Privacy Policy 9club8 – Our Commitment to Protecting Malaysian Players' Data

9club8 ("we", "platform" or "9club8") is a digital entertainment platform operator running the website 9club8.best. We are fully committed to protecting the privacy of every user who registers and uses our services.

This Privacy Policy sets out in detail:

• The types of personal data we collect from you during and after registration.
• The purposes and legal bases that allow us to process that data.
• How we store and protect your data from unauthorised access.
• The parties with whom we may share your data, and under what circumstances.
• The rights you hold regarding your personal data under PDPA 2010.
• How to reach us for any privacy-related requests or complaints.

This Privacy Policy applies to all users of the Malaysia-based 9club8 platform, including those registering a new account, existing members, and visitors browsing our website without an account.

9club8 collects your personal data through several different means. Below is a detailed explanation of the types of data we collect and their sources:

Data you provide directly to us:

• Registration information: full name, active Malaysian phone number, email address, date of birth, and the username you chose when registering your 9club8 account.
• Identity verification documents: a copy of your MyKad or passport, a selfie for facial verification, a bank statement or utility bill for address verification – collected only when required for the KYC (Know Your Customer) process.
• Financial details: bank account numbers, account holder names, and digital wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) that you register for deposit and withdrawal purposes.
• Communications with us: live chat conversation records, WhatsApp messages, emails, and any written communications between you and the 9club8 support team.

Data collected automatically while you use the platform:

• IP address, browser type and version, device operating system, smartphone model, and screen resolution.
• Location data derived from your IP address – used solely for regional verification and security purposes.
• Game history, betting records, and deposit and withdrawal transaction history within the 9club8 platform.
• Login session times and durations, pages visited, and navigation patterns within the platform.
• Cookie data and similar tracking technologies – explained further in Section 6.

9club8 processes your personal data on valid legal bases under Malaysia's PDPA 2010. The table below outlines the primary purposes for which your data is processed:

9club8 will not use your personal data for any purpose not listed in the table above without first obtaining your separate consent.

9club8 does not sell, rent, or disclose your personal data to any third party for marketing or other commercial purposes without your explicit consent. This is our absolute commitment.

However, there are limited situations where 9club8 needs to share your data with certain parties to keep the platform running properly and to comply with the law:

• Payment processors: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX (Maybank2u, CIMB Clicks, RHB Now, and others) receive only the minimum transaction data necessary to process your payment. This data is protected under strict confidentiality agreements.
• Game providers: Certified game providers that partner with 9club8 may receive anonymous account identifiers (anonymous user IDs) for game record-keeping and technical reconciliation purposes. They do not receive your full name, phone number, or financial information.
• Technology service providers: Server infrastructure providers, email services, and internal analytics tools that help us operate the platform. All such providers are bound by data processing agreements requiring them to protect your information.
• Law enforcement authorities: 9club8 will disclose required data to Malaysian authorities, the Attorney General's Chambers, the Royal Malaysia Police (PDRM), or relevant regulatory bodies where required by law or a valid court order. We will notify you of any such disclosure unless prohibited from doing so by law.

9club8 continually invests in security infrastructure to ensure your personal data is protected at every stage – whether in transit, in processing, or in storage.

Technical measures we have in place:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and 9club8's servers are encrypted using 256-bit SSL/TLS protocols. This means that even if someone were to intercept these communications, the data they see would be unreadable code without the correct decryption key.
• Encryption of data at rest: Personal data stored in 9club8's databases is also encrypted. Account passwords are never stored in plain text — we use salted hashing to ensure your password cannot be recovered, even by 9club8 staff.
• Two-factor authentication (2FA): 9club8 encourages all members to enable 2FA on their accounts. This adds an extra layer of protection that prevents unauthorised access even if your password is compromised.
• 24/7 security monitoring: 9club8's IT security team monitors our systems around the clock to detect and respond to any suspicious activity or intrusion attempts.
• Internal access controls: Access to users' personal data within the 9club8 organisation is restricted on a least-privilege basis – only staff who genuinely require access to specific data in order to perform their duties are permitted to do so.
• Regular security audits: 9club8 conducts regular security audits and penetration testing through independent third parties to identify and address any vulnerabilities in our systems.

