors.

c) Transaction and Gaming Data

We record all gaming activity on 9kup, including but not limited to: deposit and withdrawal transactions, bet history, game selections (slots, live casino, sportsbook, Teen Patti, Sic Bo), win/loss records, bonus and promotion redemptions, and session timestamps. This data is used for account management, fraud detection, regulatory reporting, and to personalise your experience on the platform.

d) Technical and Device Data

When you visit 9kup, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, pages visited, time spent on each page, and clickstream data. This information helps us optimise the platform for Malaysian users on a wide range of devices.

e) Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications — including the content of your messages, the date and time of contact, and any resolution notes. This allows us to maintain service quality and resolve disputes fairly.

f) Voluntarily Provided Data

Any additional information you voluntarily provide — for example, when completing a responsible gaming self-assessment, participating in a survey, or entering a promotional competition — is also collected and processed in accordance with this policy.

3. How We Use Your Information

9kup uses the personal data we collect for the following purposes:

• Account creation and management — to register, verify, and maintain your 9kup account and ensure you can access all platform features securely.
• Identity and age verification — to confirm that you are aged 21 or above and are legally permitted to access online gaming services under applicable regulations.
• Payment processing — to facilitate deposits and withdrawals in MYR through our supported payment channels, including FPX, DuitNow, and local bank transfers.
• Gaming and betting operations — to operate our games, calculate payouts, manage your balance, and deliver a seamless experience across slots, live casino, sportsbook, and other verticals on 9kup.
• Customer support — to respond to your enquiries, resolve disputes, and provide assistance in English, Bahasa Melayu, and Mandarin Chinese.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, and other prohibited activities.
• Legal and regulatory compliance — to meet our obligations under applicable laws and the requirements of our international gaming licence, including record-keeping and reporting duties.
• Platform improvement — to analyse usage patterns, conduct A/B testing, and improve the design and performance of 9kup for Malaysian users.
• Marketing communications — to send you promotional offers, bonus notifications, and updates about new games or features, where you have given your consent to receive such communications. You may opt out at any time.
• Responsible gaming — to monitor gaming behaviour, implement deposit limits, self-exclusion tools, and cooling-off periods where necessary to protect player welfare.

4. Legal Basis for Processing

Under the PDPA and other applicable data protection frameworks, 9kup processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our contract with you, including account registration, payment processing, and game operation.
• Legal obligation — processing necessary to comply with regulatory requirements, anti-money laundering (AML) laws, and licensing conditions.
• Legitimate interests — processing for fraud prevention, platform security, and internal analytics, provided these interests are not overridden by your rights.
• Consent — processing for marketing communications and optional profiling features, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Sharing of Personal Data

9kup does not sell your personal data to any third party. We may, however, share your data with carefully selected categories of recipients under strict confidentiality obligations:

• Payment service providers — such as FPX operators, DuitNow network participants, and e-wallet providers, solely to process your transactions.
• Identity verification partners — third-party KYC and AML service providers who assist us in verifying your identity and detecting fraud.
• Game software providers — our licensed game studios and platform providers who supply the games you play on 9kup. These providers may receive anonymised or pseudonymised session data to ensure game integrity.
• IT and cloud infrastructure providers — hosting, data storage, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — we will disclose personal data where required by law, court order, or regulatory demand. We will notify you of any such disclosure unless prohibited from doing so by law.
• Professional advisers — lawyers, accountants, and auditors acting in their professional capacity who are bound by confidentiality obligations.

All third parties who process personal data on 9kup's behalf are contractually required to implement appropriate technical and organisational security measures and to process data only as instructed by us.

6. Cookies and Tracking Technologies

9kup uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our platform. Here is an overview of how we use them:

• Essential cookies — required for the platform to function. These include session management cookies that keep you logged in to your 9kup account and security cookies that help prevent CSRF attacks.
• Analytics cookies — help us understand how players interact with 9kup, which pages are most popular, and where users encounter difficulties. This data is aggregated and anonymised.
• Preference cookies — remember your settings such as language preference and display options so you do not have to reconfigure them on each visit.
• Marketing cookies — used to deliver relevant promotional content based on your gaming interests, where you have consented to receive marketing communications.

