9club33 Privacy Policy

1Introduction

This Privacy Policy ("Policy") is issued by 9club33 ("we", "us", "our", "the Platform") and applies to all personal data processed in connection with your use of the 9club33 website accessible at https://9club33.cam and all associated services, including account registration, deposits, withdrawals, gaming activities, promotional programmes, and customer support interactions.

9club33 is committed to handling your personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation. We recognise that players who trust us with their personal information — particularly in the context of financial transactions and identity verification — deserve rigorous standards of data stewardship.

By registering a 9club33 account or by continuing to use the platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to a name, identification number, location data, email address, or online identifier.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means 9club33, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of 9club33 under documented instructions.
• "KYC" means Know Your Customer — the identity verification process required to comply with anti-money laundering obligations and platform security requirements.
• "Cookies" means small text files placed on your device by the 9club33 platform for the purposes described in Section 10 of this Policy.
• "Player" means any individual who has registered or is seeking to register an account on the 9club33 platform and is aged 21 years or above.

3Personal Data We Collect

9club33 collects the following categories of personal data from players and platform users:

We do not collect or store full payment card numbers, banking PINs, or online banking passwords. Payment transactions conducted via Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX are processed securely through the respective payment providers' own environments, subject to their individual privacy and security frameworks.

4How We Collect Your Data

9club33 collects personal data through the following channels:

• Direct submission: When you complete the registration form, submit KYC documents, contact our support team, or participate in promotions, you provide data to us directly.
• Automated technical collection: When you access the 9club33 platform, our servers automatically record technical data including your IP address, device identifiers, browser type, and session duration via server logs and cookies.
• Payment providers: When you initiate a deposit or withdrawal, your chosen payment provider (e.g., FPX, DuitNow, Touch 'n Go eWallet) may share transaction confirmation data — including transaction reference numbers and payment status — with 9club33 to enable the crediting or deduction of your account balance.
• Third-party verification services: Where 9club33 engages third-party KYC or identity verification providers to validate identity documents, those providers may return verification results to 9club33 as part of the verification workflow.
• Referral programme: If you are referred to 9club33 by an existing player under our Refer a Friend programme, the referring player's unique code may be associated with your registration for reward attribution purposes.

5Purposes of Data Processing

9club33 processes your personal data for the following specific, documented purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and facilitate login and authentication.
• Processing financial transactions: To process deposits and withdrawals in MYR through your chosen Malaysian payment channel, maintain transaction records, and reconcile accounts.
• Delivery of gaming services: To provide access to casino games, sports betting markets (including Liga Super Malaysia, EPL, and live football), and other platform features.
• Regulatory compliance and AML obligations: To meet know-your-customer (KYC) requirements, anti-money laundering (AML) obligations, and any other regulatory duties applicable to the platform's operating jurisdiction.
• Bonus and promotional administration: To administer welcome bonuses, birthday bonuses, referral rewards, the VIP programme, and other promotional activities in accordance with the applicable promotion terms.
• Customer support: To investigate and resolve account queries, complaints, technical issues, and disputes.
• Security and fraud prevention: To detect and prevent fraudulent account activity, multi-accounting, money laundering, and other prohibited conduct defined in the Terms & Conditions.
• Platform improvement: To analyse aggregated usage patterns, game performance data, and technical metrics to improve the 9club33 platform experience.
• Marketing communications: Where you have consented, to send promotional emails or in-platform notifications about bonuses, new games, and platform updates. You may withdraw marketing consent at any time.
• Responsible gambling: To monitor gaming patterns that may indicate problem gambling behaviour and to apply deposit limits, session reminders, or self-exclusion where appropriate or requested.

6Legal Basis for Processing

9club33 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between 9club33 and you as a registered player — including account creation, transaction processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, financial record-keeping obligations, and any orders from competent regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for 9club33's legitimate business interests, including fraud detection, platform security, system administration, and responsible gambling monitoring, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent for marketing at any time by contacting our support team.

7Data Sharing & Disclosure

9club33 does not sell, rent, or trade your personal data. We may disclose personal data to the following categories of recipients only where necessary and subject to appropriate data protection safeguards:

• Payment service providers: Malaysian payment platforms including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX receive the minimum transaction data necessary to process deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents submitted during the verification process.
• Technology and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on behalf of 9club33 under strict contractual data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory directive, 9club33 will disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Fraud prevention and compliance services: Third-party services engaged to assist in detecting and preventing fraudulent transactions, money laundering, or other illegal activity.
• Game content providers: Game software providers may receive session-level technical data necessary to deliver their games within the 9club33 platform. These providers do not receive personally identifiable information beyond what is technically required.

All third-party data processors engaged by 9club33 are bound by contractual data processing agreements that impose equivalent data protection obligations to those described in this Policy.

8International Data Transfers

As an internationally operating online gaming platform, 9club33 may transfer personal data to servers or processors located outside Malaysia. Where such transfers occur, 9club33 ensures that appropriate safeguards are in place to maintain the same standard of data protection as applies under this Policy.