While we take all reasonable steps to protect your data, no system is 100% immune to all cyber threats. In the event of a data security breach affecting your personal data, 9club8 will notify you via email or an in-platform notification within a reasonable timeframe and take immediate action to mitigate the impact of the breach.

The 9club8 website and platform use cookies and similar technologies to deliver a better user experience, maintain session security, and understand how users interact with our platform.

Types of cookies we use:

• Essential Cookies: These are cookies required for the platform to function properly, including login session cookies that keep you signed in as you browse, and security cookies that protect against CSRF attacks. These cookies cannot be disabled.
• Performance cookies: Collects data on how users interact with the 9club8 platform – most frequently visited pages, time spent in each section, and errors encountered. This data is used in aggregated, anonymised form to improve our platform. You may disable these cookies without affecting core platform functionality.
• Preference cookies: Stores your personal preferences such as interface language, display settings, and game preferences so you do not need to reconfigure them each time you log in. These cookies can be deleted from your browser settings at any time.

You can manage and delete cookies through your browser settings at any time. Please note that disabling all cookies may affect certain features of the 9club8 platform, including the ability to stay logged in.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 9club8:

• Right to access data: You have the right to request and receive a copy of the personal data we hold about you in a readily readable format.
• Right to correct data: If any personal data 9club8 holds about you is inaccurate or out of date, you have the right to request that we correct or update it.
• Right to withdraw consent: For data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time. This does not affect the validity of any processing carried out prior to withdrawal.
• Right to object to processing: In certain circumstances, you have the right to object to the processing of your personal data where it is based on 9club8's legitimate interests.
• Right to request deletion: You may request that we delete your personal data when it is no longer needed for the original purpose of collection, subject to record retention requirements mandated by law.

9club8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law, whichever is longer.

• Active account data: Retained for as long as your account remains active and in use. Accounts inactive for more than 24 months will be archived, and the account holder will be notified by email before any action is taken.
• Financial transaction records: Retained for a minimum of 7 years in accordance with the Companies Act and AML (Anti-Money Laundering) compliance requirements in Malaysia.
• Identity verification documents (KYC): Retained for the duration of the active account plus 5 years after closure, in accordance with anti-money laundering legal requirements.
• Customer support communication records: Retained for 3 years to allow us to reference complaint resolution history where necessary.
• Cookie and session data: Session cookies expire automatically when you log out or close your browser. Persistent cookies are deleted according to their set expiry period.

Once a data retention period expires and there is no legal requirement to keep it, 9club8 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered.

9club8 takes child protection extremely seriously. Our platform is a service for adults aged 18 and above only, and we do not knowingly collect personal data from individuals under the age of 18.

All 9club8 account registrations require confirmation that the applicant is 18 years of age or older. If we become aware that personal data of an individual under the age of 18 has been collected without valid parental or guardian consent, we will promptly delete that data and close the relevant account.

9club8 reserves the right to modify or amend this Privacy Policy at any time to reflect changes in our business practices, new legal requirements, or new technologies we adopt. The "Last Updated" date at the top of this page will be revised whenever a material amendment is made.

When we make significant changes to this Privacy Policy, we will notify you via:

• A clear notification within the 9club8 platform the next time you log in.
• Email to the address you registered with, where the amendment materially affects how we process your data.

We encourage you to review this Privacy Policy periodically. Continued use of the 9club8 platform after any amendments take effect will be considered acceptance of the updated version. If you disagree with any changes, you have the right to close your account without penalty by contacting our support team.

If you have any questions, concerns, or complaints regarding how 9club8 handles your personal data, or if you wish to exercise any of your rights under PDPA 2010, please contact us through the following channels:

We are committed to handling all privacy-related enquiries and complaints thoroughly, fairly, and within the timeframes prescribed by law. Your trust is our most valuable asset, and we take every concern you raise about your data privacy seriously.