You can control cookie settings through your browser at any time. Please note that disabling essential cookies may affect your ability to use certain features of 9kup. For full cookie details, refer to our Cookie Notice which forms part of this Privacy Policy.

7. Data Security

Protecting your personal data is a core responsibility at 9kup. We implement a layered approach to security that includes:

• TLS/SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records.
• Multi-factor authentication (MFA) options for your 9kup account login.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Role-based access controls (RBAC) ensuring that only authorised 9kup personnel can access personal data, and only to the extent required for their role.
• 24/7 security monitoring and intrusion detection systems.
• Staff training on data protection and information security best practices.

Despite our best efforts, no online system can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities as required by applicable law.

8. Data Retention

9kup retains personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by law. Our general retention periods are as follows:

• Account data — retained for the lifetime of your account and for a minimum of five (5) years following account closure, in line with AML and gaming regulatory requirements.
• Transaction records — retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes.
• KYC documents — retained for a minimum of five (5) years after the end of the business relationship.
• Customer support communications — retained for three (3) years from the date of the interaction.
• Marketing consent records — retained until you withdraw consent and for a reasonable period thereafter to evidence compliance.
• Technical logs — retained for up to twelve (12) months for security and debugging purposes, then securely deleted.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9. Your Rights

As a user of 9kup, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 13.

• Right of access — you may request a copy of the personal data 9kup holds about you.
• Right of correction — you may request that inaccurate or incomplete personal data be corrected or updated.
• Right to withdraw consent — where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without penalty.
• Right to object — you may object to processing carried out on the basis of our legitimate interests, where your individual circumstances warrant it.
• Right to restriction — you may request that we temporarily restrict the processing of your data in certain circumstances, for example while a correction request is being resolved.
• Right to erasure — subject to our legal retention obligations, you may request deletion of personal data that is no longer necessary for the purpose it was collected.

We will respond to all valid requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, but we will inform you of any such extension and the reason for it. There is no charge for exercising your rights, unless requests are manifestly unfounded or excessive.

10. Minors and Age Verification

9kup strictly prohibits access by persons under the age of 21. Online casino-style gambling is restricted to adults in Malaysia, and we take our obligations seriously. We do not knowingly collect personal data from anyone under 21 years old.

During registration, all users are required to confirm their date of birth and to submit a valid government-issued identity document (MyKad, passport, or equivalent) for age verification. Accounts that fail to pass age verification will be suspended pending further review. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered on 9kup, please contact us immediately at the email address listed in Section 13.

11. International Data Transfers

9kup operates as an internationally licensed platform. As a result, some of your personal data may be processed by our service providers in countries outside Malaysia. Where such transfers occur, we ensure that:

• The recipient country provides an adequate level of data protection, or
• Appropriate safeguards are in place, such as contractual clauses that require the recipient to protect your data to the same standard as required under Malaysian law.

We do not transfer personal data to jurisdictions that do not offer adequate protections without first putting in place appropriate contractual, technical, and organisational safeguards.

12. Changes to This Privacy Policy

9kup reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by posting a prominent notice on our website and, where appropriate, by sending you an email to the address associated with your account.

The "Last Updated" date at the top of this policy indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how 9kup protects your privacy. Continued use of the platform after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 9kup handles your personal data, please contact our Data Protection team:

• Email: [email protected]
• Subject line: Privacy Policy Enquiry
• Response time: Within 3 business days for general enquiries; within 30 days for formal data subject requests.

Please note that our email address is provided for written correspondence only and is not a clickable link. You should type it directly into your email client when contacting us.

This Privacy Policy was last reviewed and approved by the 9kup compliance team on 1 January 2026. It supersedes all prior versions of the 9kup Privacy Policy. Users in Malaysia are advised that this document is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010.