Safeguards for international transfers may include: standard contractual clauses approved by relevant data protection authorities; transfers to jurisdictions with adequate data protection frameworks; or transfers to certified data processors operating under recognised security standards.

9Data Retention

9club33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your active account, and for a period of 5 years following account closure, to satisfy AML record-keeping obligations.
• Transaction records: Financial transaction data, including deposit and withdrawal records in MYR, is retained for a minimum of 5 years in accordance with financial record-keeping requirements.
• Gaming activity data: Retained for a period of 3 years following your last active gaming session, or for the duration of any active dispute or investigation.
• Communications and support records: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, or longer if the communication relates to an unresolved complaint or legal matter.
• Technical and log data: Server log data and session metadata is typically retained for a maximum of 12 months for security and platform analysis purposes.

Where data is no longer required for its original purpose and no legal retention obligation applies, 9club33 will securely delete or anonymise it so that it can no longer be attributed to an identifiable individual.

10Cookies & Tracking Technologies

The 9club33 platform uses cookies and similar tracking technologies to deliver a functional and personalised user experience. Cookies are small text files stored on your device when you access the platform.

9club33 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly. These enable login session management, security token verification, and core platform features. These cookies cannot be disabled without impairing your ability to use 9club33.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display configurations to provide a more personalised experience on subsequent visits.
• Analytics cookies: Collect anonymised or aggregated data about how players navigate the platform — including which games are most visited and how players interact with bonus offers — to help us improve the service.
• Security cookies: Used to detect and prevent fraudulent activity, unusual login patterns, and other security threats, including detection of multi-account behaviour.

Most web browsers allow you to manage cookie preferences through the browser settings menu. Please note that restricting strictly necessary cookies may affect the functionality of the 9club33 platform. For full details of the cookies used, their duration, and how to manage them, please refer to the cookie settings available on the platform.

11Security Measures

9club33 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the 9club33 platform.
• Encrypted storage of sensitive personal data including KYC documents and account credentials using industry-standard encryption at rest.
• Two-factor authentication (2FA) available for all player accounts to provide an additional layer of login security.
• Restricted staff access — personal data is accessible only to authorised 9club33 personnel who require it to perform their specific job functions, governed by role-based access controls.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures designed to detect, assess, and respond to data security incidents promptly, including notifying affected players where required by applicable law.

While 9club33 maintains robust security standards, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for using a secure, private device when accessing your 9club33 account. If you suspect your account has been compromised, contact our support team immediately.

12Children & Minors

The 9club33 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been submitted by an individual under 21, we will take immediate steps to delete that data and close the associated account.

Parents and guardians who believe that a minor may have submitted personal data to 9club33, or may be accessing the platform, are urged to contact our support team immediately so that appropriate action can be taken. We take the protection of minors very seriously and support the responsible use of internet filtering and parental control tools.

13Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by 9club33. These rights are described in detail in the dedicated section below this legal content block.

• Right of access — to obtain confirmation of whether 9club33 holds personal data about you and to receive a copy of that data.
• Right to rectification — to have inaccurate or incomplete personal data corrected or completed.
• Right to erasure — in certain circumstances, to request deletion of your personal data, subject to any overriding legal or regulatory retention obligations.
• Right to restrict processing — to request that we limit the way we use your personal data in certain circumstances, for example while a complaint is being investigated.
• Right to data portability — where processing is based on your consent or contractual necessity, to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object — to object to processing carried out on the basis of legitimate interests, including profiling, where your personal interests outweigh those of 9club33.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team using the details in Section 16. We will respond to all verifiable data rights requests within 30 days. We may need to verify your identity before processing a data rights request to ensure that we do not disclose personal data to an unauthorised party.

14Third-Party Links & Services

The 9club33 platform may reference or integrate with third-party services, including payment providers such as Maybank2u, Touch 'n Go eWallet, and FPX. When you interact with those third-party services — for example, when completing a payment via your bank's online portal — you are subject to the privacy policy and terms of that third-party provider, not this 9club33 Privacy Policy.

9club33 does not control the privacy practices of third-party providers and accepts no responsibility or liability for how those providers collect, use, or protect your personal data. We recommend reviewing the privacy policies of any third-party service you use in connection with your 9club33 account.

15Amendments to This Policy

9club33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the structure of our platform. When material changes are made, we will update the "Last Updated" date displayed at the top of this Policy.

For significant changes that materially affect your data rights or our data processing activities, we will notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the 9club33 platform after the effective date of any updated Policy constitutes your acknowledgement of the changes.

16Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way 9club33 handles your personal data, please contact us using the following details:

If you are not satisfied with our response to your privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Players in Malaysia should refer to the relevant provisions of the Personal Data Protection Act 2010 (PDPA) for guidance on exercising rights and lodging complaints regarding personal data processing.